1. In the main window of the Web Console, select Devices → Managed devices.
2. Click the name of the thin client where Kaspersky Thin Client is running. You can view the device name in the Kaspersky Thin Client interface. If the thin client name is not on the list, add it to the Managed devices group.

   If a managed device is added to an administration group and an enforced policy is configured for the settings of this group, the settings that were individually configured for this device will not be applied.

3. In the window that opens, select the Applications tab.
4. Click the name of the Kaspersky Security Management Suite web plug-in.

   This opens a window containing information about Kaspersky Thin Client.

5. Select the Application settings tab.
6. Select the General section (see the figure below).

   

   Window for configuring general settings through the Web Console for one device

7. If you need to change the ID in the thin client name, click the Generate new ID button in the Device name block. The managed device for which you want to generate a new ID must be added to an administration group, and this group must have a configured and enforced policy for a group device naming rule.

   The new ID in the thin client name will be created after the device is synchronized with Kaspersky Security Center.

8. Click Save in the lower part of the window to save the changes.

1. In the main window of the Web Console, select Devices → Policies & profiles.
2. Click the policy name for the Kaspersky Security Management Suite web plug-in.
3. In the window that opens, select the Application settings tab.
4. Select the General section (see the figure below).

   

   Window for configuring general settings through the Web Console for a group of devices

5. If you need to specify a new name format for administration group devices, use the Group device naming rule block to indicate the new group name and additional information. You can use uppercase and lowercase letters of the Latin and Cyrillic alphabets, and special characters. A unique ID (eight characters) will be automatically generated for each device in the group. The number of characters in the device name must not exceed 30 characters.
6. Move the toggle button located on the right in the Group device naming rule block to the Enforced position.

   If the toggle button next to the name of a group of settings is in the Enforced position (), the defined values of these settings are applied to devices on which the policy is applied, and these settings cannot be changed in the Kaspersky Thin Client interface. If the toggle button next to the name of a group of settings is in the Undefined position (), the defined values of these settings are not applied to devices on which the policy is applied, and these settings can be changed for managed devices in the Kaspersky Thin Client interface under Devices → Managed devices.

7. Add the contact details of the Kaspersky Security Center administrator in the Contact details field. You can specify the last name, first name, phone number, and email address of the administrator. The number of characters in this field must not exceed 80 characters.

   The contact details of the Kaspersky Security Center administrator are visible to the user in the main window of Kaspersky Thin Client, in the windows for confirming a reset of Kaspersky Thin Client settings and data and confirming changes to Kaspersky Security Center connection settings, and when the certificate for connecting to Kaspersky Security Center is replaced.

8. Move the toggle button located on the right in the Enterprise Technical Support (administrator) block to the Enforced position.
9. Click Save in the lower part of the window to save the changes.

1. In the main window of the Web Console, select Devices → Managed devices.
2. Click the name of the thin client where Kaspersky Thin Client is running. You can view the device name in the Kaspersky Thin Client interface. If the thin client name is not on the list, add it to the Managed devices group.

   If a managed device is added to an administration group and an enforced policy is configured for the settings of this group, the settings that were individually configured for this device will not be applied.

3. In the window that opens, select the Applications tab.
4. Click the name of the Kaspersky Security Management Suite web plug-in.

   This opens a window containing information about Kaspersky Thin Client.

5. Select the Application settings tab.
6. Select Connections → Basis.WorkPlace.

   This opens a window in which you can configure settings for connecting to a Basis.WorkPlace remote environment (see the figure below).

   

   Window for configuring settings for connecting to a remote desktop managed by Basis.WorkPlace through the Web Console for one device

7. In IP address or server name, enter the IP address or server name to connect to.
8. If two monitors are installed at your workstation and you want a remote desktop image to be displayed on both monitors, select the Use two monitors check box in the Monitor management block.
9. Click Save in the lower part of the window to save the changes.

1. In the main window of the Web Console, select Devices → Policies & profiles.
2. Click the policy name for the Kaspersky Security Management Suite web plug-in.
3. In the window that opens, select the Application settings tab.
4. Select Connections → Basis.WorkPlace.

   This opens a window in which you can configure settings for connecting to a remote desktop managed by Basis.WorkPlace (see the figure below).

   

   Window for configuring settings for connecting to a remote desktop managed by Basis.WorkPlace through the Web Console for a group of devices

5. In IP address or server name, enter the IP address or server name to connect to.
6. Click Save in the lower part of the window to save the changes.

If the toggle button next to the name of a group of settings is in the Enforced position (), the defined values of these settings are applied to devices on which the policy is applied, and these settings cannot be changed in the Kaspersky Thin Client interface. If the toggle button next to the name of a group of settings is in the Undefined position (), the defined values of these settings are not applied to devices on which the policy is applied, and these settings can be changed for managed devices in the Kaspersky Thin Client interface under Devices → Managed devices.

1. In the main window of the Web Console, select Devices → Managed devices.
2. Click the name of the thin client where Kaspersky Thin Client is running. You can view the device name in the Kaspersky Thin Client interface. If the thin client name is not on the list, add it to the Managed devices group.

   If a managed device is added to an administration group and an enforced policy is configured for the settings of this group, the settings that were individually configured for this device will not be applied.

3. In the window that opens, select the Applications tab.
4. Click the name of the Kaspersky Security Management Suite web plug-in.

   This opens a window containing information about Kaspersky Thin Client.

5. Select the Application settings tab.
6. Select Connections → RDP.

   This opens a window in which you can configure settings for connecting to a remote desktop or virtual application via RDP (see the figure below).

   

   Window for configuring settings for connecting to a remote desktop via RDP through the Web Console for one device

7. In the Server field, enter the IP address or name of the Microsoft Remote Desktop Connection Broker server.
8. In the User name field, enter the name of the user account that will be used for connecting.
9. If you need to use the Microsoft Remote Desktop Connection Broker to connect to a remote desktop, use the Remote Desktop Connection Broker collection ID field to specify the collection ID in the format tsv://MS Terminal Services Plugin.1.collection_id (collection_id refers to the specific identifier of the collection).

   Specify a Remote Desktop Connection Broker collection ID to connect to a virtual application.

10. If you need to start a virtual application, specify the application alias in the Application alias field.

    Specify a Remote Desktop Connection Broker collection ID to connect to a virtual application.

    If you have a configuration file containing the settings for connecting to the Microsoft Remote Desktop Connection Broker and, if needed, the name of the application to open, upload the file by clicking Upload configuration file. In this case, you do not have to complete the Remote Desktop Connection Broker collection ID and Application fields.

11. If you want to automatically restore a remote desktop connection that is unexpectedly disconnected, select the Connect again if connection is lost check box.
12. In the Device redirection settings block, next to the required devices, select the following check boxes:
    • Smart cards if you want to enable redirection of smart cards and tokens.
    • USB drives if you want to enable redirection of USB drives.
    • Printers if you want to enable redirection of printers.

      The remote computer must have the installed driver for the printer that is connected to the thin client.

    • Microphone if you want to enable redirection of audio recording devices.

      Audio volume and other settings are managed from the remote computer.

    • Audio playback devices if you want to enable redirection of headphones or speakers.

      Kaspersky Thin Client supports both mono and stereo playback. Audio volume and other settings are managed from the remote environment.

13. In the Image quality block, select the check boxes next to the remote desktop graphics settings that you need to use:
    • Smooth fonts
    • Menu animation
    • Desktop background
    • Show window contents while dragging
    • Enhanced theme

    Enabling remote desktop display settings may affect the speed of Kaspersky Thin Client operations.

14. If two monitors are installed at your workstation and you want a remote desktop image to be displayed on both monitors, select the Use two monitors check box in the Monitor management block.
15. To improve performance when connected to remote desktops or applications, in the Performance block, check Improve graphics performance.

    If the user needs to connect to a Microsoft Windows 7 remote desktop, uncheck Improve graphics performance. The feature is not supported for connections to Microsoft Windows 7 remote desktops.

16. Click Save in the lower part of the window to save the changes.

1. In the main window of the Web Console, select Devices → Policies & profiles.
2. Click the policy name for the Kaspersky Security Management Suite web plug-in.
3. In the window that opens, select the Application settings tab.
4. Select Connections → RDP.

   This opens a window in which you can configure settings for connecting to a remote desktop via RDP (see the figure below).

   

   Window for configuring settings for connecting to a remote desktop via RDP through the Web Console for a group of devices

5. In the Server field, enter the IP address or server name for connecting to a remote desktop via RDP.
6. In the User name field, enter the name of the user account that will be used to connect to the remote desktop via RDP.
7. If you need to use the Microsoft Remote Desktop Connection Broker to connect to a remote desktop, use the Remote Desktop Connection Broker collection ID field to specify the collection ID in the format tsv://MS Terminal Services Plugin.1.collection_id (collection_id refers to the specific identifier of the collection).

   Specify a Remote Desktop Connection Broker collection ID to connect to a virtual application.

8. If you need to start a virtual application, specify the application alias in the Application alias field.

   Specify a Remote Desktop Connection Broker collection ID to connect to a remote application.

   If you have a configuration file containing the settings for connecting to the Microsoft Remote Desktop Connection Broker and, if needed, the name of the application to open, upload the file by clicking Upload configuration file. In this case, you do not have to complete the Remote Desktop Connection Broker collection ID and Application fields.

9. If you want to automatically restore a remote desktop connection that is unexpectedly disconnected, select the Connect again if connection is lost check box.
10. In the Device redirection settings block, next to the required devices, select the following check boxes:
    • Smart cards if you want to enable redirection of smart cards and tokens.
    • USB drives if you want to enable redirection of USB drives.
    • Printers if you want to enable redirection of printers.

      The remote computer must have the installed driver for the printer that is connected to the thin client.

    • Microphone if you want to enable redirection of audio recording devices.

      Audio volume and other settings are managed from the remote computer.

    • Audio playback devices if you want to enable redirection of headphones or speakers.

      Kaspersky Thin Client supports both mono and stereo playback. Audio volume and other settings are managed from the remote environment.

11. In the Image quality block, select the check boxes next to the remote desktop graphics settings that you need to use:
    • Smooth fonts
    • Menu animation
    • Desktop background
    • Show window contents while dragging
    • Enhanced theme

    Enabling remote desktop display settings may affect the speed of Kaspersky Thin Client operations.

12. To improve performance when connected to remote desktops or applications, in the Performance block, check Improve graphics performance.

    If the user needs to connect to a Microsoft Windows 7 remote desktop, uncheck Improve graphics performance. The feature is not supported for connections to Microsoft Windows 7 remote desktops.

13. Click Save in the lower part of the window to save the changes.

If the toggle button next to the name of a group of settings is in the Enforced position (), the defined values of these settings are applied to devices on which the policy is applied, and these settings cannot be changed in the Kaspersky Thin Client interface. If the toggle button next to the name of a group of settings is in the Undefined position (), the defined values of these settings are not applied to devices on which the policy is applied, and these settings can be changed for managed devices in the Kaspersky Thin Client interface under Devices → Managed devices.

1. In the main window of the Web Console, select Devices → Managed devices.
2. Click the name of the thin client where Kaspersky Thin Client is running. You can view the device name in the Kaspersky Thin Client interface. If the thin client name is not on the list, add it to the Managed devices group.

   If a managed device is added to an administration group and an enforced policy is configured for the settings of this group, the settings that were individually configured for this device will not be applied.

3. In the window that opens, select the Applications tab.
4. Click the name of the Kaspersky Security Management Suite web plug-in.

   This opens a window containing information about Kaspersky Thin Client.

5. Select the Application settings tab.

   Select Connections → Web Access.

   The window for configuring connection settings opens (see the figure below).

   

   Configuration window for connecting to an environment in Web Access through the Web Console

6. In the Connection web address field, enter the server web address for connecting to the required remote environment.
7. Click Save in the lower part of the window to save the changes.

1. In the main window of the Web Console, select Devices → Policies & profiles.
2. Click the policy name for the Kaspersky Security Management Suite web plug-in.
3. In the window that opens, select the Application settings tab.
4. Select Connections → Web Access.

   The window for configuring connection settings opens (see the figure below).

   

   Configuration window for connecting to a remote environment in Web Access through the Web Console

5. In the Connection web address field, enter the server web address for connecting to the required remote environment.
6. Click Save in the lower part of the window to save the changes.

1. In the main window of the Web Console, select Devices → Managed devices.
2. Click the name of the thin client where Kaspersky Thin Client is running. You can view the device name in the Kaspersky Thin Client interface. If the thin client name is not on the list, add it to the Managed devices group.

   If a managed device is added to an administration group and an enforced policy is configured for the settings of this group, the settings that were individually configured for this device will not be applied.

3. In the window that opens, select the Applications tab.
4. Click the name of the Kaspersky Security Management Suite web plug-in.

   This opens a window containing information about Kaspersky Thin Client.

5. Select the Application settings tab.
6. Select the System section (see the figure below).

   

   Window for configuring power-saving settings through the Web Console for one device

7. In the Power-saving settings block, configure the following settings:
   • In the Turn off monitor drop-down list, select the system inactivity period after which the monitor will be turned off.
   • In the Turn off device drop-down list, select the system inactivity period after which the thin client will be turned off.
8. Click Save in the lower part of the window to save the changes.

After Kaspersky Thin Client is synchronized with Kaspersky Security Center, the power-saving settings will be applied to Kaspersky Thin Client.

1. In the main window of the Web Console, select Devices → Policies & profiles.
2. Click the policy name for the Kaspersky Security Management Suite web plug-in.
3. In the window that opens, select the Application settings tab.
4. Select the System section (see the figure below).

   

   Window for configuring power-saving settings through the Web Console for a group of devices

5. In the Power-saving settings block, configure the following settings:
   • In the Turn off monitor drop-down list, select the system inactivity period after which the monitor will be turned off.
   • In the Turn off device drop-down list, select the system inactivity period after which the thin client will be turned off.
6. Click Save in the lower part of the window to save the changes.

After all devices of an administration group are synchronized with Kaspersky Security Center, the power-saving settings will be applied to all Kaspersky Thin Clients included in this group.

If the toggle button next to the name of a group of settings is in the Enforced position (), the defined values of these settings are applied to devices on which the policy is applied, and these settings cannot be changed in the Kaspersky Thin Client interface. If the toggle button next to the name of a group of settings is in the Undefined position (), the defined values of these settings are not applied to devices on which the policy is applied, and these settings can be changed for managed devices in the Kaspersky Thin Client interface under Devices → Managed devices.

1. In the main window of the Web Console, select Devices → Managed devices.
2. Click the name of the thin client where Kaspersky Thin Client is running. You can view the device name in the Kaspersky Thin Client interface. If the thin client name is not on the list, add it to the Managed devices group.

   If a managed device is added to an administration group and an enforced policy is configured for the settings of this group, the settings that were individually configured for this device will not be applied.

3. In the window that opens, select the Applications tab.
4. Click the name of the Kaspersky Security Management Suite web plug-in.

   This opens a window containing information about Kaspersky Thin Client.

5. Select the Application settings tab.
6. Select the System section (see the figure below).

   

   Window for configuring the interface language and time zone through the Web Console for one device

7. In the System settings of the device block, select the relevant values from the Interface language and Time zone drop-down lists.
8. Click Save in the lower part of the window to save the changes.

1. In the main window of the Web Console, select Devices → Policies & profiles.
2. Click the policy name for the Kaspersky Security Management Suite web plug-in.
3. In the window that opens, select the Application settings tab.
4. Select the System section (see the figure below).

   

   Window for configuring the interface language and time zone through the Web Console for a group of devices

5. In the System settings of the device block, select the relevant values from the Interface language and Time zone drop-down lists.
6. Click Save in the lower part of the window to save the changes.

If the toggle button next to the name of a group of settings is in the Enforced position (), the defined values of these settings are applied to devices on which the policy is applied, and these settings cannot be changed in the Kaspersky Thin Client interface. If the toggle button next to the name of a group of settings is in the Undefined position (), the defined values of these settings are not applied to devices on which the policy is applied, and these settings can be changed for managed devices in the Kaspersky Thin Client interface under Devices → Managed devices.

1. In the main window of the Web Console, select Devices → Managed devices.
2. Click the name of the thin client where Kaspersky Thin Client is running. You can view the device name in the Kaspersky Thin Client interface. If the thin client name is not on the list, add it to the Managed devices group.

   If a managed device is added to an administration group and an enforced policy is configured for the settings of this group, the settings that were individually configured for this device will not be applied.

3. In the window that opens, select the Applications tab.
4. Click the name of the Kaspersky Security Management Suite web plug-in.

   This opens a window containing information about Kaspersky Thin Client.

5. Select the Application settings tab.
6. Select the Data exchange section (see the figure below).

   

   Window for configuring forwarding of Kaspersky Thin Client logs through the Web Console for one device

7. In the Log forwarding address field, enter the address of the destination log server in the format https://<server address>. Make sure that a log server compliant with the requirements is deployed in the enterprise infrastructure.
8. Click Save in the lower part of the window to save the changes.

1. In the main window of the Web Console, select Devices → Policies & profiles.
2. Click the policy name for the Kaspersky Security Management Suite web plug-in.
3. In the window that opens, select the Application settings tab.
4. Select the Data exchange section (see the figure below).

   

   Window for configuring forwarding of Kaspersky Thin Client logs through the Web Console for a group of devices

5. In the Log forwarding address field, enter the address of the destination log server in the format https://<server address>. Make sure that a log server compliant with the requirements is deployed in the enterprise infrastructure.
6. Click Save in the lower part of the window to save the changes.