Installation manual

be displayed with its corresponding clients.

Click the Add/Remove button to add or remove clients from groups, or click the Delete button to delete an entire group.

Click the Copy to Clipboard button to copy the client and group lists. To refresh the group clients press the Refresh

button.

You can also Import/Export currently selected group clients to an .xml file.

5.2.2 Parametric Groups

In addition to Static Groups, Parametric Groups can be very useful. Client stations are dynamically assigned to a certain

parametric group when the group's conditions are met. The advantage of parametric groups is the ability to use them in

various places, including filters, policies, reports and notifications.

The Parametric Groups main window is composed of four sections. Parametric Groups lists the parent groups and

subgroups that have been created. When you have selected a certain group from Parametric Groups, clients that belong

to the currently selected group are listed in the Selected Group part.

note: When a parent group is selected, the list contains subgroup members as well.

Parameters set for a selected group are listed in the Parameters section of the window. You can edit or add parameters at

any time by clicking the Edit... button.

The Synchronization status part displays a progress bar for the synchronization process.

To create a new group, simply click the Create... button. The new group will be created as a subgroup of the currently

selected parent group. If you wish to create a main group, select the root of the hierarchical tree — Parametric Groups.

The Parent group field contains the name of the parent group for the newly created group (i.e. "/" for the root). Enter

name and a short description for the new group. The next step is the creation of Client filter parameters, which can be

done by selecting options after pressing the Edit... button. If you enable the Sticky check box, clients will be

automatically added to this group when they match the conditions, but will never be removed. The content of a sticky

group can be reset manually at the root level.

Note: This parameter can only be set when creating a new group.

To edit an existing group, simply select it from the Parametric Groups list and then press the Edit... button in the bottom

of the window. For group deletion, select the desired group and press the Delete button.

You can manually refresh the group list by pressing the Refresh button. To import a group from a file select a group in the

Parametric Groups section under which you want the new group to be imported and click the Import... button. Confirm

your selection by clicking Yes. Locate the file you want to import and click Open. The group (and all of its subgroups) will

be imported under the selected location. To export a group (and all of its subgroups) select it in the Parametric Groups

section, click the arrow on the Import... button and select Export... Confirm by clicking Yes, select a name and a location

for your export file and click Save.

Note: You can use your mouse to drag and drop groups already in the Parametric Groups section.

5.2.3 Active Directory Synchronization

The Active Directory Synchronization uses automatic group creation (with corresponding clients) based on the structure

defined by Active Directory. It allows the administrator to sort clients to groups, as long as the client name matches the

object type computer at the side of Active Directory (AD) and belongs to groups in the AD.

There are two main options that determine the manner of synchronization:

The Synchronize groups option allows you to choose which AD groups will be synchronized. The All groups option

results in synchronization of the complete AD tree structure whether or not the AD groups contain ERA clients. The next

two options (Only groups containing ERA server clients and Only groups containing ERA primary server clients)

mean stricter synchronization and result in the synchronization of only groups containing existing ERA clients.

With the Synchronization type option you define whether the AD groups to be synchronized will be added to the

existing AD groups (AD groups import) or if the existing AD groups will be completely replaced by those to be

synchronized (AD groups synchronize).

The Synchronize option allows you to schedule the AD synchronization to a certain time interval.

Detailed configuration of Active Directory synchronization can be done using the Configuration Editor (ESET Remote