Skip to main content

Endpoint Protection Options: Windows

Cornell policy requires all university-owned computers to use endpoint protection, but the product used is entirely up to the unit or department. See options for endpoint protection on university-owned or personal Windows computers.

This article applies to: Endpoint Protection

University-Owned Options

We recommend CrowdStrike for all Windows computers that are part of Certified Desktop.

An alternate--but not recommended--solution is System Center Endpoint Protection (SCEP). Technical support staff only: See how to deploy SCEP via Configuration Manager.

Personally-Owned Computers

For all Windows versions listed below, configure your endpoint protection for automatic updates and real-time threat protection. If you have any questions, consult your local technical support provider or contact the IT Service Desk at

Windows 7: Microsoft Security Essentials

Windows 7 end-of-support is January 14, 2020. After that date, Microsoft will no longer provide security updates or support for computers running Windows 7, and continued use might expose your computer, data, and network to increased security risks.

Windows 8: Windows Defender

Windows 10: Windows Security

Was this page helpful?

Your feedback helps improve the site.