Windows Defender and Symantec EndPoint Protection -- Windows 10 Pro images ?

1. Is it recommended to have both Windows Defender and
     Symantec EndPoint Protection running at the same time ?

 2. If not, how can I setup my MDT image
    so it does not deploy Windows Defender ?
-----------------------------------------------
Environment
  ** Windows Server 2012 R2 test domain
  ** Symantec EndPoint Protection deployed
       to Windows 10 Pro client via MDT image
finance_teacherAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

An Average Forum Participant Just For FunHardware Tester and DebuggerCommented:
Hello,

You cannot run both Symantec Endpoint Protection and Microsoft Windows Defender as it mistakes Symantec Endpoint Protection for malware. For this reason, Microsoft Windows Defender is disabled when Symantec Endpoint Protection is installed.

Check this Articles:

Microsoft Windows Defender service will not start after installing Symantec Endpoint Protection (SEP).

http://www.symantec.com/docs/TECH103119

Keeping Windows Defender Enabled when Deploying and Installing Symantec Endpoint Protection Client package.

https://www-secure.symantec.com/connect/articles/keeping-windows-defender-enabled-when-deploying-and-installing-symantec-endpoint-protection

I think you may want to add Symantec Endpoint Protection (SEP) as AV solution for Windows 10 and to do so, you can bring the below steps in MDT to deal with Windows Defender and to do image creation –

      1.  A step will be added to disable Windows Defender service (SC stop windefend)
      2.  A registry key will be imported as application to disable Windows Defender though registry –

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender]

"DisableAntiSpyware"=dword:00000001

"DisableRoutinelyTakingAction"=dword:00000001

SEP client will not be part of core image and will be added though SCCM TS as an application.



Other participants, please do suggest something less complicated if the above mentioned cannot be followed.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
JohnBusiness Consultant (Owner)Commented:
I disable Windows Defender via gpedit if SEP is in control.

Turn off Windows Defender in Group Policy Editor (gpedit.msc) and restart the computer after the steps below.

Group Policy Editor:
Computer configuration -> Administrative Templates -> Windows Components -> Windows Defender
Turn off Windows Defender  (set to Enabled)

Computer configuration -> Administrative Templates -> Windows Components -> Windows Defender  -> Real-time protection
Turn off Real Time Protection (set to Enabled)

OK and exit out . Default setting is Not Configured
0
McKnifeCommented:
With symantec EP deployed, defender should deactivate automatically, at least it used to.
0
JohnBusiness Consultant (Owner)Commented:
SEP (if configured properly) will disable Windows Defender real time scanning but WD will still be there. I have such a machine at a client running V1709 as of last week.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 10

From novice to tech pro — start learning today.