Purpose
Monitoring the antivirus status of Windows devices is a critical part of ensuring security and compliance across your organization. SureMDM provides the flexibility to capture and display such information directly in the device grid using Custom Properties. By leveraging a simple PowerShell script, administrators can dynamically retrieve and display the name of the antivirus software running on Windows endpoints
This Article provides a step-by-step guide on how to view which Antivirus is running on a Windows device using Custom Properties.
Prerequisites
This feature is supported on Windows devices with SureMDM Agent version >= v5.19.0.
Steps
1. Log in to the SureMDM console.
2. Navigate to the Settings > Account Settings > Device Properties > Properties > Custom Device Properties.
3. Click on Add.
4. Select the Platform as Windows, enter the Key, and select the DataType as String.
5. Enable the option Retrieve Value Using Script.
6. Paste the Below PowerShell script in the script box.
Get-CimInstance -Namespace root/SecurityCenter2 -ClassName AntivirusProduct | Select-Object -ExpandProperty displayName
Note:
The option Retrieve Value Using Script will dynamically retrieve the property value using a script. Once enabled, script/commands will be run on the device to update the custom properties.
7. Select the System Context/Current Logged In user in the Execute In section
8. Select the Frequency to retrieve the value. This will run the script on the devices with the frequency of the selected time interval and will display the value on the device grid.
9. Click on Okay.
Conclusion:
Once the Custom property has been created, you can navigate to the Grid column and enable the created Custom property, which will create a column on the device grid with the given key and will show which Antivirus is running on the device by executing the script on the devices.
Need help?
CONTACT US