Point it to the collection we created above Right click on the AntiMalware Policy and choose Deploy Right click on your new antimalware policy and choose Increase Priority, make this the highest priorty you can as SP1 uses Client side merge of AntiMalware policies and we want this source for definition updates to take priority on any computers in this collection. You can populate it however you want (queries or direct membership) and then move it to somewhere suitable if required. Right click on Devices Collections, and choose create device collection, give it a suitable name like Endpoint Protection UNC_DEFS Create a collection to target the Antimalware Policy Next click on Set Source, make sure to select Updates from UNC Shares and use the UP button to bring this to the top choice (if you want it as the first option checked when more than one source is selected). In the Assets and Compliance workspace, expand Endpoint Protection, select Antimalware Policies, right click and choose Create AntiMalware Policy, give it a name like Custom SCEP UNC DEF policy and select Definition Updates from the available choices (you may of course add more sections but for the purpose of this post this is sufficient).Ĭlick on Set Paths and enter the path to the Updates folder which is a sub directory of the SCEP_UNC_DEFS file share, click on Add when done. Antimalware full definitions ( ×409&arch=x86).Antimalware full definitions ( ×409&arch=圆4)įor x86, download the following files and place them in the X86 folder.Populate it with the actual definition updates for the prospectiveįor 圆4, download the following files and place them in the X64 folder. Now that we’ve created our template folder structure we need to Populate the share with definition updates Create a Share and populate with foldersįirst of all on your chosen server create a folder called SCEP_UNC_DEFS and share it to Domain Users and Domain Computers.īeneath this folder create another folder called Updates with two sub folders for both architectures like so In this post I’ll explain how you can set this up and how to verify it’s working. In addition to populating the share correctly, you also need to define your AntiMalware Policy UNC path source correctly otherwise the definition updates will never be found. One of the user definable sources for updates for Endpoint Protection definition updates is an UNC file share,īut how you populate that share can mean success or failure when itĬomes to deploying definition updates from a UNC file share for System Center 2012 Endpoint Protection using System Center 2012 Configuration Manager SP1.
0 kommentar(er)
