Windows 2016 Server Core and Windows 2019

[Glenn_Bolton]

Can anyone please clarify if ENS 10.6.1 is supported for Windows 2019 and Windows 2016 Server Core?  I came across KB82761, which is somewhat helpful, but I need clarification if both OS versions are supported using ENS 10.6.1 Policies in EPO 5.9.1? There doesn't seem to be any information regarding a standalone installation of ENS 10.6.1 on 2016 Server Core or how exclusions are managed.

Thank you.

KB82761. ENS 10.6.1 provides support for the following versions of Windows. I am primarily interested in support for Windows 2016 Server Core and Windows 2019.

Windows Server 2019 version 1809 (including Essentials, Standard, Datacenter, and Server Core Mode)

Windows Server 2016 version 18032 (including Essentials, Standard, Datacenter, and Server Core Mode)

Windows Server 2016 version 17092 (including Essentials, Standard, Datacenter, and Server Core Mode)

Windows Server 2016 version 16072 (including Essentials, Standard, Datacenter, and Server Core Mode)

[tzemva · Accepted solution]

Hi @Glenn_Bolton,

On Core Server editions you can use command-line options to deploy software.

For more informations:

Endpoint Security 10.6.x Installation Guide (ePO managed)
Product Documentation ID:   PD27564

[jess_arman · Accepted solution]

@Glenn_Bolton I can confirm, based in KB82761, that ENS 10.6.1 is supported on Windows Server 2019 and Windows Server 2016--both in Server Core mode.

Microsoft Operating System	ENS 10.5.0-10.5.2	ENS 10.5.3	ENS 10.5.4, 10.6.0	ENS 10.5.5, 10.6.1
Windows Server 2019 version 1809 (including Essentials, Standard, Datacenter, and Server Core Mode)	No	No	No	Yes
Windows Server 2016 version 18032 (including Essentials, Standard, Datacenter, and Server Core Mode)	No	No	Yes	Yes
Windows Server 2016 version 17092 (including Essentials, Standard, Datacenter, and Server Core Mode)	No	Yes	Yes	Yes
Windows Server 2016 version 16072 (including Essentials, Standard, Datacenter, and Server Core Mode)	Yes	Yes	Yes	Yes
Windows Storage Server 20162	Yes	Yes	Yes	Yes

² ENS does not disable Windows Defender on Windows Server 2016. This fact could lead to performance issues, but this possibility has not been confirmed. The best practice is to run a single real-time anti-virus solution. For updates to this issue and for instructions to manually disable Windows Defender using PowerShell, see known issue 1149046 in KB82450.


   Exclusions and other policies can be implemented at install in Core mode by using the ENS Package Designer and executing it via command line once the package is created; KB86438. If you are standalone on an iteration with GUI interface, then the policies and settings can be managed in the local ENS console. 
   If you are doing a local installation, but will have a managed McAfee Agent, then the policies would all still be managed via ePO as usual. It is supported when managed by ePO 5.3.1 and later, so yes, ePO 5.9.1 is supported and will function as long as the McAfee Agent version is 5.5.0 or later, though we'd recommend 5.6.0+ due to issues resolved in those builds.

Product	Minimum ePO Version
ENS 10.6.0-10.6.1	ePO 5.10.0 or later is recommended ePO 5.3.1 or later is the minimum

Product	Minimum MA Version
ENS 10.5.0-10.6.1	MA 5.6.0 or later is recommended MA 5.5.0 or later is the minimum

Was my reply helpful?

If this information was helpful in any way, or answered your question, will you please select "Accept as Solution" in my reply, or give kudos as appropriate, so together we can help other members?