I am currently running SEP 11 MR 4 and I'm confused on how exactly Scheduled Scanning works if a computer is powered off or disconnected from the network when it is initiated.

Right now we have an Administrator-defined full scan that runs on day 1 of every month at 3:00 AM. We also have the 'Retry the scan within:' marked and set at 14 days.

Now, this is my question:

If a workstation missed the monthly scan at 3:00 AM, on the 1st of the month, will that same workstation:

• Run the scan immediately once it regains communication with the SEP server, or
• Try to run the scan again at 3:00 AM everyday, leading up to the 14th day, or
• Try to run the scan again on the 14th day ONLY, or
• Try to run the scan again at a random time set by SEP within the 14th day window.

And what if the workstation regains communication after the 14 day window; will the scan simply be omitted?

I would like to know exactly how this system works, because we're having some activity that are not consistent across the board when it comes to the missed scheduled scan actually retrying.

Thanks for your help ahead of time.

Kenneth