Hello,

does a client report back non-compliant when a scheduled scan for risks will be canceled by the user or a system reboot?

When is a SCEP client in a SCCM environment compliant?

Thanks for the help.

Michael

Hi,

You could check the report Computer Malware Details.

For more information, please review the link below:

Configuration Items and Baselines, Example: SCEP Client Compliance

http://blog.coretech.dk/heh/configuration-items-and-baselines-example-scep-client-compliance/

Note: Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.

Thanks for the reply,

As I thought I have to create an extra Config item and a baseline to determine if the last client scan for risks was run completely and not canceled by user or system reboot and if last successful full-scan is older than two weeks the client is not compliant.