[KB8337] Scheduled import of Device control configuration in ESET Windows endpoint products

Issue

• Schedule an import of the Device control configuration in ESET Endpoint Security or ESET Endpoint Antivirus

Solution

You can import a Device control group with rules from an XML file using the task scheduler in ESET Windows endpoint product.

XML files with serial numbers that will be periodically imported must have a valid product configuration. You may not be able to use Device Control groups for other configurations.

1. Enable Device control and add a new group and rules
2. Enable and configure ESET RMM
3. Schedule Device control update task

Enable Device control and add a new group and rules

1. Open the main program window of ESET Windows Endpoint product.

2. Press the F5 key to access Advanced setup.

3. Click Device control and click the toggle next to Enable Device control to enable it. Click Edit next to Groups.

   

4. Click Add, type a name for a new group (in this example, Whitelist group) and click OK → OK.

   

5. Click Edit next to Rules.

   

6. Click Add and type a name for a new rule (in this example, Whitelist rule). Verify that Allow is selected from the Action drop-down menu. Select Device group from the Criteria type drop-down menu and click OK.

   

7. Click Add and type a name for a new rule (in this example, Block rule). Select Block from the Action drop-down menu. Verify that Device is selected from the Criteria type drop-down menu and click OK.

   

8. Verify that the two added rules have proper settings selected and click OK to save the changes.

   

Enable and configure ESET RMM

1. Click Tools, expand ESET RMM and click the toggle next to Enable RMM to enable it. Select All operations from the Working mode drop-down menu. Click Edit next to Application paths.

   

2. Click Add. Type or copy/paste the application path to the Add path field and click OK → OK.
   
   Application path:

   C:\Program Files\ESET\ESET Security\eRmm.exe

   

3. Click OK to exit the Advanced setup.

Schedule Device control update task

1. In the main menu of your ESET Windows endpoint product, click Tools → Scheduler.

   

2. Click Add task. Type a name for a new task (in this example, Device control update) and verify that Run external application is selected from the Task type drop-down menu. Click Next.

   

3. Schedule the new task to run (in this example, the task is set to run Once) and click Next.

   

4. Select the date/time interval for task execution. This window is different for each option selected in step 3. Click Next.

   

5. Select an option for when the task should run if the task has been skipped and click Next.

   

6. Copy/paste the application path to the Executable file and copy/paste the parameters line in the Parameters field. The Work folder will be populated accordingly. Click Finish.
   
   Executable file application path:

   C:\Program Files\ESET\ESET Security\eRmm.exe

   Parameters line:

   set configuration --file <path-to-file>

   

7. The XML file imported from the scheduled task should look as follows:

   <?xml version="1.0"?>
   <ESET>
    <PRODUCT NAME="endpoint" VERSION="10.0.2034.0" EXPORTED_BY_CE="2021.1 (20221207); 1914">
     <ITEM NAME="plugins">
      <ITEM NAME="01000e00">
       <ITEM NAME="settings">
        <ITEM NAME="groups" DELETE="1">
         <ITEM NAME="1">
          <NODE NAME="guid" TYPE="string" VALUE="334c2573-0662-4965-a406-f02d00000002" />
          <NODE NAME="name" TYPE="string" VALUE="Whitelist" />
          <ITEM NAME="params" DELETE="1">
          </ITEM>
         </ITEM>
        </ITEM>
       </ITEM>
      </ITEM>
     </ITEM>
    </PRODUCT>
   </ESET>

8. You can add serial numbers to the XML file as follows:

   <?xml version="1.0"?>
   <ESET>
    <PRODUCT NAME="endpoint" VERSION="9.1.2057" EXPORTED_BY_CE="2021.1 (20220711); 1914">
     <ITEM NAME="plugins">
      <ITEM NAME="01000e00">
       <ITEM NAME="settings">
        <ITEM NAME="groups" DELETE="1">
         <ITEM NAME="1">
          <NODE NAME="guid" TYPE="string" VALUE="334c2573-0662-4965-a406-f02d00000002" />
          <NODE NAME="name" TYPE="string" VALUE="Whitelist" />
          <ITEM NAME="params" DELETE="1">
           <ITEM NAME="1">
            <NODE NAME="serial" TYPE="string" VALUE="123456798" />
           </ITEM>
           <ITEM NAME="2">
            <NODE NAME="serial" TYPE="string" VALUE="56789123456" />
           </ITEM>
          </ITEM>
         </ITEM>
        </ITEM>
       </ITEM>
      </ITEM>
     </ITEM>
    </PRODUCT>
   </ESET>