Endpoint Protection

Hi team, please cuggest

What is : Allow startup scans to run when users log on. How this works if we enable this setting, at present disbled in our setting,

A Startup scan would run any time a user logged on the computer. It would scan well known areas of the computer where malware is known to infect. It is not a replacement for a scheduled scan. Do note this may take up some additional resources.

Do you work in a locked down environment or have specific requirements around this? If not, the scheduled scan and real-time prottection should suffice.

About the types of scans and real-time protection

Thank you, we are going to enable this on VDI's , is that good to have this enabled or any suggession on this, what about where schedulled also enabled, how scedulled scan works if this is enabled, is this deferent scan apart from schedulled scan. please help

They are both separate scans.

Startup scan only runs on user logon. Scheduled scans run based on whatever schedule you set it to run.

It's good to have as an additional layer of protection but it depends on the tradeoff. I would enable on a couple test machines and monitor performance first. If you feel comfortable with it then enable as you see fit.

Understand,thank you, what are all the scans when enabled startup scan when user log in to the system, is there any performce issues after log in.

That's something you would need to test out in your environment. It will depends on the hardware of the machines.

In my experience, performance impact has been minimal but every environment is different.

startup scan - Scans common loadpoints ( like startup files, few registry entries,C:\Windows, Temp and User Profile ) and memory. Its is a scan which normally takes 2-5 minutes

more details about common loadpoints 

Common loading points for viruses, worms, and Trojan horse programs on Windows 2000/XP/2003

Just like any other scan startup scan will have a slight impact on performance, but it will be really quick.