[MSP Remote Administrator - Device Control Questions]

Is there any type of expectation that an ESET Staff member will review posts and reply?  Or is this message board not that formal?

[ESET Endpoint Antivirus Spiking Memory on Windows XP]

I am currently trying to troubleshoot an ongoing problem at a client site - I haven't contacted ESET Support yet, but am getting there - I have a series of 7 Windows XP computers that suddenly are showing ESET Endpoint Antivirus (version 5.0.2126) , in an "idle" state, is consuming some 444k kb in RAM.  The computer itself is unable to function in this manner, so I have only been able to do minimal troubleshooting without booting into Safe Mode - of course in Safe Mode ESET isn't functioning so everything is fine.

 

In Task Manager, ekrn.exe is at the top of the list for CPU usage as well.

 

I uninstalled Endpoint Antivirus and replaced it with NOD32 Business Edition, and everything is fine as well -

 

There are no scans running.  The startup scan at logon is disabled and the other scans are scheduled.

 

Anyone else have this problem or have any ideas as to what might be causing it?

 

 

[MSP Remote Administrator - Device Control Questions]

For the first time today, I enabled Device Control on an end-user PC in a business environment - the PC runs ESET Endpoint Antivirus.  I noticed that in order to create user groups that ESET was calling on Active Directory -

 

In order to configure a Device Control policy via the Remote Administrator, do you have to have ESET RA Console (and potentially then ESET RA Server) installed on a domain controller or other server that has access to the domain's Active Directory? 

 

The reason I'm asking is that would prove difficult with the MSP Remote Administrator -

 

If so, I'm wondering if I were to temporarily install an ESET RA Console on a client server just for the purposes of accessing their Active Directory in order to build the Device Control policy, could I then export that policy to an .xml file that I could merge with the client's policy on the MSP RA?

 

Any insight is appreciated -

 

 

[Uninstalling ESET NOD32 antivirus]

I would add to this - not sure if this should be in the business forums though?  Since moving to the MSP RA model and no longer having access to do remote push installations through the Remote Administrator, we had to fall back on creating a script that deploys ESET using the msi etc.  When I began using the script (after some testing and readjustment) to deploy ESET Endpoint Antivirus at our clients' sites (to replace NOD32 Business Edition; usually 4.2, but sometimes 4.1), I would always find (and still do) that some of the endpoints would fail to upgrade due to the error that "Guest_avisindo" mentions above.  I should add that particular error has been the exception, not the norm (I would say perhaps once out of every 50 clients - approximate), but I do encounter a slightly more common error (say every 6 out of 50 wherein I get a series of error messages indicating there is an permissions issue making changes to various eset .dll's.

These occurances, albeit rare almost always force me to have to track down the endpoints where the failure occured, boot them into Safe Mode (remotely!  Not fun!), run the ESET Uninstaller, reboot into normal mode, and install ESET Endpoint AV again.

This also occurs on servers that I previously had NOD32 Business Edition running on, and have been upgrading to ESET File Security - in those situations however, I'm not running the upgrade script, but instead a simple uninstall script following up by an installation script for File Security.  Rebooting a workstation into Safe Mode - not a big deal; doing so with a server of course forces me to have to wait until after hours to do the repair. =)  No worries, just venting a bit.

I have images available that show the .dll access errors if anyone would care to see - just not sure how to bring them over to these forums short of creating a photo-hosting account, -

Any insights that would reduce or even eliminate these occurances would be much aprpeciated!

[ESET MSP Remote Administrator Program]

Hey there,

 

I am the ESET admin at at company that is part of your (ESET's) partner program, and back in Febuary, we moved into the MSP (Managed Service Provider) model for Remote Administration. 

 

hxxp://www.eset.com/us/images/ESET-MSP-program.pdf

 

I'm sure I'll mainly have questions that I'm hoping to utilize this forum for, but it was suggested to me by one of the ESET Channel Renewal Specialists that I also use this forum as an avenue for suggesting potential product improvements for the MSP product - these are things that we have found other AV providers to have in their managed solutions that I'm sure ESET is aware of (as they just make logical sense in an MSP security environment) but just in case, wanted to throw it out there (I know this is a new product for ESET and these things take time to develop)

 

1.) Ability to remove the name of the RA server from Reports so that only the endpoint client name is displayed

 

2.) In working with the MSP RA, it would be valuable to have another type of report as well.  I would like to see a couple of reports that provide different views of the products installed for a given group with details on which computer they are installed.

 

There is a report out there that shows the definition level for a given product for a given group, but I believe I am missing several reports that can provide the following:

 

Report 1: PC computer name ( sorted by computer name )
i. Security Product installed
ii. Definition version

 

Report 2: Security Product and Security Product Version ( sorted by Security Product Version)

iii. PC computer name that has this version installed ( sorted by computer name )

 

Report 3: Security Product and version and the count of machines with that version

 

 

3.) We recently incorporated the ESET Mobile product to our Secure Mobility solution and were hoping to be able to manage our clients through the MSP RA - but we were told at this time the ESET Mobile product is not supported on the MSP RA - we would definately like to see additional ESET products added to the "Supported" list for the MSP RA product, especially ESET Mobile

 

4.) **** This is probably the most important one - the ability to do remote push installations and other taks from the MSP RA that you can do with an onsite RA

 

So that is just my two cents worth -

 

Cheers!

[ESET MSP Program]

Oh I see - I'm new to the forums here and didn't realize that - yes I agree that would be the best place unless a moderator says otherwise?

[ESET MSP Program]

I work with a company that is in the ESET partner group - we migrated to the new MSP ESET Remote Administration system - I was wondering if there is a certain forum that is here, or could be created where we could discuss this particular product?

 

Thanks