We recently upgraded to SCCM 2012 including SCEP. Now that we are rolling out to all computers people are complaining that the scans are causing PC issues. The SCANS are taking too long to complete, 8-10 hours is commonly seen. Also the CPU spikes for the msmpeng.exe process going well over our 30% limit set. On my laptop it gets over 70% just for that process.
Our environment consists of many laptops which get shut down and taken home, so scanning after hours would not work in our environment. we have the scans kicking off at 11:00 during lunch to minimize impact, but they are running for so long that they won't even finish before the user leaves for the day. This then causes the scan to pick back up on following days since it never finished. this obviously causes more issues for the users.
We are coming from Symantec EP which was working extremely well with no user complaints. One main issue is that the icon shows when it is scanning alerting the users. I do not see a way to hide the icon during scans.