2.4. Remote Installation of the Dr.Web Enterprise Agent under Windows® OS

The Dr.Web ESS anti-virus allows to detect the computers which are not yet protected by Dr.Web ESS, and in certain cases to install such protection remotely.

 

Remote installation of Enterprise Agents is possible only on workstations operated by Windows 2000 and later OS (see Appendix A. The Complete List of Supported OS Versions), except Starter and Home editions.

 

Remote installation of Enterprise Agents is possible only from the Control Center opened under Windows XP and later OS (see Appendix A. The Complete List of Supported OS Versions), except Starter and Home editions.

 

To install the anti-virus software on workstations, you must have administrator rights on the correspondent computers.

 

Remote installation does not require extra configuration of the remote station, if it is inside a domain and the domain account is used. If the remote station is outside a domain, or if the local account has been used during installation, for some of Windows OS, the extra configuration of the remote station is required.

Extra Configuration for Remote Installation to a Station outside a Domain or Using the Local Account

 

Specified options can reduce remote station security. It is strongly recommended to examine functions of these options before editing the system settings or do not use remote installation and install the Agent manually.

 

To install the Agent to a remote workstation outside a domain, or/and using the local account, do the following on the computer where you want to install the Agent:

Operating System

Configuring

Windows 2000

Windows Server 2000

Extra configuration is not required.

Windows XP

1.Setup the mode of access to shared files: Control Panel Folder Properties the View tab clear the Use Simple Sharing (recommended) flag.

2.Set the following mode of network authentication model in the local policies: Control Panel Administrative Tools Local Security Policy Security Settings Local Policies Security Options Network Access: Sharing and security model Classic - local users authenticate as themselves.

Windows Server 2003

Extra configuration is not required.

Windows Vista

Windows 7

Windows Server 2008

1.Enable the File sharing option: Control Panel Network and Internet Network and Sharing Center Sharing and discovery File Sharing Enable.

2.Enable the local administrator account and set a password for it. Use this account during installation: Control Panel System and Maintenance Administrative Tools Computer management Local Users and Groups Users. Click the Administrator item clear the Account is disabled flag OK. Right-click the item Change password set the password.

If user account at the remote computer has the empty password, set the access policy with empty password in local policies: Control Panel Administrative Tools Local Security Policy Security Settings Local Policies Security Options Accounts: Limit local account use of blank passwords to console logon only Disabled.

 

It is necessary to share the location of the Agent Installer file drwinst.exe and the public encryption key drwcsd.pub on the network.