Issue

• VMware Horizon specified settings and actions not supported by ESET Security Management Center 7.0

• Microsoft SCCM specified settings and actions not supported by ESET Security Management Center 7.0

Details

Solution

VMware Horizon

• The setting Delete or refresh machine on logoff:
  • Never - this option is supported.
  • Delete immediately - this option is not currently supported in ESMC. VMware creates a machine with a new name and old hardware, this causes ESMC to create a new machine in the Web Console.
  • Refresh Immediately - The notification about recovery of identity (Events on managed computers → Computer identity recovered) may not function properly. It is due to the way VMware optimizes the manipulation with images. VMware sometimes uses the previous identity, which can cause the notification to not work. The assigning of the identities of such clones in ESMC is functioning correctly.

Figure 1-1

• Instant clones are not supported with ESMC. Full clones and Linked clones are supported.
   

Figure 1-2

• Actions over a pool of machines:
  • Using Refresh over a pool of machines is supported in ESMC, however the notification about the recovery of identity (Events on managed computers → Computer identity recovered) may not function properly.
  • Rebalance - supported in ESMC.
  • Operation Recompose changes the serial numbers of virtual drives. If there are more virtual dives mounted, it can cause ESMC to create new machine identities in the ESMC Web Console. Check your machines in the Web Console after running the Recompose.

Figure 1-3

Microsoft SCCM

If you use SCCM for re-imaging of machines with ESET Management Agent, the Agent must be installed in the Windows reference image. The following conditions must be met to create a fully functional reference image with ESET Management Agent:

• Allowed local administrator has blank password
• Computer must be a member of Workgroup; not be in a domain 
• SCCM agent cannot be installed
• Requesting strong passwords must be turned off
• ESET Agent must be installed on the system and have connected at least twice to ESMC Server before creating the image

All conditions mentioned above must be met only during the creation of reference image. After the image is deployed, you can change them on the target machine.

It the installation of the ESET Agent is included in the task sequence, ESMC creates a new machine identity in the Web Console after each re-imaging.