You can install Kaspersky Endpoint Security on a client device remotely from the administrator's workstation using Kaspersky Security Center Administration Console or Kaspersky Security Center Web Console.
For the remote installation, Kaspersky Endpoint Security installation package is used. An installation package is a set of files created for remote installation of Kaspersky applications using Kaspersky Security Center. The installation package contains the settings required to install the application and ensure its operation immediately after the installation. The values of the settings correspond to the default values of the application settings. The installation package is created using the .kud file included in the application distribution kit. Kaspersky Endpoint Security installation package is common for all supported operating systems and processor architecture types.
If you plan to use Kaspersky Endpoint Security in Light Agent mode to protect virtual environments (as part of Kaspersky Hybrid Cloud Security for Virtualization Light Agent), you need to configure the settings in the autoinstall.ini configuration file and include this file in the installation package.
You can deploy Kaspersky Endpoint Security on the devices in the corporate network in several ways.
The Kaspersky Security Center Administration Console supports the following main deployment methods:
Kaspersky Security Center Web Console supports the following main deployment methods:
For a description of the deployment procedures, see the Kaspersky Security Center Help.
If necessary, you can view the remote application installation log in the Web Console in the properties of the managed device on the Advanced tab in the Remote diagnostics section or in the Administration Console using the remote diagnostics utility.
If Kaspersky Endpoint Security is used in Light Agent mode to protect virtual environments, then activation of the application during installation and automatic license key distribution are not supported. If Kaspersky Endpoint Security receives information about the license from the Protection Server after connecting to the SVM; there is no need to activate Kaspersky Endpoint Security separately.
To use Kaspersky Security Center to manage Kaspersky Endpoint Security installed on client devices, you need to put these devices in administration groups. Before starting Kaspersky Endpoint Security installation, you can create Kaspersky Security Center administration groups to which you want to move the devices with Kaspersky Endpoint Security installed, and configure the rules to automatically move the devices to these administration groups. If rules for moving devices to the administration groups are not configured, Kaspersky Security Center moves all the devices that have the Administration Agent installed and are connected to Administration Server to the Unassigned devices list. In this case, you need to manually move computers to the administration groups (refer to the Kaspersky Security Center Help for details).