Frequently Asked Question

Issue

• Employing ESET Management Agent via GPO in large or enterprise settings
• Installer file creation in ESET Security Management Center
• Installer file creation in ESET PROTECT
• ESET Management Agent deployment through GPO
• Updating the ESET Management Agent via GPO

Solution

Applicability: Windows users only

Alternative Deployment Methods

For those interested in conventional deployment techniques, we got you covered:

• ESET PROTECT: Navigate to the guide on deploying ESET Management Agent 8.x using conventional methods.
• ESET Security Management Center: Navigate to the guide on deploying ESET Management Agent 7.x using conventional methods.

Prerequisites

Before diving in, ensure your ESET Security Management Center, ESET PROTECT, or server has network visibility to client machines and both server and clients are domain-joined.

Create Installer File in ESET Security Management Center

1. Initiate Configuration: Start by creating the install_config.ini script. This script will house parameters that enable the Agent to communicate with your ESET Security Management Center.
   • Navigate to ESET Security Management Center via your web browser and log in.
   • Navigate to Installers > Create Installer > GPO or SCCM script.
   • Follow the script creation wizard and save the install_config.ini.
2. Download Installer: Head over to the ESET download page to get an earlier version of the ESET Management Agent installer .msi file.
3. File Storage: Place both the installer .msi file and install_config.ini in a shared folder on the domain controller. Make sure client computers have read and execute permissions.

Continue with the Deploy the ESET Management Agent using GPO section below.

Create Installer File in ESET PROTECT

1. Initiate Configuration: Similar to above, create the install_config.ini script that will set the parameters for communication with your ESET PROTECT Server.
   • Open ESET PROTECT Web Console in your browser and log in.
   • Navigate to Installers > Create Installer.
   • Configure necessary settings and save install_config.ini.
2. File Storage: Store the Agent installer .msi file and install_config.ini in a shared folder accessible by all client computers with read and execute permissions.

Deploy the ESET Management Agent using GPO

1. Install GPMC: On your Domain Controller server, navigate to Server Manager > Manage > Add Roles and Features. Select 'Group Policy Management' and proceed with installation.
2. Open GPMC: Press Windows key + R, type gpmc.msc and click OK.
3. Create New GPO: Right-click on 'Group Policy Objects' and select New. Name it appropriately, for example, 'Agent Deployment'.
4. Policy Configuration: Go to Computer Configuration > Policies > Administrative Templates. Set the necessary policies as per your organizational needs.
5. Assign GPO: Right-click on the domain and link the GPO you've just created. Then, assign it to the desired client computers.

Update the ESET Management Agent using GPO

Important: Do not delete or replace the original installation files, including .msi and install_config.ini.

1. Download Latest Version: Navigate to ESET's website and download the latest ESET Management Agent. Rename the file according to versioning.
2. Package Creation: Follow steps similar to initial deployment to create a new installation package with the latest version of the ESET Management Agent.