Greetings,

We are using SCCM 2012 R2 and have deployed Endpoint Protection to our desktops, primarily Windows 7 sp1, Enterprise. Within the SCCM console I am able to see clients that have malware, and the Endpoint Protection Remediation status.  When selecting a device, I do not have the option of deleting a quarantined file.  I can "allow this threat" or "restore files from quaratine," but not delete the quarantined file?  

Either the expectation is that I would touch each infected machine and delete the files, or I am missing something, right?  Where is my ability to delete a quarantined file?

Hi,

Thank you for your post here.

Please refer to the article below :

http://technet.microsoft.com/en-us/library/ff823832.aspx

Best Regards

Quan Gu

Thanks Quan,

Unfortunately the URL you posted is for the Endpoint Protection client, found on the workstation/end device.  While I could not find an option to delete the malware inside of the SCCM console directly, it is possible to set the file quarantine and then delete date to a shorter timeframe.  Please consider this the suggested work around.

http://technet.microsoft.com/en-us/security/jj900682.aspx

Thanks,

J