EvilGenius007

We're installing a new SCCM 2012 instance in our environment, and learned that we cannot get Endpoint Protection definition files to download if the workstation has a version of the Windows Update Agent that is too old. We're trying to use a query based rule to create a collection of workstations that don't have the latest version of the WUA so that we can rectify those machines before we install SCEP and the definitions get out of date. So, we've created our "Managed Clients" collection and have a second collection that uses that as a parent collection along with the following query: select SMS_R_SYSTEM.ResourceID, SMS_R_SYSTEM.ResourceType, SMS_R_SYSTEM.Name, SMS_R_SYSTEM.SMSUniqueIdentifier, SMS_R_SYSTEM.ResourceDomainORWorkgroup, SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_WINDOWSUPDATEAGENTVERSION on SMS_G_System_WINDOWSUPDATEAGENTVERSION.ResourceId = SMS_R_System.ResourceId where SMS_G_System_WINDOWSUPDATEAGENTVERSION.Version like "%7.4.7600.256%" to identify those that are up to date, and a 'NOT LIKE' version to identify those that are out of date. However, neither device collection has any workstations. And when we query the SQL database at the backend of our site, it doesn't appear as though any workstations are reporting this data, even though both Hardware & Software inventories are turned on in the default client policy (and not overridden anywhere else). Any thoughts on why the WUA Version isn't being reported, or another way to end-around this issue and prevent our SCEP definition files from getting out of date before we know we have a problem?