Install Windows Login and RDP protection via GPO
This article applies to Active Directory Integration deployment type only.
Prerequisites
Server (or main computer) where the Authentication Server is installed
•Must belong to the same Active Directory (AD) domain as the client computer(s), where Windows Login protection and RDP protection will be installed
•Microsoft Group Policy Management Console (GPMC) must be installed on your server. See the instructions to install GPMC
•The computer you will install Windows login protection on must be added to EsaServices through Active Directory Users and Computers
Client computer(s)
•.NET Framework 4.5 or later must be installed on the client computer
•Active Directory membership - the computer must belong to the same AD domain as your server (main computer) where the Authentication Server is installed
•Domain Admin privileges - the installer must be run by a member of the "Domain Administrators" security group
•Windows 7 / Windows Server 2008 R2 or later
•Remote Desktop connection must be enabled on the specific computer (Start > Control Panel > System Properties > Remote tab)
Adding a computer to EsaServices
1.Open Active Directory Users and Computers management tool.
2.Click View > Advanced Features.
3.Navigate to <your_active_directory_domain> > ESET Secure Authenitcation, right-click EsaServices, select Properties.
4.Click Members tab > Add > Object Types > select Computers > OK.
5.In the Enter the object names to select field, type the computer name you want to install Windows Login protection on. Click Check Names to ensure the computer name is correct.
6.If the computer name is correct, click OK, click OK again.
Obtaining the .MSI installation file
If the Authentication Server is installed using the .EXE installer, then .MSI installers are automatically created in "C:\Program Files\ESET Secure Authentication On-Prem\msi\".
Alternatively, obtain the installer following the steps below:
1.Download the .EXE installer for ESA from https://www.eset.com/us/products/secure-authentication/
2.Extract the .MSI installation file (named ESET Secure Authentication On-Prem x64.MSI or ESET Secure Authentication On-Prem x86.MSI) from the downloaded .EXE file
3.Upload the .MSI installation file to a shared folder on your server (main computer) accessible by your AD domain members.
Proceed with one of the deployment options below:
The .MSI installer is also available in the ESET PROTECT repository.