Jump to content

Malwarebytes Endpoint Security auto-upgrade on Limited user accounts?


Recommended Posts

Hi,

I have a question before we buy Malwarebytes Endpoint Security. 

The workstations where MBAM will be installed will have users with limited permissions. Once the clients and the management console is setup, will MBAM auto-upgrade to the new version when it becomes available? On the limited accounts, will there be any user interaction necessary? Or will it all be done silently and automatically?

 

Link to post
Share on other sites

Hi Jim, Console managed deployments have Anti-Malware's signature updates and scan schedules completed by a system account, you do not have to worry about limited accounts for that portion.

For program version updates, Console managed deployments do not auto-upgrade the managed Anti-Malware build. Managed Anti-Malware must be upgraded by first performing an upgrade for the Console, which would contain the new managed Anti-Malware build. You would then upgrade the endpoint's managed client communicator software and its managed Anti-Malware/Anti-Exploit with a new push install over the top of the existing setup.

Only Anti-Exploit alone can auto-upgrade it's build version at this time, and it needs to in order to bring new features and compatibility since it doesn't use signatures. This is the portion you will have trouble with when deployed on limited user account machines. Correction: These auto-upgrade are done via SYSTEM account and will work on limited accounts. There are also other ways to deploy new Anti-Exploit builds to those who cannot install them due to permissions, see this thread about how to upgrade Console managed Anti-Exploit install by alternative means... 

 

Edited by djacobson
corrected info
Link to post
Share on other sites

Hi Dyllon!

2 hours ago, djacobson said:

You would then upgrade the endpoint's managed client communicator software and its managed Anti-Malware/Anti-Exploit with a new push install over the top of the existing setup.

This can be done from the Console? I mean we can push, to the endpoint (with a limited user),  the client communicator software, Anti-Malware and Anti-Exploit, using the Console? Or do we have to do it with psExec ?(for example).

Quote

Only Anti-Exploit alone can auto-upgrade it's build version at this time, and it needs to in order to bring new features and compatibility since it doesn't use signatures.

But no auto-upgrade for Limited Account if I understood right. Right? We need to push the new build using psExcec, for example. Correct?

Link to post
Share on other sites

Hey Jim, for the console way, you perform a new scan and push install from Admin \ Client Push Install. This will recognize the previous installation and automatically upgrade the software portions needed.

I clarified with level 2 MBAE team that the Anti-Exploit auto-upgrade feature will work on limited accounts as it is being done from a system account. If it doesn't then your network may be restricting access to this URL...

https://data-cdn.mbamupdates.com

Whitelist this address on any content filters, proxies or firewalls in place if needed. You could still use psExec if you'd like.

 

Link to post
Share on other sites

OK,

That's really good news! So to sum it up (And make sure I understood well?) :

  • We can push the upgrade (for MBAM and MBAE) with the console without any interaction from the user on the EndPoint, even if it has a limited user account.
  • Plus MBAE will do auto-upgrades, even on a limited user account. 
Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.