System Center 2012 - Endpoint Security - Policies and Procedures

[NEO-BAHAMUT-]

Good Afternoon,

 

I have setup a subscription in SCCM so that every Monday morning we have an email sent out to my staff giving them a report of the default report named "Antimalware overall status and history". If anyone has seen this it brings back a report of the Overall Endpoint Protection Status with different categories named;

 

- Protected
- At Risk
- Not yet installed
- Client not supported
- Inactive
- Configuration Manager client not installed

 

Under each category you can see each of the servers etc that fall under each of the categories.

I am now wanting to write a procedures document in order to resolve any of the issues that fall under each category that isn't listed under "Protected".

 

Is there any documentation out there for the procedures that you should be doing in order to resolve items that fall in to each category?

I have been looking around for documentation regarding this but so far have been unsuccessful and it looks like I may have to write my own. (which could take a while).

 

I hope someone can help with this or point me in the right direction..

 

Regards,

[NEO-BAHAMUT-]

Would appreciate some help with this please.

[anyweb]

have you looked through the below, do they help ?

 

Recommended Reading:

Introduction to Endpoint Protection in Configuration Manager - http://technet.micro...y/hh508781.aspx
Planning for Endpoint Protection in Configuration Manager - http://technet.micro...y/hh508763.aspx
Configuring Endpoint Protection in Configuration Manager - http://technet.micro...y/hh508764.aspx

Prerequisites for Endpoint Protection in Configuration Manager - http://technet.micro...y/hh508780.aspx
Best Practices for Endpoint Protection in Configuration Manager - http://technet.micro...y/hh508771.aspx
Administrator Workflow for Endpoint Protection in Configuration Manager - http://technet.micro...y/hh526775.aspx