Windows 10/SCCM are working great and I'm glad that Microsoft built SCEP into Defender, but the UI is extremely limiting. We can no longer allow the clients to do simple things that we've been able to before, such as restrict the CPU usage that a scan uses. http://www.proweb-solutions.net/blog/sccm-2012-r2-sp1-windows-defender-explained/