deployment kaspersky antivirus

dear all
we bought kaspersky business space edition for 20 users
i installed the administration kit on my server and i tried to
deploy the agent and anti-virus from administration kit but
we failed to do that because installer have to go to PC and
uncheck the file and printer sharing from windows firewall settings page and uncheck use simple file sharing from folder options page manually that mean if the customer has 100 workstations he has to go to each PC and enable above two features manually is that correct please advice?
please advice
ashraf2002Asked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
Aamir SarfarazIT ManagerCommented:

You can change the firewall settings via Group Policy. Please go through with this article, it will help in you.
 
http://technet.microsoft.com/en-us/library/bb490626.aspx

NOTE: DON'T FORGET TO CLICK "HELPFUL COMMENTS YES"
0
What Kind of Coding Program is Right for You?

There are many ways to learn to code these days. From coding bootcamps like Flatiron School to online courses to totally free beginner resources. The best way to learn to code depends on many factors, but the most important one is you. See what course is best for you.

 
robbeCommented:
GPO is the way to go. Alternativly you can use a script to open the firewall. More info can be found here: http://www.activexperts.com/activmonitor/windowsmanagement/scripts/networking/windowsfirewall/#EFPSTWF.htm

The script can also be pushed trough GPO but i'd suggest to use GPO to open the firewall.
Set objFirewall = CreateObject("HNetCfg.FwMgr")
Set objPolicy = objFirewall.LocalPolicy.CurrentProfile

Set colServices = objPolicy.Services
Set objService = colServices.Item(0)
objService.Enabled = TRUE

Open in new window

0
 
ashraf2002Author Commented:
but i can use group policy in domain environment only what about work-group?
0
 
ashraf2002Author Commented:
dear robbe
could you please help with the steps to built script and use it?
best regards
0
 
TheMakCommented:
Also enable remote administration in Computer Configuration -> Administrative Templates -> Network -> Network Connections -> Windows Firewall
By default simple file sharing is disabled when a XP Pro computer is joined to the
domain. There is a security policy/security option that
you could try to configure. It is for " network access:sharing and security
model for local accounts ". Configure it to be classic -local users. You
logon to a known secure XP Pro domain member as a domain admin and use the Group Policy edit
mmc snapin and browse to the domain level GPO you want to configure you can
do it that way and it should apply to XP Pro computers within the scope of
influence of the policy you modify. It may already be set to "classic"
Regards


0
 
robbeCommented:
just copy the contents op the script in a VBS file and run it on the clients. If you are in a workgroup setup you will need to get the script running on each pc. You could create a script to copy it to the startup folder in de startmenu for the user of each pc.  There is a script here to run scripts against multiple computers: http://gallery.technet.microsoft.com/ScriptCenter/en-us/a29407e2-dd64-4311-8f7c-796733959240

Also note that if you would like to call the script from a batchfile you can have to use 'cscript <name of the file>'
0
 
TheMakCommented:
but i can use group policy in domain environment only what about work-group?  I think standard profile will make your group policy working for workgroup computers.
 
Just A Thought
0
 
ashraf2002Author Commented:
dear all
is it possible to disable simple file sharing using GPO please advice ?
best regards
0
 
TheMakCommented:
Title: Disable Simple File Sharing Question: How do I disable "Simple File Sharing" on Windows XP machines through Group Policy?  
http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Q_22646619.html
0
 
ashraf2002Author Commented:
dear all
i need the steps to achieve disable simple file sharing using GPO in domain environment is that possible please advice?
best regards
0
 
TheMakCommented:
I think In domain environment by default simple file sharing is disabled. Check your domain users and let me know if dimple file sharing is not disabled.
Regards,
 
0
 
ashraf2002Author Commented:
i checked the users but it is still enabled
0
 
TheMakCommented:
Follow the article link which I have given ealier, anyhow If you like you can copy this in notepad and save that notepad file with .adm extension and import that .adm extension file in Group policy on server side. After importing you will see custom Policy settings\windows explorer under computer configuration\Administrative templates..... Right click the custom policy and select view--> filters and uncheck the box "only show policy settings that can be fully managed" and press "OK".... Now you will see that "Simple File Sharing Option"..
 
CLASS MACHINE
CATEGORY !!category
CATEGORY !!WindowsExplorer
POLICY !!SimpleFileSharing
KEYNAME "SYSTEM\CurrentControlSet\Control\Lsa"
EXPLAIN !!SimpleFileSharing_Explain
VALUENAME "ForceGuest"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
END CATEGORY
END CATEGORY
[strings]
category = "Custom Policy Settings"
SimpleFileSharing = "Simple File Sharing"
WindowsExplorer = "Windows Explorer"
SimpleFileSharing_Explain = "Enable to enable Use simple file sharing.
Disable to disable Use simple file sharing."
 
0
 
TheMakCommented:
Sorry forgot to attach the screen shot of the policy,

Simple-File-Sharing-GPO.JPG
0
 
ashraf2002Author Commented:
dear all
could you please advice how can we import the *.adm file to GPO?
best regards.
0
 
TheMakCommented:
Right click on Administrative Templates--> Select Add and remove Templates-->click on ADD and then browse and give the location of the .ADM template and select the .ADM file and click open...... then close the window and you will see the custom policy.
 
Regards,
 
0
 
ashraf2002Author Commented:
dear all

we copy the commands that you given in above solution

CLASS MACHINE
CATEGORY !!category
CATEGORY !!WindowsExplorer
POLICY !!SimpleFileSharing
KEYNAME "SYSTEM\CurrentControlSet\Control\Lsa"
EXPLAIN !!SimpleFileSharing_Explain
VALUENAME "ForceGuest"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
END CATEGORY
END CATEGORY
[strings]
category = "Custom Policy Settings"
SimpleFileSharing = "Simple File Sharing"
WindowsExplorer = "Windows Explorer"
SimpleFileSharing_Explain = "Enable to enable Use simple file sharing.
Disable to disable Use simple file sharing."

and save it with .adm extension and when we add the file .adm to the gruop policy there is an error message appear.
see attached file.
please advise.

best regards.
erroe-add-policy.jpg
0
 
robbeCommented:
Can you try this:

CLASS MACHINE
CATEGORY !!MyCategory
CATEGORY !!WindowsExplorer
POLICY !!SimpleFileSharing
KEYNAME "SYSTEM\CurrentControlSet\Control\Lsa"
EXPLAIN !!SimpleFileSharing_Explain
VALUENAME "ForceGuest"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
END CATEGORY
END CATEGORY
[strings]
MyCategory = "Custom Policy Settings"
SimpleFileSharing = "Simple File Sharing"
WindowsExplorer = "Windows Explorer"
SimpleFileSharing_Explain = "Enable to enable Use simple file sharing.
Disable to disable Use simple file sharing."
0
 
TheMakCommented:
I don't know why its giving problem, anyhow I got some thing easier then what you have above,
Disabling Simple File Sharing on Windows computers

Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options
-> "Network Access: Sharing and security model for local accounts": "Classic - local users authenticate as themselves"  
http://www.sophos.com/support/knowledgebase/article/12837.html 
Regards,
0
 
ashraf2002Author Commented:
dear all,

we have aproblem when we want to remove mcafee antiviruse from windows 7 using administration kit and the follwing message is appeare and after we install the network agent manually in target computer. the message is : " the computer is proably disconnected from the network cannot download the deinstallation tool using networkagent because is not installed on target computer ".

please advice.

regards.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.