[KB8062] Recommended settings for ESET Server Security for Microsoft Windows Server installed on a terminal or Citrix server

Issue

• Configure ESET Server Security for Microsoft Windows Server installed on a terminal or Citrix server

Details

Solution

1. Disable the ESET Server Security for Microsoft Windows Server graphic user interface (GUI) to prevent it from starting up every time a user logs in
2. Scan file execution events and local drives only (Citrix servers only)
3. Add required exclusions (Citrix servers only)

I. Disable the ESET Server Security for Microsoft Windows Server graphic user interface (GUI)

Assign the Visibility - Silent mode policy via ESET PROTECT or ESET PROTECT On-Prem to enable silent mode on a server, or manually update individual client workstations using ESET Shell.

Assign the Visibility - Silent mode policy via ESET PROTECT or ESET PROTECT On-Prem to enable silent mode on a server

1. Open the ESET PROTECT Web Console.

2. Assign the policy:

   ---

   ESET PROTECT

   
   

   Click Configuration → Advanced setup → ESET Server/File Security for Microsoft Windows Server. Click the Visibility - Silent mode policy and click Assign computers.

   

   ---

   ESET PROTECT On-Prem

   
   

   Click Policies → ESET Server/File Security for Microsoft Windows Server. Click the Visibility - Silent mode policy and click Assign computers.

   

   ---

3. Select the check box next to the appropriate computer and click OK.

   For more information about applying policies, see how policies are applied to clients.

   

4. If you are using a Citrix server, continue to Section II.

Manually update individual client workstations using ESET Shell

1. Click Start, type ESET Shell and click ESET Shell.

   If prompted, type the username and password for the administrative account. If you are opening ESET Shell for the first time, press the X key to skip the help section.

   

2. Type the following command and press the Enter key:

   set ui ui gui-start-mode none

   Check or Change your GUI Mode

   If you want to find out what mode is currently used, run the following command in ESET Shell:

   get ui ui gui-start-mode

   The following commands will change the GUI mode that you are using:

   set ui ui gui-start-mode full

   set ui ui gui-start-mode none

   

3. If you are using a Citrix server, continue to Section II.

II. Scan file execution events and local drives only (Citrix servers only)

1. Open the main program window of ESET Server Security for Microsoft Windows Server.

2. Press F5 to open Advanced setup.

3. Click Protections → Real-time file system protection. Disable the toggle next to the following settings and click OK:

   • Network drives
   • File open
   • File creation
   • Removable media boot sector access
     
     

   

4. Continue to Section III to add exclusions for a Citrix server.

III. Add required exclusions (Citrix servers only)

1. Open the main program window of ESET Server Security for Microsoft Windows Server.

2. Press F5 to open Advanced setup.

3. Click Scans, expand Exclusions, and click Edit next to Performance exclusions.

   

4. Click Add, type C:\Program Files\Citrix\ into the Path field and click OK → OK → OK.

   To add additional file paths to exclude, type \ at the end of the path. ESET will treat \ as a wildcard, and all children of the original path will be excluded.

   View the Citrix Consolidated list of Antivirus exclusions.