Jump to content

how to make newly installed agents join a static group ?


Recommended Posts

Hi,

here is my question :

Is there a way to prepare an agent to be installed on computers, and join a specific static group.

The goal is to make one personnalized installer for each site or client, and when we use it, the machine is automatically classified to a predefined static group.

 

Thank's !

Link to post
Share on other sites

You can create new static group on your own and shifts the client systems as per your requirement. The pre-defined static group takes the data from dynamic group. You need to make changes in dynamic groups as per your requirement.  Follow the link to create new dynamic group. hxxp://support.eset.com/kb3741/

Link to post
Share on other sites

Hi 21jags,

it's ok for to manage dynamic groups, but nothing on it (like a specific marker) make possible for newly installed agent to join them automatically.

We could insert a marker in the agent installer, and make it recongized by a dynamic group.

for example, if i installed agents on remotes and branch office, nothing make me able to reconized which computer is on which place with dynamic groups.

Edited by comunic
Link to post
Share on other sites
  • ESET Staff

Server assisted installation requires manually executing the installer on a machine, and machine has to have visibility to ERA Server. You need to ship the webconsole credentials during this procedures, as this will basically create a new computer in the server, so you need to be authorized for such action.

 

Possible workaround is to take advantage of certificates and dynamic groups. You create separate certificates for every branch office, and then create dynamic groups every one branch office (dynamic group template, with condition based on the used certificate). This won´t place the agent into the static group however, you will need to do it manually from time to time. But should help with the identification of machines.

 

We are working on improving this process for the future versions of ERA 6.

Link to post
Share on other sites

I try to create a certificate, and assign it to the live installer, this is ok.

But which certificate item do i have to check on the dynamic filter group ? Subject ? Serial Number ? Issuer ?

thanks

Link to post
Share on other sites
  • ESET Staff

I try to create a certificate, and assign it to the live installer, this is ok.

But which certificate item do i have to check on the dynamic filter group ? Subject ? Serial Number ? Issuer ?

thanks

 

Use serial number as that is only one field to be unique - all others can be the same ...

Link to post
Share on other sites
  • 3 weeks later...

hi again,

i choose to deploy every clients with specific certificate (in relation with a dynamic group based on the cert ID).

The computers appears on the good dynamic group

 

on the contrary, the problem is that i can't find in a computer details witch dynamic group does it belong to ?

we can see the parent static gorup and that'all :(

Edited by comunic
Link to post
Share on other sites
  • ESET Staff

Hello, it is not possible in the way you want to have it done as of now.

You can however check the created dynamic group in "computers" section or "admin/groups", for the members that are in the group.

For your use-case, we will track a requirement, however, I would like to know the use-case, you would like to cover? What you would do, after you see this information in computer details? You would manually put it in a different static group, or?

Edited by MichalJ
Link to post
Share on other sites

hi,

yes i will do it that way :

i need to send to my client or technician a script related to one and only one client (i can't take the risk to have a new "unknown computer" and we can't see the public ip in the console, and we can't insert a static group in the live installer)

so i will create a unique certificate for each client, in relation with a dynamic group.all the dynamic groups will have the lost and found as parent group.

now if a have hundreds of dynamic groups, i need to know easily if a new computer appear, what client is it.

so i will now have to check all the dynamic groups..

all of this to finally put the good client in the good static group, with the good policies, tasks, licences...

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...