Kevin79 Posted November 9, 2018 Report post Posted November 9, 2018 I have SCCM CB and also use SCEP. Some of my clients aren't updating the SCEP definitions. What log do I look in to troubleshoot? I don't see anything in the EndpointPotectionAgent.log file. Quote Share this post Link to post Share on other sites More sharing options...
SMoRZ3 Posted November 9, 2018 Report post Posted November 9, 2018 Some other locations you can check are... C:\ProgramData\Microsoft\Microsoft Security Client\Support C:\ProgramData\Microsoft\Microsoft Forefront Endpoint Protection 2010 Server Management\Support C:\ProgramData\Microsoft\Windows Defender\Support C:\Windows\WindowsUpdate.log* (Please run the Get-WindowsUpdateLog PowerShell command to convert ETW traces into a readable WindowsUpdate.log.) Usually I find that the client health is bad when they have issues like this and if you sort those out, SCEP will work like intended. Quote Share this post Link to post Share on other sites More sharing options...