KSWS 10.1 - Permission warning

[intrusus]

Good evening everyone, today, while browsing through the Kaspersky Security for Windows Server 10.1 policy, I was a little surprised to receive an error message or warning. When clicking on "Supplementary" -> "User access permissions for application management" I get the message that I am not authorized to display the current KSWS 10.1 permission settings. However, I am allowed to change them.[spoiler] [/spoiler] In the Administration Server settings at "Security" I checked what the permissions look like: As you can see, KLAdmins and KLOperator Group do exist and their roles are also correct. Under local users and groups on the Windows server where the Administration Server is installed, I can confirm that my user is in the local administrator group and in the KLAdmin group. What could be the mistake here? Best regards Leon

[Nikolay Arinchev]

Hi, Could you please clarify what versions of plugin and KSC do you use?

[intrusus]

Sure thing, I am using KSC 11.0.0.1131 and my KSWS plugin is Kaspersky Security 10.1 für Windows Server 10.1.0.622. Cheers Leon

[Nikolay Arinchev]

Could you please confirm that this behavior could be reproduced if you authenticate at KSC with VORDEFINIERT\Arministratoren?

[intrusus]

The problem with the missing permission is fixed now, I deleted the domain groups "KLAdmin" and "KLOperators" out of the corresponding local groups. I then logged in with my _adm account (member of the local "KLAdmin" group) via the administration console and was able to view and edit the policy. I think we created them some time ago to give our service team access to all KSCs... Sometimes you just forget when you play around with the systems.:disappointed_relieved: Question Nikolay arinchev: Does the local "KLAdmin" group has to be present in the local "Administrators" group? This is not the case with our old administration server (KSC 10), so i removed it. Something seems to have gotten messed up here a bit... :tired_face: In the attachment once again an overview of all local groups. Thank you & kind regards Leon:v_tone2: