Eastern Michigan University

SCEP - Frequently Asked Questions and Answers

What protection does SCEP provide?

SCEP has a feature set similar to the McAfee product including the following default settings:

  • Definition updates: automatic daily update from EMU System Center Configuration Manager (SCCM) server. If client cannot reach SCCM server for more than 36 hours, it will get definition updates directly from Microsoft.
  • Real-time protection: on. Files are scanned for malware when each file is opened by the end-user.
  • Quick scan: Mondays at 12:30 p.m. 
  • Full scan: end-users can run full scans on-demand using the endpoint client
  • Scanned items: hard drive, removable storage devices, archived files
  • CPU utilization: will not exceed 20%
  • Default actions: All severe, high or medium events are quarantined and deleted after 30 days

    SCEP Icon

    SCEP Icon

How can end-users use SCEP?

End-users can access SCEP by clicking the SCEP icon in the task bar. End-users can run manual updates and manual scans, but cannot change settings defined by the default group policy.

Which scan type should I use for manual scans?

  • Quick Scans are intended to scan areas where viruses and malware are typically found.
  • Full Scans are in-depth scans that checks all files on all hard drives and connected removable devices such as USB based storage.
  • Custom scans allow the end-user to select what will be scanned.

Is SCEP available for home use or for use on personally owned devices?

EMU is not licensed to distribute SCEP for personal use. However, Microsoft Security Essentials is a similar product and is available free for home use for common desktop operating systems. Please note that Windows 8 and 8.1 do not require a separate download because Windows Defender is built into that version of the operating system. More information is available directly from Microsoft at:

http://windows.microsoft.com/en-us/windows/security-essentials-download


What is Microsoft System Center Configuration Manager (SCCM)?

Microsoft provides the System Center Configuration Manager (SCCM) to allow enterprises to more efficiently manage large numbers of Windows desktops using a group policy approach. In addition to the anti-mallware updates that EMU is using the product to deliver, the system can also be used to mange operating system updates to Windows desktops. EMU will not use this tool to manage OS updates in the foreseeable future.


Does this update affect my privacy?

No. The system works similarly to the prior McAfee system. The only data reported back is malware infection and remediation reporting to the central system. This data is used to determine if additional remediation is required and also to report infection/remediation statistics to the University community. No personally identifiable shall be released via this change.


IT Staff value our own privacy and respect the privacy of others. In addition, IT staff members are bound by IT policy 7.3 "Privacy and Monitoring of Electronically-Stored Records" to limit their access to the personal or private files of faculty and staff except as explicitly permitted in policy.

There is a lot of jargon here, what does it all mean?

  • Anti-Malware - Software that is used to detect and isolate malicious software such as viruses, trojans and other computer security threats.  This term is commonly used to describe the broad spectrum of malicious software
  • Anti-Virus - Software that is used to detect and isolate computer viruses and trojans.  Anti-virus is an outmoded term and has been largely replaced by the broader term anti-malware.
  • EPO - Enterprise Policy Orchestrator (EPO) is the central management server used to manage McAfee antivirus software on desktops connected to the EMU domain.  EPO pushed malware definitions from the central server to each anti-malware client on the EMU network.  EPO is being phased out by December 15, 2014 and replaced by SCCM.
  • Malware - Malware (bad software) is a term used to describe malicious software such as viruses, trojans and other things that represent a threat to computers.   Anti-malware software defends computers against this bad software by either preventing the software from being copied to the computer or isolating/deleting the software if it is downloaded to the computer.
  • McAfee - McAfee provided the previous anti-virus product used by EMU.  The product is being phased out before December 15, 2014.
  • MEP - Microsoft Endpoint Protection (MEP) - See SCEP.  MEP is used synonymously with SCEP.
  • SCCM - Microsoft System Center Configuration manager is replacing EPO and is provided by Microsoft.  SCCM is used to distribute anti-malware software and updates to connected EMU owned desktop computers.
  • SCEP - System Center Endpoint Security (SCEP) is Microsoft's anti-malware product to protect desktop computers from viruses and other security threats.

Other Questions or Concerns?

If you have any questions or concerns please feel free to contact the IT Help Desk at it.helpdesk@emich.edu or (734)-487-2120 to have your question directed to the appropriate team member.