Here is a package of SCEP policy templates that you can import for ConfigMgr 2012.
Import files into your SCCM 2012 console and enjoy new policies for the administration You can add the xml files in the default folder:
%ProgramFiles%\Microsoft Configuration Manager\AdminConsole\XmlStorage\EPTemplates
System Center Endpoint Protection Policy Templates.v3.zip
You have to customise exceptions for your environment.Each policy must be deployed on a dynamic collection that contains target computers (query based on checking dedicated file or service for example).


----- V1 :
SCEP Server CLUSTER.xml
SCEP Server HYPER-V.xml
SCEP Server IIS.xml
SCEP Server SCCM.xml
SCEP Server SCDPM.xml
SCEP Server SCOM.xml
SCEP Server SCSM.xml
SCEP Server SCVMM.xml
SCEP Server SHAREPOINT.xml
SCEP Server SQL.xml
SCEP Server WSUS.xml
----- V2 :
addition of QueryTargetComputers.txt
----- V3 :
addition of SCEP Server EXCHANGE.xml