1

Could I use psexec to start a remote scan of a clients System Center Endpoint Protection ? I can't find any switches. Or Could I use System Center?

Grant
  • 17,671
  • 14
  • 69
  • 101
Benjamin Jones
  • 326
  • 1
  • 9
  • 22

1 Answers1

1

Yes, you can use whatever remote execution tool you want.

You want to run c:\program files\Microsoft Security Client\MPCmdRun.exe -Scan 0

Run it without any parameters to see all the options - you can choose what scan level (0 is default), force it to update antivirus signatures, gather files for support logs, etc.

Grant
  • 17,671
  • 14
  • 69
  • 101
  • Thanks. The only concern I have is that this .exe is for Windows defender right? Not system security end point? I need system security to run the scan please. – Benjamin Jones Jun 19 '15 at 16:41
  • @benjaminjones it is part of SCEP. The same exe is probably used in defender and security essentials because they are all based on the same code, but this is definitely part of endpoint protection. – Grant Jun 19 '15 at 16:45
  • Great thanks. Do you know how I can create a log file for the scan? .-getfile is not producing a log file. – Benjamin Jones Jun 19 '15 at 16:47