Endpoint Protection

Hi Expert,

Need your advice, where I should create scheduled scan from my SEP Manager?

1. Policies -> Antivirus and Antispyware -> Choose Policies Name -> Assign the Policy -> Choose a group OR
2. Clients -> Group Name -> Go to Policies tab ->Uncheck inherit policies and settings from parent group "My Company" -> Antivirus and Antispyware policy[shared] -> Click on Tasks -> Click on Edit Policy -> Edit Shared -> Administrator-defined scans -> Add or Edit Scheduled Scan.

I have tried both method but scheduled scan can't start, is it possible if one group have more than one pocily or not?
Is it time in schedule is local server time or no?

Thank you in advance for your advice.
Best regards
-daus

Hi,

the way you created scans are correct , both ways can be used for policy creation

1) when you go to policies , its global actually, it would tell you which groups are using this policy , but it would give you the location use count, meaning on how many groups the policy is in use.

2) to be more specific to a group , you choose the second option. you select any particular group and change policies, you now know what you are editing on  a group.

when you click shared, it means policies are shared, change in one will result change in all the groups ( coz its shared, you are editing something global)

one group will have one particular policy cant apply 2 antivirus and antispyware policy..

The time is the local machine time,

3pm on server scan set in SEPM is same as

3pm scan on server in Singapore


did the machines run scan any time before?
hope this helps.

Have you check if the policy that you apply is already aquired by your SEP clients?

Have you check if the policy that you apply is already aquired by your SEP clients?7

 

How about  using the "Run command on group" then choose to "update content and scan" after applying the policy. And see if the client really acted upon the command of the SEPM..

command can be found on the "Clients" tab, then under the task pane...

Hi Rafeeq,
Thanks your for your detail information. So, if both ways is correct why schedule scan can't start? Any other rule should I check?
daus

Hi Peterpan (nice nickname, I must believe in you..hehehe),
I also make sure that policy update to all groups and clients because their definition always updated.
daus

Hi Ben,
I always force scan and update from Run command but not window scan appears during this time eventhough I choose Full Scan. Is it normal? So that I don't know if scan run or not.
Thanks anyway
daus