Download and own this SCCM Installation Guide in a single PDF file.

The PDF file is a 162 pages document that contains all informations to install and configure SCCM Current Branch. Use our products page or use the button below to download it .

Download


Icon Info

This blog post has been updated. Please refer to the new SCCM Current Branch Installation Guide.

In this part of SCCM 2012 and SCCM 1511 blog series, we will describe how to install SCCM 2012 R2 or SCCM 1511 Endpoint Protection Point (EPP).

Role Description

The Endpoint Protection Point provides the default settings for all antimalware policies and installs the Endpoint Protection client on the Site System server to provide a data source from which the SCCM database resolves malware IDs to names. When you install this Site System Role, you must accept the license terms for System Center 2012 R2 Endpoint Protection.

This is not a mandatory Site System but you need to install a EPP if you’re planning to use SCCM as your anti-virus management solution (using Endpoint Protection).

sccm 2012 endpoint protection point

Site System Role Placement in Hierarchy

This Site System is a hierarchy-wide option. SCCM supports a single instance of this site system role in a hierarchy and only at the top-level site in the hierarchy. It’s supported to install this role on a Central Administration Site or stand-alone Primary Site.

Requirements

Before installing the EP role, you must have a Software Update Point installed and configured.

EPP Installation

  • Open the SCCM console
  • Navigate to Administration / Site Configuration / Servers and Site System Roles
  • Right click your Site System and click Add Site System Roles
  • On the General tab, click Next

sccm 2012 install fallback status point

  • On the Proxy tab, click Next

sccm 2012 install fallback status point

  • On the Site System Role tab, select Endpoint Protection Point, click Next

sccm 2012 endpoint protection point

  • Accept the License Terms and click Next

sccm 2012 endpoint protection point

  • Select Do not join MAPS, click NEXT

sccm 2012 endpoint protection point

• On the Summary tab, review your settings and click Next

sccm 2012 endpoint protection point

  • Wait for the setup to complete and click Close

sccm 2012 endpoint protection point

SUP Configuration

After the installation, you must add Endpoint Protection definition files in your Software Update Point.

  • Open the SCCM console
  • Navigate to Administration / Site Configuration / Servers and Site System Roles
  • Click the Configure Site Components button and select Software Update Point

sccm 2012 endpoint protection point

  • On the Product tabs, check Forefront Endpoint Protection 2010 and click Ok

sccm 2012 endpoint protection point

Verification

  • ConfigMgrInstallationPath\Logs\EPSetup.log – Detailed EP Installation status

4171 (13)

  • ConfigMgrInstallationPath\Logs\Wsyncmgr.log – SUP Synchronization status

sccm 2012 endpoint protection point

You are now ready to manage EndPoint Protection using SCCM. In a future post, we will describe on to manage your anti-malware policy and definition updates.

sccm 2012 endpoint protection point

Comments (8)

Vijay

07.23.2020 AT 04:09 AM
Sorry for the below comment. The "endpoint protection" role should be in TOP level hierarchy. 🙂 I got it.

Vijay

07.23.2020 AT 03:40 AM
Hi I am unable to see the "Endpoint protection" role. Using CB1606 version. Could you please let me what might the reason.

Jonathan Lefebvre

04.07.2017 AT 08:30 AM
Hi Shruti, Thanks for your comment. I want to let you know that we actually plan to release a complete Guide for SCEP ... Today! It will cover everything you need to know about SCEP, including anti-malware policy and the complete process of definition updates! I'll reply here once up, but you can keep an eye for a new post for the guide. Jonathan

Shruti

04.07.2017 AT 02:34 AM
Can you please provide me the link to this future post? "In a future post, we will describe on to manage your anti-malware policy and definition updates." Really good work system center dudes - Thanks!

Jonathan Lefebvre

04.07.2017 AT 11:32 AM
The post is up! Hope you'll enjoy it 🙂 https://systemcenterdudes.com/sccm-endpoint-protection-guide/ Jonathan

Jonathan Lefebvre

04.07.2017 AT 08:32 AM
Hi Shruti, Thanks for your comment. I want to let you know that we actually plan to release a complete Guide for SCEP … Today! It will cover everything you need to know about SCEP, including anti-malware policy and the complete process of definition updates! I’ll reply here once up, but you can keep an eye for a new post for the guide. Jonathan