To manage devices in an organization, you have to install Network Agent on each device.
Installing Network Agent on the managed device running Windows can be done in the following ways:
With third-party tools for remote installation of applications.
By cloning an image of the administrator's hard drive with the operating system and Network Agent, by using tools provided by Kaspersky Security Center for handling disk images or by using third-party tools.
With Windows group policies, by using standard Windows management tools for group policies; or in automatic mode, through the corresponding dedicated option in the remote installation task of Kaspersky Security Center.
In forced mode, by using operating system resources through the remote installation task of Kaspersky Security Center.
By sending device users links to stand-alone packages generated by Kaspersky Security Center. Stand-alone packages are executable modules that contain the distribution packages of selected applications with their settings defined.
Manually, by running application installers on devices.
By sending device users links to stand-alone packages generated by Kaspersky Security Center. Stand-alone packages are executable modules that contain the distribution packages of selected applications, with pre-defined settings.
After Network Agent is installed on a device, you can perform the remote installation of Kaspersky applications on that device through this Network Agent. The distribution package of an application to be installed is transferred over communication channels between Network Agents and Administration Server, along with the installation settings defined by the administrator. To transfer the distribution package, you can use relay distribution nodes, that is, distribution points, multicast delivery, etc.
When selecting a method and a strategy for deploying applications on a managed network, you must consider a number of factors (partial list):
Presence of devices on the organization's network, which are not members of any Active Directory domain; and the presence of uniform accounts with administrator rights on those devices.
Capacity of the channel between the Administration Server and devices.
Type of communication between Administration Server and remote subnets, and the capacity of the network channels in those subnets.
Security settings applied on remote devices at the start of deployment. These parameters allow establishing the remote connection to the managed device and starting the installation.