How to monitor Endpoint Protection: Monitoring activity reports, infected client computers, and more.

How to create and deploy antimalware policies: Create, deploy, and monitor antimalware policies with a list of the settings that you can configure. Also use Endpoint Protection reports in the Reporting node.įor more information, see the following articles: Then monitor compliance in the Endpoint Protection Status node under Security in the Monitoring workspace. Deploy these antimalware policies to client computers. Manage malwareĮndpoint Protection in Configuration Manager allows you to create antimalware policies that contain settings for Endpoint Protection client configurations. You can also manage Windows Defender Firewall settings with Endpoint Protection in the Configuration Manager console. To prevent excessive CPU usage, Endpoint Protection actions have a built-in randomized delay so that protection services do not run simultaneously. The Endpoint Protection client can be installed on a server that runs Hyper-V and on guest virtual machines with supported operating systems. When you join this service, the Endpoint Protection client or Microsoft Defender Antivirus downloads the latest definitions from the Malware Protection Center when unidentified malware is detected on a computer. Integration with Cloud Protection Service to report malware to Microsoft.Network vulnerability detection through Network Inspection System.Critical vulnerability assessment and automatic definition and engine updates.Malware and spyware detection and remediation.Microsoft Defender Antivirus and the Endpoint Protection client have the following capabilities: On Windows 8.1 and earlier computers, the Endpoint Protection client is installed with the Configuration Manager client. For these operating systems, a management client for Microsoft Defender Antivirus is installed when the Configuration Manager client installs. These actions inform administrative users when malware is detected on client computers.īeginning with Windows 10 and Windows Server 2016 computers, Microsoft Defender Antivirus is already installed. Send email notifications, use in-console monitoring, and view reports.

Use Configuration Manager software updates to download the latest antimalware definition files to keep client computers up to date.

Configure antimalware policies, Windows Defender Firewall settings, and manage Microsoft Defender for Endpoint to selected groups of computers.

When you use Endpoint Protection with Configuration Manager, you have the following benefits: Applies to: Configuration Manager (current branch)Įndpoint Protection manages antimalware policies and Windows Defender Firewall security for client computers in your Configuration Manager hierarchy.

Microsoft endpoint protection software