Invoke-CMEndpointProtectionScan

Invokes a scan to detect malware on one or more devices in the Configuration Manager hierarchy.

Syntax

Invoke-CMEndpointProtectionScan
      [-Confirm]
      -Device <IResultObject>
      [-DisableWildcardHandling]
      [-ForceWildcardHandling]
      [-ScanType <ScanType>]
      [-WhatIf]
      [<CommonParameters>]
Invoke-CMEndpointProtectionScan [-Confirm] -DeviceCollection  [-DisableWildcardHandling]
 [-ForceWildcardHandling] [-ScanType ] [-WhatIf] []
Invoke-CMEndpointProtectionScan [-Confirm] -DeviceCollectionId  [-DisableWildcardHandling]
 [-ForceWildcardHandling] [-ScanType ] [-WhatIf] []
Invoke-CMEndpointProtectionScan [-Confirm] -DeviceCollectionName  [-DisableWildcardHandling]
 [-ForceWildcardHandling] [-ScanType ] [-WhatIf] []
Invoke-CMEndpointProtectionScan [-Confirm] -DeviceId  [-DisableWildcardHandling]
 [-ForceWildcardHandling] [-ScanType ] [-WhatIf] []
Invoke-CMEndpointProtectionScan [-Confirm] -DeviceName  [-DisableWildcardHandling]
 [-ForceWildcardHandling] [-ScanType ] [-WhatIf] []

Description

The Invoke-CMEndpointProtectionScan cmdlet invokes a System Center 2016 Endpoint Protection scan that is outside of any scheduled scans. You can specify the device or collection by using its name, ID, or by specifying an object that represents the device or collection.

For more information about how Configuration Manager supports Endpoint Protection, see Endpoint Protection in Configuration Manager on TechNet.

Examples

Example 1: Invoke a full Endpoint Protection scan

PS C:\>Invoke-CMEndpointProtectionScan -DeviceName "CMCEN-DIST02" -ScanType Full

This command invokes a full Endpoint Protection scan of the device named CMCEN-DIST02.

Required Parameters

-Device

Specifies the device that is scanned for malware.

Type:IResultObject
Required:True
Position:Named
Default value:None
Accept pipeline input:True (ByValue)
Accept wildcard characters:False
-DeviceCollection

Specifies an object that represents a device collection whose members are scanned for malware.

Type:IResultObject
Required:True
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-DeviceCollectionId

Specifies the ID of a device collection whose members are scanned for malware.

Type:String
Required:True
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-DeviceCollectionName

Specifies the name of a device collection whose members are scanned for malware.

Type:String
Required:True
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-DeviceId

Specifies the ID of a device that is scanned for malware.

Type:String
Aliases:ResourceID
Required:True
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-DeviceName

Specifies the name of a device that is scanned for malware.

Type:String
Aliases:Name
Required:True
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False

Optional Parameters

-Confirm

Prompts you for confirmation before running the cmdlet.

Type:SwitchParameter
Aliases:cf
Required:False
Position:Named
Default value:False
Accept pipeline input:False
Accept wildcard characters:False
-DisableWildcardHandling

Indicates that wildcard handling is disabled.

Type:SwitchParameter
Required:False
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-ForceWildcardHandling

Indicates that wildcard handling is enabled.

Type:SwitchParameter
Required:False
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-ScanType

Specifies a full or a quick scan. A full scan looks at every location on the device. A quick scan looks at only those locations where malware is most likely to appear. The acceptable values for this parameter are: Full and Quick.

Type:ScanType
Parameter Sets:Full, Quick
Required:False
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-WhatIf

Shows what would happen if the cmdlet runs. The cmdlet is not run.

Type:SwitchParameter
Aliases:wi
Required:False
Position:Named
Default value:False
Accept pipeline input:False
Accept wildcard characters:False