Antimalware Policies Multiple Scheduled Scans

Corne Van Der Westhuizen 26 Reputation points
2021-04-13T22:41:12.313+00:00

Hi

We have 59 Servers that get scanned with Microsoft Endpoint Protection with a "Full Scan" scheduled for every Saturday at 10 PM. However, we would like to remove 4 servers from this group and scan each one of them separately on a Saturday night at 10 PM. So 55 Servers scheduled for a "Full Scan" every Saturday, Server 1 scheduled for a "Full Scan" on the first Saturday of the month at 10 PM, Server 2 scheduled for a "Full Scan" on the second Saturday of the month at 10 PM, Server 3 scheduled for a "Full Scan" on the third Saturday of the month at 10 PM and Server 4 scheduled for a "Full Scan" on the fourth Saturday of the month at 10 PM.

In SCCM under Antimalware Policies in Endpoint Protection, I can only configure one Scheduled Scan for all server either daily or a specific day of the month and not specific days.

Does anyone have a solution for this issue?

87486-image.png

Microsoft Configuration Manager
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. SunnyNiu-MSFT 1,696 Reputation points
    2021-04-14T06:06:38.213+00:00

    @Corne Van Der Westhuizen
    Here is an answer to your question that hopefully you find helpful!
    We may try to use Maintenance Windows to solve this question. We may try to create four collections from the other four servers with special requirements. In my lab, I did the following experiment for reference.
    Firstly, we have created an Antimalware Policy according to the requirements in the picture you attached, and then we need deploy it to the collection of Server. (The collection of server in my experiment is named CMS). Like below screenshot:
    87612-1.png

    Next, we open the collection we just deployed to, right-click to find Maintenance Windows. Add a Maintenance Windows that runs on the first Saturday of the month at 10 PM. Like below screenshot:
    87543-2.png

    (But for the use of Maintenance Windows, we need to manually set the date corresponding to each Saturday by ourselves every month.)

    In addition, there is another method provided here for reference: Endpoint Protection and additional scheduled scans (Third-party link, just for your reference.)

    If the response is helpful, please click "Accept Answer"and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments
  2. Corne Van Der Westhuizen 26 Reputation points
    2021-04-15T01:05:42.94+00:00

    @SunnyNiu-MSFT
    Thank you for this, I will work through it and see if this could be an option for me. I've pitched Jörgen Nilsson's method to the client but they were not too happy as there is no reporting in SCCM for them using his way.

    0 comments