Help - Search - Members
Full Version: Admin Kit and PC not on a domain
Kaspersky Lab Forum > English User Forum > Protection for Small and Medium Businesses
Alfredo Rodriguez
I hope somebody can help with this. I'm trying to install Kaspersky on a kiosk machine that is not on our domain. Kaspersky will locate my machine dc_kiosk_001 within the default group named WORKGROUP but when I try to remotely install the Network Agent it fails. I installed Kaspersky Workstation 6.0 manually but I would prefer if this machine would pull updates from the Admin server. I have two Admin account the default and my own named Admin. I get the following error messege.

Shared folder "\\DC_KIOSK_001\admin$" is unavailable for the specified account(s): Admin (Logon failure: unknown user name or bad password.) DC_KIOSK_001\Admin (Logon failure: unknown user name or bad password.) EDC3\Admin (Logon failure: unknown user name or bad password.) (Logon failure: unknown user name or bad password.) Cannot download the package using network agent because it is not installed on the target host yet.

Shared folder "\\DC_KIOSK_001\admin$" is unavailable for the specified account(s): Administrator (Logon failure: unknown user name or bad password.) WSUS_AV\Administrator (Logon failure: unknown user name or bad password.) DC_KIOSK_001\Administrator (Logon failure: unknown user name or bad password.) EDC3\Administrator (Logon failure: unknown user name or bad password.) (Logon failure: unknown user name or bad password.) Cannot download the package using network agent because it is not installed on the target host yet.
Whizard
Hello,

In the deployment task wizard, you need to specify an account that has proper credentials on that machine. Also, do you have Network Agent installed on the target machine?
visham
Try to access it from another machine in your network.

CODE
START> RUN> "\\DC_KIOSK_001\admin$"


What are you prompted with??
Alfredo Rodriguez
QUOTE(Whizard @ 6.08.2007 22:09)
Hello,

In the deployment task wizard, you need to specify an account that has proper credentials on that machine. Also, do you have Network Agent installed on the target machine?
[right][snapback]412786[/snapback][/right]


I installed the network agent manually in hope that I could point it to the server but it did not work. The cut and paste information I added above were my two attempt to use the default Admin account and the one I created however they both have failed. I can ping the machine and WSUS 3.0 also detect that machine. Even the Kaspersky Admin Kit knows the machine is there however I just can't get the network agent to install on the machine. I can manually install it but is it possible to manaully install the agent and force it to point to the server.

The only way I found to get around this is to map to the update folder on the server for the machine that in off the domain. I don't want to do this this way though but if I must and it is my only option then I will do this instead.
Whizard
What errors are you getting installing Network Agent?
When you deploy NetAgent package you can customize it before actual deployment with proper server settings. The following methods are supported for installation

1) GPO/Logon Script
2) Network Share (must have credentials to C$ and ADMIN$)
3) Netagent (you can even deploy upgraded NetAgent via the old one)
pankajok
QUOTE(Alfredo Rodriguez @ 7.08.2007 02:31)
I hope somebody can help with this. I'm trying to install Kaspersky on a kiosk machine that is not on our domain. Kaspersky will locate my machine dc_kiosk_001 within the default group named WORKGROUP but when I try to remotely install the Network Agent it fails. I installed Kaspersky Workstation 6.0 manually but I would prefer if this machine would pull updates from the Admin server. I have two Admin account the default and my own named Admin. I get the following error messege.

Shared folder "\\DC_KIOSK_001\admin$" is unavailable for the specified account(s):  Admin (Logon failure: unknown user name or bad password.) DC_KIOSK_001\Admin (Logon failure: unknown user name or bad password.) EDC3\Admin (Logon failure: unknown user name or bad password.)  (Logon failure: unknown user name or bad password.)  Cannot download the package using network agent because it is not installed on the target host yet.

Shared folder "\\DC_KIOSK_001\admin$" is unavailable for the specified account(s):  Administrator (Logon failure: unknown user name or bad password.) WSUS_AV\Administrator (Logon failure: unknown user name or bad password.) DC_KIOSK_001\Administrator (Logon failure: unknown user name or bad password.) EDC3\Administrator (Logon failure: unknown user name or bad password.)  (Logon failure: unknown user name or bad password.)  Cannot download the package using network agent because it is not installed on the target host yet.
[right][snapback]412723[/snapback][/right]


====================================================
Pre-checks:

For Domain & Workgroup:
a) Go to command prompt of target PC and Run this command
Net share admin$
cool.gif Go to control panel and choose folder option.
Follow this screen, and unchecked the option use simple File sharing.
c) Add port 13000 & 14000 (TCP) in Windows or other Firewall exclusion list or disable the complete firewall at Management console server.
d) Add port 15000 (UDP) in Windows or other Firewall exclusion list or disable the complete firewall in all the clients.
e) During Quick start wizard or remote installation task creation remove SSL connection check box (recommended, not necessary)
f) Netsend: Getting NetSend notification on any system go to Control panel>Administrative tools>services>messenger>start Automatic.

Additional For Workgroup:
a) User must be logon as a service Right. To do this, go to Client PC> Control Panel> Administrative tools> Local security Policy>User Rights Assignment>Logon as a Service>Right click > Properties>Go to Add user group>advance>Find now> select Local user then Ok
cool.gif Client system should be in Classic Logon mode. For this Go to Control Panel>Administrative Tools> local Security Policy>local policy>Security option>Network Access: Sharing and security model for local account>right click>classic log on).
c) During remote installation Administrator login and password of client machine is not required when Management console is on higher hierarchy. ie user may select “Default Account” option during setting up remote installation task and client too may have logged in as a normal user. If the remote PC’s OS hierarchy is higher than administrator user name and password is required. So better to use Windows Xp or Win2k3 as management console instead of Win2k.

---------------

Then share c:\progra..\KL\Cert folder at Admin Server PC. Under packages – Klshare would be automatically shared.
10. Now go to client PC access KLshare\Packages\NetAgent 6.0.1405\ and run setup.exe to install netagent. During this installation it will ask for server address – give admin server’s IP, and in next screen it will ask for certificate file – browse for the ‘klserver.cer’ file from AdminServer’s C:\Program Files\Kaspersky Lab\Kaspersky Administration Kit\Cert. Next-next-finish

Then go to admin server. Right click on the KIOSk PC and Synchronize. See this PC should be visible as DarkRed.

DONE.
ashsweb
QUOTE(pankajok @ 8.08.2007 18:07) *
====================================================
Pre-checks:

For Domain & Workgroup:
a) Go to command prompt of target PC and Run this command
Net share admin$
cool.gif Go to control panel and choose folder option.
Follow this screen, and unchecked the option use simple File sharing.
c) Add port 13000 & 14000 (TCP) in Windows or other Firewall exclusion list or disable the complete firewall at Management console server.
d) Add port 15000 (UDP) in Windows or other Firewall exclusion list or disable the complete firewall in all the clients.
e) During Quick start wizard or remote installation task creation remove SSL connection check box (recommended, not necessary)
f) Netsend: Getting NetSend notification on any system go to Control panel>Administrative tools>services>messenger>start Automatic.

---------------

Then share c:\progra..\KL\Cert folder at Admin Server PC. Under packages – Klshare would be automatically shared.
10. Now go to client PC access KLshare\Packages\NetAgent 6.0.1405\ and run setup.exe to install netagent. During this installation it will ask for server address – give admin server’s IP, and in next screen it will ask for certificate file – browse for the ‘klserver.cer’ file from AdminServer’s C:\Program Files\Kaspersky Lab\Kaspersky Administration Kit\Cert. Next-next-finish

Then go to admin server. Right click on the KIOSk PC and Synchronize. See this PC should be visible as DarkRed.

DONE.


Hi

I am having trouble with one pc in particular on our domain.

I went throught the steps above on the client machine, however still no luck.

When trying to deploy the Net Agent from the Admin Kit to this client, I get the following error:

CODE
Shared folder "\\LADA\admin$" is unavailable:   (Logon failure: the user has not been granted the requested logon type at this computer.)   Cannot download the package using network agent because it is not installed on the target host yet.


Every other XP machine within the domain have no troubles!

I am using the "default" account using the domains administrator login details.

Any help much appreciated!

Thanks

Ash
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.