LesRMed 26 Posted August 24, 2022 Share Posted August 24, 2022 I know it's there, but I'm just overlooking it. Where in the policy can I make these "locked" options editable? Link to comment Share on other sites More sharing options...
Administrators Marcos 5,412 Posted August 24, 2022 Administrators Share Posted August 24, 2022 You must first enable Override mode via a policy: Link to comment Share on other sites More sharing options...
LesRMed 26 Posted August 24, 2022 Author Share Posted August 24, 2022 (edited) I did that, and applied the policy, but they're still showing locked. In particular, I'm trying to make the exclusions editable (for admins), but Add is grayed out. Edited August 24, 2022 by LesRMed Add image Link to comment Share on other sites More sharing options...
Administrators Marcos 5,412 Posted August 24, 2022 Administrators Share Posted August 24, 2022 I've tested it with real-time protection; after activating override mode the padlock symbol disappeared and I was able to pause real-time protection then: As for detection exclusions, make sure to enable this setting in a policy first: Link to comment Share on other sites More sharing options...
LesRMed 26 Posted August 24, 2022 Author Share Posted August 24, 2022 Well it doesn't work on my end. You can see my settings. What else can I check? Link to comment Share on other sites More sharing options...
Administrators Marcos 5,412 Posted August 24, 2022 Administrators Share Posted August 24, 2022 3 hours ago, LesRMed said: Well it doesn't work on my end. You can see my settings. What else can I check? Are you positive that you have this setting in a policy enabled? It's not in your screenshots above. This should make the Add button in Detection exclusions available on clients. Link to comment Share on other sites More sharing options...
ESET Staff MichalJ 434 Posted August 25, 2022 ESET Staff Share Posted August 25, 2022 (edited) Hello @LesRMed The behavior with regards to policies is like this: when a setting is "set by policy" (by set means, the blue dot / red flash are shown) the setting is NOT editable on the client. If setting is not "set by policy" if the user locally has admin rights / knows the password to settings, he can change the local configuration freely. only way how to temporarily override the policy settings which are set by ESET PROTECT is by enabling the override mode. Override mode set to "on" and set by policy. On your screenshot, the override mode is neither enabled, neither configured to be reflecting the policy settings. However, once the override mode ends, the settings will revert to the previous state. In order to allow "local exclusions", you need to follow the recommendation from Marcos above. If you allow them being "appended", endpoint will take into consideration exclusions set centrally, and also the ones that are set locally. Edited August 25, 2022 by MichalJ Link to comment Share on other sites More sharing options...
LesRMed 26 Posted August 25, 2022 Author Share Posted August 25, 2022 That made no difference. I give up. I added the exclusion from the console. Link to comment Share on other sites More sharing options...
ESET Staff MichalJ 434 Posted August 31, 2022 ESET Staff Share Posted August 31, 2022 (edited) Hello @LesRMed I have opened this up with our QA department and this is what they came up with: In case you enable the setting that allows appending the globally set exclusions to the local list, it will enable you to add the local ones. However, what you need to do first on the endpoint side, is to adjust the "combo box" to "show local exclusions". Once this is done, the add button will enable, and allow you to enter the exclusion locally. I have filed an improvement request, to change this behavior, as it is considered as not intuitive. Edited August 31, 2022 by MichalJ igi008 1 Link to comment Share on other sites More sharing options...
LesRMed 26 Posted September 1, 2022 Author Share Posted September 1, 2022 Thank you @MichalJ! That's what I needed! Not intuitive is an understatement. LOL Link to comment Share on other sites More sharing options...
Recommended Posts