Example scenarios of ESET Management Agent deployment to targets joined to domain

1.Deployment from ESMC Server Appliance or Linux ESMC Server to Windows targets joined to a domain.

2.Deployment from Windows ESMC Server from Windows source joined to a domain to Windows targets joined to the domain.

Preconditions:

Same local network.

Working FQDN names, e.g.: desktop-win10.esmc.local maps to 10.0.0.2 and vice versa.

Installed clean operating system from MSDN with defaults.

Created domain "esmc.local" with netbios name "ESMC".

Created user "DomainAdmin" that is member of "Domain Admins" security group in domain controller.

Each machine joined domain "esmc.local" with user "DomainAdmin" and this user is Administrator (Windows 10, 8.1, 7) or Standard user (power user on Windows XP).

"DomainAdmin" is able to log into each machine and perform local administration tasks.

Windows ESMC Server service is temporarily running under "ESMC\DomainAdmin" credentials. After deployment "Network Service" is enough. (no changes necessary in the appliance or Linux).

 

Targets:

Windows 10 Enterprise

Windows 8.1 Enterprise

Windows 7 Enterprise

 

1.Open Network and Sharing Center.

2.Check that network is Domain network in the View your active networks section.

3.Disable Windows Firewall for Domain Network by clicking the Turn Windows Firewall on or off and selecting Turn off Windows Firewall in the Domain network location settings.

4.Check that File and printer sharing in enabled for Domain network by clicking on the Change advanced sharing settings in the Network and Sharing Center.

5.In the ESET Security Management Center Web Console create new "Agent deployment" Server task assigned to FQDN name of the machine (you can find the FQDN name of the machine by right clicking in the Computer and selecting Properties. The FQDN name appears next to the Full computer name).

6.Set optional Server hostname to point to FQDN name or IP address of the ESMC server.

7.Set username to "ESMC\DomainAdmin" (it is important to include the whole domain) and his password.

8.Select Agent's certificate.

9.Execute the task.

 

For Windows XP Professional

1.Disable Windows Firewall by selecting Off in the Windows Firewall -> General tab.

2.Check that File and printer sharing is enabled in the Windows Firewall -> Exceptions tab.

3.In the ESET Security Management Center Web Console create new "Agent deployment" Server task assigned to FQDN name of the machine (you can find the FQDN name of the machine by right clicking in the Computer and selecting Properties. The FQDN name appears next to the Full computer name).

4.Set optional Server hostname to point to FQDN name or IP address of the ESMC server.

5.Set username to "ESMC\DomainAdmin" (it is important to include whole domain) and his password.

6.Select Agent's certificate.

7.Execute the task.