Kaspersky Administration Kit 6.0 MP1/MP2

Kaspersky Administration Kit complex can function in any TCP/IP networks – as in peer-to-peer networks and in the network using the domain structure. To get access to mange the complex in peer-to-peer networks basic-authentication is used, and in the domain – basic-, NTLN- or Kerberos-authentication. It should be added that in peer-to-peer networks basic-authentication is done above SSL.

	Useful links
	What is an Administration Server? What is an Administration Console? What is Administration Agent? Secure connection with the Administration Server

Kaspersky Administration Kit has three main components:

• Administration Server is a central component in the Kaspersky Administration Kit structure that provides remote installation/uninstallation of the products, license keys, saving and changing the settings of all managed products and the components, launching and controlling task execution, monitoring of the antivirus state, updating the antivirus databases and application modules, gathering and logging the evens, sending notifications and creating reports.

• Network Agent (Administration Agent) is a component of Kaspersky Administration Kit that provides remote managing over the antivirus products of Kaspersky Lab to protect Windows servers and workstations, must be installed on all computers managed by the remote and centralized management system Kaspersky Administration Kit. The Administration Agent receives from the Administration Server settings of the products and the tasks, updates of the antivirus databases and applications, sends to the server the information about the configuration of the client's computer, results of the task execution, and other events connected with the work of the Administration Agent and the products managed by it.

• Administration Console is an interface granting access to the administration server functions locally or via network. The Administration console is added as a module for Microsoft Management Console, i.e. a standard interface to execute administrative tasks in the medium of the Microsoft Windows operating systems, based on the NT technologies.

The Administration Server is installed on a computer in the network. The Network Agent and the Administration Console are installed on the same computer. If necessary the Console can be installed on another computer – in this case the Network Agent need not be installed with the console.

To coordinate the Administration Server and the network computers that are managed via Kaspersky Administration Kit a Network Agent is installed on them.

After the Administration Agent and antivirus software are installed on the workstations and file servers they become clients of the Administration Server. Kaspersky Anti-Virus can also be installed on the Administration Server in this case this computer will also be a Client.

Working place of the administrator can also be a client computer – if a Network Agent and Kaspersky Anti-Virus are installed on it. In this case the Antivirus can be managed either via the Console or locally – the Network Agent provides connection of the Console and the Antivirus installed on the same computer. E.g. it can be useful to manage locally Kaspersky Anti-Virus 5.0 for Windows File Servers that do not have a user's interface

	Useful links
	What is an Application control plug-in? What is a policy?

Except the main components of Kaspersky Administration Kit also includes such modules to manage the Kaspersky Lab products (or Application Management Plug-Ins). These modules are embedded in the Administration Console and provide correct display in the interface of the Console setting parameters of each product.

The database is directly connected with Kaspersky Administration Kit where the Administration Server stores all necessary for work information: the product settings, information about the events and other service data. In the current version the Administration Server can co-work with Microsoft SQL Server or its restricted version Microsoft SQL Server Desktop Engine (MSDE) or MySQL.

The application parameters installed on the clients in the logical network can be configured centralized via policies. Policy is a set of working parameters of the application in the group. Working parameters of the application can differ for different groups. Each application has its own policy.

Managing in Kaspersky Administration Kit is based on using the tasks to execute all basic functions such as installing products, installing license keys, scanning files, updating the antivirus databases and application modules, rolling back the antivirus databases and other. The tasks can be created for the Administration Server, for the administration groups, for specially selected Clients or one client computer. All task settings, except the individual parameters are inherited from the policies.

All events that appear in the components work of the complex and the Antivirus depending on the settings may be relocated to the Administration Server where they are saved in the database or /and are a cause to notify the system administrator of the antivirus protection. The events located in the databases are used later to create reports.