I'm looking to see if I can set (by policy) on SEPM the default "actions" for manual scans on the client side. right now the scheduled scans are set to quarantine by default but if a user runs a manual scan the default action is to clean (delete).
Is there a way I can make it so if a user runs a virus scan the action it takes is quarantine if it finds something? Does the administrator on-demand setting control this?