Introduction

In this chapter, we will demonstrate the combined strength and flexibility of Endpoint Protection and Configuration Manager. You can target any system you want, as long as it has the client software installed with whatever policy configuration you would like. Configuration Manager will ensure that it is enforced and applied to the targeted system. But surely you can do this somewhat with other antimalware products as well, so why is this different? Because with Configuration Manager, you also have a full inventory of both hardware and software on every server and workstation, and you have integration to Active Directory as well.

All this information is put together and at your disposal in a database. This means you can target whatever you want and have it update automatically if this would make it easier to maintain. One of the huge benefits of running System Center Endpoint Protection regarding this is that it contains out-of-the-box policy for many known products such as...