disable symantec endpoint protection service

As documented in Microsoft Defender Antivirus compatibility , 'If your organization's endpoints and devices are protected with a non-Microsoft antivirus/antimalware solution, and Microsoft Defender ATP is not used, then Microsoft Defender Antivirus automatically goes into disabled mode'. CcmEval 10:56:03 AM 39032 (0x9878)Īttempting to change service status for service 'WinDefend' to 'Running'. In the computers that failed, I did find this in the ccmevalĮvaluating health check rule : Verify/Remediate Antimalware service status for Windows 10 or up. I then changed the setting to 'Yes' and 24 hours later, all the computers but 1 are back to 'Failed Client Check'. Within 24 hours, 75% of the test computers successfully passed client check. I created a new client setting policy under Administration> Client settings that was deployed to the 15 computers with 'NO' to Manage Endpoint Protection Client on client Computers. They were all Client Check=Failed in Client status> Client check. I created a new collection of 15 computers.

There is also a policy set for endpoint protection under Administration> Client Settings>Īs a test.There is a Desktop Policy under Assets and Compliance>Endpoint Protection>Antimalware policies.We do have 'endpoint protection point' configured under Site system Roles.We currently use Crowdstrike as our primary endpoint protection, however they still want Windows Defender in the event crowdstrike fails and defender would be the backup. It looks like it is failing the CcmEval task.

Disable symantec endpoint protection service