
You've got a few options here, so let's discuss what they actually do. You could have quite a few Antimalware policies, but I'll be working with the default policy in my screenshots today.Īt this point, those who are familiar with these settings may be ready to skip ahead. If you're not familiar with this, navigate to Assets and Compliance, Endpoint Protection, Antimalware Policies.
FORCE INSTALL SYSTEM CENTER ENDPOINT PROTECTION INSTALL
What happens if the CM Software Update Agent fails to install definitions? What happens if the end user forces an update by pressing the update button in the SCEP user interface? In these situations, we'll need to better understand the setting for definition update sources in the Antimalware Policy. Make Updates Available Outside of Configuration Manager This will certainly get the updates deployed, but there is more to consider. In my observations, the most common solution that administrators use is to create an ADR (see below) and let it run on a schedule: If your company has deployed or is planning to deploy SCEP, you will certainly have to plan to deploy definition updates. Escalation Engineer, for helping me with this blog. Huge thanks to my colleague Jeramy Skidmore, Sr. For my first blog, I want to introduce you to updating System Center Endpoint Protection (SCEP) definition updates. Hi everyone, my name is Nicholas Jones, Premier Field Engineer with Microsoft, specializing in System Center Configuration Manager. First published on TechNet on Jul 18, 2016
