How to install Kaspersky Endpoint Security 10 for Windows automatically through domain policies

If the user has no local administrator permissions or when you need to deploy the protection on multiple computers, Kaspersky Endpoint Security 10 for Windows is installed through Active Directory domain policies.

To install Kaspersky Endpoint Security 10 through Active Directory domain policies:

1. Download the remote installation package for Kaspersky Endpoint Security 10 for Windows. If the package name contains spaces, remove them or change them to the underscore symbol ( _ ).
2. Create a file with the following script:

ECHO ON
set SHARE_PATH=\\package_path
set PACKAGE_NAME=setup.bat
set __KESCLOUD_ROOT_KEY="HKLM\Software\KasperskyLab\KESCloud"
set __KESCLOUD_KEY_NAME="AutoPackageInstalled"
set __KESCLOUD_PACKAGE_FULL_PATH="%SHARE_PATH%\%PACKAGE_NAME%"
set __KESCLOUD_PACKAGE_ARGUMENTS=-s
REG QUERY %__KESCLOUD_ROOT_KEY% /v %__KESCLOUD_KEY_NAME% | FIND "0x1"
IF %ERRORLEVEL% == 1 GOTO INSTALL
GOTO END
:INSTALL
REG ADD %__KESCLOUD_ROOT_KEY% /v %__KESCLOUD_KEY_NAME% /t REG_DWORD /f /D 1
%__KESCLOUD_PACKAGE_FULL_PATH% %__KESCLOUD_PACKAGE_ARGUMENTS%
:END

3. Add custom values:
   • SHARE_PATH=\\package_path stands for the path to the shared folder with the remote installation package for Kaspersky Endpoint Security 10 for Windows. Replace \\package_path with the path to the package. We recommend that you avoid using quotation marks.
   • PACKAGE_NAME=setup.bat stands for the name of the Kaspersky Endpoint Security 10 for Windows installation package. Replace setup.bat with the remote installation package name. We recommend that you avoid using quotation marks.
   • __KESCLOUD_KEY_NAME="AutoPackageInstalled" stands for the parameter which is used to confirm that the installation has been run. Replace AutoPackageInstalled with any name (use numeric and Latin characters). We recommend using the version number in quotation marks.
4. Save the script with the BAT extension, e.g. install_kes_cloud.bat.

the file with the script and the remote installation package for Kaspersky Endpoint Security 10 for Windows must be located in the shared folder which can be accessed by the server and workstations where the protection will be deployed.

5. Open Group Policy Management in Control Panel → Administrative Tools or with the command  gpmc.msc.
6. Go to Group policy objects. 

7. Create a new object.

8. Name the new object. Click OK.

9. Open the object for editing.

10. Go to Computer configuration → Policies → Windows Settings → Scripts(Startup/Shutdown).
11. Open the Startup script properties.

12. Add the file of the script you have created.

No additional parameters are required to run the scenario.