Managing administration groups

This section provides information about how to manage administration groups.

You can perform the following actions on administration groups:

• Add any number of nested groups at any level of hierarchy to administration groups.
• Add devices to administration groups.
• Change the hierarchy of administration groups by moving individual devices and entire groups to other groups.
• Remove nested groups and devices from administration groups.
• Add secondary and virtual Administration Servers to administration groups.
• Move devices from the administration groups of an Administration Server to those of another Server.
• Define which Kaspersky applications will be automatically installed on devices included in a group.

You can perform these actions only if you have the Modify permission in the Management of administration groups area for the administration groups you want to manage or for the Administration Server to which these groups belong.

Creating administration groups

Initially, the hierarchy of administration groups contains only one administration group called Managed devices group. You can add devices and subgroups into the Managed devices group.

To create an administration group:

1. In the main menu, go to Assets (Devices) → Hierarchy of groups.
2. In the hierarchy, select the administration group that is to include the new administration group.
3. Click the Add button.
4. In the window that opens, enter a name for the group and click Add.

A new administration group with the specified name appears in the administration group hierarchy.

The application allows creating a hierarchy of administration groups based on the structure of Active Directory or the domain network's structure. Also, you can create a structure of groups from a text file.

To create a structure of administration groups:

1. In the main menu, go to Assets (Devices) → Hierarchy of groups.
2. Click the Import button.

The New administration group structure wizard starts. Follow the instructions of the wizard.

Automatic installation of applications on devices in an administration group

You can specify which installation packages must be used for automatic remote installation of Kaspersky applications to client devices in an administration group.

To configure automatic installation of applications on the devices in an administration group:

1. In the main menu, go to Assets (Devices) → Hierarchy of groups, and click the name of the required administration group.
2. In the properties window that opens, go to the Automatic installation tab.
3. Select the installation packages of the applications to be installed on the devices, and then click the Save button.

   If you select several installation packages of the same application that differ only in their versions, the installation package with the latest version is saved.

After you select the installation packages, a group tasks for installation of the applications on the devices in the administration group is created for each of the application. These tasks are run on the client devices immediately after they are added to the administration group.

Moving administration groups

You can move nested administration groups within the groups hierarchy.

An administration group is moved together with all nested groups, secondary Administration Servers, devices, group policies, and tasks. The application applies to the group all the settings that correspond to its new position in the hierarchy of administration groups.

The name of the group must be unique within one level of the hierarchy. If a group with the same name already exists in the folder into which you move the administration group, you must change the name of the latter. If you have not changed the name of the moved group, an index in (<next sequence number>) format is automatically added to its name when it is moved, for example: (1), (2).

You cannot rename and move the Managed devices group.

To move an administration group to another level of the administration groups hierarchy:

1. In the main menu, go to Assets (Devices) → Hierarchy of groups, and then select the check box next to the administration group that you want to move.
2. On the toolbar, click the Move button.
3. In the window that opens, select where you want to move the administration group, and then click the Move button.

The window is closed, and the administration group is moved to another level of the groups hierarchy.

Deleting administration groups

If you delete an administration group that contains secondary Administration Servers, nested groups, client devices, group tasks, or policies created for this group, all of them will also be deleted.

Before deleting an administration group, you must delete all secondary Administration Servers, nested groups, and client devices from that group.

To delete an administration group:

1. In the main menu, go to Assets (Devices) → Hierarchy of groups, and then select the check box next to the administration group that you want to delete.
2. On the toolbar, click the Delete button.

The administration group is deleted.