Administration Console icon
After Administration Console is installed on your device, its icon appears, allowing you to start Administration Console. You can find Administration Console in the Start → Programs → Kaspersky Security Center menu.
Administration Server and Network Agent services
Administration Server and Network Agent are installed on the device as services with the properties listed below. The table also contains the attributes of other services that apply on the device after Administration Server installation.
Properties of Kaspersky Security Center services
Component |
Service name |
Displayed service name |
Account |
Administration Server |
kladminserver |
Kaspersky Security Center Administration Server |
User-defined or dedicated non-privileged account in KL-AK-* format created during installation |
Network Agent |
klnagent |
Kaspersky Security Center Network Agent |
Local system |
Web Server for accessing Kaspersky Security Center 13 Web Console and administering the organization's intranet |
klwebsrv |
Kaspersky web server |
Dedicated unprivileged KlScSvc account |
Activation proxy server |
klactprx |
Kaspersky activation proxy server |
Dedicated unprivileged KlScSvc account |
KSN proxy server |
ksnproxy |
Kaspersky Security Network proxy server |
Dedicated unprivileged KlScSvc account |
Kaspersky Security Center 13 Web Console services
If you install Kaspersky Security Center 13 Web Console on the device, then the following services are deployed (see the table below):
Kaspersky Security Center 13 Web Console services
Displayed service name |
Account |
Kaspersky Security Center Service Console |
Dedicated unprivileged KlScSvc account |
Kaspersky Security Center Web Console
|
Network service |
Kaspersky Security Center plug-in service
|
Dedicated unprivileged KlScSvc account |
Kaspersky Security Center Web Console Management Service
|
Local system |
Kaspersky Security Center Web Console Message Queue
|
Dedicated unprivileged KlScSvc account |
Network Agent server version
The server version of Network Agent will be installed on the device together with Administration Server. The server version of Network Agent is part of Administration Server, is installed and removed together with Administration Server, and can only interact with a locally installed Administration Server. You do not have to configure the connection of Network Agent to Administration Server: configuration is implemented programmatically because the components are installed on the same device. The server version of Network Agent is installed with the same properties as the standard Network Agent and performs the same application management functions. This version will be managed by the policy of the administration group to which the client device of Administration Server belongs. For the server version of Network Agent all tasks are created from the scope of those provided for Administration Server, except for the Server change task.
Network Agent cannot be installed separately on a device that already has Administration Server installed.
You can view the properties of each service of Administration Server and Network Agent, as well as monitor their operation using standard Microsoft Windows management tools: Computer management\Services. Information about the activity of the Kaspersky Administration Server service is stored in the Microsoft Windows system log in a separate Kaspersky Event Log branch on the device where the Administration Server is installed.
We recommend that you avoid starting and stopping services manually and leave service accounts in the service settings unchanged. If necessary, you can modify the Administration Server service account using the klsrvswch utility.
User accounts and security groups
The Administration Server Installer creates the following accounts by default:
If you selected other accounts for the Administration Server service and other services while running the Installer, the specified accounts are used.
Local security groups named KLAdmins and KLOperators with their respective sets of rights are also created automatically on the device that has Administration Server installed.
It is not recommended to install the Administration Server on a domain controller; however, if you install Administration Server on the domain controller, you must start the installer with the domain administrator rights. In this case, the installer automatically creates domain security groups named KLAdmins and KLOperators. If you install Administration Server on a computer that is not the domain controller, you must start the installer with the local administrator rights instead. In this case, the installer automatically creates local security groups named KLAdmins and KLOperators.
When configuring email notifications, you may have to create an account on the mail server for ESMTP authentication.