[KB6783] Add or remove password protection of ESET security product settings from ESET Security Management Center (7.x)

Issue

Required user permissions

This article assumes that you have the appropriate access rights and permissions to perform the tasks below.

If you use the default Administrator user or are unable to perform the tasks below (the option is unavailable), create a second administrator user with all access rights.

ESET business product in Limited Support status

This content applies to an ESET product version that is currently in Limited Support status and is scheduled to reach End of Life status soon.

For a complete list of supported products and support level definitions, review the ESET End of Life Policy for business products.

Upgrade ESET business products.

Solution

Add password protection

 Endpoint users: Perform these steps on individual client workstations

Agent password protection is not available for macOS users

ESET Management Agent password protection is not available for macOS client computers running ESET endpoint product for macOS.

You can lock the settings set via policy in ESET Security Management Center. If a policy is set and locked via ESET Security Management Center, it cannot be configured locally in the ESET endpoint product on a macOS client computer.

Specify privileged users who can modify settings in a policy in the endpoint security product for macOS.

  1. Open ESET Security Management Center Web Console in your web browser and log in.

  2. Click Policies, select the policy that you want to modify and click PoliciesEdit.

    Alternatively, click Policies → New Policy.

    Figure 1-1
    Click the image to view larger in new window
  3. Click Settings. If you have selected New Policy in the previous step, select ESET Endpoint for Windows from the drop-down menu.

    Figure 1-2
    Click the image to view larger in new window
  4. Click User Interface, expand Access Setup and click the slider bar next to Password protect settings to enable it (select the option based on your Endpoint version).

    Figure 1-3
    Click the image to view larger in new window
  5. Type the password in the New password and Confirm password fields. Click OK to save your changes.

    Figure 1-4
  6. Click Finish to save your changes.

Client computers assigned to this policy will receive the changes the next time they check in to the ESET Security Management Center Server. Assign a policy.


Remove password protection

Follow the steps below to remove password protection from ESET security product settings on client workstations. You have two options:

  1. Edit the policy used to set the password protection:

    Follow step 4 in the previous section and click the slider bar next to Password protect settings to disable the password.

  1. Create a new policy to disable password protection:

    1. Create a new policy for endpoint products for Windows in ESET Security Management Center.

    2. Click SettingsUser Interface, expand Access Setup and click the full gray dot next to Set password to enable it (select the option based on your Endpoint version). Click Continue and proceed to the Assign section to assign the policy.

      Figure 2-1
      Click the image to view larger in new window

This setting forces no password (removes the password) on the client computers selected in the Assign section of the Policy.


macOS users—Lock settings set via policy

ESET Management Agent password protection is not available for macOS client computers running ESET endpoint product for macOS.

To prevent users from editing settings on a macOS client computer, verify that all settings set via policy in ESET Security Management Center are locked:

Click the full grey dot next to chosen settings in a policy to set and lock these settings (the full grey dot turns blue when enabled).

Figure 3-1

If a policy is set and locked via ESET Security Management Center, it cannot be configured locally in the ESET endpoint product on a macOS client computer, unless the user has privileges.


macOS users—Add a privileged user in ESET endpoint product for macOS

Privileged users on macOS client computer

Be aware that privileged users using an endpoint security product on a macOS client computer are able to uninstall the endpoint product.

ESET recommends configuring and locking the settings for the endpoint product via policy in ESET Security Management Center.

On a macOS client computer, you can specify privileged users who can modify settings in the policy in the endpoint product for macOS.

  1. Open the main window of your ESET endpoint security product for macOS. 

  2. Click SetupEnter application preferences.

  3. In the Tools section, click Privileges.

  4. In the Users list, select users that you would like to add to the Selected Users list and click Add. Use the Remove button to remove users if needed. Close the Privileges dialog window.

    Figure 4-1

    The users that have been added to Selected Users list now have privileges to modify settings in a policy in the endpoint security product for macOS.