The title of this section refers to an SCCM client's default settings that pertain to SCEP. These settings cover things, such as the installation of SCEP clients, and whether the existing AV client will be removed to make way for SCEP. Keep in mind, this is different from your default SCEP policy, which controls things such as scan times and custom exclusions.
One important thing to remember is that the baseline Default Client Settings policy will be enforced on every system in your SCCM environment, so exercise caution when modifying this policy. Let's say, for example, that you were to change the Install Endpoint Protection client on client computers setting to True. This would result in SCEP being automatically installed on every computer on your network with an SCCM 2012 client. For this reason, this recipe will walk you through the process of creating a Custom Client Device Settings policy and enforcing it on a collection for just a subset of your...