Microsoft Endpoint Protection 2012 is part of a freaking awesome Microsoft System Center suite. For further info, please refer to http://en.wikipedia.org/wiki/System_Center#Microsoft_System_Center They are all fully integrated & automated Client/Server solutions that satisfy specific system administration requirements (in addition to the already excellent features provided by Windows Server). Among those, there's Microsoft Endpoint Protection 2012, which is a Client/Server Security solution that fully integrates with your Active Directory Domain. In layman's words, Microsoft Endpoint Protection 2012 could be considered as the "full" version of Microsoft Security Essentials (aka Windows Defender on Windows 8/8.1). The solution includes both a "Server" application (ie. to deploy on your application server) and a "Client" counterpart (ie. for your workstations). The hack here is the possibility to run the Client as a "standalone" product (ie. without the Server application). Not only, you can get the client "for free", by simply downloading the Trial version of the entire Microsoft Endpoint Protection 2012 suite (trial refers to the Server Application). To install System Center 2012 Endpoint Protection on Windows Server 2012 proceed as follows: Download Microsoft System Center Configuration Manager and Enpoint Protection 2012 SP1 from the following address: http://technet.microsoft.com/en-US/evalcenter/hh667640.aspx?wt.mc_id=TEC_105_1_33 Once you obtain the package (mine was named SC2012_SP1_RTM_SCCM_SCEP.exe and it was 613MB): Right Click on it and open the archive with 7zip. Extract the "CLIENT"-Folder from SC2012_SP1_RTM_SCCM_SCEP.exe into a temporary location. Browse to the CLIENT folder with Windows Explorer and run "SCEPINSTALL.exe". Follow the installer Prompts and you'll end up with a fully featured Security Solution courtesy of Microsoft.