Endpoint portection status - active client at risk

Question

Hi,

We wanted the defender AV monitored on our sccm so we installed the SCEP on test machines. I have also included "Defender anti-virus" on SUP products and created a deployment package... but this alert still don't go away.. When I check manually the clients, the AV status is already up to date..

Any what I miss? Or is this referring to some other product??

Answer 1

Hello there,

If you move the mouse over to the Active Client at risk do you get any information?

If you are managing your devices using System Center Endpoint Protection then you may have noticed Active Clients at risk: XX, underEndpoint Protection Status with in the monitoring node.

Documentation on what "Active Clients at Risk" shows? https://social.technet.microsoft.com/Forums/en-US/88847d37-31fa-4ffd-8ea0-3dcc2bcee609/documentation-on-what-quotactive-clients-at-riskquot-shows?forum=configmanagergeneral

How to Monitor Endpoint Protection in Configuration Manager

https://learn.microsoft.com/en-us/previous-versions/system-center/system-center-2012-R2/hh508769(v=technet.10)?redirectedfrom=MSDN

Endpoint Protection in Configuration Manager

https://learn.microsoft.com/en-us/previous-versions/system-center/system-center-2012-R2/hh508760(v=technet.10)?redirectedfrom=MSDN

---------------------------------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept it as an answer–