I will advice you to use the MID (McAfee Installation Designer). With this McAfee product you can customize the VSE installation (in your case Access Protection).
Please, have a look at this:
If you are using ePO console than best option it set to ePO default VSE Access Protection policy which is applied to System Tree > My Organization.
Because after install VSE and Agent package machine will report to ePO console and in first communication it will get ePO default policies where setting (Block and Report execution of scripts from the Temp folder.) was already enabled.
Setting path :