ashraf2002
asked on
Kaspersky Administration Kit with Active Directory
Dear All,
One of our customers has Kaspersky Administration Kit - KAD server on his existing environment, and it's as followed:
There are three servers installed in each on a separate Active Directory and each one of them in different subnet:
Server Name Subnet
Application Server – App.pro 10.100.0.0
Accounting Server – Ac.cc 172.23.0.0
Internet Server – Int.net 172.28.0.0
The Client Computers subnets:
172.17.0.0
172.18.0.0
172.20.0.0
172.23.0.0
172.26.0.0
172.27.0.0
172.21.0.0
Every client is part of one of the ADs and those AD are not connected with each other directly, however all servers and clients can access the Internet Server and KAD which is on the same subnet of Internet Server.
The Costumer needs to deploy the netagent & Kaspersky Workstation on all the client computers from KAD because he was installing them on the client computers manually.
The problem is that we can deploy netagent & Kaspersky Workstation to clients that are part of Int.net that KAD is part of only. We need to deploy to the other ADs from the same KAD.
One of our customers has Kaspersky Administration Kit - KAD server on his existing environment, and it's as followed:
There are three servers installed in each on a separate Active Directory and each one of them in different subnet:
Server Name Subnet
Application Server – App.pro 10.100.0.0
Accounting Server – Ac.cc 172.23.0.0
Internet Server – Int.net 172.28.0.0
The Client Computers subnets:
172.17.0.0
172.18.0.0
172.20.0.0
172.23.0.0
172.26.0.0
172.27.0.0
172.21.0.0
Every client is part of one of the ADs and those AD are not connected with each other directly, however all servers and clients can access the Internet Server and KAD which is on the same subnet of Internet Server.
The Costumer needs to deploy the netagent & Kaspersky Workstation on all the client computers from KAD because he was installing them on the client computers manually.
The problem is that we can deploy netagent & Kaspersky Workstation to clients that are part of Int.net that KAD is part of only. We need to deploy to the other ADs from the same KAD.
d3ath5tar
Are the domains in the same forest/trusted?
ASKER
No, each domain is in different forest/trust and there is no connection between them. VLAN is implemented as well. However all PCs & Servers can access and connect to subnet of the internet domain.
OK if there is no domain trust then you will have to have a task account in each domain and specify that as the deployment account within your KAV server. Each domain will require its own set of tasks. You should still be able to scan the subnets within KAV to pickup the machines....
ASKER
Ok, you mean that I should create a task for each domain and specify the account with administration right in that domain when deploying the netagent.
If that so, He told me that he did something like this. He created a task for deploying the netagent for different PCs in different domains and specifies the administration account for every domain, but it didn't work for him.
If that so, He told me that he did something like this. He created a task for deploying the netagent for different PCs in different domains and specifies the administration account for every domain, but it didn't work for him.
What OS are you installing from/to? Can you get a screen shot of the issue?
ASKER
He is installing from Windows Server 2003 to win XP and Win 7 ....
About screen shot, I'll contact him and see what can I do about it..
About screen shot, I'll contact him and see what can I do about it..
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Solve the problem with costumer..