WSUS and Endpoint definitions...

[Koldov]

Has anyone got WSUS handling their definition updates for Windows Defender (Win 10) and MSCEP (Win 7)?

 

I'm aware that multiple definitions are released each day and unfortunately the clients can't always be online to update them all.

 

I put a rule in for them to expire at 16:00 on the same day, but even a couple of days later (and even after running the clean-up wizard), the definition updates are still hanging around causing all the clients to be permanently stuck on 99%...

 

[clockend25]

Looks like the updates aren't installing on the clients hence why everything is showing as required. Are you implementing this for the first time or was it something that was previously working?

[Koldov]

Yeah, the updates aren't installing - I think because basically there are at least 4 a day.

 

Sometimes the computers in question aren't turned on all day, so by the next time they are turned on there are at least 3 or 4 definition updates that have been superseded.

 

I thought I would get around that by creating a rule to give them a deadline of 16:00 on the day they were released, as by then the PC's won't get them until the next day (when there will be 4 more)...

 

Plus when I run the clean-up wizard it should know that they have all been superseded apart from the very latest - and yet it refuses to delete them...

 

Well, the WSUS isn't new itself, but the definitions part is as I've only just started using it for that.

[clockend25]

Looking at ours, I just have it set to 'automatically decline updates when a revision causes them to expire.' Installation wise, I have the GPO item 'Allow Automatic Updates immediate installation' set and this allows the definitions to roll out and install pretty quickly.

[Koldov]

Ok, so I had the 'automatically decline' setting, but didn't see the GPO. I've set it now and I'll see how things progress...

 

I've also set the deadline to 23:59:59 on the same day, as I figure I'd be missing out anything that arrived after the 16:00 deadline I'd set!