Removing applications or software updates remotely

Expand all | Collapse all

You can remove applications or software updates on managed devices that run Linux remotely only by using Network Agent.

To remove applications or software updates remotely from selected devices:

1. In the main menu, go to 资产(设备) → 任务.
2. Click 添加.

   The 新任务向导 starts. Proceed through the wizard by using the 下一步 button.

3. In the 应用程序 drop-down list, select Kaspersky Security Center.
4. In the 任务类型 list, select the 远程卸载应用程序 task type.
5. In the 任务名称 field, specify the name of the new task.

   A task name cannot be more than 100 characters long and cannot include any special characters ("*<>?\:|).

6. Select the devices to which the task will be assigned.

   Go to the next step of the wizard.

7. Select what kind of software you want to remove, and then select specific applications, updates, or patches that you want to remove:
   • 卸载受管理应用程序

     A list of Kaspersky applications is displayed. Select the application that you want to remove.

   • 从应用程序注册表中卸载应用程序

     By default, Network Agents send the Administration Server information about the applications installed on the managed devices. The list of installed applications is stored in the applications registry.

     To select an application from the applications registry:

     1. Click the 要卸载的应用程序 field, and then select the application that you want to remove.
     2. Specify the uninstallation options:
        • 卸载模式

          Select how you want to remove the application:

          • 自动定义卸载命令

            If the application has an uninstallation command defined by the application vendor, Kaspersky Security Center Linux uses this command. We recommend that you select this option.

          • 指定卸载命令

            Select this option if you want to specify your own command for the application uninstallation.

            We recommend that you first try to remove the application by using the 自动定义卸载命令 option. If the uninstallation through the automatically defined command fails, then use your own command.

            Type an installation command into the field, and then specify the following option:

            仅当未自动检测到默认命令时使用此命令进行卸载

            Kaspersky Security Center Linux checks whether or not the selected application has an uninstallation command defined by the application vendor. If the command is found, Kaspersky Security Center Linux will use it instead of the command specified in the 应用程序卸载命令 field.

            We recommend that you enable this option.

        • 应用程序成功卸载后执行重启

          If the application requires the operating system to be restarted on the managed device after successful uninstallation, the operating system is restarted automatically.

   • 卸载指定的应用程序更新、补丁或第三方应用程序

     A list of updates, patches, and third-party applications is displayed. Select the item that you want to remove.

     The displayed list is a general list of applications and updates, and it does not correspond to the applications and updates installed on the managed devices. Before selecting an item, we recommend that you ensure that the application or update is installed on the devices defined in the task scope. You can view the list of devices on which the application or update is installed, via the properties window.

     To view the list of devices:

     1. Click the name of the application or update.

        The properties window opens.

     2. Open the 设备 section.

        You can also view the list of installed applications and updates in the device properties window.

8. Specify how client devices will download the Uninstallation utility:
   • 使用网络代理

     The files are delivered to client devices by Network Agent installed on those client devices.

     If this option is disabled, the files are delivered using the Linux operating system tools.

     We recommend that you enable this option if the task has been assigned to devices that have Network Agents installed.

   • 通过管理服务器使用操作系统资源

     The option is obsolete. Use the 使用网络代理 or 通过分发点使用操作系统资源 option instead.

     The files are transmitted to client devices by using the Administration Server operating system tools. You can enable this option if no Network Agent is installed on the client device, but the client device is on the same network as the Administration Server.

   • 通过分发点使用操作系统资源

     The files are transmitted to client devices by using operating system tools through distribution points. You can enable this option if there is at least one distribution point on the network.

     If the 使用网络代理 option is enabled, the files are delivered by using operating system tools only if Network Agent tools are unavailable.

   • 同时下载的最大数量

     The maximum allowed number of client devices to which Administration Server can simultaneously transmit the files. The larger this number, the faster the application will be uninstalled, but the load on Administration Server is higher.

   • 尝试卸载的最大次数

     If, when running the 远程卸载应用程序 task, Kaspersky Security Center Linux fails to uninstall an application on a managed device within the number of installer runs specified by the parameter, Kaspersky Security Center Linux stops delivering the Uninstallation utility to this managed device and does not start the installer on the device anymore.

     The 尝试卸载的最大次数 parameter allows you to save the resources of the managed device, as well as reduce traffic (uninstallation, MSI file run, and error messages).

     Recurring task start attempts may indicate a problem on the device and which prevents uninstallation. The administrator should resolve the problem within the specified number of uninstallation attempts and then restart the task (manually or by a schedule).

     If uninstallation is not achieved eventually, the problem is considered unresolvable and any further task starts are seen as costly in terms of unnecessary consumption of resources and traffic.

     When the task is created, the attempts counter is set to 0. Each run of the installer that returns an error on the device increments the counter reading.

     If the number of attempts specified in the parameter has been exceeded and the device is ready for application uninstallation, you can increase the value of the 尝试卸载的最大次数 parameter and start the task to uninstall the application. Alternatively, you can create a new 远程卸载应用程序 task.

   • 下载之前验证操作系统类型

     Before transmitting the files to client devices, Kaspersky Security Center Linux checks if the Installation utility settings are applicable to the operating system of the client device. If the settings are not applicable, Kaspersky Security Center Linux does not transmit the files and does not attempt to install the application. For example, to install some application to devices of an administration group that includes devices running various operating systems, you can assign the installation task to the administration group, and then enable this option to skip devices that run an operating system other than the required one.

   Go to the next step of the wizard.

9. Specify the operating system restart settings:
   • 不重启设备

     Client devices are not restarted automatically after the operation. To complete the operation, you must restart a device (for example, manually or through a device management task). Information about the required restart is saved in the task results and in the device status. This option is suitable for tasks on servers and other devices where continuous operation is critical.

   • 重启设备

     Client devices are always restarted automatically if a restart is required for completion of the operation. This option is useful for tasks on devices that provide for regular pauses in their operation (shutdown or restart).

   • 提示用户操作

     The restart reminder is displayed on the screen of the client device, prompting the user to restart it manually. Some advanced settings can be defined for this option: text of the message for the user, the message display frequency, and the time interval after which a restart will be forced (without the user's confirmation). This option is most suitable for workstations where users must be able to select the most convenient time for a restart.

     By default, this option is selected.

     • 重复提示间隔(分钟)
     • 在该时间后重启(分钟)
   • 强行关闭锁定会话中的应用程序

     Running applications may prevent a restart of the client device. For example, if a document is being edited in a word processing application and is not saved, the application does not allow the device to restart.

     If this option is enabled, such applications on a locked device are forced to close before the device restart. As a result, users may lose their unsaved changes.

     If this option is disabled, a locked device is not restarted. The task status on this device states that a device restart is required. Users have to manually close all applications running on locked devices and restart these devices.

     By default, this option is disabled.

   Go to the next step of the wizard.

10. If necessary, add the accounts that will be used to start the remote uninstallation task:
    • 不需要账户(网络代理已安装)

      If this option is selected, you do not have to specify the account under which the application installer will be run. The task will run under the account under which the Administration Server service is running.

      If Network Agent has not been installed on client devices, this option is not available.

    • 需要账户(不使用网络代理)

      Select this option if Network Agent is not installed on the devices for which you assign the Uninstall application remotely task.

      Specify the user account under which the application installer will be run. Click the 添加 button, select 账户, and then specify the user account credentials.

      You can specify multiple user accounts if, for example, none of them have all the required rights on all devices for which you assign the task. In this case, all added accounts are used for running the task, in consecutive order, top-down.

11. At the 完成任务创建 step of the wizard, enable the 创建完成时打开任务详情 option to modify the default task settings.

    If you do not enable this option, the task will be created with the default settings. You can modify the default settings later.

12. Click the 完成 button.

    The wizard creates the task. If you enabled the 创建完成时打开任务详情 option, the task properties window automatically opens. In this window, you can specify the general task settings and, if required, change the settings specified during task creation.

    You can also open the task properties window by clicking the name of the created task in the list of tasks.

    The task is created, configured, and displayed in the list of tasks at 资产(设备) → 任务.

13. To run the task, select it in the task list, and then click the 开始 button.

    You can also set a task start schedule on the 计划 tab of the task properties window.

    For a detailed description of scheduled start settings, refer to the general task settings.

After the task is completed, the selected application is removed from the selected devices.