Jump to content

Moniker

Members
  • Posts

    12
  • Joined

  • Last visited

Posts posted by Moniker

  1. Well, this particular user that I looked into is having issue with their Web and email > Anti phishing protection being "Non-Functional".

     

    Unrelated: I just got a service ticket on a Windows 7 Pro machine using Eset Endpoint Security 6.1.2109.0 having the this issues: See attachment

     

    Here is the information you wanted below.

    sc query epfw

     SERVICE_NAME: epfw                                                        

            TYPE               : 1  KERNEL_DRIVER                             

            STATE              : 4  RUNNING                                    

                                    (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)

            WIN32_EXIT_CODE    : 0  (0x0)                                     

            SERVICE_EXIT_CODE  : 0  (0x0)                                      

            CHECKPOINT         : 0x0                                          

            WAIT_HINT          : 0x0

    sc qc epfw

    SERVICE_NAME: epfw                                   

            TYPE               : 1  KERNEL_DRIVER        

            START_TYPE         : 1   SYSTEM_START        

            ERROR_CONTROL      : 1   NORMAL              

            BINARY_PATH_NAME   : system32\DRIVERS\epfw.sys

            LOAD_ORDER_GROUP   : Streams Drivers         

            TAG                : 0                        

            DISPLAY_NAME       : epfw                    

            DEPENDENCIES       :                         

            SERVICE_START_NAME :

    sc query epfwlwf

    SERVICE_NAME: epfwlwf                                                     

            TYPE               : 1  KERNEL_DRIVER                             

            STATE              : 4  RUNNING                                   

                                    (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)

            WIN32_EXIT_CODE    : 0  (0x0)                                      

            SERVICE_EXIT_CODE  : 0  (0x0)                                     

            CHECKPOINT         : 0x0                                          

            WAIT_HINT          : 0x0                                          

    sc qc epfwlwf

    SERVICE_NAME: epfwlwf                                               

            TYPE               : 1  KERNEL_DRIVER                       

            START_TYPE         : 1   SYSTEM_START                       

            ERROR_CONTROL      : 1   NORMAL                              

            BINARY_PATH_NAME   : \SystemRoot\system32\DRIVERS\EpfwLWF.sys

            LOAD_ORDER_GROUP   : NDIS                                   

            TAG                : 14                                     

            DISPLAY_NAME       : ESET Personal Firewall                 

            DEPENDENCIES       :                                        

            SERVICE_START_NAME :                                        

    sc query epfwwfp

    SERVICE_NAME: epfwwfp                                                     

            TYPE               : 1  KERNEL_DRIVER                             

            STATE              : 4  RUNNING                                   

                                    (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)

            WIN32_EXIT_CODE    : 0  (0x0)                                     

            SERVICE_EXIT_CODE  : 0  (0x0)                                     

            CHECKPOINT         : 0x0                                          

            WAIT_HINT          : 0x0                                          

    sc qc epfwwfp

    SERVICE_NAME: epfwwfp                                               

            TYPE               : 1  KERNEL_DRIVER                       

            START_TYPE         : 0   BOOT_START                         

            ERROR_CONTROL      : 0   IGNORE                             

            BINARY_PATH_NAME   : \SystemRoot\system32\DRIVERS\epfwwfp.sys

            LOAD_ORDER_GROUP   : PNP_TDI                                 

            TAG                : 0                                      

            DISPLAY_NAME       : epfwwfp                                

            DEPENDENCIES       : Tcpip                                  

            SERVICE_START_NAME :

    post-6497-0-02569200-1465408809_thumb.png

  2. I have attached a png. as well as my screenshot.

     

    We recently have began ssing this across our user base of ESET Endpoint Security 6.2.2021.0. What is seemingly random users are getting "Non-functional" settings in ESET. On original install and configuration they were installed and verified working. I am not recognizing any pattern for this to become "Non-functional" I read through this forum and a few other forums and reinstalling ESET on a 100+ userbase is not an ideal solution.

     

    I am wondering what is causing this issue? is it a bug, Is it the method of installation? My hunch and not tested is that ESET is reinstalling an update or fix and it is not configured to install these components, just my hunch, not proven.  At any rate is their a good fix for this issue?

     

     

    post-6497-0-36964500-1465404248_thumb.png

  3. My company is having this issue as well. What appears to be random for different Users, Different OS's. Windows 7, and Windows 10 Pro 1151 release, all production computers, not betas not RTM's.

     

    So has anyone found a solid reason why this is happening or a potential long term fix? Running around to a hundred computers and reinstalling the software or even running it through the Remote Admin is not my idea of a solution. This is something ESET needs to figure out and fix. 

     

    I have been using ESET in our company effectively for about 3 years and am relatively happy with the product, but I have began looking into other solutions, this has become an issue for us and I am losing confidence in the product. This and the new Remote Administrator is a steming pile of pooooo.

  4. Thank you for the timely response.

     

    Under the EES v6 I do not have a default policy, only what I would call a users local policy or configuration. Say I needed to change that local configuration, how would I go about doing that?  Do I need to create a profile and roll it out with the IDS exception in it? I need this company wide, in doing so making a policy, does it override the local policy that a user has in place. I don't want to mess with a users rules etc, hence why I always just changed their individual configuration.

  5. Hello Forum

     

    Sorry if this question has been answered somewhere elese in the forum, I searched but couldn't find it. I need someone to correct me If I am wrong, but I need a better understanding of Policies in the new ERA v.6 with ESET Endpoint Security 6 clients.

     

    I used to download the users configuration and then change the individual .xml configuration through the configuration tools to edit a users configuration, make changes etc.  Since I updated I haven't been able to figure out how this can be done using ERA v.6. It looks like this is done by creating and applying Policies. Is this correct?

     

    I noticed when I pull a users configuration all of their settings have a lock next to it. How do I push a user settings. I need to change all of my users to Learning mode, but noticed it sets filtering mode to Automatic mode, they used to be set at Automatic mode with exceptions when they were on ESS 5. Also I want to setup and IDS filter for a Spiceworks server that is causing an IDS attack. 

     

    If their is a better way please let me know. I do not want to mess with the users default profile, just manipulate the settings.

  6. Yes they are all set to Automatic. Id have 50+ users looking for blood if I roll out a change to constantly do any interaction mode. Is learning mode similar to Automatic with Exceptions?  Plus I do not know in the new ERA6 how to roll out profile changes, any client profiles I change out appear to be locked, I am still learning the new ERA 6.

     

    So I did some experimenting and setup my personal profile to learning. With the new ERA 6 how do i use the policies to roll out this change to all my users. I want to change their profiles to be learning rather than Automatic. How do I do that? Also will non administrators be affected. Most if not all my users are not admins on their machine and I have run into issues where they need admin rights to make changes to ESET. I was not affected by this in ERA5 as everyone was set to Automatic, with exceptions.

     

    Thanks

  7. I upgraded our ESET Remote Adminitrator from 5. something to the new 6. I was able to query my users GPO Policy Results, but now I am unable to do so. I have all of my clients on Endpoint Security 6.1.2109.0.

     

    How do I add the specific ports needed for WMI services. I get the following error when trying to complete the Results Wizard. "THE RPC server is unavailable", When I turn off ESET I am allowed connection.

     

    How do I add exceptions to my users Firewall, I am also having an issue with Spiceworks no longer reporting on some users computers.

     

    Sorry ESET, but Im not liking the new ERA6, it seems like a step backward... :(

    post-6497-0-29619900-1427244924_thumb.png

  8. You can do it either way. Setup your GPO to do an installation with a start up Script for the Computer User. TomasP mentioned doing the side menu, that process will create a .bat file, put it in a shared folder, attach to your GPO and walla Agent deployed.

     

    I would do some kind of drop file though and make your own .bat file that checks for the file then delete its it, installs agent, if not the .bat file for Agent install will reinstall on every starup, which your users will love.

     

    You can also use a RunOnce GPO You just need to a value to the following registry key (which you can easily do via GPO Preferences if you are using Windows 7 PCs.

     

    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce

     

    You add a value (of type REG_SZ) to that location, name it whatever you want, but enter the path to your BAT file in the actual data value. Now the next time anyone logs on to that PC, the batch file will run and then the value you created in the RunOnce key will be deleted automatically.

×
×
  • Create New...