Kind of at a loss since the endpoint protection point role is not installed....
Sent from my Windows Phone ________________________________ From: sudheer bangera<mailto:[email protected]> Sent: 2/26/2016 12:51 PM To: [email protected]<mailto:[email protected]> Subject: Re: [mssms] SCEP unintentionally installed after upgrading to SCCM 1511 Hello Jeff Yes SCEP client interface is available on client systems. ThanksSudheer On Friday, 26 February 2016 12:36 PM, Jeff Poling <[email protected]> wrote: Is the SCEP client interface actually available on systems in the environment? Jeff Sent from my Windows PhoneFrom:Linkey, Mike Sent:2/26/2016 12:34 PM To:[email protected] Subject:RE: [mssms] SCEP unintentionally installed after upgrading to SCCM 1511 #yiv3224091024 #yiv3224091024 --p.yiv3224091024x_MsoNormal, #yiv3224091024 li.yiv3224091024x_MsoNormal, #yiv3224091024 div.yiv3224091024x_MsoNormal {margin:0in;margin-bottom:.0001pt;font-size:12.0pt;}#yiv3224091024 span.yiv3224091024x_MsoHyperlink {color:#0563C1;text-decoration:underline;}#yiv3224091024 span.yiv3224091024x_MsoHyperlinkFollowed {color:#954F72;text-decoration:underline;}#yiv3224091024 p.yiv3224091024x_msonormal0, #yiv3224091024 li.yiv3224091024x_msonormal0, #yiv3224091024 div.yiv3224091024x_msonormal0 {margin-right:0in;margin-left:0in;font-size:12.0pt;}#yiv3224091024 span.yiv3224091024x_EmailStyle18 {color:#1F497D;}#yiv3224091024 .yiv3224091024x_MsoChpDefault {font-size:10.0pt;}#yiv3224091024 div.yiv3224091024x_WordSection1 {}#yiv3224091024 I would check out your client settings after the upgrade. Something may have gotten enabled there. From: [email protected] [mailto:[email protected]]On Behalf Of sudheer bangera Sent: Friday, February 26, 2016 12:14 PM To: [email protected] Subject: [mssms] SCEP unintentionally installed after upgrading to SCCM 1511 Hello Folks Has anyone encountered a scenario where SCEP unintentionally got installed on all clients after upgrading from 2012 R2 SP1 CU1 to 1511 despite automatic client upgrade turned off? Here is our environment/scenario:1. Standalone Primary with around 12,000+ client. Endpoint Protection point role NOT enabled since we use McAfee. 2. Automatic SCCM client upgrade NOT enabled. 3. 1511 client was pushed using Package/Program model to only 50 client for pilot testing after 1511 upgrade; Still ALL clients (PC/Servers) have got Endpoint Protection and in the process uninstalled McAfee Agent and Mcafee Virus Scan Enterprise. 4. "Endpoint Protection" in Default client settings is grayed out and the setting "Install Endpoint protection client on Client computer" is NO. I assume "Endpoint Protection" in Default client settings is grayed out because the Endpoint Protection point role is not installed. 5. No other client settings have Endpoint Protection turned on. Resultant Client settings for client says "Install Endpoint protection client on Client computer" is NO. On the client, we see the following registry that indicates that the client has received the Default client Antimalware Policy.HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CCM\EPAgent"StateEventMessage"="The operation completed successfully.""LastAppliedPolicyName"="Default Client Antimalware Policy" ThanksSudheer
