We already have PBA being bypassed until the end of the year in policy on all these devices, so that part is irrelevant for us. We have contact with them via SCCM whether they are connected to VPN or not, and the KB seems to indicate specifically that it is possible with SCCM, but I don't see a way to use an ISO image in SCCM and give the setup.exe command line arguments as we need to?

Since most of our users are now remote with their laptops at home, we are trying to figure out a way we can do this remotely without having to decrypt all these devices first. In the past, a desktop tech would have to physically obtain the device, copy the Windows ISO, enable the PBA bypass and run the setup.exe with the appropriate command line switches as shown in KB8900: McAfee pop up - posted in Windows 10 Support: I keep getting a McAfee popup when first starting my Edge browser, advising me to fix problems which obviously have to pay for. We use SCCM to deploy in-place OS upgrades but these fail on encrypted devices. Introduction to Endpoint Upgrade Assistant is a free product from McAfee that allows McAfee ePolicy Orchestrator (McAfee ePO) customers to validate if managed endpoints, including those with McAfee DLP Endpoint, need to be updated for upcoming Microsoft Windows releases. 270 People Learned More Courses View Course - McAfee ESM. ePO server system: See the installation guide for your version of ePO. We are trying to figure out a way to do this while keeping the device encrypted. Windows 10 compatibility with McAfee products Learn which version of DLP is supported on your Windows platform. Endpoint Protection Platforms (EPP) MVISION EDR supports the following endpoint protection platforms only on Windows 10 64 bits: McAfee Endpoint Security 10.7 or later. We have encrypted remote devices that we need to begin upgrading to Windows 10 feature update 1909.

Mcafee windows 10 support