Installing and Configuring System Center Configuration Manager (SCCM)

0%

0/1 Lessons

Getting Started with this Course

• 26min

0 / 3 lessons complete

System Center Configuration Manager - Features and Capibilities

• 31min

0 / 5 lessons complete

SCCM 1902 Lab Setup

• 50min

0 / 12 lessons complete

Installing SCCM 1902 Installation

• 1hr 17min

0 / 11 lessons complete

Configuration Manager Basics

• 1hr 53min

0 / 8 lessons complete

Updating SCCM

• 30min

0 / 7 lessons complete

SCCM Client Installation

• 46min

0 / 4 lessons complete

User and Device Collections

• 1hr 0min

0 / 13 lessons complete

Application Management

• 2hr 34min

0 / 12 lessons complete

Operating System Deployment

• 23min

0 / 7 lessons complete

Endpoint Protection

• 1hr 12min

0 / 10 lessons complete

Troubleshooting

• 37min

0 / 4 lessons complete

Problems and Solutions from the Message Board

• 14min

0 / 5 lessons complete

You need to sign up to get access!

Sign up to get full access to this course.

Sign up to access this lesson

Click here to sign up and get access to this lesson!

If you have already signed up, then to log in.
PREVIOUS LESSON
NEXT SECTION

Saving Progress...

Endpoint Protection Client Installation

Prerequisites for the Endpoint Protection Client Installation

  • The SCCM client must be installed first on the computer before the client can be managed.  
  • The SCCM client is installed for central management purposes
  • This step was covered in the Client Push Installation lecture, so we will not be repeating those steps here.
  • After the client installation step has been completed, the Endpoint Protection client can be deployed to the computer.

Installation of Endpoint Protection on Windows 8.1 and earlier

  • On Windows 8.1 and earlier the EP client is installed in addition to the SCCM client

Windows 10

  • If you have a Windows 10 client, then you have the Windows 10 Defender antimalware client already installed, so you don’t need to install the EP client.
  • You can configure and manage EP settings on windows 10 clients with the System Center Endpoint Antimalware Policy.
  • You can install EP using Configuration Manager’s Client settings.  
  • Windows 10 Defender updates must be kept up to date. This can be accomplished by creating and deploying an Automatic Deployment Role.

Pre-Windows 8.1 EP Client Installation

For this lecture, we will be configuring Endpoint Protection Windows 10 clients. I have included a written manual installation for Windows 8.1 and below in case you still have earlier versions of Windows in your organization. Check out the manual that accompanies this lecture for details.

Manual Installation of Endpoint Protection Windows 7

• From your SCCM server open C:\Program Files\Microsoft Configuration

Manager\Client. Copy the scepinstall.exe and the ep_defaultpolicy.xml file to your installation folder on your Windows 7 client.  

  • Double click scepinstall.exe file and go through the installation wizard.

Click next, click I accept on the Software license screen

  • Click I do not want to join the Customer Experience Improvement Program
  • Click next, check the turn firewall on, click next
  • Click Install, check Scan my computer for potential threats after getting the latest updates, click finish
  • Install updates.

Windows 10 EP Installation Configure the Client Settings

  • In the Configuration Manager console from the workspace click Administration, from the Navigation Pane, right click Client settings, and click on Create Custom Client Device Settings. 
  • From the General tab to the right type a Name – EP Client Settings. From below click Endpoint Protection, click ok. 
  • From the list view in the console double click EP Client Settings 
  • On the left pane click Endpoint Protection 
  • From Device Settings change all the settings to Yes except Allow Endpoint Protection client installation and restart outside maintenance window. Leave this set to no. 
  • Manage EP client on client computers enables you to use Configuration Manager to manage windows clients. 
  • Install EP client on client computers – When this setting is enabled to a device collection, Endpoint Client will be deployed to all the computers in that collection. 

Take Note: 

  • EP will not install right away, the installation could take up to an hour.
  • You can remove other previously installed antimalware software by selecting Yes for Automatically remove previously installed software

Right click on EP Client Settings, click deploy, now select a collection click Windows 10, then click ok. 

This slide shows ITFWS02 that the SCCM client has been installed but the EP client has not been installed yet. 

  • From ITFWS02 this slide shows that the Windows 10 client is unmanaged as well 

After about an hour the console show that ITFWS02 is now managed. 

Sign up to access the rest of this lesson

You must either log in or sign up to access this lesson.

PREVIOUS LESSON
NEXT SECTION

Saving Progress...

0 0 votes
Lesson Rating
Subscribe
Notify of
0 Comments
Inline Feedbacks
View all comments