If it has to change, the best way to do it is to delete the line and then use MS Service Configuration Tool to lookup the assembly and classname endpoint security engineer endpoint security client