Installing Endpoint Protection Role in SCCM Current Branch 1702

In this tutorial, we will learn about Installing Endpoint Protection Role in SCCM Current Branch 1702.

Below are the few things about Endpoint protection role.
- A site system role that serve as an Endpoint Protection Point.
- Using Endpoint protection role we can deploy the System center endpoint protection client in all the managed servers and we can keep up the definitions up to date on the server using this role.

Follow the below steps to Install Endpoint Protection Role in SCCM Current Branch 1702.
In the Configuration Manager console, Click on Administration, Site Configuration, right click on Sites and click on Add Site System roles.

Machine generated alternative text:
Site Configuration
Sites
Servers and Site
Client Settings
Security
Distribution Points
Create S ite System Server
Hierarchy Settings
(Z Feedback

In Add Site System Roles Wizard, General Screen click next to proceed further.

Machine generated alternative text:
Add Site System Roles Wizard
General
General
System Role Selection
Summary
Progress
Completion
Select a server to use as a site system
Name (example server I corp contoso coml
Site code
Specfy an FdDN for this site system for use on the Intemet
Intemet FQDN (example: intemetsrv2contosocom):
Require the site server to initiate connections to this site system
After tha installation of tha sita system roles. tha sita server initiates all connections to the site system server by using the Site System
Installation Account
Site System hstallation Account
@ use tha sita serverS computer account to install this site system
C) Use another account for installing this site system
Active Directory membership
Active Directory forest
Active Directory domain
previous
Summary
Cancel

In Add Site System Roles Wizard, Proxy Screen click next to proceed further.

Machine generated alternative text:
Add Site System Roles Wizard
General
P r cry
System Role Selection
Summary
Progress
Completion
Specifry Internet proxy server
You can specify a server for this site system server to use when t connects to the Intemet
use a server when synchronzing information from the Intemet
Ste System Proxy Server Account
The Ste System Proxy Server Account provides authenticated access to the pror,' server Rhen
this ste system server connects to a location on the Intemet
Proxy server name:
use credentials to connect to the pror,' server
Previous
Next
Summary
Cancel

Select Endpoint Protection Point role, and click ok on the popup to continue.

Machine generated alternative text:
Add Site System Roles Wizard
System Role Selection
General
P r ory
System Rcle Selecticn
Summary
Progress
Completion
Specify roles for this server
Available roles
Application Catalog web service point
Application Catalog website
Asset Intelligence »mchronization point
Cetificate registration point
Endpoint Protection point
Enrollment oint
Configuration Manager
By default, Endpoint Protection uses Configuration Manager software
updates to deploy antimalware definition updates. Before you deploy
Endpoint Protection clients, ensure that you have configured software
updates in your hierarchy or configured your antimalware policies to
use an alternative definition update method.
Previous
Next

In Add Site System Roles Wizard, Endpoint Protection Screen, check the box to accept the license terms and click next to proceed further.

Machine generated alternative text:
Add Site System Roles Wizard
Endpoint Protection
General
System Role Selection
Endpcint Prctecticn
Cloud Protection Service
Summary
Progress
Completion
Endpoint Protection License Terms
Wcrosoft
Maw tha Microsoft System Center Endooint Protection Ljcense Tams
Maw tha Privacy Statement
Z] By checking this box. I acknowledge that I accept the License Terms and Privacy Statement
Previous
Next

In Add Site System Roles Wizard, Cloud Protection Service screen, select the required membership and click next to proceed further.

Machine generated alternative text:
Add Site System Roles Wizard
Cloud Protection Service
General
P roy
System Role Selection
Endpoint Protection
Cloud Protection Service
Summary
Progress
Completion
Specify Cloud Protection Service membership type
inne Cloud Protection Service membership typeyou choose will be applied to all Endpoint Protection antimalware policies Cloud
Protection Service is a noddwide online communty that includes System Center Endpoint Protection user& joining Cloud Protection
Service. System Center Endpoint Protection will automatically send information to Microsoft to help Microsoft datamine which software to
investigate for potential threats and to help improve System Center Endpoint Protactionk affectivanass This communty also helps stop
tha spread of naw malicious software infectione
You can choose to join the Cloud Protection Service community with either a Basic or Advanced The type of information that
is sent in reports to Microsoft depends on your level of Cloud Protection Service In some instances. personal Normation
might unintentionally be sent to Microsoft However. Microsoft will not use this information to identify you or to contact you
To learn more about Basic and Advanced Memberships and tre I nformatlon collected by the Reports. see the Privacy Statement
at 0=626987
C) Do not join Cloud Protection Service
@ Basic membership (on Wndows 10 and above. the behavior is the same as advanced membership)
C) Advanced membership
Previous
Next

Confirm the settings and click next to proceed further.

Machine generated alternative text:
Add Site System Roles Wizard
Summary
General
System Role Selection
Endpoint Protection
Cloud Protection Service
Summary
Progress
Completion
Confirm the settings
Create a ætfr•as:
Site System Name
• HOAFMSSCCMzfmsnet
Settings
• Public FQDN: Not specified
• Installation Account: Computer Account
• Cloud Protection Service: Basic membership
• Endpoint Protection point
Proxy Settings
Proxy wil not be enabled
To change these settings. click Previous To apply the settings. click
Previous
Next
Summary
Cancel

Click close to finish the installation.

Machine generated alternative text:
Add Site System Roles Wizard
Completion
General
P r ory
System Role Selection
Endpoint Protection
Cloud Protection Service
Summary
Progress
Ccmpleticn
The Add Site System Roles Wizard completed successfully
Create a
Succ:ess: Site System Name
• HOAFMSSCCMEfmsr,et
Succ:ess: Settings
• Public FQDN: Not specified
• Installation Account: Computer Account
• Cloud Protection Service: Basic membership
Succ:ess: Roles
• Endpoint Protection point
O
Succ:ess: Proxy Settings
Proxy will not be enabled
To exit the wizard click Close
Close

This concludes the installation of Endpoint Protection role in SCCM Current Branch 1702.

Keep Learning :)

Comments

Unable to Install SCCM Client- File C:\Windows\ccmsetup\MicrosoftPolicyPlatformSetup.Msi Error text : ExitCode: 1625

Today while troubleshooting SCCM client issue in one of the server I came across the below issue and thought of sharing with all of you. Hope it helps. Issue: Unable to Install SCCM Client getting below error in CCMSetup.log Reason: Per the below log entry, setup was failing because the installation of MicrosoftPolicyPlatformSetup.Msi failed in the backend. Resolution: To resolve the issue, we need to perform manual installation of MicrosoftPolicyPlatformSetup.Msi. To perform the installation, follow below steps: Go to C:\windows\ccmsetup\ and right click on MicrosoftPolicyPlatformSetup.Msi and run as administrator to install it manually Post installing the MicrosoftPolicyPlatformSetup.Msi, run the CCMSETUP.exe setup once again and monitor the logs to check the installation status and the log should end with ccmsetup is exiting with return code 0. Post installation you can verify the configuration manager client in control panel and it should show all the 11

Unable to transfer Schema master role from Primary Domain Controller to Additional domain controller (backup server) In Windows Server

Issue: Unable to transfer Schema master role from PDC to ADC. Symptoms: You will get below error while transferring Schema master using NTDSUTIL fsmo maintenance: seize schema master Attempting safe transfer of schema FSMO before seizure. ldap_modify_sW error 0x32(50 (Insufficient Rights). Ldap extended error message is 00002098: SecErr: DSID-0315137D, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0 Resolution: Add your user to Enterprise admin group in Active directory to resolve this issue.

Configuring Service Connection Point Role in System Center Configuration Manager 1702 Version

In Today’s guide, we will learn about Installing Service connection point role in Configuration Manager version 1702 . Using Service connection point role, we can keep the Configuration Manager up to date with latest updates. Before moving forward, we will understand about the Service Connection Point role in brief. What is Service Connection Point Role? A service connection point connects Configuration Manger to Microsoft cloud services and is used for Microsoft Intune subscription and servicing, and to update your Configuration Manager installation. This will help you in keep your Configuration Manager installation up-to date with latest updates. To install Service Connection Point Role, follow the below steps . Open Configuration Manager Console. From Workspace, Click on Administrations as shown in below screenshot In Navigation Pane – expand Site Configuration – Right click on Sites – and click on Add Site System Roles to proceed further. On General Screen, provide or

MahadevNitture

Search This Blog