Configuring Update Privileges and Other Settings

Configure update settings and grant agent users certain privileges, such as performing "Update Now" and enabling scheduled update.

  1. Go to Agents > Agent Management.
  2. In the agent tree, click the root domain icon () to include all agents or select specific domains or agents.
  3. Click Settings > Privileges and Other Settings.
  4. Click the Other Settings tab and configure the following options in the Update Settings section:
    Option Description

    OfficeScan agents download updates from the Trend Micro ActiveUpdate Server

    When initiating updates, OfficeScan agents first get updates from the update source specified on the Updates > Agents > Update Source screen.

    If the update is unsuccessful, the agents attempt to update from the OfficeScan server. Selecting this option enables agents to attempt to update from the Trend Micro ActiveUpdate server if the update from the OfficeScan server is unsuccessful.

    Note:

    A pure IPv6 agent cannot update directly from the Trend Micro ActiveUpdate Server. A dual-stack proxy server that can convert IP addresses, such as DeleGate, is required to allow the agents to connect to the ActiveUpdate server.

    Enable schedule-based updates on OfficeScan agents

    Selecting this option configures all OfficeScan agents to enable schedule-based updates by default. Users with the Enable/Disable schedule-based updates privilege may override this setting.

    For details on configuring the update schedule, see Configuring OfficeScan Agent Automatic Updates.

    OfficeScan agents can update components but not upgrade the agent program or deploy hot fixes

    This option allows component updates to proceed but prevents hot fix deployment and OfficeScan agent upgrade.

    Note:

    Disabling this option may significantly affect server performance as all agents simultaneously connect to the server to upgrade or install a hot fix.

  5. Click the Privileges tab and configure the following options in the Component Updates section:
    Option Description

    Perform "Update Now"

    Users with this privilege can update components on demand by right-clicking the OfficeScan agent icon on the system tray and selecting Update Now.

    Note:

    OfficeScan agent users can use proxy settings during "Update Now".

    See Proxy Configuration Privileges for Agents for details.

    Enable/Disable schedule-based updates

    Selecting this option allows OfficeScan agent users to enable and disable scheduled updates using the OfficeScan agent right-click menu, which can override the Enable Schedule-based Updates setting.

    Note:

    Administrators must first select the Enable schedule-based updates on OfficeScan agents setting on the Other Settings tab before the menu item appears on the OfficeScan agent menu.
  6. If you selected domain(s) or agent(s) in the agent tree, click Save. If you clicked the root domain icon, choose from the following options:

    • Apply to All Agents: Applies settings to all existing agents and to any new agent added to an existing/future domain. Future domains are domains not yet created at the time you configured the settings.

    • Apply to Future Domains Only: Applies settings only to agents added to future domains. This option will not apply settings to new agents added to an existing domain.

Parent topic: OfficeScan Agent Update Methods