Endpoint Services, SCCM, Endpoint Protection reports and status


This article provides an overview of the System Center Endpoint Protection reports and status in SCCM Current Branch. This assumes the 'Endpoint Protection' client settings have been deployed to a collection.


  • System Center Configuration Manager (SCCM) Current Branch

Intended Audience

  • University of Illinois IT Pros leveraging Technology Services Endpoint Service SCCM Current Branch


  • Review this guide by Microsoft on how to monitor Endpoint Protection status
  • Follow these steps to view and subscribe to Endpoint Protection reports
    • Navigate to Monitoring --> Reporting --> Reports --> Endpoint Protection
    • Select 'Run' or 'Run in Browser' for one of the available reports, and fill in the requested values
    • Some reports offer interactive links that provide more details
    • To subscribe, select 'Create Subscription' and follow this guide by Microsoft
  • Follow these steps to view the current Endpoint Protection status of your collections
    • Navigate to Monitoring --> Security --> Endpoint Protection Status
    • Select 'System Center Endpoint Protection Status', and then select a collection
      • Many of the statuses and the bar graphs are interactive; click on these for more details
    • Select 'Malware Detected' for a list of recorded malware infections in your collections
      • Sort by the 'Remediation Pending' and 'Remediation Failed' columns to identify endpoints that may require further action
      • Selecting 'View infected clients' for a malware threat will open a temporary node in 'Assets and Compliance'

Contact the EPS team

Keywords:SCCM, SCEP, "Endpoint Protection", malware EPS SCCM windows endpoint TechS-EPS-SCCM MECM   Doc ID:80990
Owner:EPS Distribution List .Group:University of Illinois Technology Services
Created:2018-03-19 12:09 CDTUpdated:2020-03-16 16:17 CDT
Sites:University of Illinois Technology Services
Feedback:  0   0