[KB7736] Deploy the ESET Management Agent via SCCM or GPO (Windows)

This article assumes that you have the appropriate access rights and permissions to perform the tasks below.

If you are unable to perform the tasks below (the option is unavailable), create a second administrator user with all access rights.

ESET PROTECT users: Create a second administrator user in ESET PROTECT
ESET PROTECT On-Prem users: Create a second administrator user in ESET PROTECT On-Prem

Create and download ESET Management Agent installer and configuration files for deployment via Group Policy Object (GPO) or System Center Configuration Manager (SCCM)
Deploy ESET Management Agent via Group Policy Object (GPO) or System Center Configuration Manager (SCCM)

Click the appropriate expander below.

ESET PROTECT

Open the ESET PROTECT Web Console.
Click Installers → Create Installer.
Click Customize installer.
Click Windows and in the Distribution list, select Use GPO or SCCM for deployment and click Finish.

Parent group selection

The parent group is mandatory if you use ESET PROTECT Hub or ESET Business Account with sites, or ESET MSP Administrator, and optional if you use ESET PROTECT Hub or ESET Business Account without sites.

Click Select in the Parent group section to select a parent group where ESET PROTECT will place the computer after the Agent installation.
Click the GPO/SCCM configuration script icon to download the install_config.ini and click your preferred ESET Management Agent version to download the correct installer file. When the downloads are complete, click Finish. Alternatively, you can download the ESET Management Agent installer .msi file from the ESET download page.
Save the Agent installer file and the install_config.ini file to a shared folder on the domain controller so all your client computers can access it with read and execute permissions.
Click the appropriate link below to deploy ESET Management Agent via Group Policy Object (GPO) or System Center Configuration Manager (SCCM):
- Deploy the ESET Management Agent using a Group Policy Object (GPO)
- Deploy the ESET Management Agent using System Center Configuration Manager (SCCM)

ESET PROTECT On-Prem

Open the ESET PROTECT Web Console.
Click Installers → Add.
Click Windows and in the Distribution list, select Use GPO or SCCM for deployment. Edit Server hostname, Port and certificates if you need to change the automatically pre-filled values based on your ESET PROTECT Server configuration. Click Finish.
Click the GPO/SCCM configuration script icon to download the install_config.ini and click your preferred ESET Management Agent version to download the correct installer file. When the downloads are complete, click Finish. Alternatively, you can download the ESET Management Agent installer .msi file from the ESET download page.
Save the Agent installer file and the install_config.ini file to a shared folder on the domain controller so all your client computers can access it with read and execute permissions.
Click the appropriate link below to deploy ESET Management Agent via Group Policy Object (GPO) or System Center Configuration Manager (SCCM):
- Deploy the ESET Management Agent using a Group Policy Object (GPO)
- Deploy the ESET Management Agent using System Center Configuration Manager (SCCM)

Last Updated: Feb 6, 2026