Kaspersky Administration Kit 6.0 MP1/MP2

	Useful links
	How to install applications on client computers remotely How to disable Simple File Sharing? How to perform remote installation of Network Agent in the network without the domain structure?

To install applications on client computers successfully using the remote push installation task, the following requirements should be met:

1. Simple File Sharing should be disabled on a client computer (for computers assigned to a working group).

2. Server service should be launched on a client computer.

3. Account under which the remote push install task is being executed should have ALL mentioned rights to client computers; 

• Right to start applications remotely; 
• Right to the Admin$ source; 
• Logon as a service right.

4. If the installation is performed by the means of the Administration Agent, then connection between the Agent and the Server should be established.

5. For initial installation of the Network Agent using the task of remote install from Kaspersky Administration Kit the following ports should be opened on a client computer:

• TCP 139 
• TCP 445 
• UDP 137 
• UDP 138

If Microsoft Windows Firewall is enabled, in order to open the specified ports do the following:

1. Make sure the Don’t Allow Exceptions box is cleared:

2. check File and Printer Sharing in the list of allowed exclusions:

It is recommended to create an installation package for the will-be-installed application before the push installation task is created.

The push installation task can be created with the help of the New task wizard. The wizard can be started: 

• from the task panel of the Global tasks node, by the Add task command. A global task will be created. 
• from the context menu of the selected installation package, by the Install command. In this case Select application step will be missing. 
• from the task panel of any group by the Add task command. In this case the Select target computers step is missing. A group task for the group will be created.

The remote push install task can be created from the context menu of the Administration Server by the Deployment wizard command. Unlike other methods of this task creation, this method does not require setting the schedule when to run the task – the task starts running immediately after its creation. The task is saved in the Group tasks folder of the selected group.

When the task is being created, define/select from the list: 

• Task name. The name should be unique within the group. 

• Task type and the application to perform the task. The step is missing if the task is created from the context menu of the installation package.

In the Applications list select - Kaspersky Administration Kit, in the Task type list – Product deployment task 

• Package to install. The step is missing if the task is created from the context menu of the installation package. 

• If an installation package for the required application is not created yet, click the New button to run New Package Wizard to create the package. 

• Remote installation method – select Push install. The step is missing if the wizard was run from the Group tasks folder of any group. 

• Settings of the repeated application installation and the way to deliver the package on client computers. 

• Do not install application if it is already installed (by default the option is checked) - this parameter prevents the application is already installed from second installing. I.e. if the application should be reinstalled, the option should be unchecked. 

• The Loading installer package section presents the ways how to deliver and install installation files on client computers. By default both options in the section are enabled. First the installation files are attempted to be installed via the Network Agent (if it is already installed on the on the computer), and then with the help of RPC (Remote Procedure Call). 

• The maximum number of simultaneous downloads – this parameter allows decreasing the load on the Administration Server by restricting simultaneous loads of the installation package from the Administration Server on client computers. If an installation package fails to be installed by the previously described method, then the product deployment task will attempt installation as many numbers as set in the Number of attempts parameter.

If Update Agents are used in the network, then the task will use these parameters only if a client computer fails to get an installation package from the Update Agent! 

• When creating the product deployment task you will be suggested to install Network Agent along with the Anti-Virus. If necessary, check Install along with Network Agent and select the necessary package for the Network Agent or create a new one (by clicking the Create button). 

• Target computers to install the application. The step is missing if you run the Wizard from the Global tasks folder of any group.

How do you want to select computers for the task: 

• I want to select computers using Windows Networking – if you select this variant and click Next, then in the next window you will see tree structure of nodes Network and Groups, with all computers included in them. Necessary computers should be checked.

• I want to define IP addresses for the computers – if you choose the second variant and click Next, then in the next window you should enter IP-addresses (or the range of the IP-addresses) or NetBIOS-names of target computers.

IP-addresses can also be imported from the file-list. Each address in this TXT-format should be placed on a new line

You can edit the list of IP-addresses by the Add/Remove buttons, and specify the path to the file-list of IP-addresses in the window that opens by clicking the Import button.

• Account, under which the task will start.

If you install on the computer with no Administration Agent installed, then the account should have: 

• rights to start remotely the applications on the client computer in the logical network; 
• rights for Admin$ source; 
• right to Logon as a service.

If the Agent is already installed then the Administration Agent will execute all operations to copy and install necessary files under Local System Account.

The Default account value suggests an account under which Administration Server is started. Any other account can be defined.

On this step of the task creating the data you have specified are not checked for validity! If you misprint the password or the user's name then the application is not installed.

 

If product deployment task is created for the computers that belong to different domains, then trust relationship is necessary between the domains. 

• task scheduling settings.

Once the task is created, it will appear: 

• In the Global tasks node, if the Wizard was started from the node or from the context menu of the installation package. 
• In the Group tasks subfolder of the group for which the task was created.