This message was deleted.

I know some AV vendors do not disable Windows Defender. I have seen that behavior with McAfee, so you have to either uninstall Defender or disable it completely either via PowerShell or GPO

ok cheers I'm managed to pull a report from Lansweeper on all the installed TrendMicro's for out W10, even shows me the build for W10 and agent version of trend, at least now I can just email or ring some users who have slow systems, Apparently the windows defender is running on our systems but is meant to be disabled, I suspect it's not, will do some troubleshooting, just realised I could possibly run a report on active services running at the same time

Which Trend Micro product? We run Apex One here, and you'll definitely want to disable Defender as part of your process: https://success.trendmicro.com/solution/1058514-Windows-Defender-and-Apex-One-OfficeScan-compatibility#collapseOne

cool thx I believe its 14.x onwards according to the report I just ran -

Those version numbers look goofy to me. 9233 is the latest build.

ah ok in landsweeper I searched for Trend micro and it came up with 4 results seems I posted the agent version for Apex

Dunno. May be worth checking an individual box outside of that scanner, because those file versions don't line up with Trend Micro Apex One (Product Patch tab: https://downloadcenter.trendmicro.com/index.php?regs=nabu&prodid=1745)

@Nick Panaccio any chance of a screenshot where it states 9233 on your device?

Don't forget to look at this: https://docs.citrix.com/en-us/tech-zone/build/tech-papers/antivirus-best-practices.html

if using trend, not sure if DS has this, but disable behavior monitoring. it has bm in the process name.

Thx god we have lansweeper we're able to detect which machines have duel Av's installed and which are even missing AV, turns out it's a matter of Sccm not deploying and/or removing the old antivirus software so i showed the Cyber fella how to use sccm client center and psexec to remotely start winRM if needed, anyway it's not as bad now as I've shown him how to run a report in lansweeper which is very easy to use. Hopefully the slow machine issue will be resolved by forcing policy using https://github.com/rzander/sccmclictr etc - other issues preventing installation and removal were windows updates failing on our older W7 machines, might have to give him a few scripts to fix that though this tool also has some features for updates..