Malware management configuration

ritmo2k 506 Reputation points
2022-06-15T18:51:18.32+00:00

Hello,
I am using Config Manager 2203 and I am seeking some clarity with malware configuration.

Are the settings in Administration / Client Settings / Endpoint Protection specifically for the older scep client, that I understand is not required on newer versions of Windows (such as server 2022 and Windows 10 or 11)?

The settings under Assets and Compliance / Endpoint Protection / Antimalware Policies configure the built-in Windows behavior and to be favored over the above?

Thanks.

Microsoft Configuration Manager
No comments
{count} votes

Accepted answer
  1. Simon Ren-MSFT 13,226 Reputation points Microsoft Employee
    2022-06-16T08:25:26.793+00:00

    Hi,

    Thanks for posting in Microsoft MEM Q&A forum.

    1,==>Are the settings in Administration / Client Settings / Endpoint Protection specifically for the older scep client, that I understand is not required on newer versions of Windows (such as server 2022 and Windows 10 or 11)?
    Client settings for Endpoint Protection are still required for newer versions of Windows. Refer to the official article: https://learn.microsoft.com/en-us/mem/configmgr/protect/deploy-use/endpoint-protection-configure
    212003-endpoint-protect.png

    2,==>The settings under Assets and Compliance / Endpoint Protection / Antimalware Policies configure the built-in Windows behavior and to be favored over the above?
    Per my experience, Antimalware Policies really do configure the built-in Windows behavior, but will do nothing about the Endpoint Protection policies in Client Settings.

    Hope it helps. Thanks for your time.

    Best regards,
    Simon


    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    No comments

2 additional answers

Sort by: Most helpful
  1. ritmo2k 506 Reputation points
    2022-06-16T12:25:43.363+00:00

    Hi,
    If I enable the settings but choose not to install the old scep client, the remaining settings are disabled?

    212046-capture.png

    No comments

  2. ritmo2k 506 Reputation points
    2022-06-17T18:07:04.307+00:00

    In addition to the answer, the settings above that are grayed out when not installing the client are only needed when installing.

    The only setting that is needed is the first one that enables management, see about-client-settings for more details.

    No comments