Kevin79 Posted July 2, 2012 Report post Posted July 2, 2012 I have a few test clients with SCEP on them. I've removed one clients from our physical network in order to test the updating process on remote clients. Unfortunately, the client isn't updating. It has access to the internet, just not our domain (and the SCCM server). The policy that is has has it set to update from 4 sources: Configuration Manager, WSUS, Microsoft Update and Microsoft Malware Protection Center (in that order). I also have "If Configuration Manager is used as a source for definition updates, clients will only update from alternative sources if definition is older than (hours):" set to 72. My test computer is now 5 days old on the definitions and it doesn't look like it is updating. How do I get this working? Quote Share this post Link to post Share on other sites More sharing options...
Peter van der Woude Posted July 2, 2012 Report post Posted July 2, 2012 Did you look at the client logs (C:\ProgramData\Microsoft\Microsoft Antimalware\Support) or the WindowsUpdate.log? Quote Share this post Link to post Share on other sites More sharing options...
Kevin79 Posted July 2, 2012 Report post Posted July 2, 2012 I haven't yet. I didn't know what logs to look at. I'll look know. Thanks. Quote Share this post Link to post Share on other sites More sharing options...
Kevin79 Posted July 3, 2012 Report post Posted July 3, 2012 I looked in those two logs and all I see is that it can't reach the WSUS/SUP server (which would make sense since it isn't on the company network). The logs in ProgramData\Microsoft\Microsoft Antimalware\Support didn't show anything. Quote Share this post Link to post Share on other sites More sharing options...
Peter van der Woude Posted July 3, 2012 Report post Posted July 3, 2012 Did you look if the policies are good applied to the client? Quote Share this post Link to post Share on other sites More sharing options...
Kevin79 Posted July 3, 2012 Report post Posted July 3, 2012 How do I look at that? If I look at Help - About System Center Endpoint Protection, they look right. Quote Share this post Link to post Share on other sites More sharing options...
Kevin79 Posted July 9, 2012 Report post Posted July 9, 2012 Just an update - I tried on another computer and it isn't updating either. The only way I can get it to update is if it connects to SCCM. Any suggestions would be great since I can't deploy this until that is working. Quote Share this post Link to post Share on other sites More sharing options...
anyweb Posted July 9, 2012 Report post Posted July 9, 2012 How do I look at that? If I look at Help - About System Center Endpoint Protection, they look right. when you say they look right does it list the correct antimalware policy that you created or not ? if it is the correct policy then what settings have you made in that policy ? Quote Share this post Link to post Share on other sites More sharing options...
Kevin79 Posted July 13, 2012 Report post Posted July 13, 2012 when you say they look right does it list the correct antimalware policy that you created or not ? Yes, it shows it as having it applied. if it is the correct policy then what settings have you made in that policy ? Let's see... I have schedule scans off. Scan settings are True for "Scan email and email attachments", false for the rest and No Control for "User control of scheduled scans:". Default actions are Recommended, Recommended, Quarantine and Quarantine. Real-time protection settings are True, True, Scan incoming and outgoing files, True, True, True, True, False. I have the default locations in the Exclusion settings. Advanced is False, False, 14, False, False, False. No Threat overrides are set. Microsoft Active Protection Service is Basic Membership and false. Definition updates are 4, 9 AM, True, 4 sources selected (they are Updates distributed from Configuration Manager, Updates distributed from WSUS, Updates distributed from Microsoft Malware Protection Center and Updates distributed from Microsoft Update), 72 and (none). Quote Share this post Link to post Share on other sites More sharing options...
