old kaspersky install, checking kaspersky health (domaincontroller windows 2016)

[iam-user-3424]

Hello, 

the (old) Domaincontroller have this installed:  (productive network)

Kaspersky 10.1.1 for Windows Server
Kaspersky Security Center 10 Administrationagent

under controalpanel

C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security for Windows\
C:\Program Files (x86)\Kaspersky Lab\NetworkAgent

but no: 
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security for Windows\avp.exe

 

We have problems with domain replica and I want to make sure that kaspersky it no broken.

Under Taskmgr is only one kavtry.exe, right below at the clock is nothing., start menue:  typing "kaspersky" nothing happens 

many files here:

C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security for Windows Server
C:\Program Files (x86)\Kaspersky Lab\NetworkAgent

How I can open the Kaspersky GUI?
How can I check whether there is a un-install-passoword
How can I check whether kaspersky is allows temporaryall traffic?
Should I try Eicar File?

there is no  avp.exe ?

C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security for Windows\avp.exe

other server: there is also this installed, is this a remote control for local kaspersky network?

C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Center Console

 

 

[ElvinE5]

18 часов назад, iam-user-3424 сказал:

How I can open the Kaspersky GUI?

To use this interface, you need to install it additionally on this device, or on any other, as it is possible to connect to the interface of a remote server over the network. You can get it from the distribution kit from the developer's site.

Спойлер

https://www.kaspersky.ru/small-to-medium-business-security/downloads/endpoint?icid=ru_sup-site_trd_ona_oth__onl_b2b_klsupport_tri-dl____kes___

run setup.exe, select the item you need, during installation the system will ask about the possibility of remote control, you can set the appropriate "checkbox" to enable this feature. The shortcut to launch will appear in the appropriate popup of the product in the start menu

Спойлер

 

18 часов назад, iam-user-3424 сказал:

How can I check whether there is a un-install-passoword

If a password has been set, then when the console tries to connect to the program interface, the system will ask for it, the same goes for attempts to uninstall the product.

Спойлер

if necessary, it can be installed from the GUI

Спойлер

 

18 часов назад, iam-user-3424 сказал:

How can I check whether kaspersky is allows temporaryall traffic?

disable the use of the "firewall" component, by default this component is disabled in the installation package, so check if you use it ...

Спойлер

 

Спойлер

however, it must be remembered that this component only works with allowing rules for incoming traffic

 

18 часов назад, iam-user-3424 сказал:

other server: there is also this installed, is this a remote control for local kaspersky network?

C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Center Console

Yes, this is the control center for all LK products that you use on your network. if you have everything set up and all the devices are connected to the management server, then you can manage protection through policies for the corresponding product.

Спойлер

 

Edited June 12, 2023 by ElvinE5

[Mistry]

To check the health of Kaspersky Endpoint Security on a Windows Server 2016 domain controller, you can follow these steps:

Launch Kaspersky Endpoint Security: Open the Kaspersky Endpoint Security console on the Windows Server 2016 domain controller. You can typically find it in the Start menu or by searching for "Kaspersky Endpoint Security."

Check Protection Status: In the Kaspersky Endpoint Security console, look for the protection status or health status indicator. It should provide an overview of the current state of your system's protection. Ensure that the status is displayed as "Protected" or "Secure." If there are any issues or warnings, they will be highlighted in this section.

Update Kaspersky Endpoint Security: Check if your Kaspersky Endpoint Security installation is up to date. Look for an option to update the software within the console. It's important to keep your antivirus software updated to ensure it has the latest virus definitions and security patches.

Run a System Scan: Initiate a system scan within Kaspersky Endpoint Security to check for any malware or threats. You can typically find the scanning options in the console's navigation menu. Perform a full system scan to thoroughly examine all files and processes on the domain controller.

Review Event Logs: Check the event logs within the Kaspersky Endpoint Security console for any warnings, errors, or relevant information. The event logs can provide insights into the health and performance of the software, as well as any issues that might need attention.

Verify Real-Time Protection: Ensure that real-time protection is enabled and active on the domain controller. Real-time protection actively monitors files, processes, and network activity to detect and block any potential threats in real-time. Confirm that this feature is turned on and functioning properly.

Check Update Settings: Verify that the update settings in Kaspersky Endpoint Security are configured correctly. Ensure that the software is set to automatically update virus definitions and program modules. This ensures that your antivirus software is equipped with the latest protection against emerging threats.

Verify Exclusions and Policies: Check the configured exclusions and policies within Kaspersky Endpoint Security to ensure they align with your organization's requirements. Exclusions can be set for specific files, folders, or processes that should be excluded from scanning. Policies dictate the behavior and settings of the antivirus software.

If you encounter any specific issues or errors during the process, consult the Kaspersky Endpoint Security documentation, contact Kaspersky technical support, or consider seeking assistance from an IT professional experienced with Kaspersky products.