Uninstallation System Center Endpoint Protection...

Duchemin, Dominique 2,006 Reputation points
2023-08-31T22:18:33.22+00:00

Hello,

System Center Endpoint Protection requires Windows Defender feature from Windows Server 2016, 2019 and 2022...

There are also policies: Client Settings and Endpoint Protection Antimalware Policies.

I am looking for an uninstallation process to remove all of these items:

  • Client Settings (or update the settings!!!)
  • Antimalware Policy
  • System Center Endpoint Protection
  • Windows defender Feature

What should be the order as well?

Thanks,

Dom

Microsoft Security | Intune | Configuration Manager | Other
0 comments No comments
{count} votes

Accepted answer
  1. AllenLiu-MSFT 49,316 Reputation points Microsoft External Staff
    2023-09-04T08:56:41.4366667+00:00

    Hi, @Duchemin, Dominique

    The order could be:

    1. Create a new client setting and remove the current client setting.
    2. Do the same for the antimalware policy.
    3. Uninstall SCEP agent. We can create a package and use the commands to uninstall SCEP:

    C:\Windows\ccmsetup\scepinstall.exe /u /s

    The reference:

    https://www.prajwaldesai.com/how-to-uninstall-scep-client-using-sccm-2012-r2/

    1 person found this answer helpful.
    0 comments No comments

2 additional answers

Sort by: Most helpful
  1. AllenLiu-MSFT 49,316 Reputation points Microsoft External Staff
    2023-09-01T02:57:16.3466667+00:00

    Hi, @Duchemin, Dominique

    Thank you for posting in Microsoft Q&A forum.

    Like you said, System Center Endpoint Protection requires Windows Defender feature from Windows Server 2016, 2019 and 2022, because Windows 10 or later devices don't need to have the Endpoint Protection agent installed.

    So, we don't need to uninstall System Center Endpoint Protection agent when we don't want to manage it, we just need to modify the client setting, set the "Manage Endpoint Protection client on client computers" to "No". And delete the Antimalware Policy for this device.

    It doesn't matter to remove or keep the Windows defender feature.


    If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Add comment".

    0 comments No comments

  2. Duchemin, Dominique 2,006 Reputation points
    2023-09-01T15:42:04.6566667+00:00

    Hello @AllenLiu-MSFT

    We do need to uninstall System Center Endpoint Protection agent as it is currently on all systems due to a licensing permissions. We are managing them through SCEP.

    • "we just need to modify the client setting": I will create a new client setting and deploy it to the collection of the machines concerned. But I also need to remove the current client setting removed as the machine do not need it anymore.
    • "delete the Antimalware Policy for this device." How do I do this?
    • The policy is deployed to a collection not to a device.

    Thanks,
    Dom

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.