Deploy Endpoint Protection for 40+ laptops

Hey there smart people! I am in the process of bringing 40+ laptops out of workgroup mode onto the domain, and want to design a security solution for them other than named AV accounts. I've worked with SC products before but in a Dev environment,
not production. I'm concerned with the cost of a full-blown system center deployment to manage 40+ roaming laptops and a dozen servers.
Security Essentials, however, is not licensed for businesses with more than 10 machines, so I need to figure out the best way to manage these things. Windows In-Tune has been brought up as a solution as well.
If I go with a self-managed solution like SCCM Endpoint Production, what products do I need to license and manage?
Thanks,
Joe

ConfigMgr is way too much for what you want. You can buy Intune licenses for $7/month per user. I have an Intune Guide here. You can see how easy it easy to deploy and manage.
http://www.gerryhampsoncm.blogspot.ie/2013/05/windows-intune-step-by-step-guide.html
Gerry Hampson | Blog:
www.gerryhampsoncm.blogspot.ie | LinkedIn:
Gerry Hampson | Twitter:
@gerryhampson

Similar Messages

Deploy Endpoint Protection while using another AntiVirus application?

Dear friends
I'm configuring SCCM 2012R2 in our network,my question is Do I need to deploy Endpoint Protection to clients while we using Kaspersky Endpoint Security in the perimeter ,actually I installed SCEP but not sure if there is any Conflict between these two programs,or
any advantage might it have...?!
Thanks
Reza Hadad

HI,
I wouldn't use two anti-viruses as a permanent solution. I have used two at the same time during migration scenarios, installting SCEP, when it reports back that it is installed succesfully, put it in a a collection and uninstall the old Antivirus.
I have done it this way a couple of times and I haven't had any co-existence problems.
Regards,
Jörgen
-- My System Center blog ccmexec.com -- Twitter
@ccmexec

How effective is System Center 2012 Endpoint Protection for Windows?

Hi,
Is there any thing out there that compares how effective System Center 2012 Endpoint Protection is compared to other AV / Malware solutions? I have read where MS Security Essentials comes up short of the level of protection compared to
other solutions.
Thanks Lance

Didn't mean to propose that MS love (yes we all know that you love MS Jason) post as an answer to your question.
Truth is SCEP may be good at how it works, it doesn't whine to users and it integrates to ConfigMgr. That's where it's good at. And I get Jason's point there, I'd just like to know what are those "other products" that haven't found the malware
when SCEP did? MS may gather telemetry, but so do all the other players.
There are several companies that do ONLY and ONLY AV products so they put their 100% effort in them, I don't think that AV is the business priority number 1 for MS.
Check this:
http://lifehacker.com/microsoft-admits-that-third-party-antivirus-is-more-eff-1441135677
And for your info Security Essentials uses the same AV engine that SCEP does.
If you want REAL protection, tested in the REAL world, I suggest you read some reviews of the products.
http://www.av-test.org/en/tests/corporate-user/windows-8/janfeb-2013/
http://chart.av-comparatives.org/chart1.php
--- ADVERT (I don't think it's illegal here, eh Jason?)
I'd go with F-Secure, it's not that expensive and you get some neat features like USB (or any other device for that matter) blocker. And yes, it can be configured to use individual USB sticks and so on..

System Center 2012 Endpoint Protection for Mac

Has anyone had any experience instlling and using Microsoft's Endpoint for Mac?
I have tried it and am having some difficulty wihen using ARD to control systems that have Endpoint installed. Communications failures seem to occur and client systems quit responding to the ARD admin. Eventually the systems do seem to come back but it might take 15 or 20 minutes. When they have quite responding, the only way to get them back if you do not want to wait thm out is to force a "Power button 10 sec. reset"
The problem does not seem to be completely repeatable in that earlier in the day, I used this same manner of control on another room full of very similar systems and no problems took place. The problem first surfaced Friday afternoon shortly after Endpoint was installed. At that time 13 of 26 systems indicated "Communications Failure". But today, tin he morning things worked as expected but the afternoon resulted in 11 of 23 systems showing the "communications failure".
These clients are all iMac systems running 10.8.4 and have have permissions repairs done to them using ARD if they did not quit responding as mentioned above.
I have found almost no information on Endpoint with the Mac version. This version, for Mt. Lion seemed to have been released just this past May. Prior to that there was not a Mt. Lion version available.
Anyone have any experience with this Endpoint version for Mac Mt. Lion version?

Didn't mean to propose that MS love (yes we all know that you love MS Jason) post as an answer to your question.
Truth is SCEP may be good at how it works, it doesn't whine to users and it integrates to ConfigMgr. That's where it's good at. And I get Jason's point there, I'd just like to know what are those "other products" that haven't found the malware
when SCEP did? MS may gather telemetry, but so do all the other players.
There are several companies that do ONLY and ONLY AV products so they put their 100% effort in them, I don't think that AV is the business priority number 1 for MS.
Check this:
http://lifehacker.com/microsoft-admits-that-third-party-antivirus-is-more-eff-1441135677
And for your info Security Essentials uses the same AV engine that SCEP does.
If you want REAL protection, tested in the REAL world, I suggest you read some reviews of the products.
http://www.av-test.org/en/tests/corporate-user/windows-8/janfeb-2013/
http://chart.av-comparatives.org/chart1.php
--- ADVERT (I don't think it's illegal here, eh Jason?)
I'd go with F-Secure, it's not that expensive and you get some neat features like USB (or any other device for that matter) blocker. And yes, it can be configured to use individual USB sticks and so on..

Identity protection for my laptop

Is there any free software to protect my identity for my laptop?

Please describe what you are trying to prevent. There is antivirus and also anonymous web surfing applications which run your web traffic through a proxy server and then there is anti-theft software that can track your laptop if it gets stolen. Not sure which you are asking about, if it is even one of the above and not something else.

McAfee Endpoint Protection for MAC v1.2 and NAC

Has anyone been able to check for and enforce compliance using NAC for MAC OS X systems running this McAfee endpoint protection product?
Thanks in advance!!
David

The newest product from OPSWAT, GEARS, allows you to perform endpoint compliance checks on Mac devices, as well as provides the administrator the option to detect advanced threats on the endpoints. It integrates easily in the Cisco ASA and ISE devices to provide the compliance checks on an ongoing basis.
You can read more about the integration/configuration steps in the attached document.

Disk shock protection for Dell laptop

Welcome Archers!
I have laptop Dell Studio 1558. I want to turn disk shock protection.
I read the wiki
https://wiki.archlinux.org/index.php/La … protection
and
https://wiki.archlinux.org/index.php/HDAPS
but I do not know what method is good for Dell.
Last edited by e7k (2012-10-04 08:53:31)

I don't think any of those will work for you, Becoz both of them are clearly not targeting dell.
It wont hurt to try, but how will you know that its proctecting your Disk?

Forefront Endpoint Protection for AV

Hi everyone, Happy New Year!
Since Microsoft will stop shipping Anti-Virus updates to the MS Security Essentials consumer product for XP when support ceases in April this year, does that mean our customers will no longer be receiving MS FEP anti-Virus updates for their XP machines
as well?
Thank you.

Microsoft has announced that definitions and engine updates for Windows XP will continue until July 14, 2015.
http://blogs.technet.com/b/mmpc/archive/2014/01/15/microsoft-antimalware-support-for-windows-xp.aspx

Endpoint Protection for Mac client 4.5.21.0

I'm trying to locate where to download the latest version of the SCEP client for Mac. Any one know the download site? Thanks.

Hi,
It is only available on the Volume License site, there you will find the .iso to download, it is not published anywhere else.
Regards,
Jörgen
-- My System Center blog ccmexec.com -- Twitter
@ccmexec

T6x: IP Conflict after sleep mode using Symantec Endpoint Protection server.

Here is the problem I'm having: We have several t6x laptops running various versions of Vista (business, enterprise, ultimate, x86 and x64), and we have Symantec Endpoint Protection server with client distributed to laptops.
Every possible thing is at the latest level downloadable from MS, Symantec, Lenovo. HW is not malfunctioning in any way.
If a laptop enters sleep mode and wakes up, windows return an error stating there is an IP conflict with the other computer on the network (with the same IP address and the same MAC addr !?). Other than that bluetooth and tpm drivers fail as well.
If Endpoint protection is uninstalled laptops wake from sleep/hibernation without problem.
If anyone has a clue what is going on please share the info...
moderator note: title specified.
Message Edited by Agotthelf on 24-03-2009 05:25 PM

Hello redrum781, welcome to Lenovo forums!
I have done a forums search for "symantec endpoint protection".
It reveals there were a lot of problems with it, wireless disconnects or C++ errors.
I would suggest to use a different antivirus solution, if this is applicable for you.
Follow @LenovoForums on Twitter! Try the forum search, before first posting: Forum Search Option
Please insert your type, model (not S/N) number and used OS in your posts.
I´m a volunteer here using New X1 Carbon, ThinkPad Yoga, Yoga 11s, Yoga 13, T430s,T510, X220t, IdeaCentre B540.
TIP: If your computer runs satisfactorily now, it may not be necessary to update the system.
English Community Deutsche Community Comunidad en Español

Symantec Endpoint Protection on Mavericks Reviews??

It seems like everyone has a review or has reviewed Symantec Norton Internet Security and Norton Antivirus yet not too much has been tested or written on Symantec Endpoint Protection.
Unfortunately we are moving in a direction where we will be installing Symantec Endpoint Protection on all our macs and I am trying to find reviews, whether personal or professional, about SEP and macs.
I know Symantec products in general have been trashed on for mac for a while now but it seems I can't find a good AV test out there that includes it for Mac (as most only contain the two symantec products I mentioned above)
Anyone have any personal experience, or know of any testing done with the Symantec Endpoint Protection on macs within the past year?

Hello Everyone,
I am Chetan Savade from Symantec Technical Support Team.
You can directly install an unmanaged or managed Symantec Endpoint Protection client on a Mac computer if you cannot use or do not want to use Remote Push. The steps are similar whether the client is unmanaged or managed. The only way to install a managed client is with a package you create with Symantec Endpoint Protection Manager. You can convert an unmanaged client to a managed client at any time by importing client-server communication settings into the Mac client.
Check the following articles:
Compatibility between Symantec Endpoint Protection for Mac and versions of Mac OS X
http://www.symantec.com/docs/TECH131045
Symantec Endpoint Protection for Macintosh Frequently Asked Questions (SEP for Mac FAQ)
http://www.symantec.com/docs/TECH134203
Send me DM here https://www-secure.symantec.com/connect/user/chetan-savade if you need any assistance with SEP for MAC.
Best Regards,
Chetan

Random BSOD after migrated to SCCM 2012 R2 - System Endpoint Protection

We are currently experiencing random BSOD after upgrade to SCCM 2012 R2 from SCCM 2012. These BSOD are happening on our Windows 7 x64 machines. With the upgrade, we switched to System Center Endpoint Protection for the anti-virus protection and start
to notice this problem. Have anyone else experiencing the same issue? I'm trying to run adplus right now on 2 machines to try and capture the error but so far no luck. This BSOD is so random and we are getting at least 5 calls a day from users about this.
The only similarity with these BSOD is usually the user is away from keyboard and after the BSOD, System Center Endpoint cannot connect to update virus definition.
Below is a screenshot of the BSOD and it didn't create any memory dump file. We are currently running Windows 7 x64.
Message was: "STOP:
C000021a [fatal system error]. The Windows subsystem process terminate
unexpectedly with a status of 0xC0000005

- Event Type : Stopped working (APPCRASH)
      Application Name: Client Server Runtime Process
      Path:             C:\windows\system32\csrss.exe
      Event Time      : 03/22/2014 12:30:26 AM
          Application Name: csrss.exe
          Application Version: 6.1.7600.16385
          Application Timestamp: 4a5bc115
          Fault Module Name: sxs.dll
          Fault Module Version: 6.1.7601.17514
          Fault Module Timestamp: 4ce7c9cc
          Exception Code: c0000005
          Exception Offset: 0000000000011b2f
      Memory dump     : Not created

SCCM 2012 EndPoint Protection migration

I have the old ConfigMgr 2012 name " BACKOFFICE" it is currently managing all the EndPoint Protection for all workstations/servers.
I now have new ConfigMgr 2012 called "SCCM" I just installed ForeFront EndPoint Protection and configured the Custom Client Deviec EndPoint Protection to roll out to workstations. What is the best practice to remove old ForeFront EndPoint
Protection client from old site name and install new one?
1. Do I have to manually uninstall EndPoint Client in control panel for each computer? or is there a way to just uninstall for all computers using the old COnfigMgr 2012 "BACKOFFICE"
Thanks for your help!

Hi !
You have to reassign the desired clients.
It can be scripted:
http://msdn.microsoft.com/en-us/library/cc146558.aspx
Otherwise, you could install again the client on your targets, with the following options: force install and site assignement.
You can refer to this link:
http://technet.microsoft.com/en-us/library/gg712298.aspx
Hope this helps.
Note: This posting is provided 'AS IS' with no warranties or guarantees, and confers no rights. Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable. This helps the community, keeps the forums tidy, and
recognises useful contributions.

McAfee Gold vs Complete Endpoint Protection

We are due for AV Renewal. Looking around $15/seat for Total Endpoint Protection, or upgrade to Complete Endpoint Protection for around $30/seat.
Major differences? Worth double the cost? I know if comes with drive encryption which seems useful, but not sure what else.
Any reviews / use cases or anything? Ideas / recommendations?
This topic first appeared in the Spiceworks Community

Hi,
Thank you for the post.
Please try register MSI installer or clean boot your system to install FEP client.
Registered MSI Installer following the steps below:
1.Run "cmd"--Browse to the "%systemroot%\system32" directory and execute: "msiexec /regserver"
2.Change directories to "%systemroot%\SysWow64" and execute: "msiexec /regserver"
3.Reboot the server
http://technet.microsoft.com/en-us/library/ff823833.aspx
If there are more inquiries on this issue, please feel free to let us know.
Regards
Rick Tan
TechNet Community Support

AI just purchased McAfee security for my laptop. One of there features rates the safety of sites when running

i purchased McAfee protection for my laptop. one of the features is that it rates the safety of sites when running a search. McAfee says this feature only works with Firefox. Firefox says it is not compatible with McAfee. Is there another version that I can use? or....?

The McAfee Site Advisor 3.3.1 extension was the number 2 cause of crashes in one of the Firefox 5.0 betas and Mozilla Blocklisted it. That extension is disabled in Firefox 5, Firefox 6.0beta, and Firefox 7.0alpha versions. McAfee is working on a new re-written version of the Site Advisor extension to fix their problems - ETA is mid to end of July. https://www.mozilla.com/en-US/blocklist/
credit to the-edmeister

Deploy Endpoint Protection for 40+ laptops

Similar Messages

Maybe you are looking for