Issue

• Detect client computers without ESET endpoint products installed

Solution

Automatically deploy ESET products to unprotected clients

Dynamic groups can be used in combination with tasks to distribute ESET Endpoint Security or ESET Endpoint Antivirus to unprotected client computers. Click here for step-by-step instructions.

ESET Security Management Center (ESMC) 7 User Permissions

This article assumes that your ESMC user has the correct access rights and permissions to perform the tasks below.

If you are still using the default Administrator user, or you are unable to perform the tasks below (the option is grayed out), see the following article to create a second administrator user with all access rights (you only need to do this once):

• Create a second administrator user in ESET Security Management Center 7.x

View permissions needed for least privilege user access

1. Open ESET Security Management Center Web Console (ESMC Web Console) in your web browser and log in.
    
2. Click More → Dynamic Group Templates.
    
3. Select an existing dynamic group Template and click Edit Template to edit it, or click New Template to create a new dynamic group Template. In the following example, we will create a template for a dynamic group that contains computers without ESET endpoint solutions installed.

Figure 1-1
Click the image to view larger in new window

1. Type a name for your new dynamic group Template into the Name field.

Figure 1-2
Click the image to view larger in new window

1. Click Expression, select NOR (All conditions have to be false) from the Operation drop-down menu and click Add Rule. In addition to NOR, you can use the OR (at least one condition has to be true), NAND (At least one condition has to be false), and And (All conditions have to be true) operations to create custom expressions. An expression can contain multiple rules.

Figure 1-3
Click the image to view larger in new window

1. You can create rules to sort devices by a variety of criteria. Expand each section below for more information about each of the criteria you can sort by. Some criteria appear in multiple sections but sort devices using the same logic. 

View Dynamic Group Criteria

For example, expand Installed software, select Application name and then click OK.

Figure 1-4

1. Select has prefix from the drop-down menu and type ESET Endpoint into the blank field. This expression will recognize any application with a name that begins with ESET Endpoint.
    
2. Click Finish when you are finished making changes. If you are editing a template associated with an existing dynamic group, ESMC will automatically recognize when a new computer meets the criteria defined in a Dynamic Group template and add it to the appropriate Dynamic Group.
   
   If this is a new template, create a dynamic group using the template you just created.

Figure 1-5
Click the image to view larger in new window

KB Solution ID: KB6791 |Document ID: 25634|Last Revised: September 4, 2018