Hello, I am 100% self taught with the Endpoint Security 81.30 (what we are running currently) on our endpoints. I have downloaded the deployment packages for both the desktops and laptops we have after selecting the blades that we want to run. Desktops do not have the VPN client packages in the EPS.msi file. I deploy with SCCM to the desktops without issue. Shortly after the desktop wants to upgrade. 10 minutes later it has the VPN blade installed. Now I have been working with Virtual groups and deployment rules. Under the console it looks like this. I did delete some deployment rules so I may have answered my our question. Basically I have 3 SCCM deployment packages (2 EPS.msi files) that go to desktops and laptops. I don't want any thing on the console end adding or removing blades. Am I making sense? Thanks!!