Endpoint Protection behavior

[wilbywilson]

We're going to be bringing in some new client machines into our SCCM 2012 environment (they will be joining our domain, and getting the SCCM client w/ Endpoint Protection.) The custom client device settings are "Automatically remove previously installed antimalware software before Endpoint Protection is installed."

 

The thing is, these clients already have an existing version (although slightly older) of Endpoint Protection. But in their current state, these clients are not being "managed", at least not the way they will be once they are within SCCM's control.

 

So, does anyone know if these client machines will uninstall their existing Endpoint Protection version, and get the latest and greatest version from SCCM 2012 on their way into the domain? Or am I going to have to figure out a way to script the uninstallation of the "old" Endpoint Protection client before they get what SCCM 2012 R2 CU1 is pushing down?

 

Thanks

[anyweb]

it's covered here

 

Automatically remove previously installed antimalware software before Endpoint Protection is installed

 

Select True or Yes to attempt to uninstall existing antimalware software.

 

Note Endpoint Protection attempts to uninstall the following antimalware software only:

• Symantec AntiVirus Corporate Edition version 10
  
• Symantec Endpoint Protection version 11
  
• Symantec Endpoint Protection Small Business Edition version 12
  
• McAfee VirusScan Enterprise version 8
  
• Trend Micro OfficeScan
  
• Microsoft Forefront Codename Stirling Beta 2
  
• Microsoft Forefront Codename Stirling Beta 3
  
• Microsoft Forefront Client Security v1
  
• Microsoft Security Essentials v1
  
• Microsoft Security Essentials 2010
  
• Microsoft Forefront Endpoint Protection 2010
  
• Microsoft Security Center Online v1
  

 

If you try to install the Endpoint Protection client on a computer and the uninstall of an existing antimalware solution is not supported, then the Endpoint Protection client installation will fail. In this case, you can use application management to uninstall the existing antimalware solution, install the Endpoint Protection client and then use the Manage Endpoint Protection client on client computers client setting to let Configuration Manager manage the newly installed Endpoint Protection client.

 

I would recommend testing first on a test computer (or three) to verify the behaviour matches your expectations

[wilbywilson]

Thank for you the reply, Anyweb.

 

Given your advice, I will likely need to find a way to uninstall the pre-existing antivirus software, but I will run some tests, per your suggestion.

[anyweb]

to silently uninstall SCEP it's just scepinstall.exe /u /s

 

create a package/program to do that, easy. But try the above first