Install Windows Login and RDP protection via GPO

This article applies to Active Directory Integration deployment type only.

Prerequisites

Server (or main computer) where the Authentication Server is installed

Must belong to the same Active Directory (AD) domain as the client computer(s), where Windows Login protection and RDP protection will be installed

Microsoft Group Policy Management Console (GPMC) must be installed on your server. See the instructions to install GPMC

The computer you will install Windows login protection on must be added to EsaServices through Active Directory Users and Computers

Client computer(s)

.NET Framework 4.5 or later must be installed on the client computer

Active Directory membership - the computer must belong to the same AD domain as your server (main computer) where the Authentication Server is installed

Domain Admin privileges - the installer must be run by a member of the "Domain Administrators" security group

Windows 7 / Windows Server 2008 R2 or later

Remote Desktop connection must be enabled on the particular computer (Start > Control Panel > System Properties > Remote tab)

Adding a computer to EsaServices

1.Open Active Directory Users and Computers management tool.

2.Click View > Advanced Features.

3.Navigate to <your_active_directory_domain> > ESET Secure Authenitcation, right-click EsaServices, select Properties.

4.Click Members tab > Add > Object Types > select Computers > OK.

5.In the Enter the object names to select field, type the computer name you want to install Windows Login protection on. Click Check Names to ensure the computer name is correct.

6.If the computer name is correct, click OK, click OK again.

Obtaining the .MSI installation file

If the Authentication Server is installed using the .EXE installer, then .MSI installers are automatically created in "C:\Program Files\ESET Secure Authentication\msi\".

Alternatively, obtain the installer following the steps below:

1.Download the .EXE installer for ESA from https://www.eset.com/us/products/secure-authentication/

2.Extract the .MSI installation file (named ESET Secure Authentication x64.MSI or ESET Secure Authentication x86.MSI) from the downloaded .EXE file

3.Upload the .MSI installation file to a shared folder on your server (main computer) accessible by your AD domain members.

Proceed with one of the deployment options below:

Startup script

Software Installation task

The .MSI installer is also available in the ESET PROTECT repository.