locked
Is there any way to disable the Endpoint Protection client from going to a certain OU? RRS feed

  • Question

  • I have issues with the Endpoint Protection client being pushed to certain systems on our network.  Is there anyway to prevent SCCM from pushing it to those particular machines?  It's ok that the SC client gets installed, just not forefront.

    Monday, October 1, 2012 1:47 PM

Answers

  • Remove the Endpoint protection settings from the Default Client Settings. Create custom client device settings that enables SCEP on all OUs except the one you mentioned.


    Torsten Meringer | http://www.mssccmfaq.de

    Monday, October 1, 2012 1:51 PM

All replies

  • Remove the Endpoint protection settings from the Default Client Settings. Create custom client device settings that enables SCEP on all OUs except the one you mentioned.


    Torsten Meringer | http://www.mssccmfaq.de

    Monday, October 1, 2012 1:51 PM
  • Side note: Just like with Group Policy, it's bad practice to modify the default client settings. You should always be creating your own client agent settings and deploying those as needed and granularly where applicable.

    Jason | http://blog.configmgrftw.com

    Monday, October 1, 2012 2:57 PM