ewong

Here's what I've done: 1) Ran EsetUninstaller on all systems. (copy file to system, boot to safe mode, run esetuninstaller, uninstalled All ESET products, rebooted, logged in as administrator, ran "gpupdate /force", rebooted, and it would then install the Agent 2) I then did a software install (AV install) task on all the systems. Now more or less, things are 'normal'. Though I'm having some difficulty with getting the agent gpo for a 2012 server to work. So I am guessing that it isn't a good idea to do both Agent and AV/FS GPOs. Thanks! Ed

I think I am doing something wrong. Do I also GPO-deploy the AV as well or do I do that within the Agent? I did a GPO deploy for both the Agent and the AV, and it's screwing up in the process. I think this might not be the right approach.

I think you're correct because now when I try to uninstall it, I'd get a critical error. So what I need to do is to run the EsetUninstaller manually on all machines. I've tested it with one machine and while the control panel still shows the Agent as installed, the agent installation directory isn't in c:\program files. So I think I'm going to have to junk all those MSI files and redo the whole shebang. I'm wondering if the msi file is corrupted or something. Will report back...

Hi MartinK, Yes, I've looked at the Lost&Found and there are no computers mentioned. They are all in COMPUTERS but all (except the XP machines) have O status. I've rebooted and while the ERA server now has FS and Agent installed, it's not even registering itself to the itself. There are two issues that I think I'm finding particularly weird. 1) Going to Control Panel and look up the list of installed programs on a system (say, the ERA), it should list all the ERA software (incl. Agent). And it does.. However, going into c:\Program Files\ESET\RemoteAdministrator, I see no Agent folder (so no status logs). 2) Now when I go to one of the machines and try to repair the ESET Remote Administrator Agent, it shows "localhost" as the server. Should "repair" show the saved server host and not a default 'localhost'? Any clarifications appreciated. Ed

As an another addendum, only 2 systems connect to the ERA server. Both are XPs (the others are Win7 pros). Not sure what's going on. [Note: Yes, Not my choice in the matter wrt the XP situation... will need to wait for them to bust.. at least one of 'em]

Forgot to mention, All the other systems do have Agent and AV installed via GPO. They just need product activation; which I can't provide since the ERA server can't connect with them. I'm thinking of rebooting the ERA system... hope that unhorks it. Ed

Hi, I'm uncertain where I went wrong in deploying Agents & AVs with the GPO. I'm now wondering if I even need to deploy the AVs. I had done this before but have completely forgotten how to do it. Here's what I've done: 1) in ERA web console, I create the install_config.ini and stick that in an accessible UNC path. [in the install_config.ini, the host *is* set to my era server) 2) download the agents and avs msi file and store that in the unc path 3) Create GPOs for the Agent and AV deployment, setting to Advanced deployment (as opposed to Assigned). 3) Reboot all the systems which then install the Agent and AVs 4) in ERA web console, I sync with the AD. At this point, all the domain systems are in the COMPUTERS group, all of which have "No status". I've now waited for an hour and still only two machines have connected. Not even the ERA server's agent has called in. I'm thinking it is a firewall issue so I set up a GPO to allow tcp 2222 access, but still no go. Am I missing something? Thanks ed

Thanks for the clarification. Re: #2 "restrict them to access the eset licensing server", what about updates? If these offline servers access the proxy, then they'd access the licensing server. My main purpose is to eliminate any internet access to the servers and have everyone update from the update server (proxy.. though I want to set up a mirror).

Just wondering.. so if you have different nod32 clients (v4, v5, v6), you need to manually specify that? I think I need to set up something like what you're doing as well.

Hi, I have four servers (and some clients) that I want to update via a proxy server (one of the servers). Three servers don't have access to the Internet. I've activated these three servers using an offline license. However, in the license administrator, it's now saying two of these servers have Internet access and shouldn't use the offline activation method. But that's not possible since I've disabled their Internet access and aside for the proxy (which allows only ESET connections (afaik)). So could it be that because those two servers are accessing ESET update servers (via proxy), the ESET update/license servers are detecting that? In this case, what should I do? Looking at the License Administrator's Unit Management is annoying me. Am I to take from this is that I need to change to a mirror method? (Why was the mirroring removed?) Can someone please clarify? Thanks Ed

Thanks for the info on what the agent is running at. I'm having a bunch of issues that I'm not even sure where to begin to ask. That said, this item isn't (currently) a priority to solve (unless I'm mistaken).

Hi, I'm currently encountering this issue and am not sure how to fix this. The log: C:\ProgramData\ESET\RemoteAdministrator\Agent\EraAgentApplicationData\Logs\status.html shows everything's green. Where do I set it such that the agent has administrator access or whatever the recommended setting is? Thanks

Hi, I've looked at the server that the ERA server is installed on as well as the main servers and I'm stumped as to why when looking at the list of computers, the Last Connected on all the computers show a timestamp in the future (currently, it's 14:33 .. but the Last Connected is showing 20:33). Did I screw up some setting somewhere? Thanks ed

Hi MichalJ, Where can I ask about the API? Thanks

*That* is brilliant! Thanks! I was hammering port 2221 and it kept on giving me a connection failed. And it's a JSON based serverAPI? That's awesome! Thanks! ed

Hi, In the server settings, there's a Remote Administrator port. Is this the same remote administrator port that's mentioned in the API for era_Connect? (There's a RA API available for v5, but I'm not entirely sure if it's applicable to v6.0 because I'm having difficulties getting a connection from a test program.) Any help appreciated Ed

Oh so that's how it's done. Thanks for the info there. Will check if I can apply it here.

Well, I don't want to manage two separate ones, but since they're in two different locations, I felt that's the only way I could set it up since the two different ERAs are within the LANs the cover. If I use just one ERA, wouldn't it mean that I'd have to set up either one of the companies to connect to the other company's server? Or do I simply build another server and have both company's internal lan access that? Any clarifications appreciated.

I administer two separate companies' ERA servers and I'm finding it a little irritating that I need to open two browser windows/tabs to do the job. what I would believe would help, is to either have a central server tool that connects to these two ERA and I can manage using that tool via a thin or thick client. Of course, there is always a possibility that I'm not using the ERA server correctly. If so, please do clarify. Also, with RA 5, you had an API. Do you still have that API for 6? Thanks Ed

I've been using ERA for some time and recently upgraded to 6.4 and am having some trouble with understanding the client details. Right now (just as an example), I have a client that has this "Protocol filtering not functional" which I have no idea what it means but this message has been on the details pane since yesterday 9am and it's still there. Firstly, how do I get rid of it? The client seems to be ok since the AV and Agent are updated. (Windows 8.1 pro) Secondly, a couple of other clients have a different problem: "Product is not activated" The result is "Task failed" and it doesn't say why it failed. All in all, while I can 'administer' workstations, ERA needs a lot more improvements to it. It's like an uphill battle in figuring out how to get things done. I got fed up and came to work during a holiday to uninstall all Agents and AVs and re-installed them (manually). While I only had to contend with 10 workstations and a couple of servers, it was still frustrating since even AFTER doing all that, I'm getting problems still (re: product activation failed, and a host of other warnings). With respects to task results, is there a way for the agent to capture the logs and store it along with the task results? Thanks Ed