Uncategorized

Endpoint defender for endpoint (SCEP) – How to deploy

By July 28, 2021No Comments

Introduction:

Microsoft System Center Endpoint Protection (SCEP) is an antivirus and anti-malware tool for Windows. With SCEP you can manage antimalware policies and Windows Firewall settings for multiple computers located throughout your network. The solution is used by many enterprises and educational institutions to protect endpoints from online threats like malware.

SCEP comes integrated with the system management software System Center and offers a client for Windows, Mac, and Linux devices. You can use Microsoft System Center Configuration Manager (SCCM) to manage SCEP.

Prerequisite:

References: https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/minimum-requirements

Licensing requirements:

Microsoft Defender for Endpoint requires one of the following Microsoft volume licensing offers:

  • Windows 10 Enterprise E5
  • Windows 10 Education A5
  • Microsoft 365 E5 (M365 E5) which includes Windows 10 Enterprise E5
  • Microsoft 365 A5 (M365 A5)
  • Microsoft 365 E5 Security
  • Microsoft 365 A5 Security
  • Microsoft Defender for Endpoint

Supported Windows versions

  • Windows 7 SP1 Enterprise (Requires ESU for support.)
  • Windows 7 SP1 Pro (Requires ESU for support.)
  • Windows 8.1 Enterprise
  • Windows 8.1 Pro
  • Windows 10 Enterprise
  • Windows 10 Enterprise LTSC 2016 (or later)
  • Windows 10 Education
  • Windows 10 Pro
  • Windows 10 Pro Education
  • Windows server
    • Windows Server 2008 R2 SP1 (MMA agent*)
    • Windows Server 2012 R2 (MMA agent*)
    • Windows Server 2016 (MMA agent*)
    • Windows Server, version 1803 or later (MMA agent*)
    • Windows Server 2019 (NATIVE)
  • Windows Virtual Desktop

 

(*Microsoft Monitoring Agent Setup)

Other supported operating systems

Microsoft Monitoring Agent Setup

MMA agent is mendatory for servers below “Windows server 2019”.

Windows server 2019 is natively supported through SCCM “Windows Defender ATP policies”

MMA agent:

MMA agent can be manage from console “Microsoft Monitoring Agent” localize on “Control panel”, “System and security”, “Microsoft Monitoring Agent” or directly with executable:



C:\Program Files\Microsoft Monitoring Agent\Agent\AgentControlPanel.exe

Troubleshooting:



"C:\Program Files\Microsoft Monitoring Agent\Agent\Troubleshooter"

 

Leave a Reply