To install Kaspersky Lab application or applications of other vendors remotely by means of Kaspersky Administration Kit corresponding installation packages on the Administration Server are necessary. An installation package consists of files, necessary for installation, as well as the settings that refer to the installation process and the starting configuration of the product installed (especially the file with the Anti-Virus settings). The installation package may as well contain a license key for the application.
The list of the created installation packages is given in the Remote install node of the Console tree. Packages are also created in the same node. One application can have several installation packages. An installation package of the Administration Server is created automatically during the Administration Server installation. After creation all installation packages are saved in the share folder on the Administration Server Program Files\Kaspersky Lab\Kaspersky Administration Kit\Share\Packages (by default). The folder name in which the installation package resides contains short/contracted application name and its version. If more than one package is created for the same application (1) is created to its name, and etc. the folder with the installation package of the Administration Agent for MSI-installation has the name 1093X.X.XXXX. Packages to install applications of other vendors remotely are formed in the folders and have the following view executable_package x.x.x.x.
In Kaspersky Administration Kit 6.0 you can avoid the step of unpacking the distributive to an intermediate folder to specify the path to the kpd-file and can create the installation package directly from the application distributive.
Properties of an installation package are presented on the following tabs:
The General tab displays package name, application and its version, which can be installed, date when it was created and the size of the package.
The License info tab displays information about the license key embedded to an installation package. In Kaspersky Network Agent the tab is empty, as work of this application does not require license.
The OS reboot tab stores the parameters to reboot client computers after the package has been installed (if necessary).
If you select the Prompt user for action option administrator can:
form an info message in the enter field. The info message is displayed to notify the user about the necessity to reboot the OS.
configure time period to notify about reboot, by checking the Repeat prompt every (min) checkbox and thus defining the time interval to display the message.
configure OS automatic reboot, if the OS is not rebooted by the user during the time interval defined from the moment the application has been installed. To enable the parameter check the Forced reboot after (min) checkbox and define the time interval for it.
Administration group (only for the Administration Agent package)
In the Group computers section you can define to which group of the Network container the computer should be installed after the Administration Agent has been installed on it. It concerns only the PC’s which still have not been assigned to any group. Computers already added to the Network container can be deleted manually and after the Agent installation they can be relocated to the defined group.
This section should be set only in case if the package is going to be installed on computers from the Network group. I.e. on the computers which still are not assigned to nay administration group.
If you select the According to the Windows-network structure variant then the client computer will be relocated to the Network container, with the same name of the domain or work group of the computer in Windows network.
If you select the second variant you can define any group in the Network container. If it does not exist yet, it will be created automatically.
Parameters of the Administration Server, with which the Agent will connect – the name of the Administration Server should be set as a NetBIOS-name or as IP-address;
During the package creation the Administration Agent as the Server settings by default substitutes the data of the Server on which the package is created. But after the package creation an administrator can change its settings (can define address of another Server) for the client computer after the Agent has been installed on it would connect with another Server.
Enabling/ disabling the mode to use secure connection with the Administration Server - Use server SSL-connection
The path to the certificate file of the Server with which Administration Agent will connect.
In the Groups computers section you can define to what group of the Network container a computer should be assigned after the Administration Agent has been installed on it. It refers the computers that are still not assigned to any group. Computers already added to the Network container can be deleted manually and then they can be relocated to another group after the Agent has been installed on them.
It is reasonable to perform the settings of the section only if the package is installed on the computers assigned to the Network container. I.e. on the computers which have not been still added to any administration group.
If the According to the Windows network structure parameter is checked then the client computer will be located in a folder in the Network container of the same name with the domain or a workgroup of the computer in Windows-network.
The choice of the second variant – To group - allows defining a separate group in the Network container. If the group does not exist yet it is created automatically.
Package for Kaspersky Anti-Virus 6.0 for Windows Workstations
In the Packages to be installed section choose which protection components should be installed on a client computer. In future to install missing protection components remotely it is necessary to create a new installation package choose the protection components required on the client computer and create the task of remote install based on the new package.
If you manage the application locally, run the Anti-Virus installation in the repair mode to install the missing components.
By default the Anti-Spam component is not installed!
In the Tasks to be installed section choose which system (local) tasks of on-demand scan and update should be installed.
By default the list is empty! I.e. by remote installation the Anti-Virus is installed without system tasks of on-demand scan and update. Thus administrator should create and configure these tasks via group tasks mechanisms.
If you need any on-demand or update task to be installed, check the corresponding task/tasks in the list.
Installation folder – path to the folder into which the application will be installed. This enter field is empty if the application is installed in the default folder.
The Anti-Virus application can be installed with the set of predefined settings. For it in the Configuration file field specify the path to the palliation settings file install.cfg.
This is a mandatory name for the settings file!
If the Anti-Virus is managed via the command prompt then enable Add program location to environment variable %PATH%. In this case you do not have to specify the full path to the file avp.exe.
Check Protect the installation process if you want application modules to be checked for correctness during the installation process.
The application settings file as well as the license key can be added to the installation package after its creation (they can be added on the corresponding tabs). In this case package changes are applied automatically.
If you add the specified files to the package manually, then:
1. copy the files to the exec subfolder, next to the msi-file;
2. if a remote push install task is already created based on the package to read off new parameters open the task properties and click Stop on the General tab
Package for Kaspersky Anti-Virus 6.0 for Windows Servers
In the Components to be installed section specify if the only real-time protection component – File Anti-Virus – should be installed. By default the component is selected.
If you clear this box then in future to install this component remotely you will have to create a new installation package with the File Anti-Virus component checked and create a task of remote install based on the new package.
If you manage the application locally, run the Anti-Virus installation in the repair mode to install the File Anti-Virus component. Do not forget to check the component.
In the Tasks to be installed section choose which system (local) tasks of on-demand scan and update should be installed.
By default the list is empty! I.e. by remote installation the Anti-Virus is installed without system tasks of on-demand scan and update. Thus administrator should create and configure these tasks via group tasks mechanisms.
If you need any on-demand or update task to be installed, check the corresponding task/tasks in the list.
Installation folder – path to the folder into which the application will be installed. This enter field is empty if the application is installed in the default folder.
The Anti-Virus application can be installed with the set of predefined settings. For it in the Configuration file field specify the path to the palliation settings file install.cfg.
This is a mandatory name for the settings file!
If the Anti-Virus is managed via the command prompt then enable Add program location to environment variable %PATH%. In this case you do not have to specify the full path to the file avp.exe.
If you check Use exclusions specified by Microsoft the objects recommended to be excluded by Microsoft company from scan will be added to trusted zone (to the exclusion lists). You can get more detailed information about the recommendations in Microsoft Database.
Check Protect the installation process if you want application modules to be checked for correctness during the installation process.
The application settings file as well as the license key can be added to the installation package after its creation (they can be added on the corresponding tabs). In this case package changes are applied automatically.
If you add the specified files to the package manually, then:
1. copy the files to the exec subfolder, next to the msi-file;
2. if a remote push install task is already created based on the package to read off new parameters open the task properties and click Stop on the General tab
Package for Kaspersky Anti-Virus 5.0 for Windows Workstations
Installation folder – path to the folder into which the application will be installed. The field is empty if the application is installed to the default folder.
In the Kaspersky Lab technology for data protection section select the necessary protection components to be installed n a client computer. Later if you need to install some other protection components, you will have to reinstall the anti-virus application.
By default Use real-time protection against network attacks is not installed!
Uninstallation password
Password for application protection - the password which switches to the administrator’s application interface – in this mode the application settings can be modified (if they are not “locked” by the policy) and the application can be exited.
Package for Kaspersky Anti-Virus 5.0 for Windows File Servers
Installation folder – path to the folder into which the application will be installed. The field is empty if the application is installed to the default folder.
Knowledge base
Product Info
System requirements
46 
2007 Nov 15 16:10
In Kaspersky Administration Kit 6.0 you can avoid the step of unpacking the distributive to an intermediate folder to specify the path to the kpd-file and can create the installation package directly from the application distributive. 
This section should be set only in case if the package is going to be installed on computers from the Network group. I.e. on the computers which still are not assigned to nay administration group.
By default the Anti-Spam component is not installed! 
