Installing an application through Active Directory group policies

Kaspersky Security Center allows you to install Kaspersky Lab applications by using Active Directory group policies.

You can install applications using Active Directory group policies only by using installation packages that include Network Agent.

To install an application using Active Directory group policies:

  1. Run the creation of a group remote installation task or a remote installation task for specific devices.
  2. In the Settings window of the New Task Wizard, select the Assign the package installation in the Active Directory group policies check box.
  3. Run the created remote installation task manually or wait for its scheduled start.

The following remote installation sequence starts:

  1. When the task is running, the following objects are created in each domain that includes any client devices from the specified set:
    • Group policy under the name Kaspersky_AK{GUID}
    • Kaspersky_AK{GUID} security group that corresponds to the group policy This security group includes client devices covered by the task. The content of the security group defines the scope of the group policy.
  2. In this case, applications are installed on client devices directly from Share, that is, the shared network folder of the application. In the Kaspersky Security Center installation folder, an auxiliary nested folder will be created that contains the .msi file for the application to be installed.
  3. When new devices are added to the task scope, they are added to the security group after the next task start. If the Run missed tasks check box is selected in the task schedule, devices are added to the security group immediately.
  4. When devices are deleted from the task scope, they are deleted from the security group after the next task start.
  5. When a task is deleted from Active Directory, the policy, the link to the policy, and the corresponding security group are deleted.

If you want to apply another installation scheme using Active Directory, you can configure the required settings manually. For example, this may be required in the following cases:

The following options for using an alternative installation scheme through Active Directory are available:

Page top