Malware management configuration

Question

Hello,
I am using Config Manager 2203 and I am seeking some clarity with malware configuration.

Are the settings in Administration / Client Settings / Endpoint Protection specifically for the older scep client, that I understand is not required on newer versions of Windows (such as server 2022 and Windows 10 or 11)?

The settings under Assets and Compliance / Endpoint Protection / Antimalware Policies configure the built-in Windows behavior and to be favored over the above?

Thanks.

Answer 1

Hi,

Thanks for posting in Microsoft MEM Q&A forum.

1,==>Are the settings in Administration / Client Settings / Endpoint Protection specifically for the older scep client, that I understand is not required on newer versions of Windows (such as server 2022 and Windows 10 or 11)?
Client settings for Endpoint Protection are still required for newer versions of Windows. Refer to the official article: https://learn.microsoft.com/en-us/mem/configmgr/protect/deploy-use/endpoint-protection-configure

2,==>The settings under Assets and Compliance / Endpoint Protection / Antimalware Policies configure the built-in Windows behavior and to be favored over the above?
Per my experience, Antimalware Policies really do configure the built-in Windows behavior, but will do nothing about the Endpoint Protection policies in Client Settings.

Hope it helps. Thanks for your time.

Best regards,
Simon

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Hi,
If I enable the settings but choose not to install the old scep client, the remaining settings are disabled?

Answer 3

In addition to the answer, the settings above that are grayed out when not installing the client are only needed when installing.

The only setting that is needed is the first one that enables management, see about-client-settings for more details.