Endpoint Protection automatic reinstall when not found

[mbkowns]

As of now its possible without blocking to remove Endpoint Protection from the add remove programs wizard (I could block this as well). If I do this manually after deploying FEP through a client setting deployment it will not reinstall. I do full hw inventory and download machine policy but it never evaluates and installs again.

 

I could build a package in SCCM with logic or based off a CI and baseline to do this but I am wondering how this is supposed to work without that. It appears that a client policy should refresh and detect if it is installed and perform a redeployment based on that.

 

Let me know what you guys are doing to keep your FEP clients managed.

 

 

Thanks