[KB7915] Add or remove password protection of ESET security product settings from ESET PROTECT or ESET PROTECT On-Prem

Issue

Required user permissions

This article assumes that you have the appropriate access rights and permissions to perform the tasks below.

If you use the default Administrator user or are unable to perform the tasks below (the option is unavailable), create a second administrator user with all access rights.

Solution

 Endpoint users: Perform these steps on individual client workstations
Agent password protection is not available for macOS users

ESET Management Agent password protection is not available for macOS client computers running ESET endpoint products for macOS.

You can lock the settings set via policy in ESET PROTECT. If a policy is set and locked via ESET PROTECT, it cannot be configured locally in the ESET endpoint product on a macOS client computer.

Add password protection for ESET security product settings

Agent password protection

If the ESET Management Agent is password-protected, you must provide the password to uninstall, repair or upgrade with changes.

  1. Open ESET PROTECT or ESET PROTECT On-Prem

  2. Click Policies, select the desired Built-in Policies and select the check box next to the policy you want to modify. Click Actions → Edit.

    Figure 1-1
  1. Click SettingsUser Interface and expand Access Setup. Click Set next to Password protected settings (for the Endpoint version).

    Figure 1-2
  1. Type the password in the New password and Confirm password fields. Click OK to save your changes.

    Figure 1-3
  1. Click Finish to save your changes. Client computers will receive the changes the next time they log in to the ESET PROTECT Server.

    Figure 1-4

Remove password protection for ESET security product settings

  1. Follow steps 1-3 from the previous section.

  2. Click Settings → User Interface and expand Access Setup. Verify that the dot next to Password protected settings is blue. Click Remove next to Change password and click Finish.

    Figure 2-1

macOS users—Lock settings set via policy

ESET Management Agent password protection is not available for macOS client computers running ESET endpoint products for macOS.

To prevent users from editing settings on a macOS client computer, verify that all settings set via policy in ESET PROTECT are locked:

Click the full grey dot next to the chosen settings in a policy to set and lock these settings (the full grey dot turns blue when enabled).

Figure 3-1

If a policy is set and locked via ESET PROTECT, it cannot be configured locally in the ESET endpoint product on a macOS client computer, unless the user is a privileged user.


Privileged users in ESET endpoint products for macOS


ESET Endpoint Antivirus for macOS 7.x and later

In ESET Endpoint Antivirus for macOS 7.x and later, you cannot set a privileged user in the product's settings. All product settings must be managed from ESET PROTECT.

You can lock the settings set via policy in ESET PROTECT. If a policy is set and locked via ESET PROTECT, it cannot be configured locally in the ESET endpoint product on a macOS client computer.