yes; on the console you select a client and run the command start scan ; this is on demand admin scan
user can set his own scan ; might skip some files if he has created centralized exception so this makes client scan; on demand
it does follow file system autoprotect.