Microsoft forefront endpoint protection 2016 not updating
Forefront Endpoint Protection 2010 clients managed by System Center Configuration Manager 2007 may appear in the “Out of Date” deployment status collection after an anti-malware platform update is installed via Microsoft Update.This issue occurs because the “Out of Date” collection checks for the version of the ' Microsoft Forefront Endpoint Protection 2010 Server Management' entry in Add/Remove programs data, however this data is not updated by anti-malware platform updates released to Microsoft Update.As a best practice, before you run this tool, always make sure that a scheduled software update synchronization has completed.The tool will download the latest definition update and update the specified software update deployment with the latest definition.Configuring this tool to run automatically with Windows Task Scheduler or via a Configuration Manager Status Filter Rule can keep a deployment up to date without continuous and repetitive manual processes.For information about a hotfix that addresses this issue please see the following article in the Microsoft Knowledge Base: KB2975384 – Up to date Forefront Endpoint Protection 2010 clients listed in the “Out of Date” collection ( J. With Forefront Endpoint Protection 2010 Update Rollup 1, you now can deploy Forefront Endpoint Protection definition updates to clients by using the Configuration Manager console.
It is still necessary to run software update synchronization to synchronize the latest Forefront Endpoint Protection definition update into the Configuration Manager database before you run this tool.Please refer to How to Configure Software Updates Synchronization() for information on how to configure the software update synchronization.Note: This tool will only download the latest Forefront Endpoint Protection definition update and add it to the existing deployment and package.It will not synchronize the definition update into Configuration Manager.
This example will use local machine as Site Server and use the default Update Filter.It will add the latest Forefront Endpoint Protection definition update into Assignment “FEPDeployment” and Package “FEP” and refresh the Distribution Points if any updates were made to the deployment package.