Network Agent can't start / Access denied

[xpreme]

Hi everyone,

    I have installed Kaspersky Network Agent stand-alone installer on a system. But it can't start and I get the following error even in local administrator user profile:

 

Can you please help me in this regard?

 

Thank you

[Renan Corassa]

Did you create the package with KES or just with Network Agent?

[xpreme]

@Renan Corassa Hi. It is only the Network Agent.

[KarDip]

Hello @xpreme

The Kaspersky Network Agent error 1181 (5) indicates a system access denial issue, meaning the agent is unable to interact with or control the required service (kinagent) due to insufficient permissions or conflicts. Let's walk through several possible solutions:

---

1. Verify Service Permissions

The kinagent service (Kaspersky Network Agent) needs appropriate permissions to run. If it's being denied access, it could be a result of incorrect service settings or group policy restrictions.

Solution:

1. Open Services.msc:
   • Find the Kaspersky Network Agent service.
   • Right-click and select Properties.
2. Go to the Log On tab:
   • Ensure it's set to Local System account.
   • Check "Allow service to interact with desktop."
3. Click OK and restart the service.

If the service fails to start, the problem might lie in corrupted permissions.

---

2. Adjust Folder and Registry Permissions

There might be a permissions issue with the Kaspersky installation folder or relevant registry keys.

Solution:

1. Grant Full Control to the Kaspersky Folder:

   • Navigate to C:\ProgramData\KasperskyLab\NetworkAgent\.
   • Right-click the folder > Properties > Security tab.
   • Ensure that Administrators and SYSTEM have Full Control.
   • Click Apply and OK.

2. Check Registry Permissions:

   • Open Registry Editor (regedit).
   • Navigate to: HKEY_LOCAL_MACHINE\SOFTWARE\KasperskyLab\.
   • Right-click the KasperskyLab key > Permissions.
   • Make sure Administrators and SYSTEM have Full Control.

---

3. Disable User Account Control (UAC) Temporarily

Sometimes, UAC can block certain services from starting, even under an administrator account.

Solution:

1. Open Control Panel > User Accounts > Change User Account Control settings.
2. Slide the bar to Never notify.
3. Click OK and restart the system.
4. Try starting the Kaspersky Network Agent service again.

---

4. Reinstall the Network Agent with Elevated Privileges

The agent installation might be incomplete or corrupted.

Solution:

1. Uninstall the current Network Agent:

   • Use the Kaspersky Network Agent Cleaner Tool (if available).
   • Restart the system.

2. Reinstall the Network Agent:

   • Right-click the installer and select Run as Administrator.
   • Ensure you have the latest version of the Network Agent compatible with your Kaspersky Security Center.

---

5. Disable Conflicting Software or Policies

Another antivirus, endpoint security solution, or system policy might be blocking the kinagent service from starting.

Solution:

1. Disable Windows Defender or other antivirus tools temporarily.
2. Check if there are Group Policy restrictions:
   • Open gpedit.msc > Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment.
   • Look for any policies restricting the "Log on as a service" right and ensure the Local System or Administrators group is listed.

---

6. Check for System Integrity Issues

If system files are corrupted, it could prevent services from running correctly.

Solution:

1. Open a Command Prompt as Administrator.
2. Run the following commands:
   Copy code

   sfc /scannow DISM /Online /Cleanup-Image /RestoreHealth
3. Restart the system after the scan completes.

---

7. Review Logs for More Information

Check the Windows Event Viewer and Kaspersky logs for more details on the access denial error.

Solution:

1. Open Event Viewer (eventvwr).
2. Go to Windows Logs > System or Application.
3. Look for events related to Kaspersky Network Agent for additional clues.

---

If the issue persists, you might need to:

• Contact Kaspersky Support for detailed assistance.
• Provide them with relevant logs (e.g., trace.log) and system details.
• Anyway hope i have got this correct for you.

These steps should help you resolve the 1181 (5) error and get the Network Agent service running smoothly.

Thank you

Edited October 24 by KarDip
correction error

[Renan Corassa]

On 23/10/2024 at 06:43, xpreme disse:

Hi everyone,

    I have installed Kaspersky Network Agent stand-alone installer on a system. But it can't start and I get the following error even in local administrator user profile:

 

Can you please help me in this regard?

 

Thank you

Does this event occur when you try to start it manually? If so, wait about 5 minutes until the agent service starts and check whether your network agent policy has any protection in the Settings tab. If so, this will prevent you from attempting to run it manually.

I had a similar "problem" when I enabled the feature to protect the network agent service in the policy properties and when I tried to run the utility manually after restarting the device, the message was displayed.