Hello everyone and thanks in advance for reading this.

We use Configuration Manager 2012 with System Center Endpoint Protection (SCEP) for our antivirus on all workstations and servers. We also use Windows Software Update Services (WSUS) for update management. Is there any reason for us to subscribe to and maintain updates for Microsoft Security Essentials in our environment that uses SCEP? Does SE provide any functionality or security that is additional or complementary to SCEP?

Any help would be appreciated. Thanks much.

JW

If you're using ConfigMgr with SCEP, you do not need to activate Security Essentials related updates in WSUS. Security Essentials provides no additional or complementary functionality or security if you are already using SCEP. Security Essentials, Windows Defender, FEP 2010, and SCEP all use the same anti-malware engine. Security Essentials and Defender aren't meant for enterprise use* and can't be centrally managed like FEP and SCEP.

*This appears to be changing in Windows 10. Instead of installing a separate SCEP client, ConfigMgr will just manage the built-in Windows Defender version.

• Edited by KevinMJohnston 7 hours 57 minutes ago

If you're using ConfigMgr with SCEP, you do not need to activate Security Essentials related updates in WSUS. Security Essentials provides no additional or complementary functionality or security if you are already using SCEP. Security Essentials, Windows Defender, FEP 2010, and SCEP all use the same anti-malware engine. Security Essentials and Defender aren't meant for enterprise use* and can't be centrally managed like FEP and SCEP.

*This appears to be changing in Windows 10. Instead of installing a separate SCEP client, ConfigMgr will just manage the built-in Windows Defender version.

• Edited by KevinMJohnston Friday, June 12, 2015 11:28 PM

If you're using ConfigMgr with SCEP, you do not need to activate Security Essentials related updates in WSUS. Security Essentials provides no additional or complementary functionality or security if you are already using SCEP. Security Essentials, Windows Defender, FEP 2010, and SCEP all use the same anti-malware engine. Security Essentials and Defender aren't meant for enterprise use* and can't be centrally managed like FEP and SCEP.

*This appears to be changing in Windows 10. Instead of installing a separate SCEP client, ConfigMgr will just manage the built-in Windows Defender version.

• Edited by KevinMJohnston Friday, June 12, 2015 11:28 PM
• Proposed as answer by Joyce LMicrosoft contingent staff, Moderator 31 minutes ago

If you're using ConfigMgr with SCEP, you do not need to activate Security Essentials related updates in WSUS. Security Essentials provides no additional or complementary functionality or security if you are already using SCEP. Security Essentials, Windows Defender, FEP 2010, and SCEP all use the same anti-malware engine. Security Essentials and Defender aren't meant for enterprise use* and can't be centrally managed like FEP and SCEP.

*This appears to be changing in Windows 10. Instead of installing a separate SCEP client, ConfigMgr will just manage the built-in Windows Defender version.

• Edited by KevinMJohnston Friday, June 12, 2015 11:28 PM
• Proposed as answer by Joyce LMicrosoft contingent staff, Moderator Monday, June 15, 2015 6:43 AM

If you're using ConfigMgr with SCEP, you do not need to activate Security Essentials related updates in WSUS. Security Essentials provides no additional or complementary functionality or security if you are already using SCEP. Security Essentials, Windows Defender, FEP 2010, and SCEP all use the same anti-malware engine. Security Essentials and Defender aren't meant for enterprise use* and can't be centrally managed like FEP and SCEP.

*This appears to be changing in Windows 10. Instead of installing a separate SCEP client, ConfigMgr will just manage the built-in Windows Defender version.

• Edited by KevinMJohnston Friday, June 12, 2015 11:28 PM
• Proposed as answer by Joyce LMicrosoft contingent staff, Moderator Monday, June 15, 2015 6:43 AM
• Marked as answer by Joyce LMicrosoft contingent staff, Moderator 19 hours 37 minutes ago

If you're using ConfigMgr with SCEP, you do not need to activate Security Essentials related updates in WSUS. Security Essentials provides no additional or complementary functionality or security if you are already using SCEP. Security Essentials, Windows Defender, FEP 2010, and SCEP all use the same anti-malware engine. Security Essentials and Defender aren't meant for enterprise use* and can't be centrally managed like FEP and SCEP.

*This appears to be changing in Windows 10. Instead of installing a separate SCEP client, ConfigMgr will just manage the built-in Windows Defender version.

• Edited by KevinMJohnston Friday, June 12, 2015 11:28 PM
• Proposed as answer by Joyce LMicrosoft contingent staff, Moderator Monday, June 15, 2015 6:43 AM
• Marked as answer by Joyce LMicrosoft contingent staff, Moderator Tuesday, June 23, 2015 11:46 AM

If you're using ConfigMgr with SCEP, you do not need to activate Security Essentials related updates in WSUS. Security Essentials provides no additional or complementary functionality or security if you are already using SCEP. Security Essentials, Windows Defender, FEP 2010, and SCEP all use the same anti-malware engine. Security Essentials and Defender aren't meant for enterprise use* and can't be centrally managed like FEP and SCEP.

*This appears to be changing in Windows 10. Instead of installing a separate SCEP client, ConfigMgr will just manage the built-in Windows Defender version.

• Edited by KevinMJohnston Friday, June 12, 2015 11:28 PM
• Proposed as answer by Joyce LMicrosoft contingent staff, Moderator Monday, June 15, 2015 6:43 AM
• Marked as answer by Joyce LMicrosoft contingent staff, Moderator Tuesday, June 23, 2015 11:46 AM

In General you should only use and manage SCEP for your environment , so it gives you ability to control and manage and monitor all endpoints and clients in your company and you could deploy update for them and there is no reason to use MSE.

But if you have case that there are guest computers like consider school which students are using their own laptop and it is not manage by you but you might enable update for MSE so if their PC is running MSE, their get update faster and more efficient.

In General you should only use and manage SCEP for your environment , so it gives you ability to control and manage and monitor all endpoints and clients in your company and you could deploy update for them and there is no reason to use MSE.

But if you have case that there are guest computers like consider school which students are using their own laptop and it is not manage by you but you might enable update for MSE so if their PC is running MSE, their get update faster and more efficient.

• Marked as answer by Joyce LMicrosoft contingent staff, Moderator 19 hours 37 minutes ago

In General you should only use and manage SCEP for your environment , so it gives you ability to control and manage and monitor all endpoints and clients in your company and you could deploy update for them and there is no reason to use MSE.

But if you have case that there are guest computers like consider school which students are using their own laptop and it is not manage by you but you might enable update for MSE so if their PC is running MSE, their get update faster and more efficient.

• Marked as answer by Joyce LMicrosoft contingent staff, Moderator Tuesday, June 23, 2015 11:46 AM

In General you should only use and manage SCEP for your environment , so it gives you ability to control and manage and monitor all endpoints and clients in your company and you could deploy update for them and there is no reason to use MSE.

But if you have case that there are guest computers like consider school which students are using their own laptop and it is not manage by you but you might enable update for MSE so if their PC is running MSE, their get update faster and more efficient.

• Marked as answer by Joyce LMicrosoft contingent staff, Moderator Tuesday, June 23, 2015 11:46 AM