SCEP definitions with Endpoint Protection Automatic Deployment Rule- not applying

[spgsitsupport]

Followed this.

 

Have it all created this way, once WSUS gets new definitions the rule DOES work, the new definitions are added to the package, DP are updated.

 

But it does NOT actual do the "exciting" part of applying these definitions to the specific (Software Update Group) deployed to Collection

 

So end result that SCEP clients are not updated

 

What could I be missing?

 

Thanks

 

Seb

[spgsitsupport]

Read that, made sure Maintenance Window is specified for collection. No difference.

 

Why is that so difficult to apply as simple thing as definition updates?

 

Kaspersky has it perfectly spot on with own agent/console

 

Seb

[spgsitsupport]

It seems that all devices in collection updated day after (once the night maintenance window expired)

 

Which makes no sense to me (like lots of SCCM doings)

 

How would one update definitions ie every 6 hours?

 

Seb

[Garrett804]

You can set the update time frequency as well as sources in the Antimalware Policies.

 

I for instance have my sources as follows:

1. Microsoft Update

2. Microsoft Malware Protection Center

3. SCCM

4. WSUS

 

Microsoft also released updates 3 times per day so I have my schedule set to 30 minutes after each release.

- Starting at 3:30AM and following every 8 hours my endpoint clients look for updates.

[spgsitsupport]

But the point is not to use MS Update, but local SCCM package via local WSUS.

 

In that case I need to have WSUS update run 3 times a day, which runs auto rules to update package, but I am not convinced that it does get apply outside maintenance hours