

I can't expand the pilot group without knowing that updates will work though.

I hope to get this out to end-users within the next month or two, to match our license expiration from Symantec. I tried reviewing the EndpointProtectionAgent.log file but I didn't see any errors that looked relevant.Īny suggestions on how I can troubleshoot this? So far I only have a pilot group of my IT staff and a few test machines. In the anti-malware policy, all update sources are selected but the primary source is Configuration Manager. I created a automatic deployment rule to download "Forefront Endpoint Protection 2010" "Definition Updates" every 8 hours to a new UNC network share that is readable by "everyone" and set: "automatically deploy all software updates found by this rule, and approve any license agreements." I selected "run the rule after any software update point synchronization." I set the Software Update scan schedule to every 8 hours. I also created a custom client device setting to install SCEP and check for updates every 8 hours. I created a custom anti-malware policy and deployed it to my pilot group. WSUS 3.0 is also installed on the SCEP host, but no machines are pointed to it. I have a separate WSUS machine set up that is working well, so I haven't touched it. All roles are installed on a single SCCM machine, except the SQL server piece. I believe that they are receiving the updates from Microsoft Update/Windows, not from my SCCM machine, although I am not sure how to verify. They seem to go about 1 week without updates, and then they update themselves. This is a smallish install of about 250 machines.Ĭlient deployment is going well, but I can't get my clients to receive the definitions updates. We are switching to SCEP from Symantec Endpoint Protection. As a general rule, if someone has flair, they almost definitely know what they're talking about.

Flair is reserved for Microsoft employees and MVPs.System Center Configuration Manager and Endpoint Protection.Listing of Local ConfigMgr-related User Groups (largely outdated) URL shorteners cause this almost every time, but so do strings of apparent gibberish like WSUS and PXE sometimes. It might have been caught by the spam filter. Post your SCCM tips and tricks, requests for help, or links others might find useful! Post not showing up?
