Endpoint Protection

Hi,

We would like to install Endpoint Protection on a Windows 2008 server and deploy the AV client on all domain workstations.

Questions :
does the Endpoint Protection server need to be a domain member ?
If not, would we have all the functionnalities even if the server is not a domain member ?

Thanks for your help

Regards

I have ran the management console on machines not in a domain and had no issues, I did have the same user that was part of the local administrators group on all machines which is what you would need if not part of the domain to push the install to multiple clients.

@ "does the Endpoint Protection server need to be a domain member ?"
No.

@ "If not, would we have all the functionnalities even if the server is not a domain member ?"
N/A

Longer answer:
From a purely SEP focused standpoint, there really isn't any major advantage to having the SEPM computer on the domain. You do not lose any functionality when it's on or off a domain.

There are obvious benefits for having your servers on a domain, but none when it comes to SEPM's functionality.

From my understanding, as long as the server hosting SEPM can access the target machines hidden share C$ with local/domain admin credentials, you're good to go.

In XP -Uncheck -Use simple File sharing in folder options

C$ and Admin$ share should be available. You should be able to ping the client from server and vice-versa

WIndows Firewall port should excluded for communication ( 8014 )
 In Newer OS UAC should be turned off.

and for deployment you need to use Administrator Credentials ( Domain/Local )

It doesn't matter if its Domain or Workgroup.

Thanks to all of you
Regards