In SCCM, we have a number of handy tools we can use to force SCCM clients to run processes remotely.  For example, there are scripts, right click tools, etc that can force the SCCM client to update it's hardware policies, or scan for updates.

I'm looking for a similar model to force SCEP clients to check for definition updates.  For example, a powershell script I could run to tell the SCEP client on a remote system to check for updates against the SCCM environment.  

Anyone have something like this?

There is a default right-click option already available for devices in a collection. Right-click > Endpoint Protection > Download Definition.

Thanks Peter, I missed that one!