Kaspersky Security Center

Changes in the system after Kaspersky Security Center installation

14 April 2024

ID 25950

Administration Console icon

After Administration Console is installed on your device, its icon appears, allowing you to start Administration Console. You can find Administration Console in the Start → Programs → Kaspersky Security Center menu.

Administration Server and Network Agent services

Administration Server and Network Agent are installed on the device as services with the properties listed below. The table also contains the attributes of other services that apply on the device after Administration Server installation.

Properties of Kaspersky Security Center services

Component

Service name

Displayed service name

Account

Administration Server

kladminserver

Kaspersky Security Center Administration Server

User-defined or dedicated non-privileged account in KL-AK-* format created during installation

Network Agent

klnagent

Kaspersky Security Center Network Agent

Local system

Web Server for accessing Kaspersky Security Center Web Console and administering the organization's intranet

klwebsrv

Kaspersky web server

Dedicated unprivileged KlScSvc account

Activation proxy server

klactprx

Kaspersky activation proxy server

Dedicated unprivileged KlScSvc account

KSN proxy server

ksnproxy

Kaspersky Security Network proxy server

Dedicated unprivileged KlScSvc account

If you install Kaspersky Security Center on the Kaspersky Security Center failover cluster nodes, the klfocsvc_klfoc service becomes available. The klnagent_klfoc and klfocsvc_klfoc services run under the Local system account. The kladminserver_klfoc service must be run under the 'ksc' account, and other services run under the 'rightless' account. The 'ksc' and 'rightless' accounts must be added in the KLAdmins group with the local administrator's permissions. For correct work of Kaspersky Security Center, you must use only the 'ksc' and 'rightless' accounts for running services. We do not recommend using other accounts with the same rights. The table below contains the properties of services that are applied on the device after Administration Server is installed on the Kaspersky Security Center failover cluster.

Properties of services of Kaspersky Security Center installed in the Kaspersky Security Center failover cluster

Component

Service name

Displayed service name

Account

Administration Server

kladminserver_klfoc

Kaspersky Security Center Administration Server

ksc

Network Agent

klnagent_klfoc

Kaspersky Security Center Network Agent

Local system

Web Server for accessing Kaspersky Security Center Web Console and administering the organization's intranet

klwebsrv_klfoc

Kaspersky web server

rightless

Activation proxy server

klactprx_klfoc

Kaspersky activation proxy server

rightless

KSN proxy server

ksnproxy_klfoc

Kaspersky Security Network proxy server

rightless

Kaspersky Security Center failover cluster

klfocsvc_klfoc

Kaspersky Security Center failover cluster

Local system

Kaspersky Security Center Web Console services

If you install Kaspersky Security Center Web Console on the device, then the following services are deployed (see the table below):

Kaspersky Security Center Web Console services

Displayed service name

Account

Kaspersky Security Center Service Web Console

NT Service/KSCSvcWebConsole

Kaspersky Security Center Web Console

 

Network service

Kaspersky Security Center Product Plugins Server

 

NT Service/KSCWebConsolePlugin

Kaspersky Security Center Web Console Management Service

 

Local system

Kaspersky Security Center Web Console Message Queue

 

NT Service/KSCWebConsoleMessageQueue

Network Agent server version

The server version of Network Agent will be installed on the device together with Administration Server. The server version of Network Agent is part of Administration Server, is installed and removed together with Administration Server, and can only interact with a locally installed Administration Server. You do not have to configure the connection of Network Agent to Administration Server: configuration is implemented programmatically because the components are installed on the same device. The server version of Network Agent is installed with the same properties as the standard Network Agent and performs the same application management functions. This version will be managed by the policy of the administration group to which the client device of Administration Server belongs. For the server version of Network Agent all tasks are created from the scope of those provided for Administration Server, except for the Server change task.

Network Agent cannot be installed separately on a device that already has Administration Server installed.

You can view the properties of each service of Administration Server and Network Agent, as well as monitor their operation using standard Microsoft Windows management tools: Computer management\Services. Information about the activity of the Kaspersky Administration Server service is stored in the Microsoft Windows system log in a separate Kaspersky Event Log branch on the device where the Administration Server is installed.

We recommend that you avoid starting and stopping services manually and leave service accounts in the service settings unchanged. If necessary, you can modify the Administration Server service account using the klsrvswch utility.

User accounts and security groups

The Administration Server Installer creates the following accounts by default:

  • KL-AK-*: Administration Server service account
  • KlScSvc: Account for other services from the Administration Server pool
  • KlPxeUser: Account for deployment of operating systems

If you selected other accounts for the Administration Server service and other services while running the Installer, the specified accounts are used.

Local security groups named KLAdmins and KLOperators with their respective sets of rights are also created automatically on the device that has Administration Server installed.

It is not recommended to install the Administration Server on a domain controller; however, if you install Administration Server on the domain controller, you must start the installer with the domain administrator rights. In this case, the installer automatically creates domain security groups named KLAdmins and KLOperators. If you install Administration Server on a computer that is not the domain controller, you must start the installer with the local administrator rights instead. In this case, the installer automatically creates local security groups named KLAdmins and KLOperators.

When configuring email notifications, you may have to create an account on the mail server for ESMTP authentication.

See also:

Accounts for work with the DBMS

Did you find this article helpful?
What can we do better?
Thank you for your feedback! You're helping us improve.
Thank you for your feedback! You're helping us improve.