Endpoint Protection

Hi there 

SEPM 14.0.2349.x - AD integrated - ~2500 machines

How can i create a report listing all endpoints <Macs/windows> with no SEP deployed ?

 

Thanks in advance,

Matt

You need to configure unmanaged detectors to find clients without SEP. See here:

How to enable the Unmanaged Detector in Endpoint Protection Manager

Once this happens, you can then create alerts.

Keep in mind, you need a UD on every subnet and all devices, such as routers, switches, printers, etc., will also be flagged. You can add exceptions to exclude them but it needs to be done manually. 

The best way to do go is to export the past month computer status log from sepm and look It up against the log from ad to find out the computers present in ad and missing sep

This solution is not practical when you have more than 200 VLANs and have virtual machines within the network which are not online all the time.

There needs to be some mechanism where the server assigns a role of unmanaged computer to a system in a VLAN on its own. If the unmanaged detector goes down or not available on continuous basis then the server should automatically assign the unmanaged detector role to any other machine within the same VLAN, This unmanaged detector role can also be assigned in rotation between different systems in VLAN based on how idle they are.

Can we think of implementing such option? I will also put this as an idea.