One of a new feature in SCCM 2012 is the possibility to configure different client settings for every collection (in 2007 per primary site). This will help us in configuring different endpoint protection settings for different type of clients / servers. In this blog I will show you how to configure BASIC client settings for endpoint protection and you will see, that there is no need to deploy the endpoint protection client with a package :

In this example we will create a specific client setting for endpoint protection. In the Administration tab (wunderbar), right click on “client settings” – you can see, that you can create two different type of settings: User and Device. For the endpoint protection settings we need “Create Custom Client Device Settings”.

Give the Custom Settings a name and choose, which type of settings you like to configure. Enable “Endpoint Protection”.

On the left side you will find now the tab “Endpoint Protection”. When activating it, you can see different options:

 

• Manage Endpoint Protection client on client computers –-> TRUE
• Install Endpoint Protection client on client computers –> TRUE
  • this will automatically install the endpoint protection agent on every client, where this device settings are deployed! So there is no need to deploy a specific client package!
• Automatically remove previously installed antimalware software… –> TRUE
  • this will automatically uninstall other antivirus software:
    • Symantec Endpoint Protection v10 and v11
    • McAfee VirusScan Enterprise v. 8.5 and v8.7
    • Trendmicro OfficeScan v8.0 and 10.0 (tested and worked very well)
    • Forefront Client Security v1
• Disable alternate sources… for INITIAL definition update –> TRUE
  • later you will see, that you can configure the source order

Click “OK” to save the custom settings!

Now you have to deploy these settings to a earlier created device collection!

Right click on the newly created custom settings –> “Deploy”

Choose the collection, where the settings should be applied.

In a further blog you will see, how easy you can configure scan settings in endpoint protection 2012.

Good luck

Chris