What is your source order? Why not just put Microsoft Update as the top source? We have ours set like below. We opened a ticket with Microsoft for a similar issue and after conferring with them, they suggested we let the clients update directly from Microsoft rather than getting updates from WSUS/ConfigMgr. We're only 2500 clients though so maybe that's not ideal from a bandwidth perspective if, for example, you have 10x that...
[cid:[email protected]] From: [email protected] [mailto:[email protected]] On Behalf Of Murray, Mike Sent: Monday, October 10, 2016 4:29 PM To: [email protected] Subject: [mssms] RE: Endpoint client definitions not updating regularly I think this may be it. We had Forefront Endpoint Protection 2010 selected, but not Windows Defender in our ADR. Hoping the new settings below do the trick. Thanks! [cid:[email protected]] From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Nemec, Dale Sent: Monday, October 10, 2016 10:42 AM To: [email protected]<mailto:[email protected]> Subject: [mssms] RE: Endpoint client definitions not updating regularly Mike, Look at your ADR. Last month we had to add in the Windows Defender updates for Windows 10 since the Definition files appear to have been split based on OS type. Win7/8.1 get one set of files, Win10 gets another set. Our Definition package size also grew about 3 times its previous size after we added in the Win10 Definition set to the ADR. Dale Nemec | Global Architecture & Technology Ops (ESS) | Tektronix From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Murray, Mike Sent: Monday, October 10, 2016 9:13 AM To: [email protected]<mailto:[email protected]> Subject: [mssms] Endpoint client definitions not updating regularly We have our Endpoint Protection settings to check for updates every 8 hours, but many clients that are online are 2, 3, even 5 days out of date. I've verified the definition updates are being downloaded and set to deploy. I've verified our ADR is deployed to All Systems. This is a big concern - we're trying to move from McAfee ePO to EP, but if our clients are this far out of date it's not good. Looking at our settings, clients *should* be updating at least a couple times a day. Any input is appreciated! [cid:[email protected]] Best Regards, Mike Murray Desktop Engineer/IT Consultant - IT Support Services California State University, Chico 530.898.4357 [email protected]<mailto:[email protected]> Remember, Chico State will NEVER ask you for your password via email! For more information about recognizing phishing scam emails go to: http://www.csuchico.edu/isec/basics/spam-and-phishing.shtml Please be advised that this email may contain confidential information. If you are not the intended recipient, please notify us by email by replying to the sender and delete this message. The sender disclaims that the content of this email constitutes an offer to enter into, or the acceptance of, any agreement; provided that the foregoing does not invalidate the binding effect of any digital or other electronic reproduction of a manual signature that is included in any attachment. ________________________________ Confidentiality Notice: This e-mail is intended only for the addressee named above. It contains information that is privileged, confidential or otherwise protected from use and disclosure. If you are not the intended recipient, you are hereby notified that any review, disclosure, copying, or dissemination of this transmission, or taking of any action in reliance on its contents, or other use is strictly prohibited. If you have received this transmission in error, please reply to the sender listed above immediately and permanently delete this message from your inbox. Thank you for your cooperation.
