I'm having trouble figuring out how to generate a report in SEPM which shows all of the SEP clients that have a component turned off. I have come across SEP clients that have the "Proactive Threat Protection" or the "Network Threat Protection" component turned off, but this information doesn't seem to be in SEPM. How can I generate a report that shows me this information?
open sepm
monitors
logs
computer status
click on advanced options at the bottom (blue link)
check compliance option (blue link)
check ntp off.
generate report...
I see a Network Threat option but I don't see a setting for Proactive Threat Protection. Also if I test the report by turning off these two components on a client, the report does not show this information...
PTP is not available.
open the client interface and then turn nTP off.
wait for the client to send the logs to sepm..
this can be done by updating the policy on client..once done,,u can then try creating the report
Updating the policy on the client worked. Thanks.