Solved

deployment kaspersky antivirus

Posted on 2010-08-18
22
1,776 Views
Last Modified: 2013-11-22
dear all
we bought kaspersky business space edition for 20 users
i installed the administration kit on my server and i tried to
deploy the agent and anti-virus from administration kit but
we failed to do that because installer have to go to PC and
uncheck the file and printer sharing from windows firewall settings page and uncheck use simple file sharing from folder options page manually that mean if the customer has 100 workstations he has to go to each PC and enable above two features manually is that correct please advice?
please advice
0
Comment
Question by:ashraf2002
  • 8
  • 8
  • 4
  • +2
22 Comments
 
LVL 16

Expert Comment

by:Carol Chisholm
Comment Utility
0
 
LVL 2

Expert Comment

by:aamsoh
Comment Utility

You can change the firewall settings via Group Policy. Please go through with this article, it will help in you.
 
http://technet.microsoft.com/en-us/library/bb490626.aspx

NOTE: DON'T FORGET TO CLICK "HELPFUL COMMENTS YES"
0
 
LVL 6

Expert Comment

by:robbe
Comment Utility
GPO is the way to go. Alternativly you can use a script to open the firewall. More info can be found here: http://www.activexperts.com/activmonitor/windowsmanagement/scripts/networking/windowsfirewall/#EFPSTWF.htm

The script can also be pushed trough GPO but i'd suggest to use GPO to open the firewall.
Set objFirewall = CreateObject("HNetCfg.FwMgr")

Set objPolicy = objFirewall.LocalPolicy.CurrentProfile



Set colServices = objPolicy.Services

Set objService = colServices.Item(0)

objService.Enabled = TRUE

Open in new window

0
 

Author Comment

by:ashraf2002
Comment Utility
but i can use group policy in domain environment only what about work-group?
0
 

Author Comment

by:ashraf2002
Comment Utility
dear robbe
could you please help with the steps to built script and use it?
best regards
0
 
LVL 8

Expert Comment

by:TheMak
Comment Utility
Also enable remote administration in Computer Configuration -> Administrative Templates -> Network -> Network Connections -> Windows Firewall
By default simple file sharing is disabled when a XP Pro computer is joined to the
domain. There is a security policy/security option that
you could try to configure. It is for " network access:sharing and security
model for local accounts ". Configure it to be classic -local users. You
logon to a known secure XP Pro domain member as a domain admin and use the Group Policy edit
mmc snapin and browse to the domain level GPO you want to configure you can
do it that way and it should apply to XP Pro computers within the scope of
influence of the policy you modify. It may already be set to "classic"
Regards


0
 
LVL 6

Expert Comment

by:robbe
Comment Utility
just copy the contents op the script in a VBS file and run it on the clients. If you are in a workgroup setup you will need to get the script running on each pc. You could create a script to copy it to the startup folder in de startmenu for the user of each pc.  There is a script here to run scripts against multiple computers: http://gallery.technet.microsoft.com/ScriptCenter/en-us/a29407e2-dd64-4311-8f7c-796733959240

Also note that if you would like to call the script from a batchfile you can have to use 'cscript <name of the file>'
0
 
LVL 8

Expert Comment

by:TheMak
Comment Utility
but i can use group policy in domain environment only what about work-group?  I think standard profile will make your group policy working for workgroup computers.
 
Just A Thought
0
 

Author Comment

by:ashraf2002
Comment Utility
dear all
is it possible to disable simple file sharing using GPO please advice ?
best regards
0
 
LVL 8

Expert Comment

by:TheMak
Comment Utility
Title: Disable Simple File Sharing Question: How do I disable "Simple File Sharing" on Windows XP machines through Group Policy?  
http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Q_22646619.html
0
 

Author Comment

by:ashraf2002
Comment Utility
dear all
i need the steps to achieve disable simple file sharing using GPO in domain environment is that possible please advice?
best regards
0
Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

 
LVL 8

Expert Comment

by:TheMak
Comment Utility
I think In domain environment by default simple file sharing is disabled. Check your domain users and let me know if dimple file sharing is not disabled.
Regards,
 
0
 

Author Comment

by:ashraf2002
Comment Utility
i checked the users but it is still enabled
0
 
LVL 8

Expert Comment

by:TheMak
Comment Utility
Follow the article link which I have given ealier, anyhow If you like you can copy this in notepad and save that notepad file with .adm extension and import that .adm extension file in Group policy on server side. After importing you will see custom Policy settings\windows explorer under computer configuration\Administrative templates..... Right click the custom policy and select view--> filters and uncheck the box "only show policy settings that can be fully managed" and press "OK".... Now you will see that "Simple File Sharing Option"..
 
CLASS MACHINE
CATEGORY !!category
CATEGORY !!WindowsExplorer
POLICY !!SimpleFileSharing
KEYNAME "SYSTEM\CurrentControlSet\Control\Lsa"
EXPLAIN !!SimpleFileSharing_Explain
VALUENAME "ForceGuest"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
END CATEGORY
END CATEGORY
[strings]
category = "Custom Policy Settings"
SimpleFileSharing = "Simple File Sharing"
WindowsExplorer = "Windows Explorer"
SimpleFileSharing_Explain = "Enable to enable Use simple file sharing.
Disable to disable Use simple file sharing."
 
0
 
LVL 8

Expert Comment

by:TheMak
Comment Utility
Sorry forgot to attach the screen shot of the policy,

Simple-File-Sharing-GPO.JPG
0
 

Author Comment

by:ashraf2002
Comment Utility
dear all
could you please advice how can we import the *.adm file to GPO?
best regards.
0
 
LVL 8

Expert Comment

by:TheMak
Comment Utility
Right click on Administrative Templates--> Select Add and remove Templates-->click on ADD and then browse and give the location of the .ADM template and select the .ADM file and click open...... then close the window and you will see the custom policy.
 
Regards,
 
0
 

Author Comment

by:ashraf2002
Comment Utility
dear all

we copy the commands that you given in above solution

CLASS MACHINE
CATEGORY !!category
CATEGORY !!WindowsExplorer
POLICY !!SimpleFileSharing
KEYNAME "SYSTEM\CurrentControlSet\Control\Lsa"
EXPLAIN !!SimpleFileSharing_Explain
VALUENAME "ForceGuest"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
END CATEGORY
END CATEGORY
[strings]
category = "Custom Policy Settings"
SimpleFileSharing = "Simple File Sharing"
WindowsExplorer = "Windows Explorer"
SimpleFileSharing_Explain = "Enable to enable Use simple file sharing.
Disable to disable Use simple file sharing."

and save it with .adm extension and when we add the file .adm to the gruop policy there is an error message appear.
see attached file.
please advise.

best regards.
erroe-add-policy.jpg
0
 
LVL 6

Expert Comment

by:robbe
Comment Utility
Can you try this:

CLASS MACHINE
CATEGORY !!MyCategory
CATEGORY !!WindowsExplorer
POLICY !!SimpleFileSharing
KEYNAME "SYSTEM\CurrentControlSet\Control\Lsa"
EXPLAIN !!SimpleFileSharing_Explain
VALUENAME "ForceGuest"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
END CATEGORY
END CATEGORY
[strings]
MyCategory = "Custom Policy Settings"
SimpleFileSharing = "Simple File Sharing"
WindowsExplorer = "Windows Explorer"
SimpleFileSharing_Explain = "Enable to enable Use simple file sharing.
Disable to disable Use simple file sharing."
0
 
LVL 8

Expert Comment

by:TheMak
Comment Utility
I don't know why its giving problem, anyhow I got some thing easier then what you have above,
Disabling Simple File Sharing on Windows computers

Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options
-> "Network Access: Sharing and security model for local accounts": "Classic - local users authenticate as themselves"  
http://www.sophos.com/support/knowledgebase/article/12837.html
Regards,
0
 
LVL 6

Accepted Solution

by:
robbe earned 500 total points
Comment Utility
0
 

Author Comment

by:ashraf2002
Comment Utility
dear all,

we have aproblem when we want to remove mcafee antiviruse from windows 7 using administration kit and the follwing message is appeare and after we install the network agent manually in target computer. the message is : " the computer is proably disconnected from the network cannot download the deinstallation tool using networkagent because is not installed on target computer ".

please advice.

regards.
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

PREFACE The purpose of this guide is to provide information to successfully add specific IIS 7.0 role services for the Symantec Endpoint Protection Manager (SEPM) to function properly when installed on Windows 2008. AUDIENCE Information Technol…
I recently had to create a utility which aim is to update McAfee's Virusscan and that had to be launched from a command line. I thought I’d share my experience with you. Why is it useful to be able to update an Antivirus from the command line?…
Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now