Description of setup.ini file installation settings

The setup.ini file is used when installing the application from the command line or when using the Group Policy Editor of Microsoft Windows. To apply settings from the setup.ini file, place this file into the folder containing the Kaspersky Endpoint Security distribution package.

DOWNLOAD THE SETUP.INI FILE

The setup.ini file consists of the following sections:

[Setup] – general settings of application installation.
[Components] – selection of application components to be installed. If none of the components are specified, all components that are available for the operating system are installed. File Threat Protection is a mandatory component and is installed on the computer regardless of which settings are indicated in this section. The Managed Detection and Response component is also absent from this section. To install this component, you must activate Managed Detection and Response in the Kaspersky Security Center Console.
[Tasks] – selection of tasks to be included in the list of Kaspersky Endpoint Security tasks. If no task is specified, all tasks are included in the task list of Kaspersky Endpoint Security.

The alternatives to the value 1 are the values yes, on, enable, and enabled.

The alternatives to the value 0 are the values no, off, disable, and disabled.

Settings of the setup.ini file

Section	Parameter	Description
`[Setup]`	`InstallDir`	Path to the application installation folder.
	`ActivationCode`	Kaspersky Endpoint Security activation code.
	`EULA=1`	Acceptance of the terms of the End User License Agreement. The text of the License Agreement is included in the distribution kit of Kaspersky Endpoint Security. Accepting the terms of the End User License Agreement is necessary for installing the application or upgrading the application version.
	`PrivacyPolicy=1`	Acceptance of the Privacy Policy. The text of the Privacy Policy is included in the Kaspersky Endpoint Security distribution kit. To install the application or upgrade the application version, you must accept the Privacy Policy.
	`KSN`	Agreement or refusal to participate in Kaspersky Security Network (KSN). If no value is set for this parameter, Kaspersky Endpoint Security will prompt to confirm your consent or refusal to participate in KSN when Kaspersky Endpoint Security is first started. Available values: `1` – agreement to participate in KSN. `0` – refusal to participate in KSN (default value). The Kaspersky Endpoint Security distribution package is optimized for use with Kaspersky Security Network. If you opted not to participate in Kaspersky Security Network, you should update Kaspersky Endpoint Security immediately after the installation is complete.
	`Login`	Set the user name for accessing the features and settings of Kaspersky Endpoint Security (the Password protection component). The user name is set together with the `Password` and `PasswordArea` parameters. The user name KLAdmin is used by default.
	`Password`	Specify a password for accessing Kaspersky Endpoint Security features and settings (the password is specified together with the `Login` and `PasswordArea` parameters). If you specified a password but did not specify a user name with the `Login` parameter, the KLAdmin user name is used by default.
	`PasswordArea`	Specify the scope of the password for accessing Kaspersky Endpoint Security. When a user attempts to perform an action that is included in this scope, Kaspersky Endpoint Security prompts for the user's account credentials (`Login` and `Password` parameters). Use the "`;`" character to specify multiple values. Available values: `SET` – modifying application settings. `EXIT` – exiting the application. `DISPROTECT` – disabling protection components and stopping scan tasks. `DISPOLICY` – disabling the Kaspersky Security Center policy. `UNINST` – removing the application from the computer. `DISCTRL` – disabling control components. `REMOVELIC` – removing the key. `REPORTS` – viewing reports.
	`SelfProtection`	Enabling or disabling the application installation protection mechanism. Available values: `1` – the application installation protection mechanism is enabled (default value). `0` – the application installation protection mechanism is disabled. Installation protection includes protection against replacement of the distribution package with malicious applications, blocking access to the installation folder of Kaspersky Endpoint Security, and blocking access to the system registry section containing application keys. However, if the application cannot be installed (for example, when performing remote installation with the help of Windows Remote Desktop), you are advised to disable protection of the installation process.
	`Reboot=1`	Automatic restart of the computer, if required after installation or upgrade of the application. If no value is set for this parameter, automatic computer restart is blocked. Restart is not required when installing Kaspersky Endpoint Security. Restart is required only if you have to remove incompatible applications prior to installation. Restart may also be required when updating the application version.
	`AddEnvironment`	In the %PATH% system variable, add the path to executable files located in the Kaspersky Endpoint Security setup folder. Available values: `1` – the %PATH% system variable is supplemented with the path to executable files that are located in the Kaspersky Endpoint Security setup folder. `0` – the %PATH% system variable is not supplemented with the path to executable files that are located in the Kaspersky Endpoint Security setup folder.
	`AMPPL`	Enables or disables protection of the Kaspersky Endpoint Security processes using AM-PPL technology (Antimalware Protected Process Light). For more details about AM-PPL technology, please visit the Microsoft website. AM-PPL technology is available for Windows 10 version 1703 (RS2) or later, and Windows Server 2019 operating systems. Available values: `1` – protection of the Kaspersky Endpoint Security processes using AM-PPL technology is enabled. `0` – protection of the Kaspersky Endpoint Security processes using AM-PPL technology is disabled.
	`SetupReg`	Enable writing of registry keys from the setup.reg file to the registry. `SetupReg: setup.reg` parameter value.
	`EnableTraces`	Enabling or disabling application traces. After Kaspersky Endpoint Security starts, it saves trace files in the folder %ProgramData%\Kaspersky Lab\KES\Traces. Available values: `1` – traces are enabled. `0` – traces are disabled (default value).
	`TracesLevel`	Level of detail of traces. Available values: `100` (critical). Only messages about fatal errors. `200` (high). Messages about all errors, including fatal errors. `300` (diagnostic). Messages about all errors, as well as warnings. `400` (important). All error messages, warnings, and additional information. `500` (normal). Messages about all errors and warnings, as well as detailed information about the operation of the application in normal mode (default). `600` (low). All messages.
	`RESTAPI`	Managing the application through the REST API. To manage the application through the REST API, you must specify the user name (`RESTAPI_User` parameter). Available values: `1` – management via REST API is allowed. `0` – management via REST API is blocked (default value). To manage the application through the REST API, management using administrative systems must be allowed. To do so, set the `AdminKitConnector=1` parameter. If you manage the application through the REST API, it is impossible to manage the application using the administration systems of Kaspersky.
	`RESTAPI_User`	User name of the Windows domain account used for managing the application through the REST API. Management of the application through the REST API is available only to this user. Enter the user name in the format `<DOMAIN>\<UserName>` (for example, `RESTAPI_User=COMPANY\Administrator`). You can select only one user to work with the REST API. Adding a user name is a prerequisite for managing the application through the REST API.
	`RESTAPI_Port`	Port used for managing the application through the REST API. Port 6782 is used by default.
`[Components]`	`ALL`	Installation of all components. If the parameter value `1` is specified, all components will be installed regardless of the installation settings of individual components.
	`MailThreatProtection`	Mail Threat Protection.
	`WebThreatProtection`	Web Threat Protection.
	`AMSI`	AMSI Protection.
	`HostIntrusionPrevention`	Host Intrusion Prevention.
	`BehaviorDetection`	Behavior Detection.
	`ExploitPrevention`	Exploit Prevention.
	`RemediationEngine`	Remediation Engine.
	`Firewall`	Firewall.
	`NetworkThreatProtection`	Network Threat Protection.
	`WebControl`	Web Control.
	`DeviceControl`	Device Control.
	`ApplicationControl`	Application Control.
	`AdaptiveAnomaliesControl`	Adaptive Anomaly Control.
	`FileEncryption`	File Level Encryption libraries.
	`DiskEncryption`	Full Disk Encryption libraries.
	`BadUSBAttackPrevention`	BadUSB Attack Prevention.
	`AntiAPT`	Endpoint Agent. Endpoint Agent installs Kaspersky Endpoint Agent 3.10 for interaction between the application and Kaspersky solutions designed to detect advanced threats (for example, Kaspersky Sandbox).
	`AdminKitConnector`	Application management using administration systems. Administration systems include, for example, Kaspersky Security Center. In addition to Kaspersky administration systems, you can use third-party solutions. Kaspersky Endpoint Security provides an API for this purpose. Available values: `1` – application management with the help of administration systems is allowed (default value). `0` – application management is allowed only through the local interface.
`[Tasks]`	`ScanMyComputer`	Full Scan task. Available values: `1` – the task is included in the list of Kaspersky Endpoint Security tasks. `0` – the task is not included in the list of Kaspersky Endpoint Security tasks.
	`ScanCritical`	Critical Areas Scan task. Available values: `1` – the task is included in the list of Kaspersky Endpoint Security tasks. `0` – the task is not included in the list of Kaspersky Endpoint Security tasks.
	`Updater`	Update task. Available values: `1` – the task is included in the list of Kaspersky Endpoint Security tasks. `0` – the task is not included in the list of Kaspersky Endpoint Security tasks.

Page top