This is what I want as the default settings for my environment:
1) KAV Admin Console deploys a default auto-update task to all clients. This task will force all clients to update according to a schedule (every N hours).

2) Both Kaspersky Admin Kit and Kaspersky's update servers are checked as available update sources. When the client does an update, it will look to your KAV server first. If server is not available, it will contact Kaspersky's update servers.

3) Users are given the option to run a manual update.

1 and 2 can be done without any problems. However, item 3 requires re-installation to add the update "task" which is ridiculous. Why do I need to re-install the entire KAV suite to enable 1 task? Even worse is the fact that, once the application is re-installed/re-deployed with the update task, the server-based update task fails so no server-based auto-update once you allow users to manually update. Oh, and users can manually schedule an auto-update but there's no way for administrator to configure or add that auto-update task; it must be done on a per workstation basis.
Is this right? Am I missing something? I hope I'm missing something.