SCCM – WQL Query for machines without Endpoint Protection installed


If you need to identify machines that have the Configuration Manager client installed but do not have the System Center Endpoint Protection client installed, then you can use the following WQL query.

More Queries

Our full range of SQL and WQL Collection queries are available here.


If you have any questions or feedback about this post, or if you would like us to create any queries for you, please go ahead and leave us a message below in the comments section and we will get back to you as quick as we can.

3 Responses

  1. askshivi says:

    I want to look for a particular version which is not installed . like check collections for workstations with system center endpoint protection where version is not

  2. Jose J.R. Esposito (@JoseEsposito_IT) says:

    Pretty sure your query shouldn’t have breaks all in it 🙂

    • tghadmin says:

      Thanks for letting us know – some of our formatting on the older posts went a bit crazy when we migrated to WordPress from Blogger. Updated now…

Leave us a message...