[KB3702] Configure ESET Remote Administrator to automatically deploy ESET endpoint products to unprotected computers (6.x)

Issue

  • Configure a dynamic group that identifies client computers not protected by ESET endpoint products
  • Configure an automated task to deploy ESET endpoint products to unprotected computers

 

Solution

End of support for version 6.4 and 6.5 of ESET Remote Administrator / MDM

ESET Remote Administrator version 6.5 is currently in Limited Support status and will soon be in Basic Support status. It is expected to reach End of Life status in December 2020.

ESET Remote Administrator version 6.4 is currently in End of Life status and no longer available for download.

The MDM functionality in ESET Remote Administrator version 6 is currently in End of Life status and no longer available for download

Examples of Dynamic Group templates and their use

For aditional examples of using Dynamic Group templates, see Dynamic Group template - examples in ERA Online Help and Related articles below.

I. Create New Dynamic Group

View permissions needed for least privilege user access

ERA 6.5 User Permissions

This article assumes that your ERA user has the correct access rights and permissions to perform the tasks below.

If you are still using the default Administrator user, or you are unable to perform the tasks below (the option is grayed out), see the following article to create a second administrator user with all access rights (you only need to do this once):

A user must have the following permissions for their home group:

Functionality Read Use Write
Groups & Computers

Once these permissions are in place, follow the steps below.

  1. Open ESET Remote Administrator Web Console (ERA Web Console) in your web browser and log in.

  2. Click Computers .
     
  3. Select the parent static group that you want the new group to be under, click the gear icon and then select New Dynamic Group from the context menu.

Figure 1-1
Click the image to view larger in new window

  1. Type a name for the group into the Name field. If necessary, configure the Description and Parent Group settings to your preferences.

Figure 1-2
Click the image to view larger in new window

  1. Expand Template and click New.

Figure 1-3
Click the image to view larger in new window

  1. Type a name into the Name field.

Figure 1-4

  1. Expand Expression, select NOR (All conditions have to be false) from the Operation drop-down menu and then click Add Rule.

    Figure 1-5
    Click the image to view larger in new window

  2. Expand Installed software, select Application name and then click OK.

Figure 1-6

  1. Select has prefix from the drop-down menu, enter ESET Endpoint or ESET File (depending on which product you want automatically deployed to client workstations in this dynamic group) and then click Finish.

Figure 1-7

  1. Click Finish and proceed to part II.

 

II. Create a new Client Task to deploy ESET endpoint products to unprotected clients

View permissions needed for least privilege user access

A user must have the following permissions for each affected object:

Functionality Read Use Write
Groups & Computers

A user must have the following permissions for their home group:

Functionality Read Use Write
Software Install (under Client Tasks)

Once these permissions are in place, follow the steps below.

  1. Click Admin Client Tasks.
     
  2. Expand ESET Security Product, select Software Install and then click New.

Figure 2-1
Click the image to view larger in new window

  1. Type a name for the task into the Name field (configure the other settings in the Basic section as necessary).
  1. Expand Settings, select the check box next to I agree with application End User License Agreement and then click Choose ESET License. Please note that you will add Targets after the task is created.

    ESET Remote Administrator version 6.2.11 and earlier:

    Adding targets is done during task creation (for example, after adding a new task and giving it a Name, click Target to add groups or clients to the task).

    Figure 2-2
    Click the image to view larger in new window

  2. Select a valid license and click OK.
     
  3. Click Choose Package.
     
  4. Select the product you want to deploy and click OK.

    Figure 2-3
    Click the image to view larger in new window

  5. Click Finish when you are finished making changes to your task.
     
  6. Click Create Trigger when you are asked whether you want to add a trigger for the client task.

    Figure 2-4

  7. Expand Targets. Click Add groups and select the check box next the dynamic group you created in part I. Click OK.

    Figure 2-5
    Click the image to view larger in new window

  8. Expand the Trigger section and select Joined Dynamic Group Trigger from the Trigger Type drop-down menu.

    Figure 2-6
    Click the image to view larger in new window

  9. Click Finish.

    Figure 2-7
    Click the image to view larger in new window