bbraunstein
Members-
Posts
135 -
Joined
-
Last visited
-
Days Won
5
Everything posted by bbraunstein
-
I've got a really weird problem. I wanted to upgrade a Windows 10 client with EEA from 6.3 to 6.4 but I'm recieved an error that says "the product cannot be uninstalled, try uninstalling manually." So I log into the computer and attempt a manual uninstall by going to Programs and Features and removing the app. Halfway through it fails with: "SoftwareInstallation: Installation failed with: (0x643), Fatal error during installation (0x643), Could not delete key \Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe. Verify that you have sufficient access to that..." The account I'm logged into is a Domain Admin, so I found it odd to have permission errors. So I open up RegEdit (with Administrator privileges) and navigate to the key and attempt to delete it manually. Error pops up saying I'm not allowed to to modify the key. I open up the key's properties and forcibly add myself with full permissions, but when I try to apply, it says I'm not allowed to make changes to the key, again. I tried repeating the above steps but logged in as the local Administrator account and yielded the same results. I also tried opening a command prompt with Administrator privileges and deleting the key with the force flag, but it still says I am unable to modify. Anyone have other ideas on how to remove it ?
-
Yeahh 6.2.7 does NOT resolve the Web Access Protection for my users. Members of my engineering team are unable to hit their QA or Prod site for testing. We troubleshooted a bunch of different things, but as soon as I disabled WAP, they were able to access the sites instantly. This is kind of disappointing really. The 6.2.3 beta actually functioned better. I'm going to try deploying the beta to one of the engineers to see if it is replicated on that version. Who do I need to contact to get this resolved?
-
That's what I've been doing, but it keeps respawning back in ELA. I'm not seeing this device in ERA Web Console, most likely because its a consumer version without an Agent. I've been given the contact number to ESET Support, but I have not seen Charles-PC since Friday. If it shows up once more, I'm calling. This is baffling that someone can use MY license to install other ESET products I was not licensed to install.. There are multiple layers of issues with this problem.
-
In ELA there is an unknown/unauthorized computer using a seat on my license, CHARLES-PC. I do not have any Charles, Charlie, Chuck, or any variation of the name working at my company. The only people that have access to activate and deploy ESET in my company are myself and my supervisor, who has no knowledge of this CHARLES-PC either. My license is for 80 seats for EEA + File Security Products. Charles-pc is using NOD32 Antivirus. All of my devices in ELA are listed as 'Managed', whereas Charles-pc is listed as 'Standalone'. This has happened three times already. I've deactivated the seat in ELA each time the computer has reappeared. Originally, I gave Charles the benefit of the doubt that he may have possibly entered his license key incorrectly (albeit a valid one). However, he is not taking the hint and realizing the error or this is malicious.
-
ekrn.exe 100% CPU usage since yesterday on several PCs
bbraunstein replied to micha_1989's topic in ESET Endpoint Products
Which versions of EES do you have deployed to your computers ? Was the spike in CPU during a scan or just standalone ? If it was an in-depth scan, you could try lowering the scan type. -
You know I did find that KB a few weeks ago, but it did absolutely nothing because there is no compile and install directions on the webkit link. Unless there's something that I missed, I don't see it anywhere under 'Wiki' or any other page. Not trying to sound like a typical end-user but if you can provide more specific instructions or a more direct link other than https://trac.webkit.org, that'd be helpful.
-
Thanks, Marcos. Appreciate all the time and effort you guys are putting into it. Have you considered some kind of mailing list to alert clients of new releases/patches ? I usually meticulously check the forums for any relevant information about new updates. It usually kills about 10-15 minutes of my day scrolling through different forums looking at specific topics. I know I can subscribe to topics, but that means I'll get notifications of ALL posts in that topic.
-
How does ELA pull client information ?
bbraunstein replied to bbraunstein's topic in ESET PROTECT On-prem (Remote Management)
How do I determine if they share the same HW fingerprint? If there are multiple devices nestled under a '+' dropdown menu ? I do have one device that has a dual partition of OSX and Windows on it that has its own individual ERA Agent + EEA installed on each OS. Even though physically, it is one device but with two logical OSes, does that mean it is utilizing only seat ? I really appreciate the clarification and transparency. -
How does ELA pull client information ?
bbraunstein replied to bbraunstein's topic in ESET PROTECT On-prem (Remote Management)
Alright, thanks MartinK. My whole use-case for this is because I have a mismatch of "Activated Seats" vs. the total number of connected clients I truly have. For whatever reason, my number of activated seats is shown as 70, but I have a total of 74 connected devices to my ERAS. All of them are reporting fine so I'm just a little confused why I have three less activated seats than I should have. I managed to correct a couple of devices that were not "activated by ERAS" but there are a handful of computers listed with a much older name. As a result, it's harder to figure out what's missing or duplicated. -
How does ELA pull client information ?
bbraunstein replied to bbraunstein's topic in ESET PROTECT On-prem (Remote Management)
So.... nobody knows ? I would really like to have an answer to this -
I'm curious how ELA gets it client information. I have a handful of client devices that have been renamed over time due to employee departures and/or hires. The FQDN that ELA is reporting does not match the current hostnames of the devices. All these computers are part of a domain and successfully replicate with the DC. I've tried deactivating and reactiving the clients, flushing DNS, etc. I've even gone so far as purging the devices from my domain and rejoining them. I'm just trying to rack my brain how the old hostnames keep appearing when I can't find any trace of them anywhere.
-
How to upgrade era6.1.444 to 6.3
bbraunstein replied to jinlei801011's topic in ESET PROTECT On-prem (Remote Management)
Bump. I could use this answer too. I am currently on 6.1.530 and would like to upgrade within the next week or so. -
You know, I've noticed some performance drops too. Lately whenever I comment, I'll get the green loading bar at the top of the screen for an extended amount of time and then nothing happens. I need to verify my post went through by refreshing the page. I've made a couple of accidental double posts before by hitting the submit button twice.
-
Usually I like to wait about a week or two before diving into a new release. I was just getting ready to upgrade to 6.2 but then people starting complaining about performance issues. It was some time before WFP was located as the issue. My last upgrade was 6.1.350.0, which I believe was April or May, last year? I've long been awaiting a more polished version of ESET to move up to.