locked
Microsoft Security Essentials RRS feed

  • Question

  • The company I work for is searching for a way to use Microsoft Security Essentials (MSSE) in a similar way that we us Sophos.

    Is there a way to have MSSE report back to one of the IT technicians (i.e. management & technicians)?

    When ever there is an issue Sophos notifies the assigned personel of an issue, like a frontend management type of thing?

    Wednesday, September 2, 2015 1:46 PM

Answers

  • I think the closest you will get is a PowerShell script that retrieves event logs from computer you could also run on computer and copy results to a server during a logon script. to do remotely you have to have "remote registry" running on computer.

    Get-EventLog -LogName System -newest 10 -ComputerName <remote Computer> -Source "Microsoft Antimalware"

    one you gather you would need to do something with all the data, I didn't look to see if the events contain any useful information.

    • Marked as answer by Kevin Remde Tuesday, September 8, 2015 2:18 PM
    Wednesday, September 2, 2015 2:14 PM