SOLVED Default Client Settings Endpoint Protection

[rhughes]

Hello,

I am having a real issue at work, after upgrading Configuration Manager to 2303. We were previously running 2107, but after upgrading to version 2303, I have noticed that the SCCM agent is trying to install Endpoint Protection on all devices! I found this really odd as we have never enabled this before in the client settings as we use Sophos for antivirus. I had a look at the client settings and Endpoint Protection wasn't even selected... so I had a look at the Default Client settings and Endpoint Protection is is set to Yes for "Install Endpoint Protection client on client computers". This is grayed out as are all the options for Endpoint Protection.



I am going to hazard a guess and assume that this is a bug? I can't seem to find any way possible to turn this off. I had a look at my install at home, which is running version 2203 and that has the exact same problem. Has anybody else noticed this / know of a way of turning this off?

Cheers,
Richard

 

[AhmedLS]

Hello,

I am having a real issue at work, after upgrading Configuration Manager to 2303. We were previously running 2107, but after upgrading to version 2303, I have noticed that the SCCM agent is trying to install Endpoint Protection on all devices! I found this really odd as we have never enabled this before in the client settings as we use Sophos for antivirus. I had a look at the client settings and Endpoint Protection wasn't even selected... so I had a look at the Default Client settings and Endpoint Protection is is set to Yes for "Install Endpoint Protection client on client computers". This is grayed out as are all the options for Endpoint Protection.

View attachment 5402

I am going to hazard a guess and assume that this is a bug? I can't seem to find any way possible to turn this off. I had a look at my install at home, which is running version 2203 and that has the exact same problem. Has anybody else noticed this / know of a way of turning this off?

Cheers,
Richard

i dont have it greyed out. do you have the right permissions to edit this part

 

[rhughes]

i dont have it greyed out. do you have the right permissions to edit this part

Hi AhmedLS,

Thank you for getting back to me and for trying this out yourself, I really appreciate that! I have the Full Administrator security role assigned to me on Configuration Manager. I have also tried another account that also has Full Administrator on the site server VM itself and I get the same result. It's really strange, I get the same result on my install at home too on an older version of Config Manager.

 

[AhmedLS]

Hi AhmedLS,

Thank you for getting back to me and for trying this out yourself, I really appreciate that! I have the Full Administrator security role assigned to me on Configuration Manager. I have also tried another account that also has Full Administrator on the site server VM itself and I get the same result. It's really strange, I get the same result on my install at home too on an older version of Config Manager.

if you create new client settings and add only the endpoint protection. do you have it enabled or greyed out ?

 

[rhughes]

if you create new client settings and add only the endpoint protection. do you have it enabled or greyed out ?

Just tried this, all grayed out still if I go to create new client settings. I think the problem is that the first option is set to No, which normally gray's out the other options any way when set to No... but the first option is grayed out as well so I can't switch that to Yes to then change the second option to No.

 

[rhughes]

Even this article shows a screenshot of these settings grayed out like it is for me - https://www.prajwaldesai.com/configure-client-settings-in-sccm-configmgr/



Surely others have this as well, where all the options are grayed out?

 

[uberlegen]

Old post but just wanted to hear if you came right?
Did you add the Endpoint Protection Role to your Configuration Manager?

 

[M.Adams]

Hello,

I am having a real issue at work, after upgrading Configuration Manager to 2303. We were previously running 2107, but after upgrading to version 2303, I have noticed that the SCCM agent is trying to install Endpoint Protection on all devices! I found this really odd as we have never enabled this before in the client settings as we use Sophos for antivirus. I had a look at the client settings and Endpoint Protection wasn't even selected... so I had a look at the Default Client settings and Endpoint Protection is is set to Yes for "Install Endpoint Protection client on client computers". This is grayed out as are all the options for Endpoint Protection.

View attachment 5402

I am going to hazard a guess and assume that this is a bug? I can't seem to find any way possible to turn this off. I had a look at my install at home, which is running version 2203 and that has the exact same problem. Has anybody else noticed this / know of a way of turning this off?

Cheers,
Richard

I know this is a very old post, but for anyone else looking for an answer, in my case I was missing the Endpoint Protection Role https://www.prajwaldesai.com/install-endpoint-protection-role-in-sccm/ Once that was installed the client setting were available.