Search the Community

We have a large number of Windows Embedded devices which we do want to have the SCCM client, but do not want to have Endpoint Protection. To prevent the installation of EPP on these devices, I have created alternate Client Settings with settings as so: Manage Endpoint Protection client on client computers: Yes Install Endpoint Protection client on client computers: No I created a collection based on a query: ... SMS_R_System.OperatingSystemNameandVersion like "%Embedded%" I checked the "Use incremental updates for this collection" box so that, theoretically, devices would get added immediately. Is there a better way to accomplish this? What concerns me is that, even after showing up in my Embedded collection, Endpoint Protection Deployment Information for a client will still say "To be installed". And it seems that, on rare occasions, EPP will get installed on an Embedded device anyway.