I am getting so frustrated with KL. After finally tracing our performance issues to a fault in enforcing our server Policy I am running into the same issue with our workstations.

On three workstations I had removed the Network Agent and AV 6.0.3.387 and installed 6.0.4.1165 locally (Tech Release 2) per our tech support person. After finding the problem on the server I removed 6.0.4.1165 and re-deployed 6.0.3.387 from the Admin Kit, with "Use Network Agent" checked. I have a total of three major problems:

1. The workstations where the application was re-deployed do not have the Policy Settings applied. There are options for locking/unlocking and then some "Advanced" settings which do not many any sense to me. Was this interface written by someone who speaks English as their first language?

2. Looking at the properties of these workstations (under my Group), it says "Antivirus application not installed", and under Applications it shows "Kaspersky Network Agent" as Deleted. Is this why I am having the first problem? In any event, how do I get this re-set? BTW, the Results of the re-deployment task show that it was successful on these three workstations(?!!)

3. I have three workstations that DO show that the Network Agent and AV are installed. However, if I look at the Properties (from the Group summary page) two of them say "This computer has not been scanned in a very long time", yet if I look at the "Daily Scan" in the Group Task list, it shows that they all completed successfully this morning. They are all in the same group with the same Policy.

I am not a newcomer to complicated software. In addition to using competitive "enterprise" type AV applications I have installed and maintained our SBS, a separate SQL Server and three ERP systems plus all the every day things for over 15 years. AV is not rocket science. I don't expect it to install and configure itself, but I also didn't expect to spend 40 hours on it for an 8-10 computer small office. Am I expecting too much of this software?

Aha! Found an English explanation.

Yes, you either have to have a DEGREE or do lots of reading! Actually, you pretty well have to do the reading and ask a lot of questions either in here or via Tech Support.

I too have been down the frustration roads, but once you get a GRIP on it, it's really pretty easy to work with.

You seem to be in about the same situation that I was in on variuos items.

#1 - If you PRESS the LOCK on the settings, it basically means that it is REQUIRED for all PC's in that specific GROUP and cannot be changed except through the policy itself. (That's my non-technical translation of it) Also, you will always need the AGENT installed or you will not be able to control the computer. I recommend that you always select DEPLOY AGENT when you install KASPERSKY onto a server or workstation. There is a setting in the deployment where you can tell it to NOT INSTALL if it is already installed.

#2 - If you do not have an agent on the computer, it should have the default POLICY from the top-level group enforced. Simply install the network agent onto the system and move it into it's respective group and it should pick up the policy applied to that specific group.

#3 - This is kind of like a hidden setting. If you RIGHT CLICK on their group, go to PROPERTIES, click on the COMPUTER STATUS tab you can define your own settings for what is critical or warning and so forth.

#3 part 2 - Also, you need to define a SCAN TASK (On Demand Scan Task) for your group too. Not only for the GROUP, but if you have different computers in the group such as SERVERS and workstations, you need to define a TASK for each of the types. Make sure that you select MY COMPUTER in the scan policy - if you do not want NETWORK drives, ucheck that. According to Kaspersky and my testing, if you select MY COMPUTER and uncheck NETWORK, it will not scan mapped drives. I also recommend unchecking EMAIL if you are using MS Exchange. This is a preference on my part because the scans will take forever if the mailbox is fairly large.

I have mine setup to scan - MY COMPUTER, MY DOCUMENTS, SYSTEM MEMORY, STARTUP OBJECTS, ALL HARD DRIVES. This will definitely allow the scan to be recognized and make the "NOT SCANNED IN A LONG TIME" disappear. Remember that this is also influenced by the first part of #3 too.

Like I said, I am new to this also. I'm sure there are others who can explain it better than I can. However, I hope this helps a little.

Don't get frustrated, it gets easier as you go along!