This forum has migrated to Microsoft Q&A. Visit Microsoft Q&A to post new questions.

Remove From My Forums

Is there any way to disable the Endpoint Protection client from going to a certain OU?

Question
0

Sign in to vote

I have issues with the Endpoint Protection client being pushed to certain systems on our network. Is there anyway to prevent SCCM from pushing it to those particular machines? It's ok that the SC client gets installed, just not forefront.

Monday, October 1, 2012 1:47 PM

Answers

0

Sign in to vote
Remove the Endpoint protection settings from the Default Client Settings. Create custom client device settings that enables SCEP on all OUs except the one you mentioned.
Torsten Meringer | http://www.mssccmfaq.de
- Marked as answer by John Owens - Maximus Monday, October 1, 2012 1:52 PM
Monday, October 1, 2012 1:51 PM

All replies

0

Sign in to vote
Remove the Endpoint protection settings from the Default Client Settings. Create custom client device settings that enables SCEP on all OUs except the one you mentioned.
Torsten Meringer | http://www.mssccmfaq.de
- Marked as answer by John Owens - Maximus Monday, October 1, 2012 1:52 PM
Monday, October 1, 2012 1:51 PM
0

Sign in to vote

Side note: Just like with Group Policy, it's bad practice to modify the default client settings. You should always be creating your own client agent settings and deploying those as needed and granularly where applicable.
Jason | http://blog.configmgrftw.com

Monday, October 1, 2012 2:57 PM