Hi,

I'm new to SCCM 2012. I recently started deploying the Endpoint  Protection to all of clients (Windos 7 and XP Pro). 

I've noticed that some clients have not been updating their initial definitions after the Endpoint Protection Software is installed. 

Since they are not updating their detonation the client remains unprotected with the status icon in red.

The odd thing is that some of our computers do the initial update just fine while others are effected. 

Also if I click update manually then the update goes through no issue, but with 100+ clients not updated its not something I want to do manually. 

The clients are set to receive auto updates via a auto deployment rule. 

Also the antimalware policy is set to do updates as well in this order: 

• Config Mgr
• WSUS
• Microsoft Malware Protection Center
• Microsoft Update

Has anyone seen this before? 

If I need to upload any specific logs just let me know. 

Many Thanks

Do you have Software update configured (and working) thru ConfigMgr or using a standalone WSUS?

Software Update is set up to use ConfigMgr
. 

I assume it must be working since I am getting some clients that update
. 

The Primary Site Server/Config Mgr has the following Roles
.

My Secondary Server only has the Distribution Point role
.   

• Edited by KBoatswa Friday, March 15, 2013 7:25 PM

Yes, I know this is an old post, but Im trying to clean them up. Did you solve this problem, if so what was the solution?

Since no one has answer this post, I recommend opening  a support case with CSS as they can work with you to solve this problem.