Help - Search - Members
Full Version: Policy enforcement Problem
Kaspersky Lab Forum > English User Forum > Protection for Small and Medium Businesses
Kaspersky_User01
Morning all,

I have a issue with an import policy not being enforced on workstation machines. It's the same policy i have exported an imported to other remote admin servers and it's been fine. I have tried to install kaspersky on two new machines and it just doens't pick the policy up and it doesn't say pending for 0 machines.

Anything I can look for?

Thanks,
Tybilly
Hello,

Pay attention that imported policies are disabled by default, so you need to configure them as "Active policy" manually in the general tab.

Also check that your policy is defined for the right product.
Kaspersky_User01
QUOTE(Tybilly @ 26.02.2009 10:38) *
Hello,

Pay attention that imported policies are disabled by default, so you need to configure them as "Active policy" manually in the general tab.

Also check that your policy is defined for the right product.


Thanks mate,

I have enabled it but it just doesnt apply for this one machine. I will double check I am trying to push out the right product etc.

Cheers,
Kaspersky_User01
Hi all,

I am still having this problem at just one of our sites, I push out the network agent via the admin kit to the workstation and then push the av out to the client machines and reboot the machine but I can then no longer connect to them as the firewall is switched on as the workstations aren't picking up the policy.

I have tried three machines now and they just dont show up in the enforcement tabe in the policy. The three servers have picked up the server policy ok but the clients wont. I have tried making a new policy but still they wont pick up the policy. The policy I am trying to use I have exported and used on all 6 sites with different admin servers.

I haven't had this problem at any other site, I just done exactly the same, push network agent then push av and reboot and they pick up the policy.

I have even installed Admin kit on another server and set it up all over again but no luck.....

Has anyone got any suggestions that could help me at all please? I am doing all this remotly and it's causing an issue as once the reboot happens the firewall in kas is on and I can no longer connect to the machine.

Many thanks,
Simon
Raymond Hartneck
1. On one of those hosts open the command line and run C:\Program Files\Kaspersky Lab\Network Agent\klnagchk.exe
1.a. This will show you if your agent is able to connect to the server or not

2. If it is unable, try to run : C:\Program Files\Kaspersky Lab\Network Agent\klmover.exe -address <serverAddress or serverIP>
2.a This will reconfigure your network agent using your server address or serverIP

Is there anyone onsite that can assit you? Maybe just add an exclusion locally so that you can atleast connect to the PC.
Kaspersky_User01
QUOTE(Raymond Hartneck @ 3.03.2009 16:07) *
1. On one of those hosts open the command line and run C:\Program Files\Kaspersky Lab\Network Agent\klnagchk.exe
1.a. This will show you if your agent is able to connect to the server or not

2. If it is unable, try to run : C:\Program Files\Kaspersky Lab\Network Agent\klmover.exe -address <serverAddress or serverIP>
2.a This will reconfigure your network agent using your server address or serverIP

Is there anyone onsite that can assit you? Maybe just add an exclusion locally so that you can atleast connect to the PC.


Thanks for your help, I will try that and see what happens and post the outcome.

I will call site and see if I can get someone to run that.


Cheers,
Si
Kaspersky_User01
QUOTE(Raymond Hartneck @ 3.03.2009 16:07) *
1. On one of those hosts open the command line and run C:\Program Files\Kaspersky Lab\Network Agent\klnagchk.exe
1.a. This will show you if your agent is able to connect to the server or not

2. If it is unable, try to run : C:\Program Files\Kaspersky Lab\Network Agent\klmover.exe -address <serverAddress or serverIP>
2.a This will reconfigure your network agent using your server address or serverIP

Is there anyone onsite that can assit you? Maybe just add an exclusion locally so that you can atleast connect to the PC.

bravo.gif

Top man! It works a treat if I set the ip via the send command. Why wouldn't it get this to start with?

Thanks very much!

Si
Raymond Hartneck
There is something wrong with the way your DNS is handled between sites. I'm assuming that your other site is on a different domain but within the same forest. I have the same problem with one of my KAK's. I can connect to it via the hostname with a remote tool like Dameware or Remote Desktop, but for some reason my KAK will not connect to it unless I use the IP. *shrug* I just gave up messing with it, as long as it works I don't really care.
Kasperskyholic
Simplily if your windows firewall is enabled, just add 15000 UDP Port to exception & from adminkit right clik the client computer then syncronize
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.