topic Re: Harmony endpoint - How to scan an offline device without installing the endpoint agent in Endpoint

Harmony endpoint - How to scan an offline device without installing the endpoint agent

mistercinux — Fri, 02 Jan 2026 16:00:30 GMT

Hello guys,

We receieved new computers managed by the machine manufacturer.

Those machines are isolated in separeted networks, but we can’t install the endpoint agent on them.

However, we would like to scan those machines for malicious files before connecting them to the network.

Can I do that with my harmony endpoint ?

Best ragerds,

Chris

Re: Harmony endpoint - How to scan an offline device without installing the endpoint agent

the_rock — Fri, 02 Jan 2026 16:11:46 GMT

Im fairly positive Chris that can NOT be done without harmony endpoint agent installed.

Re: Harmony endpoint - How to scan an offline device without installing the endpoint agent

mistercinux — Fri, 02 Jan 2026 16:23:03 GMT

Hi Andy

Thank you for your answer.

Are there some good recommendation / best practices we can apply in this scenario ? 

Best regards,

Chris

Re: Harmony endpoint - How to scan an offline device without installing the endpoint agent

the_rock — Fri, 02 Jan 2026 16:25:53 GMT

Never really tried this myself, but here is what I found online..

*************************************

Bootable malware scanning media (Best option)

Use a bootable AV scanner that runs outside the OS:

Microsoft Defender Offline
ESET SysRescue
Kaspersky Rescue Disk
Sophos Bootable Anti-Virus

Why this works well

No agent installation required
Scans disks before the OS loads
Ideal for air‑gapped or isolated networks

Re: Harmony endpoint - How to scan an offline device without installing the endpoint agent

lluner — Fri, 02 Jan 2026 19:15:09 GMT

@mistercinux

The only option is to use Microsoft Defender offline.

-----------AI ------------------

How to Run a Microsoft Defender Offline Scan

Open Windows Security (search for it in the Start menu or go to Settings > Privacy & security > Windows Security > Open Windows Security).
Select Virus & threat protection.
Under Current threats, click Scan options.
Choose Microsoft Defender Offline scan.
Click Scan now.
Confirm the prompt: Save any open work, as your PC will restart soon.

Re: Harmony endpoint - How to scan an offline device without installing the endpoint agent

the_rock — Fri, 02 Jan 2026 19:18:03 GMT

Definitely seems like a logical approach!

Re: Harmony endpoint - How to scan an offline device without installing the endpoint agent

lluner — Fri, 02 Jan 2026 19:28:19 GMT

@mistercinux

At this link you can download offline Windows Defender signatures.

https://www.microsoft.com/en-us/wdsi/defenderupdates

Re: Harmony endpoint - How to scan an offline device without installing the endpoint agent

the_rock — Fri, 02 Jan 2026 19:34:28 GMT

Excellent stuff @lluner

Re: Harmony endpoint - How to scan an offline device without installing the endpoint agent

lluner — Fri, 02 Jan 2026 19:40:15 GMT

You can create a package with the firewall blades and use it to allow access only to your Super Node. If you need help, I can provide more information.

1- Offline package

2- Updates via Supernode

Re: Harmony endpoint - How to scan an offline device without installing the endpoint agent

lluner — Fri, 02 Jan 2026 19:58:20 GMT

@mistercinux

an example with images

Re: Harmony endpoint - How to scan an offline device without installing the endpoint agent

mistercinux — Wed, 07 Jan 2026 10:02:44 GMT

Hello lluner,

This seem to be the good way for us.

Thank you very much for your help! 

Best regards,