0/1 Lessons

Getting Started with this Course

• 26min

0 / 3 lessons complete

System Center Configuration Manager - Features and Capibilities

• 31min

0 / 5 lessons complete

SCCM 1902 Lab Setup

• 51min

0 / 12 lessons complete

Installing SCCM 1902 Installation

• 1hr 32min

0 / 11 lessons complete

Configuration Manager Basics

• 1hr 58min

0 / 8 lessons complete

Updating SCCM

• 30min

0 / 7 lessons complete

SCCM Client Installation

• 46min

0 / 4 lessons complete

User and Device Collections

• 1hr 6min

0 / 13 lessons complete

Application Management

• 2hr 34min

0 / 12 lessons complete

Operating System Deployment

• 23min

0 / 7 lessons complete

Endpoint Protection

• 1hr 11min

0 / 10 lessons complete


• 37min

0 / 4 lessons complete

Problems and Solutions from the Message Board

• 14min

0 / 5 lessons complete

Endpoint Protection Planning and Integration


Q&A (0)

Notes (0)

Resources (0)

Saving Progress...


There are no resources for this lesson.

Notes can be saved and accessed anywhere in the course. They also double as bookmarks so you can quickly review important lesson material.

Create note

The purpose of this lecture is really twofold.

  • First there is Planning - With what you will learn in this lecture you should be able to develop an effective security installation plan for your organization.
  • Then we have integration -  In this lecture we will gain an understanding of how these individual components integrate together to form a solid security solution.

The following is a summary of the individual components and a brief explanation of the function of each major component. If you have setup your lab as prescribed in previous lectures, all those components marked as completed should already have been installed and configured in your lab.

For this lecture, the following components should be installed in the order given below.  

Installation of Windows server, Active Directory, DNS, SQL, SCCM and Endpoint Protection should have been completed.

Endpoint Protection – Should already be installed if you downloaded and installed SCCM with Endpoint Protection.

  • WSUS server role must be installed, In this case on ITFSCCM01.  
  • Installation of the Software Update Point Role – This role runs the

Windows Software Update Services (WSUS) and allows Configuration Manager to use the WSUS catalog to scan SCCM clients for software updates. The SUP is the connection between WSUS and SCCM. For this lecture, the SUP enables us to bring software updates into SCCM.  

  • SCCM uses DNS and Active Directory to find users and devices so we can create collections for software and policy deployment.
  • Installing the Reporting Services Point Role– A site service role that provides integration with SQL server reporting services to create and manage reports for Configuration Manager.  
  • Installing the Endpoint Protection Point Role – Must be installed on one site system server at the top of the hierarchy.   

So far we have planned our server side configuration, now we will plan our client side configuration 

  • Configure Custom Client Settings – This procedure configures Custom client settings for Endpoint Protection, which can be deployed to collections of computers in your hierarchy.  
  • Deploy the default or a custom Antimalware policy. This can be deployed to all devices or to your choice of device collections.
  • From within each antimalware policy you can configure scheduled scans.

You can remove malware, and you can use the reporting functionality of SQL to send warnings and alerts to SCCM or automatically send yourself an email concerning malware infection.  

  • Configure a Firewall Policy – This allows you to perform basic Windows Firewall configuration and maintenance tasks on the client computers in your hierarchy, for greater control with more options use group policy.
  • Creating an Automatic Deployment Rule. You can automatically approve and deploy software updates by using an automatic deployment rule. This rule defines what updates will be downloaded for various products, for this lecture we chose to download windows defender updates there are many other products listed.

You can set the source to define the order in which to receive definition updates. You can set your location to where these updates will be stored before they are pushed out.  

  • Deploy Windows 10 Clients – Windows 8 and earlier required the Endpoint

Protection client installed to the Windows computer. With Windows 10, Windows Defender is the default Windows 10 Antimalware client, so you don’t need to install another client, but in effect what you need to install is a management layer so that the client can be managed by configuration manager.

Congratulations you have completed this lecture, thanks for watching, and we will see you in the next lecture 

Server Academy Members Only

Sorry, this lesson is only available to Server Academy Full Access members. Become a Full-Access Member now and you’ll get instant access to all of our courses.

0 0 votes
Lesson Rating
Notify of
profile avatar
Inline Feedbacks
View all comments