[KB6756] Remove third-party antivirus software from client computers using ESET Security Management Center (7.x)

Solution

ESET Security Management Center (ESMC) 7 User Permissions

This article assumes that your ESMC user has the correct access rights and permissions to perform the tasks below.

If you are still using the default Administrator user, or you are unable to perform the tasks below (the option is grayed out), see the following article to create a second administrator user with all access rights (you only need to do this once):

View permissions needed for least privilege user access

A user must have the following permissions for their home group:

Functionality Read Use Write
Reports and Dashboard
Policies
Generate Report (under Server Tasks & Triggers)
Software Uninstall (under Client Tasks)

A user must have the following permissions for each affected object:

Functionality Read Use Write
Groups & Computers

Once these permissions are in place, follow the steps below.

  1. Open ESET Security Management Web Console (ESMC Web Console) in your web browser and log in.

  2. Click PoliciesPoliciesNew.

Figure 1-1
Click the image to view larger in new window

  1. Type a name for your new policy inthe Name field (for example, "Policy for ESET Management Agent"). Optionally, type a description inthe Descriptionfield.

Figure 1-2
Click the image to view larger in new window

  1. Click Settingsand select ESET Management Agent from the drop-down menu.

  2. Expand Advanced Settings,scroll down to theOperating Systemsection and select the slider bar next toReport non-ESET-installed applications.

Figure 1-3
Click the image to view larger in new window

  1. In theAssign sectionclick Assign. Select the checkbox next to eachstatic or dynamic groupthat this policy will be assigned to and clickOK. ClickFinishto save the policy.Agents running on client computers will receive the new policy the next time they check in (the default check in interval is 20 minutes). Alternatively, you can send a wakeup call to client computers so they receive the changes sooner.

  2. ClickReports , select Installed applications and then click Generate now.

    Creating a new report template in ESMC 7.0

    If you do not have report templates in your home group, continue with one of these steps:

Figure 1-4
Click the image to view larger in new window

  1. Verify that the third-party Antivirus program and version you want to remove is listed in the report.

  2. Click Client Tasks, expand Operating System, selectSoftware Uninstall and then click New.

Figure 1-5
Click the image to view larger in new window

  1. Type a name for your new task inthe Name field and thenselect Software Uninstall from the Task drop-down menu.

Figure 1-6
Click the image to view larger in new window

  1. Expand Settingsand select Third-party antivirus software (Built with OPSWAT) from the drop-down menu. Please note that you will add Targets after the task is created.
  2. ClickFinishwhen you are finished making changes to your task.

    Figure 1-7
    Click the image to view larger in new window

  3. ClickCreate Triggerwhen you are asked if you want to add a trigger for the client task. Click for instructions Create a Trigger and add Target computers or groups to execute a Client Task (7.x)