hmLoadTopic({
hmKeywords:"",
hmTitle:"Example scenarios of ESET Management Agent deployment to targets joined to domain",
hmDescription:"The instructions below cover these scenarios: Deployment from ESET PROTECT Server Appliance or Linux ESET PROTECT Server to Windows targets joined to a domain. Deployment from...",
hmPrevLink:"deployment_scenarios_not_joined.html",
hmNextLink:"manage_endpoint.html",
hmParentLink:"deployment_scenarios.html",
hmBreadCrumbs:"<a href=\"fs.html\">Get started<\/a> &gt; <a href=\"fs_deployment.html\">ESET Management Agent Deployment<\/a> &gt; <a href=\"deployment_scenarios.html\">Example scenarios of ESET Management Agent deployment<\/a>",
hmTitlePath:"Get started > ESET Management Agent Deployment > Example scenarios of ESET Management Agent deployment > Example scenarios of ESET Management Agent deployment to targets joined to domain",
hmHeader:"<h1 class=\"p_Heading1\"><span class=\"f_Heading1\">Example scenarios of ESET Management Agent deployment to targets joined to domain<\/span><\/h1>\n\r",
hmBody:"<p class=\"p_Normal\">The instructions below cover these scenarios:<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalList\">Deployment from ESET PROTECT Server Appliance or Linux ESET PROTECT Server to Windows targets <\/span><span class=\"f_UI\">joined to a domain<\/span><span class=\"f_NormalList\">.<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 32px; margin-left: 0;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span>Deployment from Windows ESET PROTECT Server from Windows source joined to a domain to Windows targets <span class=\"f_UI\">joined to a domain<\/span>.<\/p>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><span class=\"f_Heading2\">Preconditions:<\/span><\/h2>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalList\">Same local network.<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalList\">Working FQDN names, e.g.: desktop-win11.protect.local maps to 10.0.0.2 and vice versa.<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalList\">Installed clean operating system from MSDN with defaults.<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalList\">Created domain <\/span><span class=\"f_CodeHighlighted\">protect.local<\/span><span class=\"f_NormalList\"> with netbios name <\/span><span class=\"f_CodeHighlighted\">PROTECT<\/span><span class=\"f_NormalList\">.<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalList\">Created user <\/span><span class=\"f_CodeHighlighted\">DomainAdmin<\/span><span class=\"f_NormalList\"> that is a member of <\/span><span class=\"f_CodeHighlighted\">Domain Admins<\/span><span class=\"f_NormalList\"> security group in domain controller.<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalList\">Each machine joined domain <\/span><span class=\"f_CodeHighlighted\">protect.local<\/span><span class=\"f_NormalList\"> with user <\/span><span class=\"f_CodeHighlighted\">DomainAdmin<\/span><span class=\"f_NormalList\"> and this user is Administrator.<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_CodeHighlighted\">DomainAdmin<\/span><span class=\"f_NormalList\"> can log into each machine and perform local administration tasks.<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 32px; margin-left: 0;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span>Windows ESET PROTECT Server service is temporarily running under <span class=\"f_CodeHighlighted\">PROTECT\\DomainAdmin<\/span> credentials. After the deployment, the <span class=\"f_UI\">Network Service<\/span> account is sufficient (no changes necessary in the Virtual Appliance or Linux).<\/p>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><span class=\"f_Heading2\">Targets:<\/span><\/h2>\n\r<p class=\"p_NormalList\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalList\">Windows 11 Enterprise<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalList\">&nbsp;<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">1.<\/span>Open <span class=\"f_UI\">Network and Sharing Center<\/span>.<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">2.<\/span>Check that network is the <span class=\"f_UI\">Domain network<\/span> in the <span class=\"f_UI\">View your active networks<\/span> section.<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">3.<\/span>Disable <span class=\"f_UI\">Windows Firewall<\/span> for <span class=\"f_UI\">Domain Network<\/span> by clicking the <span class=\"f_UI\">Turn Windows Firewall<\/span> <span class=\"f_UI\">on or off<\/span> and selecting <span class=\"f_UI\">Turn off Windows Firewall<\/span> in the <span class=\"f_UI\">Domain network location settings<\/span>.<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">4.<\/span>Check that <span class=\"f_UI\">File and printer sharing<\/span> is enabled for the <span class=\"f_UI\">Domain network<\/span> by clicking on the <span class=\"f_UI\">Change advanced sharing settings<\/span> in the <span class=\"f_UI\">Network and Sharing Center<\/span>.<\/p>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><span class=\"f_Heading2\">ESET PROTECT Web Console:<\/span><\/h2>\n\r<p class=\"p_Normal\">In the ESET PROTECT Web Console, create a new <a href=\"server_tasks_agent_deployment1.html\" class=\"topiclink\">Agent Deployment<\/a> Server task:<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">1.<\/span><span class=\"f_UI\">Targets<\/span>—Select target Windows computers.<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">2.<\/span><span class=\"f_UI\">Server hostname (optional)<\/span>—type the FQDN name or IP address of the ESET PROTECT Server. (You can find the FQDN name of the machine by right-clicking the <span class=\"f_UI\">Computer<\/span> and selecting <span class=\"f_UI\">Properties<\/span>. The FQDN name appears next to the <span class=\"f_UI\">Full computer name<\/span>).<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">3.<\/span><span class=\"f_UI\">Username<\/span>—Type <span class=\"f_UI\">PROTECT\\DomainAdmin<\/span> (it is important to include the whole domain) and type the <span class=\"f_UI\">Password<\/span> for this user.<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">4.<\/span><span class=\"f_UI\">ESET PROTECT Certificate<\/span>—Click <span class=\"f_UI\">No certificate selected<\/span> and select <span class=\"f_UI\">Agent certificate<\/span>.<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">5.<\/span>Click <span class=\"f_UI\">Finish<\/span> to execute the task.<\/p>"
})
