- About Kaspersky Security for Windows Server
- What's new
- Sources of information about Kaspersky Security for Windows Server
- Kaspersky Security for Windows Server
- Kaspersky Endpoint Agent
- Installing and removing the application
- Kaspersky Security for Windows Server software component codes for the Windows Installer service
- System changes after Kaspersky Security for Windows Server installation
- Kaspersky Security for Windows Server processes
- Installation and uninstallation settings and command line options for the Windows Installer service
- Kaspersky Security for Windows Server install and uninstall logs
- Installation planning
- Installing and uninstalling the application using a wizard
- Installing using the Setup Wizard
- Kaspersky Security for Windows Server installation
- Kaspersky Security for Windows Server Console installation
- Kaspersky Security Microsoft Outlook Add-in installation
- Advanced settings after installation of the Application Console on another device
- Actions to perform after Kaspersky Security for Windows Server installation
- Modifying the set of components and repairing Kaspersky Security for Windows Server
- Uninstalling using the Setup Wizard
- Installing using the Setup Wizard
- Installing and uninstalling the application from the command line
- About installing and uninstalling Kaspersky Security for Windows Server from command line
- Example commands for installing Kaspersky Security for Windows Server
- Actions to perform after Kaspersky Security for Windows Server installation
- Adding / removing components. Sample commands
- Kaspersky Security for Windows Server uninstallation. Sample commands
- Return codes
- Installing and uninstalling the application using Kaspersky Security Center
- General information about installing via Kaspersky Security Center
- Rights to install or uninstall Kaspersky Security for Windows Server
- Installing Kaspersky Security for Windows Server via Kaspersky Security Center
- Actions to perform after Kaspersky Security for Windows Server installation
- Installing the Application Console via Kaspersky Security Center
- Uninstalling Kaspersky Security for Windows Server via Kaspersky Security Center
- Installing and uninstalling via Active Directory group policies
- Checking Kaspersky Security for Windows Server functions. Using the EICAR test virus
- Application interface
- Application licensing
- About the End User License Agreement
- About the license
- About license certificate
- About the key
- About the key file
- About activation code
- About subscription
- About data provision
- About activating the application through Cloud Console
- Activating the application with a key file
- Activating the application with an activation code
- Viewing information about the current license
- Functional limitations when the license expires
- Renewing the license
- Deleting the key
- Working with the Administration Plug-in
- Managing Kaspersky Security for Windows Server from Kaspersky Security Center
- Managing application settings
- Creating and configuring policies
- Creating and configuring tasks using Kaspersky Security Center
- About task creation in Kaspersky Security Center
- Creating a task using Kaspersky Security Center
- Configuring local tasks in the Application settings window of the Kaspersky Security Center
- Configuring group tasks in Kaspersky Security Center
- Configuring crash diagnostics settings in Kaspersky Security Center
- Managing task schedules
- Reports in Kaspersky Security Center
- Working with the Kaspersky Security for Windows Server Console
- About the Kaspersky Security for Windows Server Console
- Kaspersky Security for Windows Server Console interface
- Managing Kaspersky Security for Windows Server via the Application Console on another device
- Configuring general application settings via the Application Console
- Managing Kaspersky Security for Windows Server tasks
- Viewing the protection status and Kaspersky Security for Windows Server information
- Working with the Web Plug-in from Web Console and Cloud Console
- Managing Kaspersky Security for Windows Server from Web Console and Cloud Console
- Web Plug-in limitations
- Managing application settings
- Creating and configuring policies
- Creating and configuring tasks using Kaspersky Security Center
- Reports in Kaspersky Security Center
- Compact Diagnostic Interface
- Updating Kaspersky Security for Windows Server databases and software modules
- About Update tasks
- About Software Modules Update
- About Database Update
- Schemes for updating anti-virus application databases and modules used within an organization
- Configuring Update tasks
- Rolling back Kaspersky Security for Windows Server database updates
- Rolling back application module updates
- Update task statistics
- Isolating objects and copying backups
- Isolating probably infected objects. Quarantine
- Making backup copies of objects. Backup
- Blocking access to network resources. Blocked Hosts
- Event registration. Kaspersky Security for Windows Server logs
- Notification settings
- Starting and stopping Kaspersky Security for Windows Server
- Kaspersky Security for Windows Server self-defense
- About Kaspersky Security for Windows Server self-defense
- Protection from changes to folders with installed Kaspersky Security for Windows Server components
- Protection from changes to Kaspersky Security for Windows Server registry keys
- Registering the Kaspersky Security Service as a protected service
- Managing access permissions for Kaspersky Security for Windows Server functions
- About permissions to manage Kaspersky Security for Windows Server
- About permissions to manage registered services
- About access permissions for the Kaspersky Security Management Service
- About permissions to manage the Kaspersky Security Service
- Managing access permissions via the Administration Plug-in
- Managing access permissions via the Application Console
- Managing access permissions via the Web Plug-in
- Real-Time File Protection
- About the Real-Time File Protection task
- About the task protection scope and security settings
- About virtual protection scopes
- Predefined protection scopes
- About predefined security levels
- File extensions scanned by default in the Real-Time File Protection task
- Default Real-Time File Protection task settings
- Managing the Real-Time File Protection task via the Administration Plug-in
- Managing the Real-Time File Protection task via the Application Console
- Managing Real-Time File Protection task via the Web Plug-in
- Script Monitoring
- KSN Usage
- Network Threat Protection
- About the Network Threat Protection task
- Default Network Threat Protection task settings
- Configuring the Network Threat Protection task via the Application Console
- Configuring the Network Threat Protection task via the Administration Plug-in
- Configuring the Network Threat Protection task via the Web Plug-in
- Traffic Security
- About the Traffic Security task
- About Traffic Security rules
- Mail threat protection
- List of categories
- Predefined protection level settings
- Default Traffic Security task settings
- Managing Traffic Security via the Administration Plug-in
- Managing Traffic Security via the Application Console
- Managing Traffic Security via the Web Plug-in
- Anti-Cryptor
- Applications Launch Control
- About the Applications Launch Control task
- About Applications Launch Control rules
- About Software Distribution Control
- About KSN usage for the Applications Launch Control task
- About Applications Launch Control rules generation
- Default Applications Launch Control task settings
- Managing Applications Launch Control via the Administration Plug-in
- Navigation
- Configuring Applications Launch Control task settings
- Configuring Software Distribution Control
- Configuring the Rule Generator for Applications Launch Control task
- Configuring Applications Launch Control rules via the Kaspersky Security Center
- Adding an Applications Launch Control rule
- Enabling the Default Allow mode
- Creating allowing rules from Kaspersky Security Center events
- Importing rules from a Kaspersky Security Center report on blocked applications
- Importing Applications Launch Control rules from an XML file
- Checking application launches
- Creating a Rule Generator for Applications Launch Control task
- Managing Applications Launch Control via the Application Console
- Managing Applications Launch Control via the Web Plug-in
- Device Control
- About Device Control task
- About Device Control rules
- About Device Control rules generation
- About Rule Generator for Device Control task
- Device Control default task settings
- Managing Device Control via the Administration Plug-in
- Navigation
- Configuring Device Control task
- Configuring the Rule Generator for Device Control task
- Configuring Device Control rules via the Kaspersky Security Center
- Creating allowing rules based on system data in a Kaspersky Security Center policy
- Generating rules for connected devices
- Importing rules from the Kaspersky Security Center report on blocked devices
- Creating rules using the Rule Generator for Device Control task
- Adding generated rules to the Device Control rules list
- Managing Device Control via the Application Console
- Navigation
- Configuring Device Control task settings
- Configuring Device Control rules
- Importing Device Control rules from XML file
- Filling rules list basing on Device Control task events
- Adding an allowing rule for one or several external devices
- Removing Device Control rules
- Exporting Device Control rules
- Activating and deactivating of Device Control rules
- Expanding Device Control rules usage scope
- Configuring Rule Generator for Device Control task
- Managing Device Control via the Application Console Web Plug-in
- Firewall Management
- File Integrity Monitor
- Log Inspection
- On-Demand Scan
- About On-Demand Scan tasks
- About the task scan scope and security settings
- Predefined scan scopes
- Online storage file scanning
- About predefined security levels
- About the Removable Drives Scan
- About the Baseline File Integrity Monitor task
- Enabling start of On-Demand Scan task from context menu
- Default On-Demand Scan tasks settings
- Managing On-Demand Scan tasks via the Administration Plug-in
- Managing On-Demand Scan tasks via the Application Console
- Managing On-Demand Scan tasks via the Web Plug-in
- Trusted Zone
- Exploit Prevention
- Hierarchical storage management
- Network Attached Storage Protection
- About protection of network attached storages
- Configuring inbound and outbound connections in Windows firewall
- Configuring security settings of local policies in the local group policy editor
- Protecting EMC network attached storages of the Celerra / VNX group
- Viewing status information for Network Attached Storage Protection
- RPC Network Storage Protection
- About the RPC Network Storage Protection
- About scanning symbolic links
- About scanning snapshots and other read-only volumes and folders
- About security levels in the RPC Network Storage Protection task
- Managing the RPC Network Storage Protection task via the Application Console
- Configuring a connection between an RPC network storage and Kaspersky Security for Windows Server
- Configuring the RPC Network Storage Protection task
- Configuring security levels in the RPC Network Storage Protection task
- Viewing statistics of the RPC Network Storage Protection task
- Managing the RPC Network Storage Protection task via the Administration Plug-in
- Navigation
- Configuring a connection between an RPC network storage and Kaspersky Security for Windows Server
- Configuring the RPC Network Storage Protection task
- Configuring security levels in the RPC Network Storage Protection task
- Managing the RPC Network Storage Protection task via the Web Plug-in
- Navigation
- Configuring a connection between an RPC network storage and Kaspersky Security for Windows Server
- Configuring the RPC Network Storage Protection task
- Configuring security levels in the RPC Network Storage Protection task
- ICAP Network Storage Protection
- About the ICAP Network Storage Protection
- About security levels in the ICAP Network Storage Protection task
- Managing the ICAP Network Storage Protection task via the Application Console
- Managing the ICAP Network Storage Protection task via the Administration Plug-in
- Managing the ICAP Network Storage Protection task via the Web Plug-in
- Anti-Cryptor for NetApp
- About the Anti-Cryptor for NetApp
- Creating and configuring FPolicy
- Kaspersky Security for Windows Server prerequisite settings
- Managing the Anti-Cryptor for NetApp task via the Application Console
- Managing the Anti-Cryptor for NetApp task via the Administration Plug-in
- Managing the Anti-Cryptor for NetApp task via the Web Plug-in
- Integrating with third-party systems
- Performance counters for System Monitor
- About Kaspersky Security for Windows Server performance counters
- Total number of requests denied
- Total number of requests skipped
- Number of requests not processed because of lack of system resources
- Number of requests sent to be processed
- Average number of file interception dispatcher streams
- Maximum number of file interception dispatcher streams
- Number of elements in the infected objects queue
- Number of objects processed per second
- Kaspersky Security for Windows Server SNMP counters and traps
- Integrating with WMI
- Performance counters for System Monitor
- Working with Kaspersky Security for Windows Server from the command line
- Commands
- Displaying Kaspersky Security for Windows Server command help: KAVSHELL HELP
- Starting and stopping the Kaspersky Security Service KAVSHELL START: KAVSHELL STOP
- Scanning a selected area: KAVSHELL SCAN
- Starting the Critical Areas Scan task: KAVSHELL SCANCRITICAL
- Managing tasks asynchronously: KAVSHELL TASK
- Removing the PPL attribute: KAVSHELL CONFIG
- Starting and stopping Real-Time Server Protection tasks: KAVSHELL RTP
- Managing the Applications Launch Control task: KAVSHELL APPCONTROL /CONFIG
- Rule Generator for Applications Launch Control: KAVSHELL APPCONTROL /GENERATE
- Filling the list of Applications Launch Control rules: KAVSHELL APPCONTROL
- Filling the list of Device Control rules: KAVSHELL DEVCONTROL
- Starting the Database Update task: KAVSHELL UPDATE
- Rolling back Kaspersky Security for Windows Server database updates: KAVSHELL ROLLBACK
- Managing log inspection: KAVSHELL TASK LOG-INSPECTOR
- Activating the application: KAVSHELL LICENSE
- Enabling, configuring and disabling trace logs: KAVSHELL TRACE
- Defragmenting Kaspersky Security for Windows Server log files: KAVSHELL VACUUM
- Cleaning iSwift base: KAVSHELL FBRESET
- Enabling and disabling dump file creation: KAVSHELL DUMP
- Importing settings: KAVSHELL IMPORT
- Exporting settings: KAVSHELL EXPORT
- Integration with Microsoft Operations Management Suite: KAVSHELL OMSINFO
- Managing the Baseline File Integrity Monitor task: KAVSHELL FIM /BASELINE
- Command return codes
- Return codes for the KAVSHELL START and KAVSHELL STOP commands
- Return code for KAVSHELL SCAN and KAVSHELL SCANCRITICAL commands
- Return codes for the KAVSHELL TASK LOG-INSPECTOR command
- Return codes for the KAVSHELL TASK command
- Return codes for the KAVSHELL RTP command
- Return codes for the KAVSHELL UPDATE command
- Return codes for the KAVSHELL ROLLBACK command
- Return codes for the KAVSHELL LICENSE command
- Return codes for the KAVSHELL TRACE command
- Return codes for the KAVSHELL FBRESET command
- Return codes for the KAVSHELL DUMP command
- Return codes for the KAVSHELL IMPORT command
- Return codes for the KAVSHELL EXPORT command
- Return codes for the KAVSHELL FIM /BASELINE command
- Commands
- Contacting Technical Support
- Glossary
- Active key
- Administration Server
- Anti-virus databases
- Archive
- Backup
- Disinfection
- Event severity
- False positive
- File mask
- Heuristic analyzer
- Infectable file
- Infected object
- Kaspersky Security Network (KSN)
- License term
- Local task
- OLE object
- Policy
- Protection status
- Quarantine
- Real-time protection
- Security level
- SIEM
- Startup objects
- Task
- Task settings
- Update
- Vulnerability
- Information about third-party code
- Trademark notices
Kaspersky Security for Windows Server installation
Before installing Kaspersky Security for Windows Server, do the following:
- Make sure no other anti-virus programs are installed on the protected device. You must uninstall Kaspersky Anti-Virus 8.0 for Windows Servers Enterprise Edition. You can install Kaspersky Security for Windows Server without uninstalling Kaspersky Security 10 for Windows Server.
- Make sure that the account which you are using to start the Setup Wizard belongs to the administrators group on the protected device.
After completing the actions described above, proceed with the installation procedure. Following the Setup Wizard instructions, specify the installation settings for Kaspersky Security for Windows Server. The Kaspersky Security for Windows Server installation process can be stopped at any step of the Setup Wizard. To do so, click the Cancel button in the Setup Wizard's window.
You can read more about the installation (uninstallation) settings.
To install Kaspersky Security for Windows Server using the Setup Wizard:
- Start the setup.exe file on the protected device.
- In the window that opens, in the Installation section, click the Install Kaspersky Security 11.0.1 for Windows Server link.
- In the welcome screen of the Kaspersky Security for Windows Server Setup Wizard, click the Next button.
The End User License Agreement and Privacy Policy window opens.
- Review the terms of the License Agreement and Privacy Policy.
- If you agree to the terms and conditions of End User License Agreement and Privacy Policy, select the I confirm that I have fully read, understood, and accept the terms and conditions of this End User License Agreement and I am aware and agree that my data will be handled and transmitted (including to third countries) as described in the Privacy Policy. I confirm that I have fully read and understand the Privacy Policy check boxes in order to proceed with the installation.
If you do not accept the End User License Agreement and/or Privacy Policy the installation will be aborted.
- Click the Next button.
If the protected device has any compatible version of the application installed, the Previous version of the application detected window will open.
If previous versions of the application are not detected, proceed to step 8 of these instructions.
- To upgrade from the previous version of the application, click the Install button. The Setup Wizard will upgrade application to Kaspersky Security for Windows Server 11.0.1 and save compatible settings in the new version. On the upgrade completion, wizard will open the Installation complete window (proceed to the Step 15 of these instructions).
The Quick scan of the device before installation window opens.
- In the Quick scan of the device before installation, select the Scan device for viruses check box to scan system memory and the boot sectors of the protected device local drives for threats. Click the Next button. On completion of the scanning procedure the wizard will open a window reporting the scan results.
This window displays information about scanned protected device objects: the total number of scanned objects, the number of threats detected, the number of infected or probably infected objects detected, the number of dangerous or potentially dangerous processes removed from memory by Kaspersky Security for Windows Server, and the number of dangerous or potentially dangerous processes that the application was unable to remove.
To see exactly which objects were scanned, click the List of processed objects button.
- Click the Next button in the Quick scan of the device before installation window.
The Custom installation window opens.
- Select the components to be installed.
By default, all Kaspersky Security for Windows Server components are included in recommended installation set, except the Firewall Management and Script Monitoring component.
The SNMP Protocol Support component of Kaspersky Security for Windows Server will only appear in the list of components suggested for installation if the Microsoft Windows SNMP service is installed on the protected device.
If you chose to install Kaspersky Endpoint Agent, Kaspersky Endpoint Agent End User License Agreement window will open on the next step of the wizard. If you agree to the terms and conditions of End User License Agreement, select the I confirm that I have fully read, understood, and accept the terms and conditions of this End User License Agreement check box. The Kaspersky Endpoint Agent installation will start after the installation of Kaspersky Security for Windows Server.
- To cancel all changes, click the Reset button in the Custom installation window. Click the Next button.
- In the Select a destination folder window:
- If required, specify a folder to which Kaspersky Security for Windows Server files will be copied.
- If required, review the information about available space on local drives by clicking the Disk button.
Click the Next button.
- In the Advanced installation settings window, configure the following installation settings:
- Enable real-time protection after installation of application.
- Add Microsoft recommended files to exclusions list.
- Add Kaspersky recommended files to exclusions list.
Click the Next button.
- In the Import settings from configuration file window:
- Specify the configuration file to import Kaspersky Security for Windows Server settings from an existing configuration file created in any compatible previous version of the application.
- Click the Next button.
- In the Activation of the application window, do one of the following:
- If you want to activate the application, specify a Kaspersky Security for Windows Server key file for application activation.
- If you want to activate the application later, click the Next button.
- If a key file was previously saved in the \server folder of the distribution kit, the name of this file will be displayed in the Key field.
- To add a key using a key file stored in another folder, specify the key file.
You cannot activate the application using an activation code via Setup Wizard. If you want to activate the application using activation code, you need to enter the code after installation.
Once the key file is added, license information will be shown in the window. Kaspersky Security for Windows Server displays the license's calculated expiration date. The license term runs from the time when you add a key and expires no later than the expiration date of the key file.
Click the Next button to apply the key file in the application.
- In the Ready to install window, click the Install button. The wizard will start the installation of Kaspersky Security for Windows Server components.
- The Installation complete window opens when installation is complete.
- Select the View Release Notes check box to view information about the release after the Setup Wizard is done.
- Click Finish.
The Setup Wizard closes. Once installation is complete, Kaspersky Security for Windows Server is ready to use if you have added an activation key.