question

CorneVanDerWesthuizen-5158 avatar image
0 Votes"
CorneVanDerWesthuizen-5158 asked CorneVanDerWesthuizen-5158 answered

Antimalware Policies Multiple Scheduled Scans

Hi

We have 59 Servers that get scanned with Microsoft Endpoint Protection with a "Full Scan" scheduled for every Saturday at 10 PM. However, we would like to remove 4 servers from this group and scan each one of them separately on a Saturday night at 10 PM. So 55 Servers scheduled for a "Full Scan" every Saturday, Server 1 scheduled for a "Full Scan" on the first Saturday of the month at 10 PM, Server 2 scheduled for a "Full Scan" on the second Saturday of the month at 10 PM, Server 3 scheduled for a "Full Scan" on the third Saturday of the month at 10 PM and Server 4 scheduled for a "Full Scan" on the fourth Saturday of the month at 10 PM.

In SCCM under Antimalware Policies in Endpoint Protection, I can only configure one Scheduled Scan for all server either daily or a specific day of the month and not specific days.

Does anyone have a solution for this issue?

87486-image.png


mem-cm-general
image.png (45.0 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

SunnyNiu-MSFT avatar image
0 Votes"
SunnyNiu-MSFT answered

@CorneVanDerWesthuizen-5158
Here is an answer to your question that hopefully you find helpful!
We may try to use Maintenance Windows to solve this question. We may try to create four collections from the other four servers with special requirements. In my lab, I did the following experiment for reference.
Firstly, we have created an Antimalware Policy according to the requirements in the picture you attached, and then we need deploy it to the collection of Server. (The collection of server in my experiment is named CMS). Like below screenshot:
87612-1.png

Next, we open the collection we just deployed to, right-click to find Maintenance Windows. Add a Maintenance Windows that runs on the first Saturday of the month at 10 PM. Like below screenshot:
87543-2.png

(But for the use of Maintenance Windows, we need to manually set the date corresponding to each Saturday by ourselves every month.)

In addition, there is another method provided here for reference: Endpoint Protection and additional scheduled scans (Third-party link, just for your reference.)


If the response is helpful, please click "Accept Answer"and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


1.png (12.2 KiB)
2.png (59.6 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

CorneVanDerWesthuizen-5158 avatar image
0 Votes"
CorneVanDerWesthuizen-5158 answered

@SunnyNiu-MSFT
Thank you for this, I will work through it and see if this could be an option for me. I've pitched Jörgen Nilsson's method to the client but they were not too happy as there is no reporting in SCCM for them using his way.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.