Hi there!

We have SCCM 2012 R2  with Endpoint Protection.

Please help build a custom report on the computers which anti-virus database older than 7 days.

Thanks to all!!!

Hi,

You can use build-in Compliance report. For example:

Compliance 8: Computers in a specific compliance status for an update:

Definition Update for Microsoft Endpoint Protection - KB2461484

He ask himself and answer:

SELECT
v_R_System.Name0 
as
 'Computer Name',
v_GS_OPERATING_SYSTEM.Caption0 
as
 'Operating System',
AntivirusSignatureUpdateDateTime

FROM
v_GS_AntimalwareHealthStatus 
INNER JOIN
v_R_System ON v_GS_AntimalwareHealthStatus.ResourceID =
v_R_System.ResourceID INNER JOIN
v_GS_OPERATING_SYSTEM ON v_R_System.ResourceID = v_GS_OPERATING_SYSTEM.ResourceID
where AntivirusSignatureUpdateDateTime < dateadd(day, -14, cast(getdate() as date))  order by AntispywareSignatureUpdateDateTime

can someone come in handy...