Kaspersky Endpoint Security for Windows 11.3.0

Special considerations when working with different versions of management plug-ins

You can use the Management Plug-in to change the following items:

  • Policies
  • Policy profiles
  • Group tasks
  • Local tasks
  • Local settings of Kaspersky Endpoint Security

You can manage Kaspersky Endpoint Security via Kaspersky Security Center only if you have a Management Plug-in whose version is equal to or later than the version specified in the information regarding the compatibility of Kaspersky Endpoint Security with the Management Plug-in. You can view the minimum required version of the Management Plug-in in the installer.ini file included in the distribution kit.

If any component is opened (such as a policy or task), the Management Plug-in checks its compatibility information. If the version of the Management Plug-in is equal to or later than the version specified in the compatibility information, you can change the settings of this component. Otherwise, you cannot use the Management Plug-in to change the settings of the selected component. It is recommended to upgrade the Management Plug-in.

Upgrading the Kaspersky Endpoint Security 10 for Windows Management Plug-in

If the Kaspersky Endpoint Security 10 for Windows Management Plug-in is installed in the Administration Console, please consider the following when installing the Kaspersky Endpoint Security 11 for Windows Management Plug-in:

  • The Kaspersky Endpoint Security 10 for Windows Management Plug-in will not be removed, and will remain available for operation.
  • The Kaspersky Endpoint Security 11 for Windows Management Plug-in does not support management of Kaspersky Endpoint Security 10 for Windows on users' computers.
  • The Kaspersky Endpoint Security 11 for Windows Management Plug-in does not support components (for example, policies or tasks) that were created using the Kaspersky Endpoint Security 10 for Windows Management Plug-in.

    If you removed the Kaspersky Endpoint Security 10 for Windows Management Plug-in and installed the Kaspersky Endpoint Security 11 for Windows Management Plug-in, you need to create new policies, tasks, etc. You can also install the Kaspersky Endpoint Security 11 for Windows Management Plug-in with the Kaspersky Endpoint Security 10 for Windows Management Plug-in to perform migration. After the migration is complete, remove the Kaspersky Endpoint Security 10 for Windows Management Plug-in.

Upgrading the Kaspersky Endpoint Security 11 for Windows Management Plug-in

If the Kaspersky Endpoint Security 11 for Windows Management Plug-in is installed in the Administration Console, please consider the following when installing a new version of the Kaspersky Endpoint Security 11 for Windows Management Plug-in:

  • The previous version of the Kaspersky Endpoint Security 11 for Windows Management Plug-in will be removed.
  • The new version of the Kaspersky Endpoint Security 11 for Windows Management Plug-in supports management of the previous version of Kaspersky Endpoint Security 11 for Windows on users' computers.
  • You can use the new version of the Management Plug-in to change the settings in policies, tasks, and other elements created by the previous version of the Management Plug-in.
  • For new settings, the new version of the Management Plug-in assigns the default values when a policy, policy profile, or task are saved for the first time.

    After the Management Plug-in is upgraded, it is recommended to check and save the values of the new settings in policies and policy profiles. If you do not do this, the new groups of Kaspersky Endpoint Security settings on the user's computer will take the default values and can be edited (the icon_unlock attribute). It is recommended to check the settings starting with policies and policy profiles at the top level of the hierarchy. It is also recommended to use the user account that has access rights to all functional areas of Kaspersky Security Center.

    To learn about the new capabilities of the application, please refer to the Release Notes or the application help.

  • If a new parameter has been added to a group of settings in the new version of the Management Plug-in, the previously defined status of the icon_lock / icon_unlock attribute for this group of settings is not changed.