KAPERSKY ADMINISTRATION KIT 6.0 Quick reference guide

KASPERSKY LAB
Kaspersky®Administration Kit 6.0
Deployment Guide

KASPERSKY®ADMINISTRATION KIT 6.0
Deployment Guide
Kaspersky Lab Ltd.
Visit our website: http://www.kaspersky.com/
Revision date: February 2007.

Contents
CHAPTER 1. KASPERSKY®ADMINISTRATION KIT ..................................................5
1.1. Purpose, structure and main functions.................................................................5
1.2. Software and Hardware Requirements................................................................7
1.3. Distribution kit ........................................................................................................9
1.4. Help desk for registered users..............................................................................9
1.5. The purpose of this document ..............................................................................9
1.6. Conventions.........................................................................................................10
CHAPTER 2. TYPICAL SCHEMES OF DEPLOYMENT OF ANTI-VIRUS
PROTECTION............................................................................................................11
2.1. Schemes of deployment of anti-virus protection on the computers within the
logical network ...................................................................................................11
2.2. Building a centralized anti-virus protection administration system ....................12
CHAPTER 3. INSTALLING KASPERSKY ADMINISTRATION KIT ...........................14
3.1. Installing MSDE from the Kaspersky Administration Kit distribution package ..16
3.2. Installing the Administration Server and Administration Console on Local
Host....................................................................................................................18
3.3. Removing Kaspersky Administration Kit components.......................................34
3.4. Updating the application version.........................................................................34
CHAPTER 4. INSTALLATION AND REMOVAL OF SOFTWARE ON THE
COMPUTERS ............................................................................................................36
4.1. Remote software installation...............................................................................37
4.1.1. Creating an installation package..................................................................38
4.1.2. Reviewing and configuring the installation package settings......................41
4.1.3. Creating and configuring the Network Agent installation package.............46
4.1.4. Creating and Configuring Administration Server Installation Package.......50
4.1.5. Creating a task for distribution of the installation package on the slave
Administration Servers..................................................................................50
4.1.6. Distribution of the installation packages within a group using network
agents............................................................................................................52

4 Kaspersky®Administration Kit
4.1.7. Configuring the deployment task..................................................................67
4.1.8. Deploying application to slave administration servers.................................69
4.1.9. Remote software removal ............................................................................71
4.2. Deployment wizard..............................................................................................72
4.3. Local software installation...................................................................................76
4.3.1. Local installation of the Network Agent........................................................77
4.3.2. Local installation of the application administration plugin............................82
4.3.3. Installing applications in non-interactive mode............................................83
APPENDIX A. GLOSSARY...........................................................................................85
APPENDIX B. KASPERSKY LAB.................................................................................92
B.1. Other Kaspersky Lab Products ..........................................................................93
B.2. Contact Us.........................................................................................................103
APPENDIX C. LICENSE AGREEMENT ....................................................................104

CHAPTER 1. KASPERSKY®
ADMINISTRATION KIT
1.1. Purpose, structure and main
functions
Kaspersky®Administration Kit is an application that is designed to provide a
centralized solution for most important administration tasks associated with
managing the corporate network anti-virus security system based on Kaspersky
Lab’s applications included into Kaspersky Anti-Virus Business Optimal and
Kaspersky Corporate Suite. Kaspersky Administration Kit supports all network
configurations that use TCP/IP protocol.
Kaspersky Administration Kit is a tool for corporate network administrators and
anti-virus security officers.
The application enables the administrator to:
• Deploy or remove Kaspersky Lab applications across a network connec-
tion to computers within the network. This feature enables the administra-
tor to copy the required set of Kaspersky Lab's applications to a selected
computer and then deploy these applications on the network computers.
• Ensure remote centralized management of Kaspersky Lab applications.
This feature enables the administrator to create a multi-level anti-virus
protection system and manage the operation of all applications from a
single administrator's workstation. This is particularly important for larger
companies that have a local network consisting of a large number of
computers that may cover several separate buildings or offices. This fea-
ture enables the administrator to:
• group computers into administration groups based on the func-
tions performed by such computers and the set of applications
installed on them;
• configure the application settings in a centralized way by creat-
ing and applying group policies;
• configure individual settings of the application for individual
computers using the application settings.
• manage the operation of the applications in a centralized way
by creating and running group and global tasks.

6 Kaspersky®Administration Kit
• create individual patterns for the application's operation by
creating and running tasks for a set of computers from different
administration groups.
• Automatically update the anti-virus database and application modules on
computers. This feature allows centralized updating of the anti-virus data-
base for all installed Kaspersky Lab's applications without accessing the
Kaspersky Lab's internet updates server for each individual update. The
updating can be performed automatically according to the schedule set up
by the administrator. The administrator can monitor the installation of the
updates on the client computers.
• Receive reports using a dedicated system. This feature allows centralized
collection of statistical information about the operation of all installed
Kaspersky Lab's applications, monitoring the correctness of the operation
of these applications and creating reports based on the information ob-
tained. The administrator can create a cumulative network report about
the operation of an application or reports about the operation of applica-
tion installed on each computer.
• Use events notification system. Mail notification sending system. This fea-
ture allows the administrator to create a list of events in the operation of
the applications about which he or she will receive notifications. The list of
such event may, for example, include detection of a new virus or an error
that occurred when attempting to update the anti-virus database on a
computer, detection of a new computer in the network.
• Perform license management. This capability supports centralized instal-
lation of license keys for all installed enterprise applications, tracking of
compliance with the license agreement (number of licenses should corre-
spond to number of running applications) and license agreement expira-
tion date.
• Cooperate with Cisco Network Admission Control (NAC). This functional-
ity provides a mapping between host antivirus protection conditions and
Cisco NAC statuses.
Kaspersky Administration Kit application consists of three main components:
• Administration server performs the function of centralized storage of in-
formation about Kaspersky Lab's applications installed in the corporate
network and about managing such applications.
• Network Agent coordinates the interaction between the Administration
Server and Kaspersky Lab's applications installed on a specific network
node (a workstation or a server). This component supports all Windows-
applications included in the Kaspersky Lab Business Optimal and

Kaspersky®Administration Kit 7
Kaspersky Corporate Suites. Separate versions of Administration Agent
exist for Kaspersky Lab Novell and UNIX applications.
• Administration Console provides a user interface to the administration
services of the Administration Server and Network Agent. The manage-
ment module is implemented as the extension of the Microsoft Manage-
ment Console (MMC).
1.2. Software and Hardware
Requirements
Administration Server
• Software requirements
• Microsoft Data Access Components (MDAC) version 2.8 and
above
• MSDE 2000 SP 3 or MS SQL Server 2000 SP 31 or higher or
MySQL version 5.0.22 (default code page UTF-8) or MS SQL 2-
-5 or higher or MS SQL 2005 Express or higher;
• Microsoft Windows 2000 SP 1 or higher; Microsoft Windows XP
Professional SP 1 or higher; Microsoft Windows XP Profes-
sional x64 and higher, Microsoft Windows Server 2003 or
higher; Microsoft Windows Server 2003x64 or higher Microsoft
Windows NT4 SP 6a or higher, Microsoft Windows Vista, Mi-
crosoft Windows Vista x64..
• Hardware requirements:
• Intel Pentium III processor, 800 MHz or faster
• 128 MB RAM
• 400 MB available space on hard drive
Administration Console
1You can install MSDE from the package included in the Kaspersky Administration Kit
distribution package.

8 Kaspersky®Administration Kit
• Software requirements:
• Microsoft Windows 2000 SP 1 or higher; Microsoft Windows XP
Professional SP 1 or higher; Microsoft Windows XP Profes-
sional x64 and higher, Microsoft Windows Server 2003 or
higher; Microsoft Windows Server 2003x64 or higher Microsoft
Windows NT4 SP 6a or higher, Microsoft Windows Vista, Mi-
crosoft Windows Vista x64;
• Microsoft Management Console version 1.2 or higher
• When running under Microsoft Windows NT4 you need Micro-
soft Internet Explorer 6.0 installed.
• Hardware requirements:
• Intel Pentium II processor, 400 MHz or faster
• At least 64 MB RAM
• 10 MB of available hard drive space
Network Agent
• Software requirements:
• For Windows systems:
• Microsoft Windows 98; Microsoft Windows ME; Microsoft Win-
dows 2000 SP 1 or higher; Microsoft Windows NT4 SP 6a or
higher; Microsoft Windows XP Professional x64 or higher, Mi-
crosoft Windows XP Professional SP 1 or higher, and Windows
Server 2003 or higher; Microsoft Windows Server 2003 x64 or
higher, Microsoft Windows Vista, Microsoft Windows Vista x64;
• For Novell systems:
• Novell NetWare 6 SP or higher; Novell NetWare 6.5 SP3 or
higher
• Hardware requirements:
• For Windows systems:
o Intel Pentium processor, 233 MHz or faster
o 32 MB RAM
o 10 MB available space on hard drive
• For Novell systems:
o Intel Pentium processor, 233 MHz or better
o 12 MB RAM

Kaspersky®Administration Kit 9
o 32 MB free (available) space on hard drive
1.3. Distribution kit
This software product is supplied free-of-charge with any Kaspersky Lab's
application included into the package of Kaspersky Anti-Virus Business Optimal
and Kaspersky Corporate Suite (retail box version) and also available for
download from Kaspersky Lab's corporate website at www.kaspersky.com.
1.4. Help desk for registered users
Kaspersky Lab offers a large service package, enabling its legal users to enjoy
all available features of Kaspersky Lab's products.
Once you purchase a license for any Kaspersky Lab's product included into
Kaspersky Anti-Virus Business Optimal or Kaspersky Corporate Suite, you
become a registered user of Kaspersky Administration Kit. After this you will
receive the following services during the term of your license:
• New versions of the anti-virus software application;
• Consultations on matters related to the installation, configuration, and op-
eration of the anti-virus application by phone or based on requests sent
using a web form;
When sending a request to the Technical support service, make sure
you specify information about the license for Kaspersky Lab's
application used in conjunction with Kaspersky Administration Kit.
• Information about new Kaspersky Lab applications and about new com-
puter viruses (for those who subscribe to the Kaspersky Lab newsletter).
Kaspersky Lab does not provide information related to operation and use of
your operating system or various other technologies.
1.5. The purpose of this document
This Guide contains a description of the installation of Kaspersky Administration
Kit and remote installation of applications within a computer network of simple
configuration.
General concepts and application operation scheme are provided in the
Kaspersky Administration Kit Administrator's Guide; step-by-step description of

10 Kaspersky®Administration Kit
actions when using the application is provided in the Kaspersky Administration
Kit Reference Book.
In order to review questions that our users often ask Kaspersky Lab's support
specialists visit our website and follow the Services ÆKnowledge base link.
This section contains information about installation, configuration and functioning
of Kaspersky Lab's applications and about removal of most commonly spread
viruses and disinfection of infected files.
1.6. Conventions
Various formatting features and icons are used throughout this document
depending on the purpose and the meaning of the text. The table below lists the
conventions used in the text.
Convention Meaning
Bold font Menu titles, commands, window titles,
dialog elements, etc.
Note
Additional information, notes.
Attention
Information you should pay special
attention to.
To perform an action:
1. Step 1.
2. …
Description of the successive user's
steps and possible actions
[modifier] – modifier name. Command line modifier
Information messages and
command line text Text of configuration files, information
messages and command line