KASPERSKY LAB Kaspersky® Administration Kit version 5.0 Administrator's manual KASPERSKY® ADMINISTRATION KIT VERSION 5.0 Administrator's manual © Kaspersky Lab Visit our website: http://www.kaspersky.com/ Revision date: December, 2005 Contents CHAPTER 1. KASPERSKY ADMINISTRATION KIT .................................................... 5 1.1. About Kaspersky Administration Kit...................................................................... 5 1.2. What's new in version 5.0? ................................................................................... 7 1.3. Hardware and software requirements .................................................................. 7 1.4. Distribution kit ........................................................................................................ 8 1.4.1. License Agreement......................................................................................... 9 1.5. Help desk for registered users .............................................................................. 9 1.6. The purpose of the document............................................................................. 10 1.7. Conventions......................................................................................................... 10 CHAPTER 2. UNDERSTANDING KASPERSKY ADMINISTRATION KIT ................ 12 2.1. Logical network.................................................................................................... 12 2.2. Policies, settings, and tasks ................................................................................ 14 2.3. Connecting clients to the Administration server ................................................. 16 2.4. Secure connection to the Administration Server ................................................ 17 2.4.1. Administration Server certificate................................................................... 17 2.4.2. Administration Server authentication (when the Administration Console connects to the server) ................................................................................. 18 2.4.3. Administration Server authentication when establishing connection with a client ........................................................................................................... 18 2.5. Identification of computers on the logical network.............................................. 19 2.6. Logical network administrators and operators.................................................... 19 2.7. Rolling out anti-virus protection over logical network ......................................... 21 2.8. Building a centralized management system....................................................... 22 2.9. Maintaining a logical network .............................................................................. 23 2.10. Coordinating joint operation of administrators.................................................. 24 2.11. User interface .................................................................................................... 24 2.11.1. Main window............................................................................................... 24 2.11.2. Console tree................................................................................................ 25 2.11.3. Shortcut menu ............................................................................................ 29 CHAPTER 3. INSTALLING KASPERSKY ADMINISTRATION KIT............................ 33 4 Kaspersky Administration Kit 3.1. Installing MSDE using the Kaspersky Administration Kit installation package.. 33 3.2. Installing the Administration Server and the Administration Console................ 35 3.3. Uninstalling Kaspersky Administration Kit components..................................... 45 3.4. Upgrading to a newer application version .......................................................... 45 CHAPTER 4. USING THE APPLICATION................................................................... 47 4.1. Starting the program and connecting to the administration server.................... 47 4.2. Granting rights ..................................................................................................... 48 4.3. Quick Start Wizard............................................................................................... 49 4.4. Viewing, creating, and configuring a logical network ......................................... 50 4.5. Hierarchy of Administration Servers ................................................................... 52 4.6. Installing and uninstalling applications on client computers............................... 53 4.6.1. Remote installation (deployment) and uninstallation of software................ 54 4.6.1.1. Creating installation packages............................................................... 55 4.6.1.2. Creating an application deployment task.............................................. 56 4.6.2. Application Deploy Wizard ........................................................................... 57 4.6.3. Local installation of applications................................................................... 58 4.7. Policy management............................................................................................. 58 4.8. Task management .............................................................................................. 60 4.9. Managing application settings............................................................................. 61 4.10. Updating the Anti-Virus database and program modules................................ 62 4.11. Working with the quarantine ............................................................................. 63 4.12. Event logs, reports and notifications................................................................. 63 4.13. Managing license keys...................................................................................... 66 4.14. Backing up and restoring data from the Administration Server ....................... 67 APPENDIX A. FAQ ........................................................................................................ 69 APPENDIX B. GLOSSARY........................................................................................... 72 APPENDIX C. KASPERSKY LAB................................................................................. 78 C.1. Other Kaspersky Lab Products .......................................................................... 79 C.2. Contact Us .......................................................................................................... 84 APPENDIX D. LICENSE AGREEMENT ...................................................................... 85 CHAPTER 1. KASPERSKY ADMINISTRATION KIT 1.1. About Kaspersky Administration Kit Kaspersky® Administration Kit is designed for centralized performance of key administrative tasks. It gives you complete control over your enterprise antivirus policy, built on the Kaspersky Anti-Virus Business Optimal and Kaspersky AntiVirus Corporate Suite applications. Kaspersky Administration Kit supports all network configurations that use TCP/IP protocol. Kaspersky Administration Kit is a tool for corporate network administrators and anti-virus security officers. The application enables administrators to: · Deploy Kaspersky Lab applications across a network connection to remote computers running Windows. You can create a custom set of Kaspersky Lab applications on a dedicated computer and then install these multiple applications at once on networked computers on any number of networked computers. Efficiently manage license keys. With Kaspersky Administration Kit, you can centrally install license keys for all Kaspersky Lab applications, monitor the correspondence between the numbers of licenses and Kaspersky Lab applications installed across your network, and track license expiration dates. Remotely manage multiple Kaspersky Lab applications installed on Windows-based computers from a single location. With Kaspersky Administration Kit, you can build a multitiere anti-virus protection system managed from one single administrator's workstation. This is particularly important for enterprises with a multiplayer local spread over remote offices. This feature enables the administrators to: · · Create administration groups of computers with similar functions and applications; Configure application settings simultaneously by applying group policies; · · 6 Kaspersky Administration Kit · · · · Tailor installations to fit the requirements for individual computers by using application settings; Manage multiple applications by assigning group and global tasks; Schedule tasks for applications installed on computers from different administration groups. Automatically update the anti-virus database. You can centrally update the anti-virus database for all applications without having each computer directly connect to Kaspersky Lab update servers. You can schedule updating to run automatically at a specified time to constantly keep your protection current and monitor the update process on client computers. Gather reports from all installations. Using the enhanced reporting capabilities of Kaspersky Administration Kit, you can collect statistics about the operation of all installations and create reports based on the most recent statistics. The program allows you to create a cumulative network report for a single Kaspersky Lab application (application-specific reports) or a report about all Kaspersky Lab applications installed on an individual computer (computer-specific report). Receive notifications about specific events by e-mail. You can specify a set of events which require notification. Such events that may occur during application performance could be, for example, detection of a virus, failure to update, or a new computer appearing on the network. · · Kaspersky Administration Kit has three main components: · Administration Server is a centralized storage of information about Kaspersky Lab applications installed on the local company network and a tool for efficiently managing them. Network Agent coordinates the Administration Server and the Kaspersky Lab applications installed on a particular network node (a workstation or a server). This component supports all applications included in Kaspersky Anti-Virus Business Optimal and Kaspersky Anti-Virus Corporate Suite. Administration Console, a user interface for Server and Agent Administration services, plugs into the Microsoft Management Console (MMC). · · Kaspersky Administration Kit 7 1.2. What's new in version 5.0? The following features are new to Kaspersky Administration Kit version 5.0: · · · · · · · · Ability to manage all Kaspersky Lab applications installed on Windows-based computers. Ability to manage the anti-virus protection system, even for large networks (up to tens of thousands of PCs). Integration of the standard Windows user interface with the Microsoft Management Console (MMC). Management of anti-virus protection through specific tasks. Centralized assignment of general application settings for a bunch of computers from the same administration group. Ability to create anti-virus protection policies by assigning group tasks, to enforce these policies, and to monitor their performance. Enhanced reporting capabilities. Improved logging and reporting system. You can view general data on the anti-virus status of the entire network or view reports on each managed application available for every single computer on your network. Centralized License Key Management system. This allows you to control the correspondence between the number of licenses and the number of Kaspersky Lab applications currently installed, track license expiration dates, and update license keys in a timely manner. · 1.3. Hardware and software requirements Administration Server · Software requirements: · MSDE 2000 SP 3 or MS SQL Server 2000 SP 31 You can install MSDE from the distribution package included in the Kaspersky Administration Kit distribution kit. 1 8 Kaspersky Administration Kit · · Windows 2000 SP 1 or higher; Windows XP SP 1 or higher; Windows 2003 Server; Windows NT4 SP 6.a Hardware requirements: · · · Intel Pentium III processor, 800 MHz or faster 128 MB RAM 400 MB available space on hard drive Administration Console · Software requirements: · Windows 2000 SP 1 or higher; Windows NT4 SP 6a; Windows XP SP 1 or higher; Windows 2003 Server; Microsoft Management Console version 1.2 or higher · Hardware requirements: · · · Intel Pentium II processor, 400 MHz or faster At least 64 MB RAM 10 MB of available hard drive space Network Agent · Software requirements: · Windows 98; Windows ME; Windows 2000 SP 1 or higher; Windows NT4 SP 6a; Windows XP SP 1 or higher, and Windows 2003 Server · Hardware requirements: · · · In ...