Tuesday, November 20, 2012 5:27 PM
I'm using Forefront Endpoint Protection 2010 and I can not find anywhere where I can view the previous scan history. Does anyone know where this can be found at?
Tuesday, November 20, 2012 8:56 PM
An easy way to do this on a client is to look at the system log in the Event Viewer. Group the events by the Source column, locate the source Microsoft Antimalware, and then sort the events by Date and Time or by event ID.
When a scan starts, event ID 1000 is recorded
When a scan finishes, event ID 1001 is recorded
When a scan is stopped before completion, event ID 1002 is recorded
Wednesday, November 21, 2012 8:17 AMModerator
Thank you for the post.
You can review the scan log on the client to know the scan history.
Location: %allusersprofile%\Microsoft\Microsoft Antimalware\Support
Name: MPLog-XYZ.log (XYZ is the date)
Nick Gu - MSFT