A collection of protection settings that are applied to collections of client computers to specify how Endpoint Protection protects them from malware and other threats, including information about the scan schedule, the types of files and folders to scan, and the actions to take when malware is detected.