How to use Override mode

Users with ESET Endpoint products for Windows installed on their machine can use the Override feature. You can enable the Override mode only remotely from the ESET PROTECT Web Console. Override mode allows users on the client-computer level to change settings in the installed ESET product, even if there is a policy applied over these settings. Override mode can be enabled for AD users, or it can be password-protected. The function cannot be enabled for more than four hours at once.

Override mode limitations

•Override mode cannot be stopped from the ESET PROTECT Web Console when it is enabled. Override is disabled only after the time of override expires, or after it is turned off on the client itself.

•The user who is using the Override mode needs to have Windows admin rights too. Otherwise, the user cannot save the changes in settings of the ESET product.

•Active Directory group authentication is supported for selected managed products:

oESET Endpoint Security

oESET Server Security for Microsoft Windows Server (formerly ESET File Security for Microsoft Windows Server)

oESET Mail Security for IBM Domino

oESET Mail Security for Microsoft Exchange Server

To set the Override mode:

1.Navigate to Polices > New Policy.

2.In the Basic section, type in a Name and Description for this policy.

3.In the Settings section, select ESET Endpoint for Windows.

4.Click Override mode and configure rules for override mode.

5.In the Assign section, select the computer or group of computers on which this policy will be applied.

6.Review the settings in the Summary section and click Finish to apply the policy.

admin_pol_override

If John has a problem with his endpoint settings blocking some important functionality or web access on his machine, the Administrator can allow John to override his existing endpoint policy and tweak the settings manually on his machine. Afterward, these new settings can be requested by ESET PROTECT On-Prem so the Administrator can create a new policy out of them.

To do so, follow the steps below:

1.Navigate to Polices > New Policy.

2.Complete the Name and Description fields. In the Settings section, select ESET Endpoint for Windows.

3.Click Override mode, enable the override mode for one hour and select John as the AD user.

4.Assign the policy to John's computer and click Finish to save the policy.

5.John has to enable the Override mode on his ESET endpoint and change the settings manually on his machine.

6.On the ESET PROTECT Web Console, navigate to Computers, select John's computer and click Show Details.

7.In the Configuration section, click Request configuration to schedule a Client Task to get the configuration from the client ASAP.

8.After short time, the new configuration will appear. Click the product which settings you want to save and then click Open Configuration.

9.You can review settings and then click Convert to policy.

10. Complete the Name and Description fields.

11. In the Settings section, you can modify the settings if needed.

12. In the Assign section, you can assign this policy to John's computer (or others).

13. Click Finish to save the settings.

14. Do not forget to remove the override policy when it is no longer needed.

˄˅