Microsoft disables ESET Agent Windows Service GPO account settings

[webcoder.eu 0]

Hi,

I have successfully installed VMware appliance with the latest ERA 6 and connected to our domain. I was able to deploy Agent after turning on Network Discovery via GPO. Now, I was trying to deploy ESET Endpoint Antivirus + File scan and it would not work. Then, came across a post on forums stating the running ESET Agent on client needs to use domains administrator credentials. I then manually changed from local account to domain admin on a test client and it worked. Your software deployed and updated nicely. Now, Microsoft have released a security update disabling ability to change accounts to This account in Services settings via GPO under Computer Settings > Preferences > Control Panel Settings > Services due to unsecure password storage (CPassword). Therefore, am no longer able to use GPO to apply this Service change on all machines and thus Deploy ESET software on multiple machines without having to do it manually.

 

Would you know a workaround how to make your software deploy on clients?

I've looked into a workaround proposed by Ms ie. in Computer Settings > Policies > Windows Settings > Security Settings > System Services but obviosuly ESET service is not present there (on a server).

I'm on Windows 2012 R2 Std fully updated + latest ESET ERA 6 on VMware and Windows 7 clients. Deploying Endpoint Security Standard product (Antivirus + file protection).

 

Related sources:

• hxxp://kb.eset.com/esetkb/index?page=content&id=SOLN82&act=RATE&impressions=false&newguid=801801971d47094b014c00c4eff8007f87 ( point 5)
• hxxp://kb.eset.com/esetkb/index?page=content&id=SOLN3630&actp=search&viewlocale=en_US&searchid=1426016825363
• hxxp://kb.eset.com/esetkb/index?page=content&id=ALERT43
• https://technet.microsoft.com/library/security/ms14-025

 

PS - @ESET: I was hoping to log in into this forum using my partner account credentials but it appears ESET users end up having to create multiple accounts and passwords on your systems such as partners and forums?? Why not centralise all?

 

Cheers, David

[michalp 20]

If you have successfully deployed ESET Remote Administrator Agents on target machines, then installing ESET Endpoint Antivirus is done by Software Installation client task (Admin -> Client tasks -> Software Install). Please see hxxp://kb.eset.com/esetkb/index?page=content&id=SOLN3605

 

You don't have to modify account for ERA Agent, where exactly did you read about it? KB reference - SOLN82, point 5, talks about changing account for ERA Server just for push agent deployment.