To check whether the KB3080079 update is installed, run the command:

If this update is already installed, proceed to step 3. Otherwise, proceed to step 2.

Download the Windows6.1-KB3080079-x64.msu file from the Microsoft website and run it.

If the file fails to install and an error message appears, do the following:

1. Extract the .CAB file using the command:
   expand -f:* "C:\Temp\Windows6.1-KB3080079-x64.msu" C:\Temp\KB3080079
2. Install the .CAB file using the command:
   DISM.exe /Online/Add-Package/PackagePath:c:\Temp\KB3080079\Windows6.1-KB3080079-x64.cab

1. Create a .TXT file and add to it the following parameters:
   
   [NewRequest]
   Subject="Cn=<device name>"
   Exportable=TRUE
   KeyAlgorithm=RSA
   KeyLength=2048
   KeyUsage=0x80
   MachineKeySet=TRUE
   Hashalgorithm=Sha256

2. Open the command prompt as an administrator. Go to the folder with the created file and run the command:
   certreq -new <file name>.txt certrequest.req
3. Add snap-in for the certificates:
   1. Open the Microsoft Management Console (MMC).
      To do so, press  + R on the keyboard, type mmc and click OK.
   2. In the Console window, click File → Add/Remove Snap-in.
   3. Select Certificates from the list of available snap-ins and click Add.
   4. Select Computer account and click Next.
   5. Select Local computer: (the computer this console is running on) and click Finish.

4. Export the certificate:
   1. In the console tree, expand Certificates and select Certificate Enrollment Requests.
   2. Right-click Certificate Enrollment Requests and select All Tasks → Export.
   3. Click Next.
   4. Select Yes, export the private key and click Next.
   5. Select Personal Information Exchange – PKCS #12 (.PFX) and select the Include all certificates in the certification path if possible check box. Click Next.
   6. Set a password for your certificate and click Next.
   7. Specify the name and the location for the certificate file. Click Next.
   8. Check the specified parameters and click Finish.
   9. Wait until the certificate is successfully exported and click OK.

   The certificate (private key) will be exported to the System32 folder in the .pfx format.

5. Import the certificate:
   Run the commands below in PowerShell.
   1. Run the command:
      
      certutil.exe -importPFX <private key name>.pfx noExport
   2. Enter the password that was set earlier for your certificate.

      Information about the certificate you are adding will be displayed:

      # Certificate "<Common Name of the imported certificate>" added to store
      # CertUtil: -importPFX command completed successfully
   3. Insert the certificate blueprint into the tp variable:
      
      $tp = (ls Cert:\LocalMachine\my | WHERE {$_.Subject -match "CN="<Common Name of the imported certificate>" } | Select -First 1).Thumbprint

      The blueprint id will appear on the screen. It will be generated individually for each device.

   4. Allow using the certificate for the RDP service via the command:
      
      wmic /namespace:\\root\CIMV2\TerminalServices PATH Win32_TSGeneralSetting Set SSLCertificateSHA1Hash="$tp"

      The screen will display a message indicating that the RDP service certificate was updated:

      # Updating property(s) of '\\server\\root\\CIMV2\TerminalServices:Win32_TSGeneralSetting.TerminalName="RDP-Tcp" '
      # Property(s) update successful

1. Open Control Panel → System → Advanced system settings.
2. Click Remote → Remote Desktop.
3. Select Allow connections only from computers running Remote Desktop with Network Level Authentication (more secure).
4. Restart your computer for the updated system settings to take effect and for Kaspersky Thin Client to start working with Windows 7.

1. Download the KB2574819 update from the Microsoft website and run it.
2. Download the Remote Desktop Protocol (RDP) 8.0 update from the Microsoft website and run it.

1. Press +R to open the Run window.
2. Type gpedit.msc and click OK.

The Local Group Policy Editor window opens.

3. Go to Computer configuration → Administrative Templates → Windows Components.
4. Select Remote Desktop Services → Remote Desktop Session Host.
5. Select Remote Session Environment and click Enable Remote Desktop Protocol 8.0.

6. Select Enabled and click OK.

7. Press +R to open the Run window again.
8. Type cmd and click OK.

The Command line opens.

9. Run the gpupdate /force command and press Enter.