The UI on individual machines using the Security client has a check box to turn off the AMSI feature. When searching through the web console for a way to turn off/on this feature it is not controllable administratively. Support has confirmed that it is not available there. This feature being turned off has significantly improved performance on our IIS web server as well as several others. We have over 500 machines we'd like to turn this off for and currently we have to manually log in to each one to un-check the box to turn it off. It would be much better to include this in the admin control since it is a local option. Having different control options on the local machines that are not in the admin console is confusing and potentially detrimental to being able to accurately control endpoints.