1

Could I use psexec to start a remote scan of a clients System Center Endpoint Protection ? I can't find any switches. Or Could I use System Center?

1 Answer 1

1

Yes, you can use whatever remote execution tool you want.

You want to run c:\program files\Microsoft Security Client\MPCmdRun.exe -Scan 0

Run it without any parameters to see all the options - you can choose what scan level (0 is default), force it to update antivirus signatures, gather files for support logs, etc.

3
  • Thanks. The only concern I have is that this .exe is for Windows defender right? Not system security end point? I need system security to run the scan please. Jun 19, 2015 at 16:41
  • @benjaminjones it is part of SCEP. The same exe is probably used in defender and security essentials because they are all based on the same code, but this is definitely part of endpoint protection.
    – Grant
    Jun 19, 2015 at 16:45
  • Great thanks. Do you know how I can create a log file for the scan? .-getfile is not producing a log file. Jun 19, 2015 at 16:47

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .