SCCM Client and SCEP Client Uninstall

Hi, I have below questions with regard to the SCCM client software and the SCEP client software.
Does SCCM client uninstallation removes SCEP client as well? If not, how does the Endpoint Protection get the updates after SCCM client is removed? How to remove/uninstall SCEP client?
If the SCCM client uninstallation removes the SCEP client as well (by running ccmsetup.exe /uninstall), how to make it to NOT uninstall the SCEP client?
Thanks.
NM

Yes, your SCEP client should still be able to update.
If you're installing the ConfigMgr client again, and have manage SCEP client enabled in the ConfigMgr client settings, it does more then just adding the update source. It allows you to manage the SCEP client configuration (like scan settings, exclusions,
etc), perform remote actions (like initiating a scan) and report about them.
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude

Similar Messages

  • FEP and SCEP Client updates

    There multible versions of client deployed at same time. I'm using stadard software updates deployment process to keep clients up to date. NOT talking about definitions, but client version!
    I have FEP and SCEP clients out there. When I go to All software updates and search for "endpoint protection client" I will have four FEP (4.1.552.0, 4.3.215.0, 4.5.236.0, 4.6.305.0) updates and three SCEP updates (4.3.215.0, 4.5.216.0, 4.6.305.0)
    to client deployed in the same update packages! All of them with various number of Required and Installed status.
    The obious reason for this is that older client update packages are not marked as superseeded updates. Any thoughts on why? I am going to exclude old ones with custom severity method, but is there a automatic method available?
    .Marko

    Multiple SCEP/FEP updates are required, because SCEP/FEP agent can update only N-2 versions e.g. you cannot install SCEP version 4.6.305.0 to a computer with SCEP 4.3.215.0. You need first to upgrade 4.3 to 4.5 and then to 4.6.Because there might be earlier
    versions in the environment, there must be multiple SCEP/FEP versions available.
    Check the following blog article for more details:
    http://blogs.technet.com/b/configmgrteam/archive/2014/03/27/anti-malware-platform-updates-for-endpoint-protection-will-be-released-to-mu.aspx
    Panu

  • Diff between Thin client and Rich client

    Hi Everyone,
              Can someone give me a clear picture of the what is the diff between Thin client and Rich client.
    Thanks,
    Krishna

    Hi,
    thick client (rich client) has/stores all the data inside itself
    so it can do application processing without the server with data
    thin client uses resources from host computer (from server)
    and wihtout that you are not able to work with that kind of client
    does that answer your question ?
    Regards,
    michal

  • What is thin client and Fat Client

    Hi Experts,
    I would like to know about Fat Client and Thin client in detailed words.
    Thanks and Regards.
    Chilla..

    Hi Chilla,
         The thin clients are clients that reduce the load on servers.
    Let me explain hw thin clients will get works.
         Thin clients are stores,all required library files in you local system,so that the  corresponding applications which are using will be used the library files in your local system and it get execute and where as in the case of Fat clients the library files are not stored in your local system.
       Please let me know if you have any doubts regarding this.
    Thanks and Regards,
    Chandu.

  • HFM Thin Client and Thick Client

    Hi
    can anyone tell me what is HFM thin client and thick client
    Thanks

    Thick client is the actual application client view. Most administrators limit that view to only them and provide a workspace (the thin client) as a method of accessing hfm. This is because more can be done in terms of metadata and security changes in the thick client than the thin client.

  • ABAP Client and J2EE client mismatch

    Hello,
    we detected mismatch between  default ABAP login client and J2EE client.
    Now we need to change J2EE client to default ABAP client.
    Its ABAP + JAVA installation and diff. occured after client copy.
    Can you please let us know where we need to change all setting for j2ee engine like default client for UME, sld etc.
    Best Regards,
    Tushar

    Hello. By default JAVA used the 001 client in ABAP+JAVA installation,  be cautious with change it.
    you can chage it through Config tool :
    http://help.sap.com/saphelp_nw70/helpdata/EN/0b/50ad3e1d1edc61e10000000a114084/frameset.htm
    or from UME --> configuration --> ABAP system. You need to read about change datasources :
    http://help.sap.com/saphelp_nw70/helpdata/EN/7e/a2d475e5384335a2b1b2d80e1a3a20/frameset.htm
    and about SAPJSF user.
    http://help.sap.com/saphelp_nw70/helpdata/EN/db/8b9b801df84aaaa76bdbcbc0b9725f/content.htm
    http://help.sap.com/saphelp_nw70/helpdata/EN/43/03e11edc6a6e99e10000000a11466f/content.htm
    Regards.

  • Difference between Golden Client and Master Client

    Dear,
    What is the Difference between Golden Client and Master Client?
    Thanx & Regards,
    Mohammad Nabi,
    [email protected]

    Golden Client is similar or is the the same as Development Client, which should not be used for testing.
    Master Client ???
    Note on SAP Landscape:
    Landscape is like a server system or like a layout of the servers or some may even call it the architecture of the server’s viz. SAP is divided into three different landscape DEV, QAS and PROD.
    -  DEV would have multiple clients for ex: 190- Sandbox, 100- Golden, 180- Unit Test.
    -  QAS may again have multiple clients for ex: 300- Integration Test, 700 to 710 Training.
    -  PROD may have something like a 200 Production.
    These names and numbers are the implementer's discreet on how they want it or they have been using in their previous implementations or how is the client's business scenario. 
    Now whatever you do in the Sandbox doesn't affect the other servers or clients. Whenever you think you are satisfied with your configuration and you think you can use it moving forward, you RE-DO it in the golden client (remember, this is a very neat and clean client and you cannot use it for rough usage). As you re-do everything that you had thought was important and usable, you get a transport request pop up upon saving every time. You save it under a transport request and give your description to it. Thus the configuration is transported to the Unit Test client (180 in this example). 
    You don't run any transaction or even use the SAP Easy Access screen on the 100 (golden) client. This is a configuration only client. Now upon a successful transport by the Basis guy, you have all the configuration in the Testing client, just as it is in the Golden client. The configuration remains in sync between these two clients. 
    But in the Testing client you can not even access SPRO  (Display IMG) screen. It's a transaction only client where you perform the unit test. Upon a satisfactory unit test, you move the good configuration to the next SERVER (DEV). The incorrect or unsatisfactory configuration is corrected in Golden (may again as well be practised in the sandbox prior to Golden) and accordingly transported back to 180 (Unit Test) until the unit test affected by that particular config is satisfactory. 
    The Golden client remains the 'database' (if you wanna call it that) or you may rather call it the 'ultimate' reference client for all the good, complete and final configuration that is being used in the implementation.
    In summary:
    Landscape : is the arrangement for the servers
    IDES : is purely for education purpose and is NOT INCLUDED in the landscape.
    DEVELOPMENT ---> QUALITY -
    > PRODUCTION
    DEVELOPMENT : is where the the consultants do the customization as per the company's requirement.
    QUALITY : is where the core team members and other members test the customization.
    PRODUCTION : is where the live data of the company is recorded.
    A request will flow from Dev->Qual->Prod and not backwards.
    1. Sandbox server: In the initial stages of any implementation project, You are given a sandbox server where you do all the configuration/customization as per the companies business process.
    2. Development Server: - Once the BBP gets signed off, the configuration is done is development server and saved in workbench requests, to be transported to Production server.
    3. Production Server: This is the last/ most refined client where the user will work after project GO LIVE. Any changes/ new development is done is development client and the request is transported to production.
    These three are landscape of any Company. They organized their office in these three way. Developer develops the program in Development server and then transport it to test server. In testing server tester check/test the program and then transport it to Production Server. Later it will deploy to client from production server.
    Presentaion Server- Where SAP GUI has.
    Application Server - Where SAP Installed.
    Database Server - Where Database installed.
    Regards,
    Rajesh Banka
    Reward points if helpful

  • Difference between native client and workstation client.

    hi,
    I am confused with the difference between native client and workstation client.In
    some docs,it is said that native client is one which run on the same system as
    the server,in other it is said running on other machine in the same domain.So
    what about workstation client?So can anyone please helpme out in knowing this
    difference?

    subhash wrote:
    hi,
    I am confused with the difference between native client and workstation client.In
    some docs,it is said that native client is one which run on the same system as
    the server,in other it is said running on other machine in the same domain.So
    what about workstation client?So can anyone please helpme out in knowing this
    difference?The simple answer is that /WS clients are compiled with the -w option.
    The complicated answer has to do with how the client connects to Tuxedo during the
    tpinit(), and all subsequent traffic. A Tuxedo Domain (instance) has a Bulletin
    Board, which is a chunk of shared memory with all kinds of information about Servers
    and Clients. A Native Client, since it is running on the same machine that the
    Bulletin Board exists on, can directly access the shared memory. However, /WS client
    (also called a remote client) cannot access this shared memory. Instead, we have the
    WSL server to make connections with, and then WSH processes that access the Bulletin
    Board on behalf of the remote client.
    So Native Clients run on the same machine as the Servers and where the Bulletin Board
    is located, and have direct access to shared memory and other IPCs. Workstation
    Clients/WS Client/Remote Clients (all the same thing) cannot access IPCs and have the
    WSH do it on their behalf.
    In NT, the Tuxedo IPC Service mimics Unix IPCs, and so all the above is still true.
    Brian Douglass
    Transaction Processing Solutions, Inc.
    8555 W. Sahara
    Suite 112
    Las Vegas, NV 89117
    Voice: 702-254-5485
    Fax: 702-254-9449
    e-mail: [email protected]
    [briand.vcf]

  • SCCM Policies and SCEP Deployment Issues

    I'm having several issues with SCCM 2012 R2.
    I have inherited an existing SCCM 2012 R2 installation.  The company does not want me to rebuild it from the ground using best practices, so I'm doing what I can with it.
    Issue #1: SCEP does not auto deploy to new systems;
    Issue #2: Client policies do not update;
    Issue #3: Anti-malware policies do not update.
    Starting out, I guess I need to look at issue #2 before I look at the others.
    The client is auto-deploying as far as I can tell.  I do not have any GPO’s that push the software to the clients, so it appears that the system wide deployment of the client is working correctly.
    As for the policies not being updated, I have created a new policy that is assigned to newly defined device collections. 
    I have check the membership of the collections and it is populating/selecting the assets correctly. 
    I have picked a handful of computers out of the collection to use for information gathering. 
    Looking at the log files, it shows that it is applying policies, but it does not identify which policy from the SCCM server.
    With the new policies that I’ve created, I’ve enabled ‘Endpoint Proection’, ‘Hardware Inventory’, ‘Power Management’, ‘Remote Tools’, ‘Software Deployment’, ‘Software Metering’, and ‘User and Device Affinity’. 
    After 13 days, the options within the policy have not taken effect as I have check the clients and the settings from the ‘Remote Tools’ and ‘Power Management’ haven’t been applied. I waited this long since several of the settings were set at 7 days before
    re-evaluation.
    I’m not sure where to go next on this issue.
    On the issue #1 & 3, the computers that did get the initial config push and SCEP install, before I came on, are operating and reporting back to the SCCM manager that they are in a managed state, which is fine, but they are not applying any newly defined
    policies.  Checking the logs on the clients show that they are applying the Default Client Settings and not any of the other policies that are set to deploy to All systems or any other collection I’ve defined. 
    Also checking the anti-malware policy logs on the clients, they are also still applying the Default Client Antimalware Policy, not any of the custom policies, just like the SCCM client issue.  In the EndpointProtectionAgent.log, i have several lines
    showing "Deployment WMI is NOT ready."  The same is in several of the other log files, so I've check that all the WMI services are running and I have tested management with the PoshCat utility and all of the commands are working in there and
    the output reports all seem to be reporting correctly.
    Any pointers or starting points would be greatly appreciated.

    For the 'Client Settings', I have 4 listed.  Default Client Settings, EP Settings (existing that I have set to deploy to a group that only has 1 computer left in it), Server Policy, and Workstation Policy (applies to all clients that have 'workstation'
    in the version name).
    For SCEP, just 2.  Default Client  and Custom SCEP.
    The inventory and software distribution... let's look at the inventory function.  I have nothing showing in '\Assets and compliance\Overview\Asset Intelligence\Inventoried Software'.
    As for software distribution, I am not sure how to check that -- I haven't set up any deployed software packages yet... but the SCEP and Windows Updates are the only things showing up.  SCEP is not deploying to any new workstations, but it appears all
    the Windows Updates are deploying correctly to all the workstations.
    I just checked the SrcUpdateMgr.log on a client and I've found several lines of 'Instance of CCM_SourceUpdateClientConfig doesn't exist in WMI'
    Checking the SoftwareCatalogUpdateEndpoint.log file, I have several lines that just repeat...
    Software catalog update endpoint is starting
    Logo event received
    Logon user SID: [...]
    Retrieving URL for software Catalog
    Software Catalog update endpoint is loading
    Received notification for client agent setting or portal information change
    Retrieving URL for Softwware Catalog
    Making call to determin whether catalog Url should be added to the trusted sites zone
    Updating the registry for Software Catalog for user '[...]'
    Notification system applicaton: C:\Windows\CCM\UpdateTrustedSites.exe
    Started UpdateTrustedSites process
    Making call to determine whether keys to enable Silverlight elevated trust should be added
    Enable elevated trust is set to false. Setting the keys to 0
    CSoftwareCatalogUpdateHandler::UpdateSilverlightRegistry: Successfully set elevated trust on this client for Silverlight
    CSoftwareCatalogUpdateHandler::UpdateSilverlightRegistry: Successfully set elevated trust on this client for Silverlight
    CSoftwareCatalogUpdateHandler::UpdateSilverlightRegistry: Successfully set elevated trust on this client for Silverlight
    Received notification for client agent setting or portal information change
    and it does show the Silverlight lines 3 times each time in the repeats. The repeat time stamp looks like it happens alternating 20 minutes, then 2 hours, then 20 minutes, then 2 hours, etc.
    KW

  • I cannot route to remote subnets from cisco vpn client and pptp client

    Hi guys,
    I've a big problem, I configured a 877 cisco router as a cisco vpn server (the customer use it to connect to his network from pc) and a pptp vpn server (he use it to connet to the network from a smartphone).
    In this router I created 2 vlan, one for wired network (192.168.10.0/24) and the second one (10.0.0.0/24) for wireless clients and I use fastethernet 3 port to connect these to the router.
    this is the issue, when the customer try to connect to a wireless network from both of vpn clients he cannot do this, but if he try to connect to a wired network client all working fine.
    following the addresses taken from the router.
    - encrypted vpn client -
    ip address. 192.168.10.20
    netmask 255.255.255.0
    Default Gateway. none (blank)
    - pptp vpn client -
    ip address. 192.168.10.21
    netmask. 255.255.255.255
    Default Gateway. 192.168.10.21
    Is possible that I cannot reach the remote subnet because the clients doesn't receive a gateway (in the first case) or receive the wrong subnet/gateway (in the second one)..?
    There is anyone can help me..?
    Thank you very much.
    Many Kisses and Kindly Regards..
    Ilaria

    The default gateway on your PC is not the problem, it will always show as the same IP address (this is no different when you dial up to an ISP, your DG will again be set to your negotiated IP address).
    The issue will be routing within the campus network and more importantly on the PIX itself. The campus network needs a route to the VPN pool of addresses that eventually points back to the PIX.
    The issue here is that the PIX will have a default gateway pointing back out towards your laptop. When you establish a VPN and try and go to an Internet address, the PIX is going to route this packet according to its routing table and send it back out the interface it came in on. The PIX won't do this, and the packet will be dropped. Unless you can set the PIX's routing table to forward Internet packets to the campus network, there's no way around this. Of course if you do that then you'll break connectivity thru the PIX for all the internal users.
    The only way to do this is to configure split tunnelling on the PIX, so that packets destined for the Internet are sent directly from your laptop in the clear just like normal, and any packet destined for the campus network is encrypted and sent over the tunnel.
    Here's the format of the command:
    http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_62/cmdref/tz.htm#1048524

  • Difference bewteen thin client and thick client

    Hi:
    can someone explain the difference between the thin client app and thick client app?

    Thin Client: Little to no logic on front end. Typically a 3 tier architecture. Example is a web browser
    Thick Client: Typically a client-server type architecture where some business logic/processing occurs on the front end

  • Fat Client and Thin Client

    Hello, everyone
    I am a newbie with websphere 5. I am wondering if anyone know fat clients(Swing GUI) work with websphere. I know thin clients(web-based interface) work with websphere. My scenario is like this and this is all experimental purposes:
    I want to program a Swing GUI interface as the client that accesses the enterprise javabeans that is installed on websphere. So the Swing GUI is the client and Websphere is the server, which makes it a 2-tier Application. My question is basically, does websphere only work with web-based application or does it work with both desktop application clients and web-based application clients also?
    Any Ideas?

    Thanks, that's the kinda of straight answer I am looking for. I have been researching for this answer to this question for a long time and even posted several similar questions on Java forum, but no one seemed to have a straight answer. What I was thinking of programming is:
    client/server program using websphere.
    Client:
    GUI interface using Swing that is just like a regular desktop application and not a web browser (I notice the most common application using websphere are web based applications like portals).
    Server:
    Using Websphere to accept connection when requested by the client and act as a bean container, which holds EJBs. The EJBs will connect to the database (mssql server) to pull data from.
    Does this sound OK and can this be done using Websphere? I am using Websphere 5.
    Thank you, I am just a newbie in j2ee, just trying to get started in this area of programming.

  • Using both ICWeb Client and ICWin Client

    Hello,
    Is it possible to use for normal Call Center agent's work ICWin Client and for manager of Call Center ICWeb Client's "Manager Dashboard"?
    I mean do both interfaces work on same data from CRM?
    I want to enable to the manager of Call Center some real time statistics of his unit's work.
    Regards
    Radek

    Hello!
    Technically it is possible, the only restriction is you cannot logon to the ICI at both systems at the same time.
    BUT: I don't recommend it. It would be to double the work, the maintenance and the envinronments. You should have to do developments from both sides, since the architecture is quite different. My advice is not to do it.
    Regards
    Joaquin

  • Different installation guide between client and non-client

    hello,
    i am windows user and still newbie, but i am still confuse. well, make it quick answer for me:
    what is different between Database Installation Guide for Microsoft Windows ( non-client i mean that ) and Database Client Installation Guide for Microsoft Windows?
    It's same or not?

    The former discusses creating the database and the listener, the latter doesn't.
    Likely the latter is a very small subset of the former, ie if you install the database on the server, that server implicitly has a client.
    Sybrand Bakker
    Senior Oracle DBA

  • Difference between Web client and Tab client in NAV 2015

    Hi All,
    Can you help me to find differences between WebClient and Tab Client in NAV 2015?

    They'll help you over here.
    Microsoft Dynamics NAV Forum
    Regards, Dave Patrick ....
    Microsoft Certified Professional
    Microsoft MVP [Windows]
    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

Maybe you are looking for

  • When i try and video chat it will always give me this error code...

    For the past week i been trying to ichat with friends and family but it has not been working. I've been getting this error code below... Date/Time: 2010-09-29 22:03:14.786 -0700 OS Version: 10.5.8 (Build 9L31a) Report Version: 4 iChat Connection Log:

  • Why is iTunes Podcast Artist Column Incorrectly Showing the Channel Title?

    I've noticed that recently for iTunes Podcasts that I create, when viewing the podcast in iTunes, the Artist column (for each podcast media record) is not showing the correct <itunes:author> field for that item. Instead it is showing the <title> fiel

  • Unable to register a managed account

    hi, when i tried register a managed account in my central admin, i am getting error "Requested registry access is not allowed. " may i know how to resolve this error. i have full control on my sp server which has windows server 2012,  sp 2013, vs 201

  • MovieClip to NetStream

    Hi. How can i stream a movieclip such as video? Is it possible? I really need this, please someone help me if knows somethings. Thanks.

  • Weird behavior under Mavericks - permissions?

    I am administering one of the new Mac Pro cylinders for a design team to test. We are licensed up to Adobe Master Collection CS5.5 and almost all of the problems I have had with this new Mac and Mavericks seem to be permissions related. If anyone els