Windows Defender on 2016 aDefencer and Endpoint Protection

berketjune2012 376 Reputation points
2021-04-28T13:34:13.217+00:00

Hello

If there is a Windows 2016 server with System Centre Endpoint protection installed and after the Defender feature is enabled, what will be the impact? Which AV will take precedence?

Thanks

Microsoft Security | Intune | Configuration Manager | Other
0 comments No comments
{count} votes

6 answers

Sort by: Most helpful
  1. Jason Sandys 76 Reputation points
    2021-04-28T15:34:52.603+00:00

    Can you clarify here what you mean by SCEP being installed, please? How did it get installed and why? Where do you see it installed? Why and how was Defender disabled?

    0 comments No comments

  2. SunnyNiu-MSFT 1,711 Reputation points
    2021-04-29T09:41:41.123+00:00

    @berketjune2012
    Here is an answer to your question that hopefully you find helpful!

    a Windows 2016 server with System Centre Endpoint protection installed and after the Defender feature is enabled

    When we use Endpoint Protection with Configuration Manager, we could have the benefit: Configure antimalware policies, Windows Defender Firewall settings, and manage Microsoft Defender Advanced Threat Protection to selected groups of computers.

    SCEP and Windows Defender are essentially the same application. Each program is designed to detect threats. Like SCEP, Windows Defender can detect malicious software like viruses and spyware. there are a few key differences on Windows Server:
    In Windows Server, automatic exclusions are applied based on your defined Server Role.
    In Windows Server, Microsoft Defender Antivirus does not automatically disable itself if you are running another antivirus product.

    For more details, we may refer to these articles:
    https://learn.microsoft.com/en-us/mem/configmgr/protect/deploy-use/endpoint-protection
    https://www.comparitech.com/net-admin/system-center-endpoint-protection/ (Third-party link, just for your reference.)


    If the response is helpful, please click "Accept Answer"and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments

  3. berketjune2012 376 Reputation points
    2021-04-29T14:10:27.483+00:00

    @SunnyNiu-MSFT So if both Endpoint protection and Defender are active on the server. Does one become disabled?

    0 comments No comments

  4. SunnyNiu-MSFT 1,711 Reputation points
    2021-04-30T10:00:54.65+00:00

    @berketjune2012

    Does one become disabled?

    No, when both Endpoint protection and Defender are active on the server.

    Endpoint Protection will Configure antimalware policies, Windows Defender Firewall settings, and manage Microsoft Defender Advanced Threat Protection to selected groups of computers.

    And, Microsoft Defender Antivirus does not automatically disable itself if you are running another antivirus product (Endpoint protection).


    If the response is helpful, please click "Accept Answer"and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments

  5. Jason Sandys 31,411 Reputation points Microsoft Employee Moderator
    2021-04-30T14:55:11.897+00:00

    What about my questions above?

    To my knowledge, SCEP will not install on systems with Defender. So more information is needed here to truly be able to help.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.