Search the Community

Hi guys, I wondered if someone here can provide clarity regarding update sources for the SCEP client as I've hit a brick wall this side of the wire! We have implemented the EPP role, configured AMW policies and deployed, setup ADR and tested and up until recently had no issues with SCEP or AMW update functionality. The SCEP clients are now failing to update their definitions. The updates sources, and order, are: 1. SCCM 2. Microsoft Update Clients fail to update and provide the following error: CODE: 0x8024402c MESSAGE: System Center Endpoint Protection couldn't install the definition updates because the proxy server or target server names can't be resolved. Having removed Microsoft Update from the Update Sources (as I believe there's no route to it), clients update their policies and now receive their updated definitions. When I examine the MPxxxxxx.log in ProgramData\Microsoft\Microsoft Antimalware\Support, it shows that the definitions were updated via MMPC. This causes a quandary because it isn't in the sources list. I think my question is relatively straight forward... Are the definitions being updated from SCCM but incorrectly reported as MMPC or is there a default position within SCEP 2012 whereby it checks the MMPC regardless of what the configuration is set at? Thanks, Ian.

Good afternoon, I have problem with creating something like "subselected query". I need to find which computers do not have installed Forefront Endpoint Protection. The best solution seems to be find on computer msseces.exe, because Add or remove programs was not successful for me. I created query, which show me, which computers contain msseces.exe: select SMS_R_System.NetbiosName, SMS_R_System.LastLogonUserName, SMS_G_System_SYSTEM_CONSOLE_USER.LastConsoleUse, SMS_G_System_OPERATING_SYSTEM.Version, SMS_R_System.ResourceId from SMS_R_System inner join SMS_G_System_SoftwareFile on SMS_G_System_SoftwareFile.ResourceID = SMS_R_System.ResourceId inner join SMS_G_System_SYSTEM_CONSOLE_USER on SMS_G_System_SYSTEM_CONSOLE_USER.ResourceID = SMS_R_System.ResourceId inner join SMS_G_System_OPERATING_SYSTEM on SMS_G_System_OPERATING_SYSTEM.ResourceID = SMS_R_System.ResourceId where SMS_G_System_SoftwareFile.FileName = "msseces.exe" Than I created subselected query, which should show me computers without "msseces.exe": select SMS_R_System.LastLogonUserName, SMS_R_System.OperatingSystemNameandVersion, SMS_R_System.NetbiosName from SMS_R_System where SMS_R_System.ResourceId not in (select SMS_R_System.NetbiosName, SMS_R_System.LastLogonUserName, SMS_G_System_SYSTEM_CONSOLE_USER.LastConsoleUse, SMS_G_System_OPERATING_SYSTEM.Version, SMS_R_System.ResourceId from SMS_R_System inner join SMS_G_System_SoftwareFile on SMS_G_System_SoftwareFile.ResourceID = SMS_R_System.ResourceId inner join SMS_G_System_SYSTEM_CONSOLE_USER on SMS_G_System_SYSTEM_CONSOLE_USER.ResourceID = SMS_R_System.ResourceId inner join SMS_G_System_OPERATING_SYSTEM on SMS_G_System_OPERATING_SYSTEM.ResourceID = SMS_R_System.ResourceId where SMS_G_System_SoftwareFile.FileName = "msseces.exe") But it do not works for me.. Could anyone help me please? Thank you very much, Lucas

I have a Windows 2012 server running SCCM 2012 SP1 CU4. I use it primarily for Endpoint Protection and Windows Updates. I have several Automatic Update Rules to deploy Endpoint definitions every night. I was going through some of the Deployments (to check for errors and such) when I saw that almost all of them had errors. Under Monitoring --> Deployments I click on the Error tab and what I see is this: Last Enforcement Error Code: 0X80070643 and it was dated 5/7/2014. Also, it shows my compliance at only 6.0%. My own PC was listed as having this error so I opened the System Center Endpoint Protection application. I clicked on the Update tab and it shows Up to date with "Definitions last updated: 5/11/2014." Is this something I should worry about since the "successful" date is after the "error" date? On my client PC, I looked at the EndpointProtectionAgent.log file, but did not see any errors. Are there other log files I should look at to find more details about the error? I also see this entry in the Event Viewer (under Event Viewer --> Windows Logs --> System): Installation Failure: Windows failed to install the following update with error 0x80070643: Definition Update for Microsoft Endpoint Protection - KB2461484 (Definition 1.173.1491.0). There are other successful messages in the Event Viewer after that message. Maybe just something wrong with that particular update on that particular date?? Thanks in advance!

Is this behavior normal to see FEP Updates clients required for update = 0, other updates show Required machines but ForeFront does not show this. Update Settings:

I am running SCCM 2007 and FEP 2010 in my environment. I use a seperate WSUS server to push updates. I have FEP set to deploy to the all systems collection. The problem Im having is FEP isnt installing until the Wee hours of the morning. This is not acceptable because I work for a school district and often times when I re-image the teachers want to use the PC immediatley. I cant have a PC on the network for 8 plus hours with no AV installed on it. Im having trouble figuring out what is taking FEP so long to install. Any suggetsions?