Kaspersky Security Center 14.2 Windows

Changing the Administration Server for client devices

Expand all | Collapse all

You can change the Administration Server that manages client devices to a different Server using the Change Administration Server task.

To change the Administration Server that manages client devices to a different Server:

1. In the console tree, select the Tasks folder.
2. In the workspace of this folder, click the New task button.

   The New task wizard starts. Proceed through the wizard by using the Next button.

3. At the Select the task type step of the wizard, select the Kaspersky Security Center Administration Server node, expand the Advanced folder, and then select the Change Administration Server task.
4. In the windows that opens, click the OK button to confirm that you agree to the terms of changing the Administration Server for client devices.
5. At the Settings step of the wizard, select the Administration Server that you want to use to manage the selected devices:
   • Change to another primary Administration Server

     To move client devices to another primary Administration Server, specify the following Administration Server connection settings:

     1. In the Administration Server field, specify the address of the new primary Administration Server.
     2. In the Port field, specify the port number to connect to Administration Server.

        The default port number is 14000.

     3. In the SSL port field, specify the number of the SSL port on the primary Administration Server.

        The default port number is 13000.

     4. If necessary, select the Use proxy server check box.

        If this check box is cleared, direct connection is used to connect the device to the Administration Server.

        If this check box is selected, specify the proxy server parameters:

        • Proxy server address
        • Proxy server port

        If your proxy server requires authentication, in the User name and Password fields, specify the credentials of the account under which connection to the proxy server is established. We recommend that you specify the credentials of an account that has minimum privileges required only for the proxy server authentication.

     5. If necessary, upload a new Administration Server certificate.
   • Change to another virtual Server on this primary Server

     Select this option to move client devices to virtual Administration Server on the current primary Administration Server. To do this, in the Name of virtual Administration Server field, specify the name of the necessary virtual Administration Server.

   If necessary, specify the waiting time before restarting the Network Agent.

6. At this step of the wizard, select devices to which the task will be assigned:
   • Select networked devices detected by Administration Server. In this case, the task is assigned to specific devices. The specific devices can include devices in administration groups as well as unassigned devices.
   • Specify device addresses manually or import addresses from a list. You can specify NetBIOS names, DNS names, IP addresses, and IP subnets of devices to which you want to assign the task.
   • Assign task to a device selection. In this case, the task is assigned to devices included in a selection created earlier. You can specify the predefined selection or a custom one that you created.
   • Assign task to an administration group. In this case, the task is assigned to devices included in the administration group created earlier.
7. At the Selecting an account to run the task step of the wizard, specify the account settings:
   • Default account

     The task will be run under the same account as the application that performs this task.

     By default, this option is selected.

   • Specify account

     Fill in the Account and Password fields to specify the details of an account under which the task is run. The account must have sufficient rights for this task.

     • Account

       Account under which the task is run.

     • Password

       Password of the account under which the task will be run.

8. At the Configure task schedule step of the wizard, you can create a schedule for task start. If necessary, specify the following settings:
   • Scheduled start:

     Select the schedule according to which the task runs, and configure the selected schedule.

     • Daily (daylight saving time is not supported)

       The task runs regularly, with the specified interval in days. This schedule does not support observance of daylight saving time (DST). It means that when clocks jump one hour forward or backward at the beginning or ending of DST, the actual task start time does not change.

       We do not recommend that you use this schedule. It is needed for backward compatibility of Kaspersky Security Center.

       By default, the task starts every day at the current system time.

     • By days of week

       The task runs regularly, on the specified days of the week, at the specified time.

       By default, the task runs every Friday at 6:00:00 PM.

     • Monthly

       The task runs regularly, on the specified day of the month, at the specified time.

       In months that lack the specified day, the task runs on the last day.

       By default, the task runs on the first day of each month, at the current system time.

     • Once

       The task runs once, on the specified date and time (by default, on the day when the task was created).

     • Manually

       The task does not run automatically. You can only start it manually.

       By default, this option is selected.

     • Immediately

       The task runs immediately after the device becomes visible on the network or immediately after the device is included in the task scope.

   • Run missed tasks

     This option determines the behavior of a task if a client device is not visible on the network when the task is about to start.

     If this option is enabled, the system attempts to start the task the next time the Kaspersky application is run on the client device. If the task schedule is Manually, Once or Immediately, the task is started immediately after the device becomes visible on the network or immediately after the device is included in the task scope.

     If this option is disabled, only scheduled tasks run on client devices. For Manually, Once and Immediately schedule, tasks run only on those client devices that are visible on the network. For example, you may want to disable this option for a resource-consuming task that you want to run only outside of business hours.

     By default, this option is disabled.

   • Use automatically randomized delay for task starts

     If this option is enabled, the task is started on client devices randomly within a specified time interval, that is, distributed task start. A distributed task start helps to avoid a large number of simultaneous requests by client devices to the Administration Server when a scheduled task is running.

     The distributed start time is calculated automatically when a task is created, depending on the number of client devices to which the task is assigned. Later, the task is always started on the calculated start time. However, when task settings are edited or the task is started manually, the calculated value of the task start time changes.

     If this option is disabled, the task starts on client devices according to the schedule.

   • Use randomized delay for task starts within an interval of (min)

     If this option is enabled, the task is started on client devices randomly within the specified time interval. A distributed task start helps to avoid a large number of simultaneous requests by client devices to the Administration Server when a scheduled task is running.

     If this option is disabled, the task starts on client devices according to the schedule.

     By default, this option is disabled. The default time interval is one minute.

9. At this step of the wizard, specify the name for the task that you are creating.
10. At the Finish task creation step of the wizard, click the Finish button to finish the wizard.

    If you want the task to start as soon as the wizard finishes, select the Run the task after the wizard finishes check box.

After the task is completed, the client devices for which it was created are put under the management of the Administration Server specified in the task settings.

If the Administration Server supports encryption and data protection and you are creating a Change Administration Server task, a warning is displayed. The warning states that if any encrypted data is stored on devices, after the new Server begins managing the devices, users will be able to access only the encrypted data with which they previously worked. In other cases, no access to encrypted data is provided. For detailed descriptions of scenarios in which access to encrypted data is not provided, refer to the Kaspersky Endpoint Security for Windows Help.