Hi.

SCCM 2012 clients download scep definitions from http://download.windowsupdate.com/msdownload/update/software and not from any Site servers

I found that we have an GPO that overide Computer Configuration--Administrative Templates--Windows Components--Windows Update--Configure Automatic Update--dissable.

Found this on Technet forums.

. Run rsop.msc on your client to verify your WSUS group policy set up correctly
 .Computer Configuration--Administrative Templates--Windows Components--Windows Update--Configure Automatic Update--enable this policy and set to 4-Auto

download and install
 .Computer Configuration--Administrative Templates--Windows Components--Windows Update--Specify intranet Microsoft update service location--enable this

policy and set to http://WSUS_Server_IP:8530

http://social.technet.microsoft.com/Forums/en-US/FCSNext/thread/301938d8-144b-4314-9299-028a431b219c/

What settings would we set if any, I think the SCCM 2012 client set this so you dont need an GPO setting.

Double check the (default) client settings. You can define where the client will download the updates from. Also make sure that the definition updates are distributed to "all" DPs.

Thanks Torsten, I will check that...

You are missing the link to download offline full installer for the SCEP client. The definitions are useless without the program. AT ALL TIMES MS IS TO MAKE EASY TO FIND STAND ALONE OFFLINE INSTALLERS FOR ALL UPDATES INCLUDING SCEP. NO exceptions!!!!!!!!!!!! I need latest client, now 4.8xxxxx. Need to get it directly from MS. MS MUST GIVE OUT LINK!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! No exceptions no excuses just the link please!!!!!!!!!!!!!!!