In my report on SCCM 2012 for "Antimalware overall status and history". the section for "Definition status on computers" is showing 50% of my machines have definitions from 1-3 days old.  How to I get these machines to be more current. going through the list, most are on the past 3 days. 

Thanks

Pat

What are the settings for the ADR that downloads and deploys the definitions? What is the schedule for SUP synchronization? Also, what are the antimalware policy settings for when clients check for updates?

Jeff

ADR

Software Updates

"Property Filters\Search Criteria"

Date Released or Revised = Last 1 Month

Product = ForeFront Endpoint Protection 2010

Superseded = No

Update Classification = Definition updates

Deployment Schedule

AS soon As possible for both options

Download Settings

"Download Software Updates from distribution point and install

I'm showing the update for today in "All Software Updates"

Definition Update for Microsoft Endpoint Protection - KB2461484 (Definition 1.199.2805.0)

Date revised: Wednesday, June 17, 2015

Definitions updates are every 4 hours in my policy.

Hi,

Have you checked the clients that if they got the latest definition updates? (Update tab on SCEP)

Best Regards,

Joyce

no they are not, my machine is showing last updated on June 15th, how do I fix that. I'm seeing the latest definition in the SUP

my clients were pointing to my current WSUS server, had to remove the GPO.

• Marked as answer by PDunn001 13 hours 55 minutes ago