ShaneDT

Thanks Mirek. I see there is a lot of comment on here with MDM for IOS so is this how everyone licences this? Or are there other options also?

Not sure if this should be in this section or the ERA/ESMC section. What licence is required for IOS MDM? There is a separate licence for Android devices but from what I can see there is no separate licence for IOS devices? So the only option is to purchase additional Endpoint Protection Advanced licences which fairly expensive just for MDM on mobiles and tablets? Thanks.

I've disabled this setting now on all the reports, and have duplicated one of the reports to run daily so will test this with a restart tomorrow if the daily report doesn't run. Also just a note from reading other posts, I am receiving notification emails fine. Just not receiving the scheduled reports.

Pinni I had a look at the link you posted and the thread this was split from but can't see what the cause or solution is relating to my problem? I had a look at the server trace log and I do get the occasional error_code=INVALID_TOKEN, status=TOKEN_EXPIRED event recorded, but this doesn't seem to correlate with the reports not running and generally I'm not having any issues with agents not reporting in. You're a lot more experienced with these products than I am. Could you provide a clearer answer on what was the cause and the fix for the scheduled reports not running please?

Update on this issue. Turns out the SmartScreen block is applied to the file on the server when downloading the AIO installer in ESMC (Server 2012 R2). So before deploying to customers/clients, right click the file while still on the server and select to Unblock it. You can then zip it with the batch file and deploy this however you want and it's no longer blocked on the clients. I completed 3 Windows 10 installs on the weekend and no issues with SmartScreen.

Yes I have that setting enabled, will disable and test it again. Pinni3, got a link to your post about connection problems? I'm not having any problems with hosts not connecting.

I did a complete server restart on Thursday. Interestingly the restart triggered the scheduled reports to run. These were date and time stamped at the time of the restart, not from the previous scheduled time (ie Monday 8am). I decided to then leave it and see if the scheduled reports then ran at 8:00am and 8:01am as scheduled on Monday morning this week. Nothing. I then decided to install the latest Microsoft updates to my server this morning, restarted the server, and again on restart the scheduled reports were triggered. So resetting the services / restarting the server, made no difference to the scheduled reports running when scheduled. Worse, now it looks like every time I restart the server it's going to send out reports when it shouldn't. Embarrassing to explain to the customer why reports that are scheduled for 8am Monday mornings aren't running, but instead seem to run randomly.

Will try a restart in the next couple of days, sorry guys haven't had any time to test this further.

The one thing you should be able to trust above all else with any operating system is that they are not going to delete or lose your files. Yes you should have backups but these are only limited points in time, unless you check all your files and folders everyday to make sure none are missing or corrupted, backups won't save you from files that you haven't noticed had been deleted at previous points in time. This is a massive fail on Microsoft in my opinion, goes straight to the heart of whether you can trust the stability of their offering. Re updates, yes in Windows 10 Pro you can enable 'Semi Annual Channel', but this setting seems to change every version, and there have been several examples in the past where Microsoft has ignored it's own settings and installed the updates anyway. Not to mention that you can no longer control when updates are downloaded and installed (unless you have WSUS). At least pre W10 you could leave computers on overnight and know that updates would be installed at 3am and computers restarted automatically. Now even when you leave them on they still seem to insist on downloading and installing updates when you first logon in the morning. I've been a Microsoft partner for a very long time and in my opinion the current W10 upgrade agenda is a disgrace.

Any chance I can get a reply on this please? It would be nice to know what the above settings actually do and whether either may help. Also if ESET is considering a change as suggested above that would mitigate this issue in the future.

Initially I had a single report scheduled to run every Monday at 8am. This seemed to be working fine for a couple of weeks. I then added an additional report to also run every Monday at 8am (to different recipients). Since creating this second report neither report is running automatically. I'm having to login and select Run Now to generate the reports. Initially I though maybe a bug having them both run at the same time, so changed one to run at 8:01am. Still fails to run automatically. I assume this is a bug? Thanks.

TBH I doubt it would be possible to create a task for a scheduled scan of a users mailbox in Outlook. You wouldn't be able to scan the pst/ost directly without risking corruption, so it would need to be done through Outlook, which would require Outlook to be running. Maybe an option could be included on the ESET add-in for Outlook, adding a 'Scan entire mailbox' option. User could then run this manually leaving Outlook open overnight. Fairly simple recommendation for a new install.

Thanks bbahes yes I'm aware of that, have been through most of these settings googling them to find out exactly what they do.

Unfortunately not so simple to test. I need a client with thousands of emails in their Inbox to install a fresh instance of EES. And if it doesn't work the client can't use Outlook for several hours...

Or would not enabling (disabling) all the options under ESET EES Policy / Web and Email / Email Client Protection /Alerts and Notifications. And not enabling 'Add text to email subject' under Antispam Protection. Would these settings remove this behaviour?

So is there any way to disable this behaviour upon installing EES? Would selecting the following policy make any difference; ESET EES Policy / Web and Email / Email Client Protection - Disable checking upon inbox content change When deploying EES to new customers, it's not practical to be; a) going through everyone's Outlook folders to confirm they don't have thousands of emails in their Inbox, or b) explaining to the new customer that Outlook will be unusable for several hours because ESET needs to scan and change attributes that will then need to synchronise with Exchange Online (probably 80% of customers) and there is no way to turn this off, so you'll just have to use webmail while you wait. It's not a good first impression for a new product (regardless of the virtue of scanning the Inbox). It would be better to be able to schedule a task to scan the entire Outlook data file at a more convenient time after hours.

Hi Kieran, Yes the customer can do that to re-enable it if it's disabled. You can also set registry keys to somewhat control the behaviour. But this requires access to the customers computer / group policy, and/or providing additional instructions. And without checking the computers in person there is currently no way to know if it is actually disabled. If there was at least an alert for this in ESMC, we could create a report to notify the customer which computers need this re-enabled.

ESMC7 / EES7 / W8/W10. I want to be able to deploy EES7 and the ESMC Agent using the All-in-one installer to new customers using the silent installation command. So I created a .bat file that I distribute with the AIO .exe with the following command; ESMC_Installer_x64_en_US.exe --silent --accepteula Instructions for the customer are to double click the .bat file to run and install EES. This works perfectly on W7, but nothing happens with W8/W10 installs. I tested today and realised that SmartScreen must be blocking the installer from running. If I double click the ESMC_Installer_x64_en_US.exe file directly to run it, I get a SmartScreen warning and can select 'More Info' and then proceed with the install. Is there any way to script this into the .bat file? Or another way to do this? Thanks.

I think the problem is that Outlook itself will often disable or prompt to disable add-ins that 'slow down' loading Outlook. It would be good if there was a notification of computers that have this disabled. I don't think there would be any way to prevent Outlook from disabling it from ESMC policy?

Excellent, thanks Michal.

It's a never ending battle getting users to manage their Inboxes Worst is when they file read emails by deleting them, permanently storing them in the Deleted Items!

Thanks Michal, yes be useful to add this in a future release. Possibly as a stand alone Client Task even. Cheers.

No, prior they were using TM. Couple more questions to understand what's happening. Pretty sure this user (like most lol) has thousands of emails in the Inbox. Is there any setting to disable setting this flag when installing ESET for existing emails? Would this flag be an attribute that would then synchronise back to Exchange Online? If the user has their email configured in Outlook on multiple computers, would this then require syncing this attribute from Exchange Online back to Outlook on the second computer also? Is this behaviour new in v7? (vs EES6 - I haven't noticed this before, only with these last two customers, both EES7)

Possibly there are a lot of emails in the Inbox. The mailbox was previously fully synchronised, and turns out was still receiving emails shortly after the install, but then about an hour later (not sure of exact timing) was stuck as above. Same issue on multiple computers. When first installing EES, does ESET do a full scan of Outlook? Does this change any attributes on emails or folders in Outlook?

ESMC7 / EES7 / W7/10 / Office 2016 / Office 365. Have just installed EES7 using All-in-one installer from ESMC for a new customer. Installations seem to go without issue. Agents connected to ESMC server, EES updated successfully and completed initial scans. However customer has called me back saying Outlook has not updated since prior to installing EES. Outlook is reporting 'Connected to Microsoft Exchange' and stuck on 'Updating Inbox'. If I go into Send/Receive menu and hit 'Update Folder', it seems to be stuck on 'Updating Hierarchy'. None of the settings have changed in Outlook (other than ESET add-in active) and can access their webmail no problem. Have tried restarting Outlook, also restarting the computer completely, same issue. I had a similar problem with another new customer a few weeks ago with a couple of their computers as well. Eventually it started synchronising again after several hours. It seems ESET is doing something in Outlook that seems to have paused or stopped synchronising with Exchange Online. Any ideas?