[SOLVED]Major Issue. Server Address changed on all endpoints.

Hey guys,

Somehow, something modified the Remote Administrator Server Address on all of our endpoints. The address is misspelled.

Problem is, it pushed the update down from the server, and now nothing is reporting in... So I'm talking about over 1,000 endpoints...

What I'm thinking, is there a file that that ESET stores this in? If there is, I can script it and fix it.

This is regarding ESET v5

Any Ideas?

 

Re: Major Issue. Server Address changed on all endpoints.

Ah!

Never mind! I found the path.

computer\hklm\software\eset\eset security\current version\plugins\01000600\profiles\@myprofile. Edit the RAClientServer. This can be done with ESET running, and will work if there is a password for advanced settings set.

 

Re: Major Issue. Server Address changed on all endpoints.

so what changed this and mis-directed all your endpoints?

Fixing it is one thing, finding out what broke it is equally important imo.

 

I have the same issue, and would love to apply a script fix, but am not able to edit those particular registry keys. How did you get around that?

Thanks!

P.S. The problem was initially caused when when an incomplete configuration was erroneously pushed in ERA.