Information Technology Reference
In-Depth Information
Setting
Description
Allow Endpoint Protection
Client Installation And Restart
Outside Maintenance Windows.
Maintenance Windows Must Be At
Least 30 Minutes Long For Client
Installation
If set to Yes, the Endpoint Protection client installs outside the specified
maintenance window for the device. If set to No, the client installs only
during the specified maintenance window.
The default setting is No. A maintenance window must be at least 30
minutes long for the Endpoint Protection client to install successfully.
For Windows Embedded Devices
With Write Filters, Commit
Endpoint Protection Client
Installation (Requires Restarts)
This setting specifies how the Endpoint Protection client installs on a
Windows Embedded device. If you select Yes, the write filter is disabled,
which allows the installation to commit on the device. This also requires
a restart of the device. If you select No, the client installs on a tempo-
rary overlay and is not committed until another installation commits the
changes to the device. The default setting is No.
Suppress Any Required Computer
Restarts After The Endpoint
Protection Client Is Installed
If set to Yes, after the client installs the client will suppress any required
restarts. The default setting is Yes.
Consider deploying KB981889 to your Configuration Manager clients
before you deploy the Endpoint Protection client. This update requires
a client restart, but it can help you prevent restarts during the Endpoint
Protection client installation task.
Allowed Period Of Time Users Can
Postpone A Required Restart To
Complete The Endpoint Protection
Installation (Hours)
This setting specifies the number of hours a user can postpone a poten-
tial restart after the client installs. The default setting is 24 hours.
This option is available only if Suppress Any Required Computer
Restarts After The Endpoint Protection Client Is Installed is set to Yes.
Disable Alternate Sources (Such
As Microsoft Windows Update,
Microsoft Windows Server Update
Services, Or UNC Shares) For The
Initial Definition Update On Client
Computers
After you install the Endpoint Protection client, it will connect imme-
diately to a source and update its antimalware signatures. The default
setting is Yes.
If you set this to Yes, the initial update of the antimalware signatures
from a remote source is disabled. In this case, only Configuration
Manager provides the initial update to client computers. This setting
helps avoid unnecessary network connections to remote locations such
as the Internet and can reduce network bandwidth during the initial
installation.
Setting this option to No allows the client to update the antimalware
signatures from a remote source after initial installation of the client.
You use an antimalware policy to control configuration settings for the Endpoint Protection
client on client computers. When you configure client settings to install Endpoint Protection
on client computers, a default client antimalware policy is applied to provide initial protection
after the installation.
