KAPERSKY ADMINISTRATION KIT 6.0 User manual

KASPERSKY LAB
Kaspersky®Administration Kit
version 6.0
Getting started

KASPERSKY®ADMINISTRATION KIT
VERSION 6.0
Getting started
©Kaspersky Lab
http://www.kaspersky.com/
Revision date: February, 2007

Contents
CHAPTER 1. INTRODUCTION ...................................................................................... 4
CHAPTER 2. GETTING STARTED................................................................................ 6
2.1. Installing MSDE 2000............................................................................................ 7
2.2. Installing Kaspersky Administration Kit Components........................................... 7
2.3. Quick Start Wizard................................................................................................. 8
2.4. Creating an administration group........................................................................ 10
2.5. Remote installation of the Network Agent .......................................................... 10
2.6. Kaspersky Anti-Virus application deployment .................................................... 11
2.7. Checking the operation of the update task......................................................... 12
2.8. Configuring notifications ...................................................................................... 13
2.9. Testing the notification system and on-demand scan task................................ 14
2.10. Generating reports............................................................................................. 14
CHAPTER 3. UPGRADING FROM KASPERSKY ADMINISTRATION KIT 5.X
AND 6.0 TO VERSION 6.0 (MAINTENANCE PACK 1)........................................... 16
CHAPTER 4. CONCLUSION ........................................................................................ 18
APPENDIX A. KASPERSKY LAB................................................................................. 19
A.1. Other Kaspersky Lab Products .......................................................................... 20
A.2. Contact Us........................................................................................................... 30
APPENDIX B. LICENSE AGREEMENT....................................................................... 31

CHAPTER 1. INTRODUCTION
This document outlines the main steps a network security administrator must
take to quickly and efficiently install an anti-virus protection system, based on
Kaspersky Lab’s applications, across a corporate network using Kaspersky
Administration Kit.
This document examines a simple scenario in which anti-virus protection is
installed on several computers running a Microsoft Windows operating system
without using the hierarchy of the Administration Servers. For successful
installation, the computers must run any of the following operating systems:
Microsoft Windows 98; Microsoft Windows ME; Microsoft Windows 2000 with
Service Pack 1 or better; Microsoft Windows NT4 with Service Pack 6a or better;
Microsoft Windows XP Professional with Service Pack 1 or better; Microsoft
Windows XP Professional x64 or better; Microsoft Windows Server 2003 or
better; Microsoft Windows Server 2003 x64 or better; Microsoft Windows Vista,
Microsoft Windows Vista x64.
This document also describes the process of upgrading Kaspersky Lab’s
applications from versions 5.x to version 6.x.
For detailed information on Kaspersky Administration Kit refer to the
Implementation Guide, Administrator’s Guide, and Reference Guide.
Kaspersky Administration Kit 5 is designed for managing the anti-virus protection
system within a corporate network. The application enables the administrator to
do the following:
• Create a logical network that ensures anti-virus protection of the
corporate network.
• Deploy and uninstall enterprise anti-virus applications across a network.
• Remotely manage the anti-virus protection system from a single location.
• Receive notifications across the network about virus protection-related
events.
• Accumulate statistics and reports from all installations.
• Manage licenses for all installed anti-virus applications
• Perform centralized management of objects placed in quarantine or
backup storage by anti-virus applications.
Kaspersky Administration Kit consists of the following components:
• Administration Server stores information on Kaspersky Lab applications
installed on an enterprise network and manages such applications in a
centralized manner. The Administration Server stores all the data about
the corporate anti-virus protection system in an MSDE 2000 database

Introduction 5
with Service Pack 3 or higher, Microsoft SQL Server 2000 with Service
Pack 3 or higher, MySQL 5.0.32, Microsoft SQL 2005 or higher or
Microsoft SQL 2005 Express or higher. Databases must be working in the
corporate network before the installation and operation of the
Administration server begin. MSDE 2000 with Service Pack 3 can be
installed using the Kaspersky Administration Kit 6.0. In order to do it, you
computer must have Microsoft Data Access Components (MDAC) 2.8 or
higher installed on your computer.
• Administration Agent interfaces with the Administration Server and
Kaspersky Lab applications installed on a network host (workstation or
server). This component is common to all Kaspersky Anti-Virus Business
Optimal or Kaspersky Corporate Suite Windows products. Separate
versions of Administration Agent exist for Kaspersky Lab Novell and UNIX
applications.
• Administration Console provides a user interface for Server and Agent
administration services. Administration Console is implemented as a
Microsoft Management Console (MMC) plugin.

CHAPTER 2. GETTING STARTED
To build an effective protection system around your corporate network, follow
these steps:
1. Install Microsoft Data Access Components (MDAC) 2.8 or higher. This is
not required if this component is already installed in your corporate
network.
2. Install MSDE 2000 SP 3 (see section 2.1 on page 7), Microsoft SQL 2000
SP 3 or better, MySQL 5.0.32, Microsoft SQL 2005 or better, or Microsoft
SQL Express or better. Skip this step if your network already has either of
these database servers installed.
3. Install the Administration Server and Administration Console (see
section 2.2 on page 7).
4. Configure the initial settings of the anti-virus protection system using the
Quick Start Wizard (see section 2.3 on page 8).
5. Create administration groups (see section 2.4 on page 10) if such groups
have not been created using the Quick Start Wizard. Administration
groups allow to manage groups of client computers as a single entity by
applying policies and group tasks.
6. Remotely install the Network Agent on client computers to allow their anti-
virus application to interact with the Administration Server (see section 2.5
on page 10).
7. Remotely install on selected client computers Kaspersky Lab's application
that ensure anti-virus protection of the corporate network and support
administration via Kaspersky Administration Kit (see section 2.6 on
page 11). If these application are already installed, this step is not
required.
8. Configure the downloading of anti-virus database updates from the
Internet by the Administration Server, and verify that the operation is
successful. Verify that the databases are being updated on client
computers (see section 2.7 on page 12).
9. Configure options for notifying the administrator of virus-related events on
client computers (see section 2.8 on page 13).
10. Run an on-demand scan on client computers and check the notification
task performed on client computers (see section 2.9 on page 13).
11. View a report on the anti-virus protection of client computers and the
number of viruses detected by Kaspersky Lab’s applications (see
section 2.10 on page 14).
If the steps above have been successfully completed, you have built a reliable
anti-virus protection system for your corporate network.

Getting started 7
The following sections describe these steps in more detail.
2.1. Installing MSDE 2000
Skip this step if MSDE 2000 SP 3, Microsoft SQL Server 2000 SP 3, MySQL
5.0.32, Microsoft SQL 2005 or higher, or Microsoft SQL 2005 Express or higher
are already installed on the corporate network.
Before installing MSDE you must install Microsoft Data Access Components
(MDAC) 2.8 or higher (the distribution package is available Microsoft website).
To install MSDE 2000 from the package included in Kaspersky Administration
Kit,
1. Select a computer on which to install the Administration Server
database. This is typically the same computer on which Administration
Server will be installed.
2. Run locally the setup.exe file in the MSDE2KSP3 directory on the
Kaspersky Administration Kit installation CD.
3. Follow the setup wizard’s instructions.
After you have performed all the installation steps, the MSDE 2000 SP 3
application will be installed on the selected computer. MSDE 2000 SP 3 requires
no administration.
The Administration Server uses MSDE 2000 SP 3 or SQL Server 2000 SP 3 to
store anti-virus protection data in a central database.
Administration Server data may be backed up using klbackup utility bundled
with Kaspersky Administration Kit or using the Administration Server Backup
global task. Please refer to the Administrator’s Guide for details.
2.2. Installing Kaspersky
Administration Kit Components
In the course of an installation, desired components may be selected:
Administration Server, Kaspersky Lab Posture Validation Server for Cisco
NAC, Administration Agent, and Administration Console. Administration
Agent and Console are not optional; they are always installed. Kaspersky Lab
Posture Validation Server for Cisco NAC is a standard Kaspersky Lab
component for integration with Cisco Network Admission Control and is not
considered in this guide. By default, all components are installed.
If necessary, the Administration Console can be installed on another computer,
and manage the Administration Server via the network.

8Kaspersky Administration Kit 6.0
To install the Administration Server and / or the Administration Console,
1. Select a computer on which to install the components. If there is a
Windows domain structure on your network, it is recommended that you
install the Administration Server on a member of the domain.
Kaspersky Administration Kit 6.0 (Maintenance Pack 1) Administration
Server and/or Console may be installed on the same host running
Administration Server and/or Console Versions 5.x, or 6.0.
You are advised to possess domain administrator rights when installing
the product. This will allow to automatically create KLAdmins and
KLOperators groups and to provide necessary credentials to account,
under which Administration server will operate.
2. Run the setup.exe file from the Kaspersky Administration Kit installation
CD.
3. Follow the wizard’s instructions.
Select the domain administrator account as the service account under
which the Administration Server will start on this computer.
2.3. Quick Start Wizard
To perform initial configuration of anti-virus protection settings,
1. Run the Administration Console by clicking Start ÆPrograms Æ
Kaspersky Administration Kit ÆKaspersky Administration Kit.
2. Connect to the Administration Server by clicking the Administration Server
node in the console tree. Accept the server certificate.
3. Open the shortcut menu and select Quick Start Wizard.
4. Wait until the Administration Server finishes searching your network and
detects all computers on the network.
5. Create administration groups by one of the following methods:
• If you are only dealing with several test computers, select the
Manual option to manually add test client computers to the
group.
• If products are being rolled out to all hosts in an enterprise
network, administration groups can be created automatically.
Select the option to Create Logical Network Based on
Windows Network. This will create a logical network based on
Microsoft Windows domains and work groups (administration
groups will match Microsoft Windows domains and work
groups).

Getting started 9
6. Specify options for sending email and NET SEND notifications generated
by Kaspersky Lab’s applications. These settings can be edited as part of
the Administration Server properties. For more information, refer to the
Administrator’s Guide.
7. Run a process that creates policies for anti-virus applications and multiple
tasks that would configure correct operation of the anti-virus protection
system in the corporate network. Kaspersky Administration Kit 5 uses
group policies to apply settings uniformly to all computers in a group.
Tasks are actions performed by the anti-virus software on all computers in
a group.
The following objects will be created:
• Higher-level policies for Kaspersky Anti-Virus for Windows
Workstations 5.0 and 6.0 with default settings. Later you will be
able to view and modify the policy settings. In order to apply
changes that you have made in the policy to the client
computers and to prevent the user from altering these settings,
use the symbol.
• A global task for updating the Administration Server from the
Internet.
The application will download updates, to both the anti-virus
database and to program modules, from Kaspersky Lab’s
update servers, and save them to the shared folder specified
during the installation of Administration Server. Client
computers will retrieve the updates from this shared folder.
Later, in order to achieve more flexibility when the client
computers retrieve the updates, distribution of updates to the
slave Administration servers and Updating Agents can be used
(details see the Administrator's Guide). To configure updating
the settings for retrieving updates from the Kaspersky Lab's
updates servers click the Updater Settings button.
• An upper-level group task to update anti-viruses databases on
client computers will be created with default settings (for
Kaspersky Anti-Virus 5.0 and 6.0 for Windows Workstations).
The client computers will be configured to retrieve updates from
the shared folder.
• An on-demand scan task for client computers will be created
with default settings (for Kaspersky Anti-Virus 5.0 and 6.0 for
Windows Workstations).
8. Indicate whether the task for receiving updates by the Administration
server should be launched immediately or according to the schedule.

10 Kaspersky Administration Kit 6.0
9. In the final window, indicate whether the deployment wizard should be
launched immediately after the completion of the Quick Start Wizard.
2.4. Creating an administration
group
To add a new group to the logical network,
1. In the console tree or the Groups folder in the details pane, select a
group to which you want to add a new group. Open the shortcut menu
and click New ÆGroup. Enter a name for the new group and click OK.
2. Move the selected client computers from the Network group to the new
group using cut-and-paste or drag-and-drop or by selecting New→Host
from the pop-up menu and following the prompts provided by the resulting
wizard.
In order to create a set of computer for moving to the administration
group based on some criteria, use the shortcut menu command Find
computer (or the analogous command in the Action menu). Details
see the Administrator's Guide.
For more detail on updating Kaspersky Administration Kit 5.хand 6.0 to
Version 6.0 (Maintenance Pack 1) see Chapter 3, p. 16.
2.5. Remote installation of the
Network Agent
Administration Agent may be deployed both by itself and in collocation with a
desired application. This section describes only the installation of Administration
Agent. This is convenient in situations when the desired version of an anti-virus
application is already installed on the client.
To deploy (remotely install) the Network Agent from a remote location,
1. Run the Application Deployment Wizard from the Administration Console
shortcut menu in the Administration Console.
2. Select the Network Agent installation package created by the Quick Start
Wizard. This package is created during the installation of the
Administration Server and contains settings that are used by the Network
Agent to connect to the Administration Server.
3. Select the computers of the administration group containing the target
computers on which Network Agent is to be installed.
4. Configure the remote installation settings.