System Guide

Enabling the Endpoint Protection Point on the primary/central administration server, you might encounter this error. SCEPInstall.exe retursn 0x80070002 SMSEP could not be in stalled. The return code was -2147024894 Possible causes of this are: There are other AV software installed on the server. Remove it. Windows Defender service is not running. Ensure that it is running The account you are using does not have enough permission. Ensure that correct permission is applied. All these are must be corrected then try to enable again the EP Role. But if you are using Windows Server 2016, even though all the causes above was addressed you may still encounter the error 0x80070002, because of the built-in Windows Defender which also included a antimalware client that is preventing you to create registry entry for the SCEP client thus causing the error. SCEP Registry entry: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Security C

How to Enable Endpoint Protection Point on SCCM. In this post I will discus how to enable Endpoint Protection Point on SCCM Current Branch 1802. Enabling Endpoint Protection role in SCCM will allow you to manage antimalware policies and definition update, Windows Firewall security for you client computers in you Configuration Manager. Before installing Endpoint Protection Role, you must have the following: Working SCCM environment. Windows Server Update Services (WSUS) is enabled and configured for software updates synchronization. Software Update Point site system system must be enabled and configure to deliver definition updates if you will used Configuration Manager software update to deploy definition and engine updates. Endpoint Protection role must be install on one site system server only and at the top of the hierarchy on a Central Administration site or Stand-along primary site. To install the Endpoint Protection Role: Open Configuration Management Console