Hi,
I have set up a test network. Installed Kaspersky Administration Kit 6.0 then restored a backup taken from our production network onto the test network. Everything came across to the test network, policies, computers, tasks etc.. without problem.

Lastly, I installed Kaspersky Administration Kit 8.0 on top of the test installation of 6 and ran the policy migration wizards so that everything was converted. Checking the policies, everything looks OK (both new and existing policies have the correct settings).

I then deployed the new desktop client to some machines on our test network (along with the new network agent). This also appeared to go fine, with the test machines appearing in the Managed Computers folders as directed.

The problem I am having is that even after several hours, the policies (which are active) do not apply to the computers in the group structure.. The machines show up as active in the Administration Kit, but the anti virus client never gets any of the exclusion settings and etc.. I have force synchronization several times but it does not help.

I know in the previous administration kit there was a way to force the application of policies, but this option is missing now.

Has anyone seen this issue before?

Thanks!!

Further to this, I have found that from the Administration Kit console (version 8).. If I click the lock next to a policy to make it mandatory on the workstations, the changes will then flow to the workstation.. if I disable the lock to make them non mandatory, the settings remain.. but any further changes I make the the policies will not flow down to workstations again unless I lock and unlock the policy settings.

I need to be able to leave these policies un-locked but still have them apply to all workstations so that users can manage exclusions for software development and testing.

I know with Administration Kit 6 I could right click a policy, select enforcement then advanced and change the setting to 'Apply all policy settings to the local settings at first policy application'. If I then synchronized the workstation with the server all of the settings would apply, even though the settings were not locked.

Is this a bug with Administration Kit 8 or some new feature as I cannot deploy this into the live network with such an issue.

Many thanks for your help!

Those options (e.g. 'Apply all policy settings to the local settings at first policy application') are not present in Administration Kit 8. It's not a bug. As you found out by yourself, you have to set options mandatory in the policies to deploy them to the clients.

If you would like to give your users the option to specify exclusions by themselves, you could lock all other settings and just leave the exclusions unlocked.

Further to this problem - the same applies for other settings too, such as the ability to set the "enable self-defence" policy. None of these policy settings get applied to the workstation until you lock them in the admin console, which is something that we can't afford to do.

Sure, we want to set 'standard' policies, but we don't want to prevent some/all our users from being able to disable certain things at a particular time for specific reasons.

This applies to Admin Kit 8.0.2048, and Client 6.0.4.1212.