Installing Kaspersky Embedded Systems Security for Windows via Active Directory group policies

You can install Kaspersky Embedded Systems Security for Windows on several protected devices via the Active Directory group policy. You can install the Application Console the same way.

The protected devices on which you want to install Kaspersky Embedded Systems Security for Windows or the Application Console must be in the same domain and a single organizational unit.

The operating systems on the protected devices on which you want to install Kaspersky Embedded Systems Security for Windows using the policy must be of the same bitness (32-bit or 64-bit).

You must have domain administrator rights.

To install Kaspersky Embedded Systems Security for Windows, use the ess_x86.msi or ess_x64.msi installation package. To install the Application Console, use the esstools.msi installation package.

Detailed information about the use of Active Directory group policies is provided in the documentation supplied by Microsoft.

To install Kaspersky Embedded Systems Security for Windows (or the Application Console):

1. Save the msi file corresponding to the bitness (32- or 64-bit) of the installed version of the Microsoft Windows operating system in the shared folder on the domain controller.
2. Save the key file in the same public folder on the domain controller.
3. In the same shared folder on the domain controller, create an install_props.json file that contains the lines below. This signifies that you agree to the terms of the End User License Agreement and Privacy Policy.

   {

   "EULA": "1",

   "PRIVACYPOLICY": "1"

   }

4. On the domain controller create a new policy for the group that the protected devices belong to.
5. Using the Group Policy Object Editor, create a new installation package in the Computer Configuration node. Specify the path to the msi file for Kaspersky Embedded Systems Security for Windows (or Application Console) in UNC (Universal Naming Convention) format.
6. Select the Windows Installer's Always install with elevated privileges check box in both the Computer Configuration node and in the User Configuration node of the selected group.
7. Apply the changes using the gpupdate / force command.

Kaspersky Embedded Systems Security for Windows will be installed on the protected devices of the group after they have been restarted.