cweeklund
27.10.2009 19:15
Yesterday I upgraded (or tried to upgrade) our admin kit to 8.0 and during the install got an error that said something about not being able to add the service account. Unfortunately I clicked OK and didn't get to make note of the full error. I did catch the name of the file it asked me to run manually - that was klsrvswch.exe. So, I did try to manually run that file, which asks for the service account I'm using, so I put in the account I used to use, click next and it appears to hang for a while, then errors out "System Error 0x6. The handle is invalid."
I've rebooted, but to no avail. Any thoughts?
Kappa Tech
30.10.2009 16:50
I'm getting the exact same error.
I am going from Admin Kit 6 to Admin Kit 8.
Server is Windows 2003 R2 64bit.
Admin kit 6 installs fine on this server, so not sure why 8 is having issues.
A. Kabanov
30.10.2009 17:21
QUOTE(cweeklund @ 27.10.2009 19:15)

Yesterday I upgraded (or tried to upgrade) our admin kit to 8.0 and during the install got an error that said something about not being able to add the service account. Unfortunately I clicked OK and didn't get to make note of the full error. I did catch the name of the file it asked me to run manually - that was klsrvswch.exe. So, I did try to manually run that file, which asks for the service account I'm using, so I put in the account I used to use, click next and it appears to hang for a while, then errors out "System Error 0x6. The handle is invalid."
I've rebooted, but to no avail. Any thoughts?
Please send Administration Server/Console installation logs (please send all files)
http://support.kaspersky.com/faq/?qid=208280736. And please run klsrvswch.exe again in command line in format : klsrvswch.exe -tl 5», reproduce problem and attach file $klsrvswch-KLSRVSWCH.log. Thanks
Kappa Tech
30.10.2009 17:31
QUOTE(A. Kabanov @ 30.10.2009 10:21)

Please send Administration Server/Console installation logs (please send all files)
http://support.kaspersky.com/faq/?qid=208280736. And please run klsrvswch.exe again in command line in format : klsrvswch.exe -tl 5», reproduce problem and attach file $klsrvswch-KLSRVSWCH.log. Thanks
Where would we find these "Administration Server/Console installation logs"?
cweeklund
30.10.2009 18:16
I called support and we couldn't get it resolved. I ended up having to uninstall everything, then reinstall again and push out the agent to all the PC's to get them connected to the new admin kit.
Moral of the story: make sure you run klbackup before you upgrade.
Kappa Tech
30.10.2009 18:33
Here you go. The install log file is huge for just a text log file, so I seperated it out.
First image I get when installing Admin 8.
Second image I get trying to start the admin server service.
Third image I get when running klsrvswitch and using local system account.
Kappa Tech
30.10.2009 18:34
Here is the last install log.
Kappa Tech
30.10.2009 18:35
QUOTE(cweeklund @ 30.10.2009 11:16)

I called support and we couldn't get it resolved. I ended up having to uninstall everything, then reinstall again and push out the agent to all the PC's to get them connected to the new admin kit.
Moral of the story: make sure you run klbackup before you upgrade.
I've tried the uninstall totally and I still can get admin 8 to install. Was there anything different you did to get it working?
Hello Kappa Tech,
according to the trace files you've provided there is some trouble with the account you're using as service account. Сonsidering you've already uninstalled totally and now you're performing a clean install, try to create new account with local administrator rights and try installing using it as service account. Please let me know about the results. If the installation fails again, please provide caadminkit.log and msiadminkit.log (both can be found in %tmp% folder).
Kappa Tech
2.11.2009 16:57
QUOTE(behemoth @ 2.11.2009 06:35)

Hello Kappa Tech,
according to the trace files you've provided there is some trouble with the account you're using as service account. Сonsidering you've already uninstalled totally and now you're performing a clean install, try to create new account with local administrator rights and try installing using it as service account. Please let me know about the results. If the installation fails again, please provide caadminkit.log and msiadminkit.log (both can be found in %tmp% folder).
This is a backup domain controller. Local system account is the only local account I can use.
I do keep getting this error in the event log when I try to run klsrvswitch.exe.
"DoPingServer__GetKeysHashes failed: #1181 (2) System error 0x2 (The system cannot find the file specified.)"
When I install from fresh, I get the same problem. Does this not work on domain controllers?
Just for the heck of it, I ran the restore app to restore the admin server on admin 8 and I get this:
CODE
Verifying paths...OK
Opening SCM...OK
Setting up...OK
Restoring Administration Server settings...Error - 1181 ('System error 0x6 (The handle is invalid.)')
jmoncrieffe
3.11.2009 01:58

I think I gambled and lost with this one!!!
We installed AK 8, and spent the last 3 days trying to stabilise it enough to roll out KAV 6.
We CANNOT GET THIS THING TO WORK consistenly with 1 modification to the default installtion options.
IT WILL NOT EVEN DO 1 machine.
Our steps were.
A. Place AK is on "IT Management Server". This machine is for IT use only...
B. The File Share = "KLSHARE$" is on File Server. All users can talk to it but they cannot modify or delete folders and some files.
C. The User used to deploy AK 8 = DOM ADMIN.
D. MDAC 2.8 installed first. System rebooted and check proved it is installed and working well.
E. We used MS SQL EXpress included with AK 8. 300MB+ download with Microsoft Authentication only.
THE ONLY CHANGE to Kaspersky default install = the KLSHARE placed elsewhere.
1. MOST ANNOYING PROBLEM = AK 8 cannot create new tasks.... we get a permission denied ...
I reinstalled and put KLSHARE on IT server in default location AND HAD TO INSTALL FILE SHARING so user can get to NLAGENT.
This worked but I cannot leave KLSHARE THERE... limited space.
2. Creating new task worked with all recommended installation options but Licensing Report was wrong. Reports were WAY OFF - saying I had more licenses that I had.
3. VERY TROUBLESOME ISSUE = Policy with password to change KAV on user station not applied. We do not wish for our users to turn Kaspersky off.
What's up Kaspersky?
Do you have docs and fixes for these issues?
I downloaded and read 300+ pages of manuals and docs.... None solved these issues. We followed all the instructions except where given a choice to place the KLSHARE elsewhere.
When can I talk to a tech?
QUOTE(Kappa Tech @ 2.11.2009 16:57)

This is a backup domain controller. Local system account is the only local account I can use.
I do keep getting this error in the event log when I try to run klsrvswitch.exe.
"DoPingServer__GetKeysHashes failed: #1181 (2) System error 0x2 (The system cannot find the file specified.)"
When I install from fresh, I get the same problem. Does this not work on domain controllers?
Just for the heck of it, I ran the restore app to restore the admin server on admin 8 and I get this:
CODE
Verifying paths...OK
Opening SCM...OK
Setting up...OK
Restoring Administration Server settings...Error - 1181 ('System error 0x6 (The handle is invalid.)')
Can you install AK under domain administrator account and then change the account to local system?
BTW, if you're using Windows 2008 you cannot run under local system.
QUOTE(jmoncrieffe @ 3.11.2009 01:58)


I think I gambled and lost with this one!!!
We installed AK 8, and spent the last 3 days trying to stabilise it enough to roll out KAV 6.
We CANNOT GET THIS THING TO WORK consistenly with 1 modification to the default installtion options.
IT WILL NOT EVEN DO 1 machine.
Our steps were.
A. Place AK is on "IT Management Server". This machine is for IT use only...
B. The File Share = "KLSHARE$" is on File Server. All users can talk to it but they cannot modify or delete folders and some files.
C. The User used to deploy AK 8 = DOM ADMIN.
D. MDAC 2.8 installed first. System rebooted and check proved it is installed and working well.
E. We used MS SQL EXpress included with AK 8. 300MB+ download with Microsoft Authentication only.
THE ONLY CHANGE to Kaspersky default install = the KLSHARE placed elsewhere.
1. MOST ANNOYING PROBLEM = AK 8 cannot create new tasks.... we get a permission denied ...
I reinstalled and put KLSHARE on IT server in default location AND HAD TO INSTALL FILE SHARING so user can get to NLAGENT.
This worked but I cannot leave KLSHARE THERE... limited space.
2. Creating new task worked with all recommended installation options but Licensing Report was wrong. Reports were WAY OFF - saying I had more licenses that I had.
3. VERY TROUBLESOME ISSUE = Policy with password to change KAV on user station not applied. We do not wish for our users to turn Kaspersky off.
What's up Kaspersky?
Do you have docs and fixes for these issues?
I downloaded and read 300+ pages of manuals and docs.... None solved these issues. We followed all the instructions except where given a choice to place the KLSHARE elsewhere.
When can I talk to a tech?
Hello jmoncrieffe,
First of all please provide the installation logs: caadminkit.log and msiadminkit.log (both can be found in %tmp%).
Kappa Tech
3.11.2009 17:00
QUOTE(behemoth @ 3.11.2009 04:00)

Can you install AK under domain administrator account and then change the account to local system?
BTW, if you're using Windows 2008 you cannot run under local system.
It doesn't work, but I get a different issue this time about a root certificate.
As I mentioned before. This is a 2003 R2 machine. I wish I didn't have to use this admin kit since it obviously isn't stable but I believe I have to for out Win 7 and 2008 R2 machines.
QUOTE(Kappa Tech @ 3.11.2009 17:00)

It doesn't work, but I get a different issue this time about a root certificate.
As I mentioned before. This is a 2003 R2 machine. I wish I didn't have to use this admin kit since it obviously isn't stable but I believe I have to for out Win 7 and 2008 R2 machines.
It seems there were some problems while you was trying to upgrade existing installation.
I've attached an utility that can totally clean up problem installation. Use it to clean your system and perform a clean install after that. Please provide installation logs after that.
As I know that this tool cannot clean all entries in the registry.
The CLSID´s and „HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Kaspersky Event Log“ are present.
This tool helps by one of my customers to clean the damaged installation.
QUOTE(Helmut @ 5.11.2009 11:51)

As I know that this tool cannot clean all entries in the registry.
The CLSID´s and „HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Kaspersky Event Log“ are present.
This tool helps by one of my customers to clean the damaged installation.
Helmut, thank you very much, I'll tell the developer about it.
Kappa Tech
5.11.2009 17:30
QUOTE(behemoth @ 5.11.2009 04:38)

It seems there were some problems while you was trying to upgrade existing installation.
I've attached an utility that can totally clean up problem installation. Use it to clean your system and perform a clean install after that. Please provide installation logs after that.
QUOTE(Helmut @ 5.11.2009 04:51)

As I know that this tool cannot clean all entries in the registry.
The CLSID´s and „HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Kaspersky Event Log“ are present.
This tool helps by one of my customers to clean the damaged installation.
I have tried both of these and checked anything in registry with Kasper name. I'm still getting a cannot create root certificate with both local system account and our domain admin account.
Kappa Tech
9.11.2009 22:45
Is someone working on this or should I just assume admin 8 isn't possible on this machine?
behemoth
10.11.2009 11:02
Hello Kappa Tech,
please show the installation traces when you're trying to perform a clean (after klsrvrcl utility) installation under the domain administrator account.
The problem with the root certificate creation is the only one problem left?
QUOTE(behemoth @ 10.11.2009 08:02)

Hello Kappa Tech,
please show the installation traces when you're trying to perform a clean (after klsrvrcl utility) installation under the domain administrator account.
The problem with the root certificate creation is the only one problem left?
I'm having exactly the same issues as Kappa Tech - During the upgrade the only error that came up was the notification to run the klsrvswch application, apart from that the upgrade was clean. After the upgrade I ran klsrvswch, but like others received the error: System Error 0x6. The handle is invalid - I have tried with both local system account & an account with admin rights.
I've run the package in the thread that deletes all the kaspersky services and tried to reinstall, with no joy. After multiple reboots, when I try to install the admin kit again it doesn't appear to see it as an upgrade and tried to install sql express and setup as a new installation. The installation always fails with the error saying to run: klsrvswch + an error saying root certificates couldn't be created - the installer suggests I reboot and try again, but the issue is still there...
Help!
behemoth
11.11.2009 13:28
Hello aidan,
please attach your installation traces, we'll try to find out where's the problem.
QUOTE(behemoth @ 11.11.2009 10:28)

Hello aidan,
please attach your installation traces, we'll try to find out where's the problem.
It appears the logs from yesterday are no longer available. Please find attached a log from today.
behemoth
11.11.2009 14:09
aidan, thank you. But we also need caadminkit.log and $klssinstlib.log, these files should be located at the same place.
ITLAdmin
11.11.2009 19:32
Hi, I've had an utter nightmare running FSEE on our servers (the AV on demand scan froze), so much so that Tech Support recommended that I install the 'Standard' version as it is less memory hungry. However the lastest version (MP4) requires Network Agent 8, which in turn requires Admin Kit 8. Now after reading this post I'm in a real quandry whether to proceed with the upgrade as our Admin Kit resides on a Windows 2008 64 bit server.
I cannot afford any more things to go wrong, as a lot of reviews recommended this product and I'm responsible for it. I am constantly on to Tech Support and our server installation is in total disarray. Can someone give me some advice?? Thanks
Kappa Tech
11.11.2009 21:12
Please delete this post.
QUOTE(ITLAdmin @ 11.11.2009 12:32)

Hi, I've had an utter nightmare running FSEE on our servers (the AV on demand scan froze), so much so that Tech Support recommended that I install the 'Standard' version as it is less memory hungry. However the lastest version (MP4) requires Network Agent 8, which in turn requires Admin Kit 8. Now after reading this post I'm in a real quandry whether to proceed with the upgrade as our Admin Kit resides on a Windows 2008 64 bit server.
I cannot afford any more things to go wrong, as a lot of reviews recommended this product and I'm responsible for it. I am constantly on to Tech Support and our server installation is in total disarray. Can someone give me some advice?? Thanks
I find it good practice to test whatever product you are looking to upgrade to before doing it, just because others may have had a hassle free upgrade doesn't gaurantee you will. Everyones environment is different. Now, on this product there have been people with issues and others without so again, better to test first.
I'm running Admin Kit 6 in production and am migrating from SAV CE 10, while at the same time I am testing Admin Kit 8 on a Windows 2008 64 bit server. So far no major issues with Admin Kit 8 in my test environment of 3 servers and 3 clients.
If you have a VM environment, or an extra server around, you can test Admin Kit 8 on it and use this one server as one of the test clients. At least this way you are not affecting all your network, testing Admin Kit 8 and seeing if the new client works for this server.
behemoth
12.11.2009 11:00
ITLAdmin, don't forget to make a backup before upgrade :-D
ITLAdmin
12.11.2009 13:09
Well we did test it, but not for every type of machine and every product, I fear that was my first mistake, I should have created new VMs instead of trying to be clever and making copies of current VMs and trying to frig the environment for them to work, working form senior directions I'm afraid on that one.
Anyway, I'd like to make a Backup of it but that has failed too, initially I had an issue with the Windows Installer Level (incidentally a quick way to find that is type msiexec /? at a command prompt), but now I get "Backup operation failed, check if SQL Server has access to the destination folder". In terms of access, everything looks fine. The machine is a VM and I've made a pre-installation snapshot, so in theory I should be covered anyway, but it's indicative of the way things have gone, virtually everything has gone wrong, I don't know why, but it's begining to make McAfee look good, and that takes some doing.
behemoth
12.11.2009 13:36
ITLAdmin, I think it would be better to create a separate topic about your problems.
ITLAdmin
12.11.2009 14:29
Ok, but unfortunately there's a long list, I'll start with our Server Admin Tool Console issue. I appreciate any help as this has been dragging on for 6 weeks.
Admin_Tommy
12.11.2009 15:31
QUOTE(aidan @ 11.11.2009 10:42)

I'm having exactly the same issues as Kappa Tech - During the upgrade the only error that came up was the notification to run the klsrvswch application, apart from that the upgrade was clean. After the upgrade I ran klsrvswch, but like others received the error: System Error 0x6. The handle is invalid - I have tried with both local system account & an account with admin rights.
I've run the package in the thread that deletes all the kaspersky services and tried to reinstall, with no joy. After multiple reboots, when I try to install the admin kit again it doesn't appear to see it as an upgrade and tried to install sql express and setup as a new installation. The installation always fails with the error saying to run: klsrvswch + an error saying root certificates couldn't be created - the installer suggests I reboot and try again, but the issue is still there...
Help!
Hi,
I'm having the same problem too. Exactly the same error messages.
I first tried to update adminkit 6 with the known user account error. Then I did an uninstall with the tool "behemoth" provided in this thread. The new installation of adminkit 8 fails also with the errors above: klsrvswch + root certificates...
Attached the files caadminkit.log and msiadminkit.log.
I couldn't find $klssinstlib.log, canagent.log, kl-install-*.log in the TEMP folder.
behemoth
12.11.2009 15:56
Hello Admin_Tommy,
unfortunately we need $klssinstlib.log to analyse this problem (and nobody gives it to us, what a pity). And it should be where the others are. Please try to clean the %temp% and install again (you've already uninstalled an old one anyway :-)), it should appear.
Kappa Tech
12.11.2009 17:01
I didn't want to wait much longer. Both servers that had admin 6 on them didn't work for installing admin 8.
1st server I just tried to upgrade from admin 6 to admin 8. (Has WSUS on machine)
2nd server I just uninstalled admin 6, cleared everything out and installed admin 8. (Has SQL on machine)
1st & 2nd server are Windows Server 2003 R2 64bit
Both of these did not work. I get root certificate errors as posted.
I did finally install it on a server that never had Kaspersky installed on it at all and admin 8 does work. Its the same OS, Windows 2003 R2 64bit. This server was where I probably want it running from anyways.
Admin_Tommy
12.11.2009 17:21
QUOTE(behemoth @ 12.11.2009 13:56)

Hello Admin_Tommy,
unfortunately we need $klssinstlib.log to analyse this problem (and nobody gives it to us, what a pity). And it should be where the others are. Please try to clean the %temp% and install again (you've already uninstalled an old one anyway :-)), it should appear.
OK, attached you find the latest files. The file "$klssinstlib.log" was located at C:\Windows\Temp instead of the standard temp folder.
Admin_Tommy
12.11.2009 17:22
And here the other two...
behemoth
12.11.2009 18:03
Admin_Tommy, thank you, we will analyze it.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please
click here.