Need to make changes to protection -- Best way for immediate change?

Avast Business Avast Distributed Network Manager
1

I have an 11-workstation/1-server office with the ADNM managing it all.

The us of one of the workstations uses a certain Citrix-based website to do payroll accounting, and since the install (last week), he’s having trouble getting the site to load correctly. He contacted the support rep for the site/app, and they said that it’s most likely the newly-installed Avast Script Blocker component that’s causing the issue (and I agree).

So, I need a way to disable the script blocker, preferably only on this workstation.

I know I can change the “Default Resident Task” to disable the script blocking (and presumably this will disable it for all of the computers there), and quite honestly, that’s fine. However, I just disabled it, and found that the issue is still occurring, so I’m concerned that doesn’t take effect immediately. Is there a delay as far as when changes to the Default Resident Task settings are pushed out to the clients? Or should I assume that the changes did take effect immediately and there’s something else causing this specific issue? Is there any way to see whether this change has affected this client yet? (I did make sure that all browser windows on this workstation were closed before trying the site again.)

I know that I can create a custom computer group, add this computer to the new group, then create a new “On-access scanning task” and assign it to the new group, but I’m not going to do all that work until I’m sure that this will solve the actual issue yet.

Alternatively, is there a way to allow changes to the policies directly from the client’s workstation, similar to the way an un-managed client would do? I know that this is generally frowned upon, since that would defeat the purpose of having a management console, but I’m just looking for quick verification that we’ve found the cause of the issue, not to use this as a long-term solution.

Thanks in advance for any help with this. I looked through the ADNM administration manual, but didn’t see any mention of any of this.

Regards,
Jon Heese

2

you can create a new group in the tree in ADNM and put that specific computer object in there
then define the properties of that new group (folder basically) that the script blocker is not running

3

Right, I mentioned that in my original post. My question about that is:

How long does it take before those changes are active? Immediately? 1 hour? 24 hours? Any ideas?

Regards,
Jon Heese

4

It depend on your settings…
See Group properties, menu communication and set appropriate POP interval. (I use 600 seconds with 300 s offset in my environment with 55 clients).
In your small network, you can choose Push&Pop communication model. In such case ADNM sent broadcasts, but you can enforce communication with client computer from ADNM console.(right click on group, and choose Applay on group).

In menu service, you can set overwrite settings interval (I used 30 minutes) I hope, this is item, you need to decrease, if you want deploy changes faster.

5

Great! This is exactly what I was looking for.

Thanks for the detailed description. :slight_smile:

Regards,
Jon Heese