How to use Override mode

Users with ESET Endpoint products for Windows installed on their machine can use the Override feature. You can enable the Override mode only remotely from the ESET PROTECT Web Console. Override mode allows users on the client-computer level to change settings in the installed ESET product, even if there is a policy applied over these settings. Override mode can be enabled for AD users, or it can be password-protected. The function cannot be enabled for more than four hours at once.

Override mode limitations

•When enabled, the override mode cannot be stopped from the ESET PROTECT Web Console. Override is disabled only after the time of override expires. The local administrator can also turn off the override on the client machine.

•The user using the Override mode must have Windows administrator rights. Otherwise, the user cannot save the changes in the ESET product settings.

•Active Directory group authentication is supported for the selected managed products:

oESET Endpoint Security

oESET Server Security for Microsoft Windows Server (formerly ESET File Security for Microsoft Windows Server)

oESET Mail Security for IBM Domino

oESET Mail Security for Microsoft Exchange Server

To set the Override mode:

1.Navigate to Polices > New Policy.

2.In the Basic section, type in a Name and Description for this policy.

3.In the Settings section, select ESET Endpoint for Windows.

4.Click Override mode and configure rules for override mode.

When accessing override mode, the ESET security product creates a settings snapshot. If Revert local changes after override is enabled, the settings snapshot is reverted, and the changes created by the local administrator are revoked.

When the Revert local changes after override is disabled, the policies applied from the ESET PROTECT Web Console are evaluated with higher priority and will override the local changes.

5.In the Assign section, select the computer or group of computers on which this policy will be applied.

6.Review the settings in the Summary section and click Finish to apply the policy.

Override mode in the New Policy settings

If John has a problem with his endpoint settings blocking some important functionality or web access on his machine, the Administrator can allow John to override his existing endpoint policy and tweak the settings manually on his machine. Afterward, these new settings can be requested by ESET PROTECT On-Prem so the Administrator can create a new policy out of them.

To do so, follow the steps below:

1.Navigate to Polices > New Policy.

2.Complete the Name and Description fields. In the Settings section, select ESET Endpoint for Windows.

3.Click Override mode, enable the override mode for one hour and select John as the AD user.

4.Assign the policy to John's computer and click Finish to save the policy.

5.John has to enable the Override mode on his ESET endpoint and change the settings manually on his machine.

6.On the ESET PROTECT Web Console, navigate to Computers, select John's computer and click Show Details.

7.In the Configuration section, click Request configuration to schedule a Client Task to get the configuration from the client ASAP.

8.After short time, the new configuration will appear. Click the product which settings you want to save and then click Open Configuration.

9.You can review settings and then click Convert to policy.

10. Complete the Name and Description fields.

11. In the Settings section, you can modify the settings if needed.

12. In the Assign section, you can assign this policy to John's computer (or others).

13. Click Finish to save the settings.

14. Do not forget to remove the override policy when it is no longer needed.

˄˅