[KB7915] Add or remove password protection of ESET security product settings from ESET PROTECT On-Prem

Issue

Required user permissions

This article assumes that you have the appropriate access rights and permissions to perform the tasks below.

If you use the default Administrator user or are unable to perform the tasks below (the option is unavailable), create a second administrator user with all access rights.

Solution

 Endpoint users: Perform these steps on individual client workstations
Agent password protection is not available for macOS users

ESET Management Agent password protection is not available for macOS client computers running ESET endpoint products for macOS.

You can lock the settings set via policy in ESET PROTECT On-Prem. If a policy is set and locked via ESET PROTECT On-Prem, it cannot be configured locally in the ESET endpoint product on a macOS client computer.

ESET Endpoint Security for macOS / ESET Endpoint Antivirus for macOS 6.10–6.11 users:

ESET Endpoint Security for macOS and ESET Endpoint Antivirus for macOS version 6.10–6.11 users can specify privileged users who can modify settings in policies in the ESET endpoint security product for macOS.

Add password protection for ESET security product settings

Agent password protection

If the ESET Management Agent is password-protected, you must provide the password to uninstall, repair or upgrade (with changes).

  1. Open ESET PROTECT On-Prem in your web browser and log in.

  2. Click Policies, select the desired Built-in Policies and select the check box next to the policy you want to modify. Click Actions → Edit.

    Alternatively, click Policies → New Policy and select ESET Endpoint for Windows from the drop-down menu. 

    Figure 1-1
  1. If you have selected New Policy in the previous step, select ESET Endpoint for Windows from the drop-down menu.

  2. Click SettingsUser Interface and expand Access Setup. Click Set next to Password protected settings (select the option based on your Endpoint version).

    Figure 1-2
  3. Type the password in the New password and Confirm password fields. Click OK to save your changes.

    Figure 1-3
  1. Click Finish to save your changes. Client computers will receive the changes the next time they log in to the ESET PROTECT Server.

    Figure 1-4

Remove password protection for ESET security product settings

  1. Follow steps 1-3 from the previous section.

  2. Click Settings → User Interface and expand Access Setup. Verify that the dot next to Password protected settings is blue. Click Remove next to Change password and click Finish.

    Figure 2-1

macOS users—Lock settings set via policy

ESET Management Agent password protection is not available for macOS client computers running ESET endpoint product for macOS.

To prevent users from editing settings on a macOS client computer, verify that all settings set via policy in ESET PROTECT On-Prem are locked:

Click the full grey dot next to chosen settings in a policy to set and lock these settings (the full grey dot turns blue when enabled).

Figure 3-1

If a policy is set and locked via ESET PROTECT On-Prem, it cannot be configured locally in the ESET endpoint product on a macOS client computer, unless the user is a privileged user.


macOS users—Add a privileged user in ESET endpoint product for macOS


ESET Endpoint Antivirus for macOS 7.x and later

In ESET Endpoint Antivirus for macOS 7.x and later, you cannot set a privileged user in the products settings. All product settings must be managed from ESET PROTECT On-Prem.

You can lock the settings set via policy in ESET PROTECT On-Prem. If a policy is set and locked via ESET PROTECT On-Prem, it cannot be configured locally in the ESET endpoint product on a macOS client computer.


ESET Endpoint Security for macOS and ESET Endpoint Antivirus for macOS version 6.10–6.11
Privileged users on macOS client computer

Be aware that privileged users using an endpoint security product on a macOS client computer can uninstall the endpoint product.

We recommend configuring and locking the settings for the endpoint product via policy in ESET PROTECT On-Prem.

On a macOS client computer, you can specify privileged users who can modify the policy's settings in the ESET endpoint product for macOS.

  1. Open the main window of your ESET endpoint security product for macOS.

  2. Click SetupEnter application preferences.

    Figure 4-1
  3. In the Tools section, click Privileges.

    Figure 4-2
  4. In the Users list, select users that you would like to add to the Selected Users list and click Add. Use the Remove button to remove users if needed. Close the Privileges dialog window.

    Figure 4-3
The users that have been added to Selected Users list now have privileges to modify settings in a policy in the endpoint security product for macOS.