One of the features that my company would find useful for automation is if the on-access scan detects a virus, an automatic full scan needs to be run.
Currently, we are doing this by creating a new Group in ePO, which has the task of an immediate scan of the system. Then setting up an automatic response that a virus is found and not handled, the computer is moved into the group. This was the only way we could do it without initiating multiple scans on the computer
Ideally, we want ENS to automatically do a full scan, without having to do manual intervention, unless the virus is not handled as part of a full scan
The only other option I can think you could possibly do, is set up a server task in ePO which would potentially run a query for systems with detection's and then run a scan on that machine but I think your option with the GPO is probably easier to be honest.
Was my reply helpful? If this information was helpful in any way, or answered your question, will you please select "Accept as Solution" in my reply, or give kudos as appropriate, so together we can help other members?