EEDK for On-Demand Scan

[suryasagar]

Hello,

Every time the scheduled ODS runs, the users face issue while logging into the application. There is no specific downtime for the ODS to run as users would be logged in 24/7. So, need to run the ODS scan when there are no users logged in(or less users logged). Is there a way, the ODS can be paused when there is a (or two)user logged in? The script must probe at frequent intervals to check for user log-in and then resume when there are no users logged in. Please let me know if there could be any challenges by implementing this.

Trellix Endpoint Security

[AbhayDogra]

Hi @suryasagar , 

You can use the option (Scan only when the system is idle) in the ODS policy. But please note this may cause an increased scan time. Because When this option is enabled, Threat Prevention pauses the scan when it detects disk or user activity, such as access using the keyboard or mouse. Threat Prevention resumes the scan when the user hasn't accessed the system for three minutes.

You can refer the product guide below 
Best practices: Reducing the impact of on-demand scans on users on a client system
https://docs.trellix.com/bundle/endpoint-security-10.6.0-threat-prevention-client-product-guide-wind....

Was my reply helpful?

If you find this post useful, Please give it a Kudos! Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!

[suryasagar]

Thank you for the reply!

However, I'm looking for a little more flexibility in terms of when the scan should pause. The criteria that the scan pauses when the users login is one such use case. If there is a package that can be developed, then it will be more useful. Any help with regards to this would be very much appreciated.