I am starting to deploy System Center into our environment and we are looking at Endpoint Protection to replace McAfee. On my test systems, it appears that the Definition files are slightly out of sync with each other meaning that I have a definition number of 1.203.2586.0 as my highest and most common definition, but then I have a few that are on 1.203.2582.0 .

This is better than where they were previously, but what information is trying to be convened when I look at these definition numbers ? Is a slight spread of numbers an issue I should be worried about ? (I am assuming that because I am being aggressive about how often I check for a new definition - hourly - , I am just seeing deployments that are using slightly different definition files.)

Sean Patzer, MCSE.

I assume that your client checks hourly, which is still quite often, but are you also synchronizing with Microsoft Update that often? In other words, is your software update point also synchronizing that often to find new updates?

Thank you for pointing out my fallacy of my not having my head wrapped around all the moving parts yet.

My Sync Schedule is set for "1 Days" under the simple schedule (even though I could set it for hourly, I don't).

Sean.

Hi,

I believe updates are released up to 3 times a day, there is no set time though.

I wouldn't worry if client's are not all running the very latest version as long as they are updating within a reasonable time frame. Have a read of this post.

https://social.technet.microsoft.com/Forums/en-US/9e6f8e06-8032-4035-bed6-662fe153f86a/scep-2012-definition-updates-makes-no-sense?forum=configmanagersecurity

• Marked as answer by SeanPatzer 12 hours 22 minutes ago

Thanks, that is what I needed to at least get my head wrapped further around this subject.

Sean.