Preparing a device for remote installation. Utility tool riprep.exe

Remote installation of the application on the client device may return an error for the following reasons:

• The task has already been successfully performed on this device. In this case, the task does not have to be performed again.
• When a task was started, the device was shut down. In this case, turn on the device and restart the task.
• There is no connection between the Administration Server and the Network Agent installed on the client device. To determine the cause of the problem, use the utility designed for remote diagnostics of client devices (klactgui).
• If Network Agent is not installed on the device, the following problems may occur during remote installation:
  • The client device has Disable simple file sharing enabled.
  • The Server service is not running on the client device.
  • The required ports are closed on the client device.
  • The account that is used to perform the task has insufficient privileges.

  To solve problems that occur during installation of the application on a client device without Network Agent installed, you can use the utility designed to prepare devices for remote installation (riprep).

This section contains a description of the utility that allows you to prepare a device for remote installation (riprep). The utility is located in the Kaspersky Security Center installation folder on the device on which Administration Server is installed.

The utility used to prepare a device for remote installation does not run on Microsoft Windows XP Home Edition.

Preparing a device for remote installation in interactive mode

To prepare a device for remote installation in interactive mode:

1. Run the riprep.exe file on a client device.
2. In the main window of the remote installation preparation utility, select the following options:
   • Disable simple file sharing
   • Start the Administration Server service
   • Open ports
   • Add an account
   • Disable User Account Control (UAC) (only available for devices running Microsoft Windows Vista, Microsoft Windows 7, or Microsoft Windows Server 2008)
3. Click the Start button.

The stages of device preparation for remote installation are shown in the lower part of the utility's main window.

If you selected the Add an account option, when an account is created you will be prompted to enter the account name and password. This will create a local account belonging to the local administrators' group.

If you selected the Disable User Account Control (UAC) option, an attempt to disable User Account Control will be made even if UAC was disabled before the utility was started. After UAC is disabled, you will be prompted to restart the device.

Preparing a device for remote installation in non-interactive mode

To prepare a device for remote installation in non-interactive mode:

Run the riprep.exe file on the client device from the command line with the requisite set of keys.

Utility command line syntax:

riprep.exe [-silent] [-cfg CONFIG_FILE] [-tl traceLevel]

Descriptions of the keys:

• -silent—Starts the utility in the non-interactive mode.
• -cfg CONFIG_FILE—Defines the utility configuration, where CONFIG_FILE is the path to the configuration file (a file with the .ini extension).
• -tl traceLevel—Defines the trace level, where traceLevel is a number from 0 to 5. If no key is specified, the value 0 is used.

You can perform the following tasks by starting the utility in silent mode:

• Disabling the simple sharing of files
• Starting the Server service on the client device
• Opening the ports
• Creating a local account
• Disabling User Account Control (UAC)

You can specify the parameters for device preparation for remote installation in the configuration file specified in the -cfg key. To define these parameters, add the following information to the configuration file:

• In the Common section, specify the tasks to be performed:
  • DisableSFS—Disable the simple sharing of files (0 —the task is disabled; 1 —the task is enabled).
  • StartServer—Start the Server service (0 —the task is disabled; 1 —the task is enabled).
  • OpenFirewallPorts—Open the necessary ports (0 —the task is disabled; 1 —the task is enabled).
  • DisableUAC—Disable User Account Control (UAC) (0 —the task is disabled; 1 —the task is enabled).
  • RebootType—Define behavior if restart of device is required when UAC is disabled. You can use the following values:
    • 0—Never restart the device.
    • 1—Restart the device, if UAC was enabled before starting the utility.
    • 2—Force restart, if UAC was enabled before starting the utility.
    • 4—Always restart the device.
    • 5—Always restart the device with force.
• In the UserAccount section, specify the account name (user) and its password (Pwd).

Sample context of the configuration file:

After the utility completes, the following files will be created in the utility start folder:

• riprep.txt—Operation report, in which phases of the utility operation are listed with reasons for these operations.
• riprep.log—Trace file (created if the tracing level is set above 0).