Install System Center Endpoint Protection (SCEP) using the SCCM Software Catalog

TGH Featured Image Wordcloud

I’ve had a few requests recently asking whether it is possible to install System Center Endpoint Protection (SCEP) during the task sequence for an operating system deployment. I’ve also been asked if it is possible to put SCEP into the Software Catalog.

Well, the answer to both questions is yes and I’ll be breaking the solution down into two blog posts, one will be how to create the SCEP software in the Software Catalog and the second will be using that application in the OSD TS.

So, this blog post will cover the creation of the SCEP application for the Software Catalog.

First thing you need to do is to gather the following two files from your SCCM server:

  • scepinstall.exe
  • ep_defaultpolicy.xml
The default location for these files are in your client source directory which is normally:
 %programfiles%Microsoft Configuration ManagerClient  
You should take a copy of these two files and put them into a source folder on your distribution server ready to be packaged into an application.

You should then go into your SCCM console and browse to Software Library > Application Management > Applications. From here, you should then click Create Application.

You will then have to create the application using the “Manually specify the application information” process:

You can then enter your own details into the information page and click next:

You can then enter your Application Catalog information details:

You then need to setup your deployment type. To do this, click the Add button:

Again, you then need to select “Manually specify the deployment type information” option and click Next:

You can then enter a name for your deployment type and click Next.

You then need to enter the content location where you earlier copied the installation files to. Once you have entered this, you need to enter the following as the installation program:

 scepinstall.exe /s /q  

You then need to enter the detection type so that the installation process can check to see if the target machine already has SCEP installed.

To do this, click the Add Clause button:

You should then select Windows Installer from the drop down menu and then enter the following Product Code:


You can then complete the wizard using your own preferences.

Once you have completed the wizard, distribute your software and you should then find that the SCEP software is now available in your Software Catalog.

If you have any questions about this process, please leave a comment.

You might also like...

Leave us a message...

This site uses Akismet to reduce spam. Learn how your comment data is processed.