SCCM 2012 R2 and SP1 February 2015 anti-malware platform update for Endpoint Protection Clients


If you’re on SCCM 2012 R2 or SP1, you’ll have noticed (depending on your WSUS sync schedule) a new version of SCEP that became available this week.

We’re now on version

The update contains the following improvements:

The following configuration settings are updated in the ADMX templates:

  • DisableAutoExclusions
  • SubmitSamplesConsent
  • UILockdown
  • Improvements to registry and file system protection to counter tampering from malware.
  • Sub-mount points can be automatically excluded, and volumes can be fully excluded in Real time protection (RTP).
  • This update also includes the deprecation of the DisableGenericReports subkey in the following registry location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows Defender\Reporting

NOTE: You need to be on at least CU1 of SCCM 2012 R2 or CU 5 for SCCM 2012 SP1.

Please refer to this link (where I got the info from for this post)


Heinrich Pelser


Recent Posts

Comments are closed.
%d bloggers like this: