Try It
Print

Inventory Antivirus Software

Copy the URL link to this section to share

The Antivirus & Antispyware page shows which Antivirus & Antispyware products are installed, not installed, and which are active. This is very helpful for AV migration projects or to help ensure compliance with your AV product installations. The page reports on both third-party and Microsoft Defender installation and activation status.

In order to populate the Antivirus & Antispyware page you must extend hardware inventory to include the AntiSpywareProduct and AntiVirusProduct WMI classes from the root\securitycenter2 namespace. This namespace only exists on Windows 10 and 11. You can only add new inventory classes from the hierarchy’s top-level server by modifying the default client settings. This option isn’t available in custom client settings.  Once imported to the default client settings the new class will become available in your custom client settings.

For more information about adding a new WMI class to Configuration Manager hardware inventory see the Add a New Class section in the How to extend hardware inventory Configuration Manager documentation page.

Skipping this step will not generate any errors however, the “Antivirus & Antispyware” page will not populate. 

Prerequisites:

  1. Hardware inventory must be enabled.
  2. Permissions to edit the default hardware inventory settings.
Step

  1. In the Configuration Manager console, go to the Administration workspace.
  2. Select the Client Settings node.
  3. Select the Default Client Settings. (Note: New classes must be added in the Default Client Settings.)
  4. On the Home tab, in the Properties group, choose Properties.
SCCM Default Client Settings
(click to enlarge)
Step

  1. In the Default Settings dialog box, choose Hardware Inventory.
  2. In the Device Settings list, select Set Classes.
SCCM Default Client Settings Set Classes
(click to enlarge)
Step

  1. In the Hardware Inventory Classes dialog box select Add.
SCCM Default Client Settings Set Classes Add
(click to enlarge)
Step

  1. In the Add Hardware Inventory Class dialog box, select Connect.
SCCM Default Client Settings HINV Connect
(click to enlarge)
Step

  1. In the Connect to Windows Management Instrumentation (WMI) dialog box, specify the name of a Windows 10 or 11 computer, specify root\SecurityCenter2 namespace and select Recursive.
  2. select Connect.
(click to enlarge)
Step

  1. In the Add Hardware Inventory Class dialog box, Select the AntiSpywareProduct and AntiVirusProduct inventory classes.
  2. Select OK.
(click to enlarge)
Step

  1. In the Hardware Inventory Classes dialog box, you might want to deselect the
  2. AntiSpywareProduct and AntiVirusProduct inventory classeses and add them to a custom client agent setting instead. Using a custom client agent setting is typically advised however it is not covered in this document. If you would like to have the monitor inventory collected using the Default Client Settings do not deselect AntiSpywareProduct and AntiVirusProduct inventory classes here. 
  3. Select OK.
(click to enlarge)
Step

  1. In the Default Settings dialog box, select OK.
SCCM Default Client Settings Ok
(click to enlarge)