content format

How to Install and Configure ESET File Security on Windows Server

Protecting corporate data requires dedicated server-side security rather than standard desktop antivirus software. ESET File Security (now known as ESET Server Security) provides specialized, lightweight protection optimized for Windows Server environments. This guide walks you through the complete installation and configuration process to safeguard your server infrastructure. Prerequisites and Preparation

Before starting the installation, ensure your environment meets the minimum technical requirements to avoid system conflicts.

Supported OS: Windows Server 2012, 2012 R2, 2016, 2019, 2022, or 2025.

Account Privileges: Full local or domain administrator rights are required.

Software Conflicts: Completely uninstall any third-party antivirus or security software.

System Updates: Install all pending Windows updates and reboot the server. Step 1: Download and Installation

Download the Installer: Visit the official ESET download portal. Download the latest .msi installer matching your operating system architecture (usually 64-bit).

Launch Setup: Right-click the downloaded .msi file and select Run as administrator.

Language Selection: Choose your preferred language on the welcome screen and click Next.

Accept Terms: Read the End-User License Agreement. Click I Accept to proceed.

Installation Type: Select Typical for standard deployments. Choose Custom if you need to change the installation path or specific components. Click Install.

Complete Setup: Wait for the progress bar to finish, then click Finish. Step 2: Product Activation

Upon installation completion, the activation window opens automatically.

Use a Purchased License Key: Enter your 20-character license key into the field and click Activate.

ESET Business Account: If your company manages licenses centrally, select ESET Business Account login credentials instead.

Verification: The status screen will turn green and display “Product is activated” upon success. Step 3: Critical Post-Installation Configurations

Open the ESET user interface from the system tray and press F5 to open the Advanced Setup menu. Configure these essential server settings immediately. 1. Set Up Automatic Exclusions

Windows Server runs critical roles (like Active Directory, IIS, or Hyper-V) that generate high I/O traffic. Scanning these core files can degrade performance. Navigate to Detection Engine > Exclusions.

Enable Automatic exclusions. ESET will automatically detect server roles and exclude critical system files (like SQL databases or NTDS.dit) from scanning. 2. Configure Real-Time Protection Go to Detection Engine > Real-time file system protection.

Ensure ThreatSense parameters are set to clean infections automatically.

Under Processes exclusions, add the executables of known, high-load line-of-business applications if you notice performance drops. 3. Secure the ESET Interface

Prevent unauthorized users or malware from disabling your security. Navigate to User Interface > Access Setup. Enable Password protected settings.

Create a strong password. This password will be required whenever someone attempts to modify ESET configurations or uninstall the software. Step 4: Verification and Maintenance

Trigger an Update: Go to the Update tab in the main interface and click Check for updates to download the latest virus signature database.

Run an Initial Scan: Navigate to Computer Scan > Advanced Scans > Custom Scan. Select the local drives and run a baseline scan to ensure the server is currently clean.

Monitor System Health: Check the Windows Task Manager to verify that ekrn.exe (ESET Service) is running efficiently without exhausting CPU or RAM resources.

Please let me know if you would like to expand this article with instructions on centralized management via ESET PROTECT On-Prem/Cloud, or if you need specific exclusion paths for roles like Microsoft SQL Server or Hyper-V.