Administration Console icon
After Administration Console is installed on your device, its icon appears, allowing you to start Administration Console. You can find Administration Console in the Start → Programs → Kaspersky Security Center menu.
Administration Server and Network Agent services
Administration Server and Network Agent are installed on the device as services with the properties listed below. The table also contains the attributes of other services that apply on the device after Administration Server installation.
Properties of Kaspersky Security Center services
Component |
Service name |
Displayed service name |
Account |
Administration Server |
kladminserver |
Kaspersky Security Center Administration Server |
User-defined or dedicated non-privileged account in KL-AK-* format created during installation |
Network Agent |
klnagent |
Kaspersky Security Center Network Agent |
Local system |
Web Server for accessing Kaspersky Security Center Web Console and administering the organization's intranet |
klwebsrv |
Kaspersky web server |
Dedicated unprivileged KlScSvc account |
Activation proxy server |
klactprx |
Kaspersky activation proxy server |
Dedicated unprivileged KlScSvc account |
KSN proxy server |
ksnproxy |
Kaspersky Security Network proxy server |
Dedicated unprivileged KlScSvc account |
If you install Kaspersky Security Center on the Kaspersky Security Center failover cluster nodes, the klfocsvc_klfoc service becomes available. The klnagent_klfoc and klfocsvc_klfoc services run under the Local system account. The kladminserver_klfoc service must be run under the 'ksc' account, and other services run under the 'rightless' account. The 'ksc' and 'rightless' accounts must be added in the KLAdmins group with the local administrator's permissions. For correct work of Kaspersky Security Center, you must use only the 'ksc' and 'rightless' accounts for running services. We do not recommend using other accounts with the same rights. The table below contains the properties of services that are applied on the device after Administration Server is installed on the Kaspersky Security Center failover cluster.
Properties of services of Kaspersky Security Center installed in the Kaspersky Security Center failover cluster
Component |
Service name |
Displayed service name |
Account |
Administration Server |
kladminserver_klfoc |
Kaspersky Security Center Administration Server |
ksc |
Network Agent |
klnagent_klfoc |
Kaspersky Security Center Network Agent |
Local system |
Web Server for accessing Kaspersky Security Center Web Console and administering the organization's intranet |
klwebsrv_klfoc |
Kaspersky web server |
rightless |
Activation proxy server |
klactprx_klfoc |
Kaspersky activation proxy server |
rightless |
KSN proxy server |
ksnproxy_klfoc |
Kaspersky Security Network proxy server |
rightless |
Kaspersky Security Center failover cluster |
klfocsvc_klfoc |
Kaspersky Security Center failover cluster |
Local system |
Kaspersky Security Center Web Console services
If you install Kaspersky Security Center Web Console on the device, then the following services are deployed (see the table below):
Kaspersky Security Center Web Console services
Displayed service name |
Account |
Kaspersky Security Center Service Web Console |
NT Service/KSCSvcWebConsole |
Kaspersky Security Center Web Console
|
Network service |
Kaspersky Security Center Product Plugins Server
|
NT Service/KSCWebConsolePlugin |
Kaspersky Security Center Web Console Management Service
|
Local system |
Kaspersky Security Center Web Console Message Queue
|
NT Service/KSCWebConsoleMessageQueue |
Network Agent server version
The server version of Network Agent will be installed on the device together with Administration Server. The server version of Network Agent is part of Administration Server, is installed and removed together with Administration Server, and can only interact with a locally installed Administration Server. You do not have to configure the connection of Network Agent to Administration Server: configuration is implemented programmatically because the components are installed on the same device. The server version of Network Agent is installed with the same properties as the standard Network Agent and performs the same application management functions. This version will be managed by the policy of the administration group to which the client device of Administration Server belongs. For the server version of Network Agent all tasks are created from the scope of those provided for Administration Server, except for the Server change task.
Network Agent cannot be installed separately on a device that already has Administration Server installed.
You can view the properties of each service of Administration Server and Network Agent, as well as monitor their operation using standard Microsoft Windows management tools: Computer management\Services. Information about the activity of the Kaspersky Administration Server service is stored in the Microsoft Windows system log in a separate Kaspersky Event Log branch on the device where the Administration Server is installed.
We recommend that you avoid starting and stopping services manually and leave service accounts in the service settings unchanged. If necessary, you can modify the Administration Server service account using the klsrvswch utility. Note that you must launch the klsrvswch utility on the Administration Server device under the account with administrator rights that was used to install Administration Server.
User accounts and security groups
The Administration Server Installer creates the following accounts by default:
If you selected other accounts for the Administration Server service and other services while running the Installer, the specified accounts are used.
Local security groups named KLAdmins and KLOperators with their respective sets of rights are also created automatically on the device that has Administration Server installed.
It is not recommended to install the Administration Server on a domain controller; however, if you install Administration Server on the domain controller, you must start the installer with the domain administrator rights. In this case, the installer automatically creates domain security groups named KLAdmins and KLOperators. If you install Administration Server on a computer that is not the domain controller, you must start the installer with the local administrator rights instead. In this case, the installer automatically creates local security groups named KLAdmins and KLOperators.
When configuring email notifications, you may have to create an account on the mail server for ESMTP authentication.