Endpoint Protection

Hi,

Is there a way on SEPM console to create a policy  where an SEP client can manually select action (log only, quarantine, clean, delete) once virus was detected on his computer?

Create a new Antivirus and Antispyware policy...
Go to file system autoprotect--> Action...
U will find a lock icon in front of dropdown box..

Click on the icon to change the state.
 
If the icon is in unlock state u can change these setting from clients also.
Then assign this policy to group where u want manual selection.


I don't think any option is there to set this action when a popup comes(i.e. in the popup window). 

When a threat is detected that means action has already been taken you are just being notified what action it took..
There is no way to take a action after a threat is detected.

Meaning..If I have an infected files and the action was set to "delete" it will automatically delete my file without my knowledge? No way for me to choose what action I want? No pop up window to ask me if I want just to quarantine or log? tnx

Thats true..Once you set it to delete the file it will delete it.So on your critical server you can always have the first action as Quarantine and second action as clean.

Thanks Vikram..It only means that it's more safer to set my first action to Quarantine and second action to Clean or log but never delete.