Personally-owned or Cornell-owned but NOT managed devices should use Windows' native antivirus options instead of the method presented here.

Requirements

• You must have the CM2012 (Configuration Manager) client installed. 
• The machine you are installing the CM2012 Client on must be a member of cornell.edu and have the proper policies in place to allow communication with the CM2012 infrastructure.
• You must be provisioned on the CM2012 system. If you are not currently using CM2012, please send an email to MD-PC@cornell.edu asking to be on-boarded.

Installation

This procedure creates or modifies a client settings policy that will install SCEP on the managed computers.

1. Launch the CM2012 Console.
2. On the wunderbar (lower left), click Administration.
   
3. On the left, under Overview, click Client Settings.
4. In the main section of the screen, select your unit's client settings policy (or create it if one does not already exist).
5. Right-click your unit's client settings policy, then select Properties. A Client Settings dialog box will open.
   
6. In the left column, click General.
7. In the right section, click to put a check next to Endpoint Protection.
8. In the left column, click Endpoint Protection.
9. In the right section, set the device settings as desired. Most settings will be read-only until you set the first (Manage Endpoint Protection client on client computers) to Yes.
   The screenshot here shows the settings used to upgrade the CIT-managed environment. You MUST uninstall SEP (Symantec Endpoint Protection) before installing SCEP. The simplest way to do this is to set the third setting (Automatically remove previously installed...) to Yes.
   
10. Click OK to close the dialog box.

Monitoring

1. Launch the CM2012 Console.
2. On the wunderbar (lower left), click Monitoring.
   
3. On the left, under Overview and Endpoint Protection Status, click System Center 2012 R2 Endpoint Protection Status.

Here you can see how many clients in your collection have Endpoint Protection installed and other information.

Click Active clients protected with Endpoint Protection to see additional information on the status of each client.

Reporting

1. Launch the CM2012 Console.
2. On the wunderbar (lower left), click Monitoring.
   
3. On the left, under Overview and Reporting, click Reports.
4. In the search bar, type endpoint, then click Search.

The search results are various reports you can run for further details.