Endpoint Protection

I have a Full Scan scheduled every weekend for all laptops and desktop computers.  It runs fine on the desktops but many laptops are turned off and taken home over the weekend.  I want the laptops to still run a full scan when they are turned back on but I don't want every laptop launching a full scan at 8:00 am Monday morning. 

Without creating separate groups for different sets of computers, is there anyway to randomize when this Full Scan will take place?

Nope. The policies are configured at the group level. You cant set them directly for machines.

*Edited: Though you can use Location awareness to switch.

J

We were up against the same problem.  There is no good time to do a full system scan.  The way we have remidied the problem was to only run the full scan once a month at around 8:00 pm.  Then run a daily active scan and enable real time scanning.  We have also given the user the ability to pause or snooze their scan for up to 6 hours, ( 3 hours at a time x2) this way they can let it run while they are at lunch.  Also, if you add the exclusions recommended by M$ the scans only take about an hour.  And the throtling works now too.

Some things to try, because logging in and seeing a scan drag your system to a crawl in the morning is not how you want you end users to start their day.  But if they have to, allow them to pause it.  The feedback we got was that it is better than nothing and they understand why the scans have to take place.

D

 What we do is to do this at lunch time. This way, atleast someload on the user experience is taken off. You cant o this after office hours as you need keep machines on and that takes a lot of power consumption too. 

We have taken quite a bit of flak for CPU usage, bu there's nothing you can do about it other than lessen employee's pain by doing this at lunch