Example scenarios of ESET Management Agent deployment to targets joined to domain

The instructions below cover these scenarios:

•Deployment from ESET PROTECT Server Appliance or Linux ESET PROTECT Server to Windows targets joined to a domain.

•Deployment from Windows ESET PROTECT Server from Windows source joined to a domain to Windows targets joined to a domain.

Preconditions:

•Same local network.

•Working FQDN names, e.g.: desktop-win10.protect.local maps to 10.0.0.2 and vice versa.

•Installed clean operating system from MSDN with defaults.

•Created domain protect.local with netbios name PROTECT.

•Created user DomainAdmin that is a member of Domain Admins security group in domain controller.

•Each machine joined domain protect.local with user DomainAdmin and this user is Administrator.

•DomainAdmin can log into each machine and perform local administration tasks.

•Windows ESET PROTECT Server service is temporarily running under PROTECT\DomainAdmin credentials. After the deployment, the Network Service account is sufficient (no changes necessary in the Virtual Appliance or Linux).

Targets:

Windows 10 Enterprise

Windows 8.1 Enterprise

Windows 7 Enterprise

1.Open Network and Sharing Center.

2.Check that network is the Domain network in the View your active networks section.

3.Disable Windows Firewall for Domain Network by clicking the Turn Windows Firewall on or off and selecting Turn off Windows Firewall in the Domain network location settings.

4.Check that File and printer sharing is enabled for the Domain network by clicking on the Change advanced sharing settings in the Network and Sharing Center.

ESET PROTECT Web Console:

In the ESET PROTECT Web Console, create a new Agent Deployment Server task:

1.Targets - Select target Windows computers.

2.Server hostname (optional)  - type the FQDN name or IP address of the ESET PROTECT Server. (You can find the FQDN name of the machine by right-clicking the Computer and selecting Properties. The FQDN name appears next to the Full computer name).

3.Username - Type PROTECT\DomainAdmin (it is important to include the whole domain) and type the Password for this user.

4.ESET PROTECT Certificate - Click No certificate selected and select Agent certificate.

5.Click Finish to execute the task.