Report on System Center Endpoint Protection / Windows defender

Duchemin, Dominique 2,001 Reputation points


I am looking for a list of servers with the following information:

  • Server Name
  • Antimalware Policy Name
  • Collection Name
  • Real Time Protection Value

SQL Query?

PowerShell command?



Microsoft Configuration Manager
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. AllenLiu-MSFT 35,416 Reputation points Microsoft Vendor

    Hi, @Duchemin, Dominique

    Thank you for posting in Microsoft Q&A forum.

    To get the Real-time Protection value, we can check the registry value with CMPivot:

    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Microsoft Antimalware\Real-Time Protection

    For Antimalware Policy Name, we can query the view vSMS_G_SYSTEM_AmPolicyStatus.

    I remember you extended the hardware inventory to get the Real-time Protection value, so you may try to join the custom view to the vSMS_G_SYSTEM_AmPolicyStatus.

    If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Add comment".

    0 comments No comments