I have somehow have to use SCCM to force update on McAfee Virus Scan Ent 8.5/8.7 DAT virus definition. Downloaded the DAT/SuperDAT.exe from McAfee website, create a package & then advertised to machine collection. The switch that i used was superdatname.exe /SILENT /F but none of the machine in the collection received the advertisement. Anyone here have the same experience to deploy the DAT through SCCM perhaps can share whether it is possible to be done through SCCM?---Packie

I done this with McAfee 7.x a lot. I can’t see why it would work with 8.x. What does the exec manager say? How it is being advertised to the PC? http://www.enhansoft.com/

I done this with McAfee 7.x a lot. I can’t see why it would work with 8.x. What does the exec manager say? How it is being advertised to the PC? http://www.enhansoft.com/

I done this with McAfee 7.x a lot. I can’t see why it would work with 8.x. What does the exec manager say? How it is being advertised to the PC? http://www.enhansoft.com/

I created a security Group, and then add the computers into it. Name it Group_McAfee DAT Update. Then create an advertisement to target this security group. Waited for few hours and days but none received. I then create a new collection with a direct membership and add computer to it. After a few minutes, it was received & installed successfully. So now the problem is solved, but why can't the advertisement work on security group this make me wonder. Package setup: Command line - sdat6255.exe /SILENT /F Program can run - Whether or not user is logged on Runs with administrative rights Runs with UNC name The others are set default For advertisement: Targeted to specific collection (Group_McAfee DAT Update), with package & program defined for McAfee Scheduled with mandatory assignment, High priority & re-run if failed previous attempt. Download content from distribution point and run locally (both) the others are set default. Why can't it targeted on the security group that I created but works on direct membership with computer name? ---Packie

It can target a security group, I do it all the time. The catch is that for PC within a Security group there are a few tricks. · You can’t target the security group itself. · You need to target PC that we within that security group. · In order to get the token associated with a PC, it need to logon to the domain. The only way a PC can logon to a domain is by rebooting. · AD System Group discovery must occur · Collection membership need to update. The whole process can take 24 hours. For users it is easier and faster. http://www.enhansoft.com/

It can target a security group, I do it all the time. The catch is that for PC within a Security group there are a few tricks. · You can’t target the security group itself. · You need to target PC that we within that security group. · In order to get the token associated with a PC, it need to logon to the domain. The only way a PC can logon to a domain is by rebooting. · AD System Group discovery must occur · Collection membership need to update. The whole process can take 24 hours. For users it is easier and faster. http://www.enhansoft.com/

· You can’t target the security group itself. ==> so i'm doing it wrong with targeting the sec. group · You need to target PC that we within that security group. ==> what u mean by this and how? · In order to get the token associated with a PC, it need to logon to the domain. The only way a PC can logon to a domain is by rebooting. · AD System Group discovery must occur · Collection membership need to update ==> got it what's the trick to not to target to security group (since it won't work), and not to put a machine as direct member? perhaps doing a query for collection will it work no? ---Packie

This is what the WQL should look like. http://smsug.ca/blogs/garth_jones/archive/2011/02/13/list-pcs-within-a-security-group.aspxhttp://www.enhansoft.com/

Yes, the membership based on query helps. Less than 30 mins, the computer start to receive the new policy & program advertisement. so I guess, it's just can't read membership based on security group to target a collection of computers. Many thanks, Jones :)---Packie