Removing applications or software updates remotely

Expand all | Collapse all

You can remove applications or software updates on managed devices that run Linux remotely only by using Network Agent.

To remove applications or software updates remotely from selected devices:

1. In the main menu, go to Assets (Devices) → Tasks.
2. Click Add.

   The New task wizard starts. Proceed through the wizard by using the Next button.

3. In the Application drop-down list, select Kaspersky Security Center.
4. In the Task type list, select the Uninstall application remotely task type.
5. In the Task name field, specify the name of the new task.

   A task name cannot be more than 100 characters long and cannot include any special characters ("*<>?\:|).

6. Select the devices to which the task will be assigned.

   Go to the next step of the wizard.

7. Select what kind of software you want to remove, and then select specific applications, updates, or patches that you want to remove:
   • Uninstall managed application

     A list of Kaspersky applications is displayed. Select the application that you want to remove.

   • Uninstall application from applications registry

     By default, Network Agents send the Administration Server information about the applications installed on the managed devices. The list of installed applications is stored in the applications registry.

     To select an application from the applications registry:

     1. Click the Application to uninstall field, and then select the application that you want to remove.
     2. Specify the uninstallation options:
        • Uninstallation mode

          Select how you want to remove the application:

          • Define uninstallation command automatically

            If the application has an uninstallation command defined by the application vendor, Kaspersky Security Center Linux uses this command. We recommend that you select this option.

          • Specify uninstallation command

            Select this option if you want to specify your own command for the application uninstallation.

            We recommend that you first try to remove the application by using the Define uninstallation command automatically option. If the uninstallation through the automatically defined command fails, then use your own command.

            Type an installation command into the field, and then specify the following option:

            Use this command for uninstallation only if the default command was not autodetected

            Kaspersky Security Center Linux checks whether or not the selected application has an uninstallation command defined by the application vendor. If the command is found, Kaspersky Security Center Linux will use it instead of the command specified in the Command for application uninstallation field.

            We recommend that you enable this option.

        • Perform restart after successful application uninstallation

          If the application requires the operating system to be restarted on the managed device after successful uninstallation, the operating system is restarted automatically.

   • Uninstall the specified application update, patch, or third-party application

     A list of updates, patches, and third-party applications is displayed. Select the item that you want to remove.

     The displayed list is a general list of applications and updates, and it does not correspond to the applications and updates installed on the managed devices. Before selecting an item, we recommend that you ensure that the application or update is installed on the devices defined in the task scope. You can view the list of devices on which the application or update is installed, via the properties window.

     To view the list of devices:

     1. Click the name of the application or update.

        The properties window opens.

     2. Open the Devices section.

        You can also view the list of installed applications and updates in the device properties window.

8. Specify how client devices will download the Uninstallation utility:
   • Using Network Agent

     The files are delivered to client devices by Network Agent installed on those client devices.

     If this option is disabled, the files are delivered using the Linux operating system tools.

     We recommend that you enable this option if the task has been assigned to devices that have Network Agents installed.

   • Using operating system resources through Administration Server

     The option is obsolete. Use the Using Network Agent or Using operating system resources through distribution points option instead.

     The files are transmitted to client devices by using the Administration Server operating system tools. You can enable this option if no Network Agent is installed on the client device, but the client device is on the same network as the Administration Server.

   • Using operating system resources through distribution points

     The files are transmitted to client devices by using operating system tools through distribution points. You can enable this option if there is at least one distribution point on the network.

     If the Using Network Agent option is enabled, the files are delivered by using operating system tools only if Network Agent tools are unavailable.

   • Maximum number of concurrent downloads

     The maximum allowed number of client devices to which Administration Server can simultaneously transmit the files. The larger this number, the faster the application will be uninstalled, but the load on Administration Server is higher.

   • Maximum number of uninstallation attempts

     If, when running the Uninstall application remotely task, Kaspersky Security Center Linux fails to uninstall an application on a managed device within the number of installer runs specified by the parameter, Kaspersky Security Center Linux stops delivering the Uninstallation utility to this managed device and does not start the installer on the device anymore.

     The Maximum number of uninstallation attempts parameter allows you to save the resources of the managed device, as well as reduce traffic (uninstallation, MSI file run, and error messages).

     Recurring task start attempts may indicate a problem on the device and which prevents uninstallation. The administrator should resolve the problem within the specified number of uninstallation attempts and then restart the task (manually or by a schedule).

     If uninstallation is not achieved eventually, the problem is considered unresolvable and any further task starts are seen as costly in terms of unnecessary consumption of resources and traffic.

     When the task is created, the attempts counter is set to 0. Each run of the installer that returns an error on the device increments the counter reading.

     If the number of attempts specified in the parameter has been exceeded and the device is ready for application uninstallation, you can increase the value of the Maximum number of uninstallation attempts parameter and start the task to uninstall the application. Alternatively, you can create a new Uninstall application remotely task.

   • Verify operating system type before downloading

     Before transmitting the files to client devices, Kaspersky Security Center Linux checks if the Installation utility settings are applicable to the operating system of the client device. If the settings are not applicable, Kaspersky Security Center Linux does not transmit the files and does not attempt to install the application. For example, to install some application to devices of an administration group that includes devices running various operating systems, you can assign the installation task to the administration group, and then enable this option to skip devices that run an operating system other than the required one.

   Go to the next step of the wizard.

9. Specify the operating system restart settings:
   • Do not restart the device

     Client devices are not restarted automatically after the operation. To complete the operation, you must restart a device (for example, manually or through a device management task). Information about the required restart is saved in the task results and in the device status. This option is suitable for tasks on servers and other devices where continuous operation is critical.

   • Restart the device

     Client devices are always restarted automatically if a restart is required for completion of the operation. This option is useful for tasks on devices that provide for regular pauses in their operation (shutdown or restart).

   • Prompt user for action

     The restart reminder is displayed on the screen of the client device, prompting the user to restart it manually. Some advanced settings can be defined for this option: text of the message for the user, the message display frequency, and the time interval after which a restart will be forced (without the user's confirmation). This option is most suitable for workstations where users must be able to select the most convenient time for a restart.

     By default, this option is selected.

     • Repeat prompt every (min)
     • Restart after (min)
   • Force closure of applications in blocked sessions

     Running applications may prevent a restart of the client device. For example, if a document is being edited in a word processing application and is not saved, the application does not allow the device to restart.

     If this option is enabled, such applications on a locked device are forced to close before the device restart. As a result, users may lose their unsaved changes.

     If this option is disabled, a locked device is not restarted. The task status on this device states that a device restart is required. Users have to manually close all applications running on locked devices and restart these devices.

     By default, this option is disabled.

   Go to the next step of the wizard.

10. If necessary, add the accounts that will be used to start the remote uninstallation task:
    • No account required (Network Agent installed)

      If this option is selected, you do not have to specify the account under which the application installer will be run. The task will run under the account under which the Administration Server service is running.

      If Network Agent has not been installed on client devices, this option is not available.

    • Account required (Network Agent is not used)

      Select this option if Network Agent is not installed on the devices for which you assign the Uninstall application remotely task.

      Specify the user account under which the application installer will be run. Click the Add button, select Account, and then specify the user account credentials.

      You can specify multiple user accounts if, for example, none of them have all the required rights on all devices for which you assign the task. In this case, all added accounts are used for running the task, in consecutive order, top-down.

11. At the Finish task creation step of the wizard, enable the Open task details when creation is complete option to modify the default task settings.

    If you do not enable this option, the task will be created with the default settings. You can modify the default settings later.

12. Click the Finish button.

    The wizard creates the task. If you enabled the Open task details when creation is complete option, the task properties window automatically opens. In this window, you can specify the general task settings and, if required, change the settings specified during task creation.

    You can also open the task properties window by clicking the name of the created task in the list of tasks.

    The task is created, configured, and displayed in the list of tasks at Assets (Devices) → Tasks.

13. To run the task, select it in the task list, and then click the Start button.

    You can also set a task start schedule on the Schedule tab of the task properties window.

    For a detailed description of scheduled start settings, refer to the general task settings.

After the task is completed, the selected application is removed from the selected devices.