Microsoft System Center Endpoint Protection Cookbook - Second Edition

Configuring alerts for Endpoint Protection in Configuration Manager

You need properly configured alerts that give you exactly what you need to know, especially when it comes to monitoring an antimalware product.

I would think that you don't want emails every minute about all the malware found on every machine in your corporation, so configure it more intelligently and distinguish who needs what information.

For example, an IT Manager might prefer to only get email alerts if there were to be a critical matter like an outbreak on the network, or if, say, the Configuration Manager client check and remediation fails on a certain percentage of all clients. This is important because it's the Configuration Manager client that will be forwarding the alerting ...