You can create custom on-demand scan client tasks to scan targeted locations and run them on a schedule to avoid impacting users.
Tip
Best practice: For information on how to create a report for completed on-demand scans (event 1203), see KB69428.
Select Menu → Client Tasks → Client Task Catalog.
From Client Task Types, select Endpoint Security Threat Prevention → Custom On-Demand Scan.
Click the name of an existing client task or click New Task.
Make sure that Custom On-Demand Scan is selected, then click OK.
Configure the settings and click Save.
Under Actions, click the Assign link, specify the computers to assign the task to, then click OK.
Click 2 Schedule to schedule the task, then click Save.
See Trellix ePO - On-prem Help for schedule information and the Client Task Assignment Builder.