ESConfigTool command-line options

Use these options with the ESConfigTool utility to create a file of preconfigured policy settings that you can import during installation of Endpoint Security.

Open a Command Prompt window, then run the ESConfigTool command using the appropriate command-line options.

Options are not case-sensitive.


ESConfigTool.exe /export C:\ENS\preconfigured.policy /module TP FW

Exports policy settings for Threat Prevention and Firewall to the file C:\ENS\preconfigured.policy.

Basic options

ESConfigTool.exe /export <file_name> [/module <TP|FW|WC|ESP> ] [/unlock <password> ] [/plaintext ]

Option Definition
/export <file_path_and_name> Saves policy settings to a file with the specified name and location.


/export C:\My Programs\Endpoint\preconfigured.policy

Exports settings to the file preconfigured.policy in the C:\My Programs\Endpoint folder.

Note: Save this file to a folder that is not protected by McAfee. The folder containing ESConfigTool is protected, so the export location should be a different, writable location.
/module <TP|FW|WC|ESP> Specifies which product module settings to export.
  • TPThreat Prevention
  • FWFirewall
  • WCWeb Control
  • ESP — Resources shared by product modules.


/module TP FW WC ESP

Exports settings for all product modules.

/unlock <password> Sets the password for unlocking the client UI.
/plaintext Specifies descriptive comments in human-readable format.