...or more precisely, before shutdown.
I would like to set up Endpoint Protection to run scans on the client computers at 8:00 P.M. or have a scan initate and run before shutdown, much like Windows install updates and then shuts down. Is this possible?