[KB82] Remote installation requirements and checklist for ESET Security Management Center (7.x)

Issue

ESET business product in Limited Support status

This article applies to an ESET product version that is currently in Limited Support status and is scheduled to reach End of Life status soon.

For a complete list of supported products and support level definitions, review the ESET End of Life Policy for business products.

Upgrade ESET business products.

Solution

Previous antivirus software

It is important that any previously installed antivirus software is uninstalled from your client workstations before attempting a remote deployment. Uninstallers (removal tools) for common antivirus software

Click to view instructions to perform a remote deployment of ESET Management Agent.

ESET Security Management Center (ESMC) allows remote deployment from the ESMC web console to any workstation on the network. The steps in this document describe the main requirements for the execution of this process. Verifying each of the tasks below is strongly recommended before performing the first trial installation on client workstations:

  • The client workstation where you are trying to install the ESET client solution remotely must answer a ping from the computer where the ESMC Server is installed.
     
  • If both the client workstation and the server are in a mixed environment of Domain and Work Group (or if the ESMC Server is running Windows 2003), Use simple file sharing (located under the Tools → Folder Options → View) should be disabled.
     
  • Workstation must have the shared resource ADMIN$ activated (Start → Control Panel → Administrative Tools → Computer Management → Shared Folders → Shares).
     
  • The user performing the remote installation must have administrator rights.
     
  • Set the Domain Admin:
    1.  To set Domain Admin. permissions for ESMC, click Start → Control Panel → Administrative Tools → Services. Right-click the ESET Security Management Center Server service and click Properties from the context menu.
       
    2.  Click Log On, and select This account:. Next to This account: enter your domain name and admin account name (for example MyDomainAdministratorAccountName). Enter your admin password in the Password and Confirm Password fields.
       
    3.  Run the ESMC service with Domain Administrator permissions.
  • The user with administrator rights must not have a blank password.
     
  • Verify that you can remotely log in to the workstation from the server.
     
  • Verify that you can access the workstation IPC from the Server machine by issuing the following from the Command Prompt on the workstation:

    net use \\workstation\IPC$ where workstation is the name of the workstation
     
  • The firewall on the network must not block communications or file sharing between servers and workstations.
     
  • The ESMC Server must allow data reception on port 2222.

  • Client workstations are visible in both the server and the workstation connection.

  • "File and Print Sharing for Microsoft Networks" is enabled (Control Panel → Network Connections → Network → Properties).

  • The Remote Procedure Call (RPC) service is running on the workstation.

  • The Remote Registry service is running on the workstation.

  • The RPC Locator service should be set to "manual" and should not be running.