How to install Endpoint Protection Point in SCCM 2012 R2

Benoit LecoursSCCM6 Comments

Download and own part 1 to 21 of the SCCM Installation Guide in a single PDF file.

The PDF file is a 162 pages document that contains all informations to install and configure SCCM 2012 R2 or SCCM 1511 and later (Current Branch). Use our products page or use the button below to download it .

Icon Info

This blog post applies to both SCCM 2012 R2 , SCCM 1511 and later.

In this part of SCCM 2012 and SCCM 1511 blog series, we will describe how to install SCCM 2012 R2 or SCCM 1511 Endpoint Protection Point (EPP).

Role Description

The Endpoint Protection Point provides the default settings for all antimalware policies and installs the Endpoint Protection client on the Site System server to provide a data source from which the SCCM database resolves malware IDs to names. When you install this Site System Role, you must accept the license terms for System Center 2012 R2 Endpoint Protection.

This is not a mandatory Site System but you need to install a EPP if you’re planning to use SCCM as your anti-virus management solution (using Endpoint Protection).

sccm 2012 endpoint protection point

Site System Role Placement in Hierarchy

This Site System is a hierarchy-wide option. SCCM supports a single instance of this site system role in a hierarchy and only at the top-level site in the hierarchy. It’s supported to install this role on a Central Administration Site or stand-alone Primary Site.

Requirements

Before installing the EP role, you must have a Software Update Point installed and configured.

EPP Installation

  • Open the SCCM console
  • Navigate to Administration / Site Configuration / Servers and Site System Roles
  • Right click your Site System and click Add Site System Roles
  • On the General tab, click Next

sccm 2012 install fallback status point

  • On the Proxy tab, click Next

sccm 2012 install fallback status point

  • On the Site System Role tab, select Endpoint Protection Point, click Next

sccm 2012 endpoint protection point

  • Accept the License Terms and click Next

sccm 2012 endpoint protection point

  • Select Do not join MAPS, click NEXT

sccm 2012 endpoint protection point

• On the Summary tab, review your settings and click Next

sccm 2012 endpoint protection point

  • Wait for the setup to complete and click Close

sccm 2012 endpoint protection point

SUP Configuration

After the installation, you must add Endpoint Protection definition files in your Software Update Point.

  • Open the SCCM console
  • Navigate to Administration / Site Configuration / Servers and Site System Roles
  • Click the Configure Site Components button and select Software Update Point

sccm 2012 endpoint protection point

  • On the Product tabs, check Forefront Endpoint Protection 2010 and click Ok

sccm 2012 endpoint protection point

Verification

  • ConfigMgrInstallationPath\Logs\EPSetup.log – Detailed EP Installation status

4171 (13)

  • ConfigMgrInstallationPath\Logs\Wsyncmgr.log – SUP Synchronization status

sccm 2012 endpoint protection point

You are now ready to manage EndPoint Protection using SCCM. In a future post, we will describe on to manage your anti-malware policy and definition updates.

sccm 2012 endpoint protection point

Founder of System Center Dudes. Based in Montreal, Canada, Senior Microsoft SCCM Consultant, 4 times Enterprise Mobility MVP. Working in the industry since 1999. His specialization is designing, deploying and configuring SCCM, mass deployment of Windows operating systems, Office 365 and Intunes deployments.
How to install Endpoint Protection Point in SCCM 2012 R2
5 - 2 votes

6 Comments on “How to install Endpoint Protection Point in SCCM 2012 R2”

  1. Hi Shruti,

    Thanks for your comment. I want to let you know that we actually plan to release a complete Guide for SCEP … Today!
    It will cover everything you need to know about SCEP, including anti-malware policy and the complete process of definition updates!

    I’ll reply here once up, but you can keep an eye for a new post for the guide.

    Jonathan

  2. Can you please provide me the link to this future post?
    “In a future post, we will describe on to manage your anti-malware policy and definition updates.”

    Really good work system center dudes – Thanks!

    1. Hi Shruti,
      Thanks for your comment. I want to let you know that we actually plan to release a complete Guide for SCEP … Today!
      It will cover everything you need to know about SCEP, including anti-malware policy and the complete process of definition updates!
      I’ll reply here once up, but you can keep an eye for a new post for the guide.
      Jonathan

  3. Pingback: SCCM Deploy – Post 1. Setting up VMware AD and SCCM 1511

  4. Pingback: SCCM Deploy – Post 4. Setup SCCM 2012 1511

Leave a Reply

Your email address will not be published. Required fields are marked *