WQL query based on SCEP definitions deployment error code

[roy]

Hello,

 

I'm getting error 0x80070643 on lots of computers during the deployment of SCEP 2012 defintions (done with ADR). What is suggested in http://answers.microsoft.com/en-us/protect/forum/protect_defender-protect_updating/error-0x80070490-mpsigstubmain-windows-defender/90793454-2d81-4d20-ac67-30707ade8271?page=5as the answer seems to work and I'm now wondering how to create a collection of computer with reporting this particuliar error.

All the queries I found do not work at all.

 

Does anybody know how to do it ?

 

Thanks in advance.