SCCM 1610 and Server 2016 AntiVirus

[glenimp617]

Hi Everyone,

What's everyone doing about managing AV on Server 2016?

Do I assume we keep the onboard windows defender and manage through policies, or have they updated endpoint?

Thanks!!

 

[glenimp617]

Hi all,

Thought I'd share my findings after messing about over the past few days.

Server 2016 no longer uses endpoint, it's the onboard windows defender. SCCM can manage it but you need to be on the latest version (1610). You need to add in the windows defender product to your software update sync and include it in your endpoint auto deployment policy.

There are a few gotchas though which not many people tell you about. In order for it to work, both Windows 10, Sever 2016 and the SCCM server need fully patching. There are bugs which MS have only just fixed. Also, if your SCCM server is running on 2008 or 2012 you also need to manually download the hotfixes for WSUS.

 

[glenimp617]

Yep, that's what we're doing. The endpoint policies work just the same. I assume windows defender is actually endpoint just under a new name.