Campbell IT

Using ESMC 7.1.717.0, trying to figure out the process for deleting detections from the quarantine on a client. For the life of me, I cannot figure out how to do this. I get an alert that there is a detection that has not been resolved, so I look at the detections and click on Show Details. It shows me the details of the detection and has the client name in the upper left. I click on the Show Details button below the client name and it takes me to the details of that client. It lists the detections for that client, so I click on Show Details and it takes me right back where I started. Can we please just have a button to delete items from quarantine? This product is so overly complicated it's making me start to think of alternative products.

That's what I am doing with existing machines, but this GPO is for new machines being added to our domain. I updated the agent installer so that the new machines would have the latest agent. I think I have found the problem, though. It has to do with Hardened UNC paths in Windows 10. I had to put in an exception for the UNC path that our GPOs run from.

I successful set up an agent deployment GPO last year. It worked on many machines, but now I that I have updated to ESMC 7.1, I needed to update the agent installers, so all I did was to download the latest 32 and 64 bit agents and replaced the old ones in my deployment folder without updating the install_config.ini file. It doesn't seem to be working reliably. Any ideas? The certificate hasn't changed.

Thanks, Michal. Off the top of my head, having to click on the computer name, then click Show Details seems to me to be too much clicking. If you are looking at the details of a lot of machines, it gets to be a lot of clicking. Since you now have the box next to the computer name (with the 3 stacked dots) that brings up the same menu choices as clicking on the computer name, how about making a click on the computer name just go directly into the details? Just a thought.

We won't use tags and it just clutters up the view. It's not just at the top, it is in the side panel where the groups are. It keeps coming back when I change views. I have to re-hide it every time. The other issue with the new look is that it doesn't remember that I want to left side panel to be collapsed. Every time I log back in, it is expanded again. This version has added more clicks to an already click-heavy application. Is it possible that it is a browser issue? I am using Firefox 71.

Just upgraded to the latest ESMC. Is there any way to permanently disable Tags? They just take up space and every time I use a computer name filter, that view has the Tags pane. I don't ever want to see it, but now I am forced to close it every time I filter on a computer name.

In our environment, the most frequent cause of agent deployment failure is that the Windows Firewall is on. Another one is the time being incorrect on the client. Check your firewall & time sync.

I changed the template to "is not one of" and it works. Thanks.

I am trying to set up a Dynamic Group to assign a task to that will automatically install ESET on new managed desktop computers that have no product installed. I have the GPO working so it installs the agent, but when I set up a Dynamic Group for the unprotected computers, the computers that populate the group already have antivirus installed. It was putting all of my desktops in that group, so I added the OS Edition . OS Name Rule with the text Microsoft Windows 10 Pro, since all of the new machines will be Win 10. The group is populated with the few Win 10 machines we currently have, which all have antivirus installed. See the screenshot attached for how I have it set up. When I change the Computer . Managed products mask to equal, the existing Win 10 machines are no longer in the group. Seems to be exactly the opposite of what I tell it. What am I doing wrong?

Thank you!

I'm very used to ESMC 7 now and have used it enough to find little things that are annoyances and in my opinion could vastly improve the product. One of those items is the situation where you are in a Dynamic Group such as Windows Desktops or Windows Servers and you need to view the details of a computer. Once you are done viewing the details, you click Close or Back. But it doesn't take you back to the Dynamic Group you were viewing, it takes you back to the top level of your groups. That is not what "Close" or "Back" intuitively means. It should take you back to the Dynamic Group you were viewing. The product is already VERY click-heavy and this just adds to it. That is a recurring theme I have seen mentioned by more than one person about ESET ERA 6.x and ESMC 7. Thanks for considering this.

I will attempt that and get back to you.

Sorry, tried your suggestion just now. I removed all entries but the Scheduled Scan and still got multiple entries. See screenshot.

Yes, I do have it set to Append, but I also unchecked all of the other scheduled tasks. To me, this means those setting won't take affect, but apparently not. It is not intuitive. See the attached screenshots.

I looked at this setting the other day. I already have my HTTP Proxy set up this way. It takes a LONG time to update this way. It must have to time out first, which seems to take 10 or 15 minutes. I haven't timed it, but back to my original issue of multiple entries in the scheduler: I did get a screenshot today because after I attempted to set up the dual update profile and reverted my changes back, I lost my scheduled scan that is supposed to happen once a week. I attempted to recreate it and again ended up with multiple duplicate entries in the Scheduler once again. I took a screenshot before reverting my changes. It is attached. Hopefully someone can chime in about the extra scheduler entries.

I am trying to get a dual update profile set up in ESMC 7. I followed this article, https://support.eset.com/kb6880/?locale=en_US&viewlocale=en_US, but ended up with duplicate entries in the Scheduler. Sorry, no screenshot available as I reverted my changes back. We have an HTTP Proxy policy set up for the entire enterprise and it is controlling how all of the machines update, but I want some machines to use the dual update profile. How do I add the ability for machines to do internet updating without making duplicate schedules? Video tutorials for this sort of thing would be great, BTW.

We have one desktop computer that requires some additional scanning exclusions other than what we have set up in our standard desktop policy. We have a Windows Desktop Dynamic Group which applies the appropriate policies to all Desktop computers. I want to have a Static Group for this one special desktop computer that has a policy that only adds the additional exclusions necessary. My question is - do the policies applied to the Dynamic Group still apply and will the policy with the additional exclusions add or replace the existing exclusions? A quick read through the documentation did not reveal any info about how the policies apply in this situation. Thanks for any input.

Hello, We currently have Mail Security for Exchange version 4.5.10023 on our Exchange 2013 servers. Do I need to uninstall version 4.5.10023 first, or can I install 7.0.10022.0 over the top and have it automatically uninstall the old version? Thanks.

These are all 32 bit Windows 7 physical machines upgraded from ESET Antivirus 5.x.

It is a bundle license. I have had a certain number of machines that would not automatically activate. I had to create an activation task for those machines. I have not submitted a ticket. I don't know that it is an urgent issue if I can activate the machines and they are checking in. I just wanted to post here in case it was a known issue. Should I create a ticket anyway?

Here is a screenshot of the History of one of the machines. Second screenshot is the status from the Details page.

ESMC is showing 14 of my machines failed to install when they are in fact, installed, activated, checking in and updating. Any ideas?

As I use ESMC 7 more and more, I am getting pretty good at navigating the UI, but I also find ways it could be improved. One area that could be improved is the Policies section where you have a policy selected and it has the "Assigned To" tab which shows where the policy is assigned. That's fine, but the next tab, "Applied On" is what could use improvement. It would be great if it would tell you whether or not the particular computer has the current policy or an older one. As it is now, I have to click on the machine, select "Show Details", then click "Configuration", then click on "Applied Policies". Far too click heavy if you have lots of computers. Please add the ability to add columns to the "Applied On" tab. I am over my initial distaste with this console, but there is room for improvement. If it was more customizable, it would be a really good product. Thanks.

I am building a pair of SQL servers but I do not have the licenses yet. If I install ESET File Security for Windows Server, will ESET discover that it is a SQL Server after I install SQL and then put the correct exclusions in, or do I have to wait until I install SQL before I install ESET in order to have the automatic exclusions work?

Thanks, but what I meant by the question, "How will it impact my existing ERA 5.x server?" is will adding the licenses to the EBA prevent my 5.x server (and my offline clients laptops that almost never check into the ERA server) from being updated? I can't have my 5.x clients not update while I am upgrading to 7.x.