SEP 11, to the best of my knowledge, does NOT allow you to schedule definition download windows to the client, only the times that the SEPM servers will download from the LiveUpdate site on the internet. How many endpoints do you have, and what is their check in (heart beat) interval ? If they are on one hour check-in to the SEPM server(s), have your SEPM download schedule stop by 10:30pm, then the latest new definition should appear to clients around 11pm, and hopefully they all update before 6am. You'll want to use a short window which will put you at one definition update per day instead of three, but makes it manageable.
I work with a LARGE client doing something similar with their SEP. On Fri, Dec 16, 2011 at 4:39 AM, Ed Ziots <[email protected]> wrote: > Well at the new gig, things are hectic, but I am learning which I feel is > a good thing. > > We have SEP setup to do a DAT update after hours starting at 11am with a > randomization of 2 hrs. We have tried both push and pull mode for the dat > update to make sure it updates after 11pm and before 6-7am in the morning, > but we are still seeing these PC's updating at times that are outside the > window of expectations. It's not a local user updating the client ( since > these are POS terminals for gas pumps) > > any ideas of what else I might be able to look at to adjust? > > EZ > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to [email protected] > with the body: unsubscribe ntsysadmin > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
