hmLoadTopic({
hmKeywords:"",
hmTitle:"Example scenarios of ESET Management Agent deployment to targets not joined to domain",
hmDescription:"The instructions below cover these scenarios: Deployment from ESET PROTECT Server Appliance or Linux ESET PROTECT Server to Windows targets not joined to a domain. Deployment...",
hmPrevLink:"deployment_scenarios.html",
hmNextLink:"deployment_scenarios_joined.html",
hmParentLink:"deployment_scenarios.html",
hmBreadCrumbs:"<a href=\"fs.html\">Get started<\/a> &gt; <a href=\"fs_deployment.html\">ESET Management Agent Deployment<\/a> &gt; <a href=\"deployment_scenarios.html\">Example scenarios of ESET Management Agent deployment<\/a>",
hmTitlePath:"Get started > ESET Management Agent Deployment > Example scenarios of ESET Management Agent deployment > Example scenarios of ESET Management Agent deployment to targets not joined to domain",
hmHeader:"<h1 class=\"p_Heading1\"><span class=\"f_Heading1\">Example scenarios of ESET Management Agent deployment to targets not joined to domain<\/span><\/h1>\n\r",
hmBody:"<p class=\"p_Normal\">The instructions below cover these scenarios:<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalList\">Deployment from ESET PROTECT Server Appliance or Linux ESET PROTECT Server to Windows targets <\/span><span class=\"f_UI\">not joined to a domain<\/span><span class=\"f_NormalList\">.<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 32px; margin-left: 0;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span>Deployment from Windows ESET PROTECT Server from Windows source not joined to a domain to Windows targets <span class=\"f_UI\">not joined to a domain<\/span>.<\/p>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><span class=\"f_Heading2\">Preconditions:<\/span><\/h2>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalList\">Same local network.<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalList\">Working FQDN names, e.g.: desktop-win11.test.local maps to 192.168.1.20 and vice versa.<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 32px; margin-left: 0;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span>Installed clean operating system from MSDN with defaults.<\/p>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><span class=\"f_Heading2\">Targets:<\/span><\/h2>\n\r<p class=\"p_NormalList\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalList\">Windows 11 Enterprise<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalList\">&nbsp;<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">1.<\/span>Create a user with password that is a member of the Administrators group, e.g. <span class=\"f_UI\">Admin<\/span>.<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 21px; margin-left: 19px;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">a.<\/span><span class=\"f_NormalList\">Open <\/span><span class=\"f_UI\">Microsoft Management Console<\/span><span class=\"f_NormalList\"> by opening the <\/span><span class=\"f_UI\">Run<\/span><span class=\"f_NormalList\"> console and typing the <\/span><span class=\"f_CodeHighlighted\">mmc<\/span><span class=\"f_NormalList\"> into the field and clicking <\/span><span class=\"f_UI\">OK<\/span><span class=\"f_NormalList\">.<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 40px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">b.<\/span>Add the <span class=\"f_UI\">Local Users and groups<\/span> <span class=\"f_UI\">Snap-in<\/span> from the <span class=\"f_UI\">File<\/span> &gt; <span class=\"f_UI\">Add\/Remove Snap-in<\/span>. Add a new user into the <span class=\"f_UI\">Users<\/span> folder and fill in the required information into the fields (do not forget to fill in the password). In the <span class=\"f_UI\">Groups<\/span> section, open the <span class=\"f_UI\">Properties<\/span> of the <span class=\"f_UI\">Administrators<\/span> group and add the newly created user into the group by clicking the <span class=\"f_UI\">Add<\/span> button. Fill in the login name of the newly created user into the <span class=\"f_UI\">Enter the object names to select<\/span> and verify it by clicking on the <span class=\"f_UI\">Check Names<\/span> button.<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">2.<\/span>In the <span class=\"f_UI\">Network and Sharing Center<\/span>, change the network setting from the <span class=\"f_UI\">Public network<\/span> to <span class=\"f_UI\">Private network<\/span> by clicking the <span class=\"f_UI\">Public network<\/span> on the side of the <span class=\"f_UI\">View your active networks section<\/span>.<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">3.<\/span>Disable <span class=\"f_UI\">Windows Firewall<\/span> for the <span class=\"f_UI\">Private Network<\/span> by clicking on the <span class=\"f_UI\">Turn Windows Firewall on or off<\/span> and selecting <span class=\"f_UI\">Turn off Windows Firewall<\/span> in the Home or <span class=\"f_UI\">Work network<\/span> location settings.<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">4.<\/span>Check that <span class=\"f_UI\">File<\/span> <span class=\"f_UI\">and printer sharing<\/span> is enabled for <span class=\"f_UI\">Private network<\/span> by clicking on the <span class=\"f_UI\">Change advanced sharing settings<\/span> in the <span class=\"f_UI\">Network and Sharing Center<\/span>.<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">5.<\/span>Disable User Account Control (UAC) remote restrictions:<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 21px; margin-left: 19px;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">a.<\/span><span class=\"f_NormalList\">Open <\/span><span class=\"f_UI\">Registry editor<\/span><span class=\"f_NormalList\"> by typing <\/span><span class=\"f_CodeHighlighted\">regedit<\/span><span class=\"f_NormalList\"> into the <\/span><span class=\"f_UI\">Run<\/span><span class=\"f_NormalList\"> console and locate <\/span><span class=\"f_CodeHighlighted\">HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System<\/span><span class=\"f_NormalList\"> <\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 21px; margin-left: 19px;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">b.<\/span><span class=\"f_NormalList\">In the <\/span><span class=\"f_UI\">System<\/span><span class=\"f_NormalList\"> file, create a new <\/span><span class=\"f_UI\">DWORD Value<\/span><span class=\"f_NormalList\"> with the name <\/span><span class=\"f_CodeHighlighted\">LocalAccountTokenFilterPolicy<\/span><span class=\"f_NormalList\">.<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 40px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">c.<\/span>Open the created file and set the <span class=\"f_UI\">Value data<\/span> to <span class=\"f_UI\">1<\/span>.<\/p>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><span class=\"f_Heading2\">ESET PROTECT Web Console:<\/span><\/h2>\n\r<p class=\"p_Normal\">In the ESET PROTECT Web Console, create a new <a href=\"server_tasks_agent_deployment1.html\" class=\"topiclink\">Agent Deployment<\/a> Server task:<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">1.<\/span><span class=\"f_UI\">Targets<\/span>—Select target Windows computers.<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">2.<\/span><span class=\"f_UI\">Server hostname (optional)<\/span>—Type the FQDN name or IP address of the ESET PROTECT Server. (You can find the FQDN name of the machine by right-clicking in the <span class=\"f_UI\">Computer<\/span> and selecting <span class=\"f_UI\">Properties<\/span>. The FQDN name appears next to the <span class=\"f_UI\">Full computer name<\/span>).<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">3.<\/span><span class=\"f_UI\">Username<\/span>—Type <span class=\"f_UI\">Admin<\/span> (no domain name or computer name prefix) and type the <span class=\"f_UI\">Password<\/span> for this user.<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">4.<\/span><span class=\"f_UI\">ESET PROTECT Certificate<\/span>—Click <span class=\"f_UI\">No certificate selected<\/span> and select <span class=\"f_UI\">Agent certificate<\/span>.<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">5.<\/span>Click <span class=\"f_UI\">Finish<\/span> to execute the task.<\/p>"
})
