Windows Defender and Symantec EndPoint Protection -- Windows 10 Pro images ?

1. Is it recommended to have both Windows Defender and
     Symantec EndPoint Protection running at the same time ?

 2. If not, how can I setup my MDT image
    so it does not deploy Windows Defender ?
-----------------------------------------------
Environment
  ** Windows Server 2012 R2 test domain
  ** Symantec EndPoint Protection deployed
       to Windows 10 Pro client via MDT image
finance_teacherAsked:
Who is Participating?
 
An Average Forum Participant Just For FunHardware Tester and DebuggerCommented:
Hello,

You cannot run both Symantec Endpoint Protection and Microsoft Windows Defender as it mistakes Symantec Endpoint Protection for malware. For this reason, Microsoft Windows Defender is disabled when Symantec Endpoint Protection is installed.

Check this Articles:

Microsoft Windows Defender service will not start after installing Symantec Endpoint Protection (SEP).

http://www.symantec.com/docs/TECH103119

Keeping Windows Defender Enabled when Deploying and Installing Symantec Endpoint Protection Client package.

https://www-secure.symantec.com/connect/articles/keeping-windows-defender-enabled-when-deploying-and-installing-symantec-endpoint-protection

I think you may want to add Symantec Endpoint Protection (SEP) as AV solution for Windows 10 and to do so, you can bring the below steps in MDT to deal with Windows Defender and to do image creation –

      1.  A step will be added to disable Windows Defender service (SC stop windefend)
      2.  A registry key will be imported as application to disable Windows Defender though registry –

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender]

"DisableAntiSpyware"=dword:00000001

"DisableRoutinelyTakingAction"=dword:00000001

SEP client will not be part of core image and will be added though SCCM TS as an application.



Other participants, please do suggest something less complicated if the above mentioned cannot be followed.
0
 
JohnBusiness Consultant (Owner)Commented:
I disable Windows Defender via gpedit if SEP is in control.

Turn off Windows Defender in Group Policy Editor (gpedit.msc) and restart the computer after the steps below.

Group Policy Editor:
Computer configuration -> Administrative Templates -> Windows Components -> Windows Defender
Turn off Windows Defender  (set to Enabled)

Computer configuration -> Administrative Templates -> Windows Components -> Windows Defender  -> Real-time protection
Turn off Real Time Protection (set to Enabled)

OK and exit out . Default setting is Not Configured
0
 
McKnifeCommented:
With symantec EP deployed, defender should deactivate automatically, at least it used to.
0
 
JohnBusiness Consultant (Owner)Commented:
SEP (if configured properly) will disable Windows Defender real time scanning but WD will still be there. I have such a machine at a client running V1709 as of last week.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.