Symantec Endpoint Discover scans CANNOT be scheduled. Each scan must be started manually by a Enforce console user. There are several reasons for this fact:1. Endpoint Discover scans are sent to all endpoints reporting to a endpoint server. These endpoints could be scattered across the globe. A scheduled event on Discover may run at a wrong time on a endpoint somewhere else. 2. Typically Endpoint Discover is only used when administrators are needing to track a specific event or find specific data at a particular time. Endpoint Prevent is your constant real-time monitoring of activity. Thus in most cases there is no regularly planned time to be doing a scan.