Managing Windows defender using SCCM 2012 R2

[Bav]

Hi All,

 

Based on technet article (https://technet.microsoft.com/en-us/library/hh508770.aspx) ,you do not need SCEP client installed on Windows 10 machines in order to manager anti-malware policies. However, the behavior I have seen is quite different.

 

Windows 10 Client A:

 

• SCEP is not installed.
• Can confirm that policy applied from reg key HKLM\software\microsoft\ccm\epagent\generatedpolicy.
• SCCM console under client summary -> Endpoint Protection Deployment information -> Deployment State: "To be Installed" instead of "managed"
• On client under security -> windows defender , I have ability to add exclusion
• Defender console doesn't have any policy name

 

Windows 10 Client B:

 

• SCEP client is installed
• all policy applied
• Deployment state under client summary is "managed"
• Defender GUI has policy names listed

 

Based on above testing, I believe that we do need SCEP clients on Windows 10 devices in order to managed Windows defender and SCEP client will work as a bridge between Defender and SCCM.

 

has anyone got this issue ? or I am missing something here? there is not much explanation from Microsoft regarding managing Windows 10 clients.

 

any help would be appreciated,

 

Thank you

Bav,

[Bav]

anyone ?

[Sakamano3000]

I'm actually just working with Microsoft Premier on this exact issue.  I promise to let you know what the answer is for it; even if it is 1.5 years after you asked.

[anyweb]

should be no problem with SCCM current branch, have you tried that ?

[Sakamano3000]

Per Microsoft Support: despite Microsoft's TechNet articles stating that SCEP agents are not required on Windows 10 machines, as of now, their research shows that SCEP is REQUIRED for SCCM to monitor and administer AV control on Windows 10 machines.

 

If I hear more I'll let you know.