Endpoint Compliance Policies used to scan your hosts for compliance, have many variables for which the host can be scanned. For the anti-virus and operating system variables, you can narrow the scan by setting custom parameters. For example, when scanning for a particular operating system you can require that the operating system be at Service Pack 4 or higher.
Any parameter that you modify will no longer be updated by the Auto-Def Updates scheduled task. That task updates the list of anti-virus and operating systems for which you can scan. It also modifies parameters associated with each of those items to force hosts to use the most recent definitions for anti-virus and to have installed the latest updates to the operating system.
This section provides details about each type of variable and the detailed parameters within that can be set to narrow your scan further.