katycomputersystems 1 Posted February 26, 2018 Share Posted February 26, 2018 Is there a command line that can be used to force the eset agent to connect to the remote administrator? We set the connect time to 10 minutes. When I make a change, it would be helpful if I could issue a CLI via Screenconnect to entice my field agents to make contact with the mothership. One-time wake-up call doesn't work in this situation. Thanks, John Link to comment Share on other sites More sharing options...
Administrators Marcos 5,288 Posted February 26, 2018 Administrators Share Posted February 26, 2018 Try restarting the ERA Agent service. Link to comment Share on other sites More sharing options...
katycomputersystems 1 Posted February 26, 2018 Author Share Posted February 26, 2018 Net stop didn't work, taskkill, stops the process, but still no connectee: C:\>net stop EraAgentSvc The requested pause, continue, or stop is not valid for this service. More help is available by typing NET HELPMSG 2191. C:\>taskkill /f /im eraa* SUCCESS: The process "ERAAgent.exe" with PID 2288 has been terminated. C:\>net start EraAgentSvc The requested service has already been started. More help is available by typing NET HELPMSG 2182. C:\> Link to comment Share on other sites More sharing options...
Administrators Marcos 5,288 Posted February 26, 2018 Administrators Share Posted February 26, 2018 You would need to disable self-defense in Endpoint and reboot the machine. Link to comment Share on other sites More sharing options...
katycomputersystems 1 Posted February 26, 2018 Author Share Posted February 26, 2018 Hmm, sounds like I have presented a feature request. How do we get those logged? Link to comment Share on other sites More sharing options...
Administrators Marcos 5,288 Posted February 26, 2018 Administrators Share Posted February 26, 2018 I'm not sure if it's feasible since it could be misused, e.g. by malware. Link to comment Share on other sites More sharing options...
katycomputersystems 1 Posted February 26, 2018 Author Share Posted February 26, 2018 I suppose so, but all I am asking the agent to do is to phone home now rather than waiting 10 minutes. To mitigate the risk of a DOS attack, eset could still have a minimum time between phoning home of 1 minute. I have restarted the remote workstation several times, it's quite clear to me that the agent is going to wait the full 10 minutes. Link to comment Share on other sites More sharing options...
Recommended Posts