ESET Full Disk Encryption dynamic group template for missing software

[Sam van Tiel VDH 0]

I am trying to automate my eset protect for all my customers.

Now we have a customer that is making use of the ESET Full Disk Encryption software.

We already have a system in place to automaticly install the ESFW and activate it using built in dynamic groups.

Only now i want to have a group that sees whether or not it has EFDE installed so that i can push a task to install it, with my current group it will automaticly install the software but it will not delete the computer from that group and i dont understand why.

My current system is {Static}Company(MSP) -> {Dynamic}Workstations Windows (Template: Operating system is MS Windows (Client)) -> {Dynamic}No EFDE installed (Custom template below)

I dont understand why all my computers with EFDE installed and with the padlock in the icons are still in this dynamic group.

Am i missing something in my template?

[thae 14]

You don't have to create a template, there's already a default one called No manageable encryption product installed

And there it's using is not one of instead of not equal. I'm guessing since there're multiple ESET products installed, the not equal doesn't work. This maybe only works if only FDE would be installed. So either change the filter or use the default one.

[Sam van Tiel VDH 0]

2 hours ago, thae said:

You don't have to create a template, there's already a default one called No manageable encryption product installed

And there it's using is not one of instead of not equal. I'm guessing since there're multiple ESET products installed, the not equal doesn't work. This maybe only works if only FDE would be installed. So either change the filter or use the default one.

Ah, I see. I have not noticed that one before but there seems to be a small difference.

In my tamplate i use 'not equal to' in the expression. In the built-in template is the same expression exept they use 'Is not one of' and that suddenly has done the trick it looks like.

It may be that the devices will be readded since i just made a change to the group. If it didnt add the good computers i will close this topic.