HI all, I am fairly new to SCCM.I would like to check how does actually SCCM Endpoint protection work in Window 10 desktop? Most of the video I can find on youtube is all window 7.
On Administration Client Settings within the setting 'Manage endpoint protection client onclient computer' is set to yes, this setting will install with System center endpoint protection client on window 7. But on window 10 I cannot find it and I read online that there is no need to install as is already build in into window 10 Windows DefenderSecurity Center.Here are my question, hope u can help me as much as possible.1. How do I check System center endpoint protection client is already install on window 10? Or there is no need for me to set to 'Yes' on On Administration Client Settings within the setting'Manage endpoint protection client on client computer' is set to yes. As window 10 already have build in Windows Defender Security Center.2. On Assets and Compliance Endpoint protection Antimalware Polices, I have create Antimalware Policy. How do I check on Window 10 that is already apply?3.
On Assets and Compliance Endpoint protection Windows Defender Firewall Policies, if I apply GPO firewall and this is setting on sccm is apply as well. Which will take places? Can I apply this setting ' WindowsDefender Firewall Policies' without client setting been apply first?4. On Software Update Point Component Properties, at Classifications tabs,I only pick Definition Update. Do I need to pick Feature Packs for window 10? Because I saw for window 7 there always pick bothDefinition Update and Feature Packs.5.
On Software Update Point Component Properties, at Products, I saw people pick Forefront Endpoint protection 2010 for window 7. For window 10 do I need to pick any product if I am only useWindows Defender Security Center?6. If I have any other anti-virus on my window 10, can SCCM manage them? Do I need to disable window 10Windows Defender Security Center to allow other anti-virus to take place? Will it be the same step as all the answer you provided above from my question 1 to 5? ThanksI know there is a lot of question.
Sccm Manage Endpoint Protection
But I really hope u can help me out. Hello,Sorry I did not understand what you meant before.1 Yes, the GPO firewall setting would overwrite the SCCM firewall policy.2 To apply firewall policy from SCCM we do not need to configure that client setting. Actually, the firewall policy from SCCM is somehow like a configuration baseline.
Microsoft Forefront Endpoint Protection Download
After we deploy the firewall policy, we could find it under configurationtab of the CM applet in the control panel.3 It only supports managing Windows Defender on Windows 10. For other AV software, if there are commands or registry keys or configuration file could control these software, SCCM could use them for indirect management. But there is no built-in way to doit.Best Regards,RayPlease remembers to mark the replies as answers if they help.If you have feedback for TechNet Subscriber Support, contact. Hello,1 SCCM could work with the Windows Defender Security Center so there are not other endpoint protection client install on Windows 10.
Thank for your fast respond.regarding question 3, so I can say GPO firewall will overwrite SCCM policy?u might miss out this question on no.3 as well. Can I apply this setting ' Windows Defender Firewall Policies' and set firewall setting on client device without client setting been apply first? Mean I didn't pushdown any endpoint protection at On Administration Client Settings within the setting 'Manage endpoint protection client on client computer' is set to yes.for question 6. Can it manage symantec antivirus?
Do you have a list of anti virus it can manage or it can only manage Windows Defender Security Center on window 10? Hello,Sorry I did not understand what you meant before.1 Yes, the GPO firewall setting would overwrite the SCCM firewall policy.2 To apply firewall policy from SCCM we do not need to configure that client setting. Actually, the firewall policy from SCCM is somehow like a configuration baseline. After we deploy the firewall policy, we could find it under configurationtab of the CM applet in the control panel.3 It only supports managing Windows Defender on Windows 10. For other AV software, if there are commands or registry keys or configuration file could control these software, SCCM could use them for indirect management.
But there is no built-in way to doit.Best Regards,RayPlease remembers to mark the replies as answers if they help.If you have feedback for TechNet Subscriber Support, contact.
DisclaimerThe sample scripts are not supported under any Microsoft standard support program or service. The sample scripts are provided AS IS without warranty of any kind. Microsoft further disclaims all implied warranties including, without limitation, any implied warranties of merchantability or of fitness for a particular purpose. The entire risk arising out of the use or performance of the sample scripts and documentation remains with you. In no event shall Microsoft, its authors, or anyone else involved in the creation, production, or delivery of the scripts be liable for any damages whatsoever (including, without limitation, damages for loss of business profits, business interruption, loss of business information, or other pecuniary loss) arising out of the use of or inability to use the sample scripts or documentation, even if Microsoft has been advised of the possibility of such damages.