![]() The most stable solution for offline clients I have seen in the field is to use your existing Software Update Point (SUP) infrastructure. Additionally, updates can be distributed over peer-to-peer technology like Delivery Optimization. Yes, Updates are a few hundred kilobytes per client, but if you open any website on the internet, you have already downloaded more data. I never had a customer where Defender Updates caused bandwidth issue. If all clients download updates from the internet, we will have bandwidth issues While most of the time not technically correct (systems only need to reach Microsoft Update), the reason is valid for high secure offline systems and MECM provides a great way to manage these on premises systems. We do not want our systems to reach the internet However, I have heard two valid reasons why this is not possible: Additionally, you can increase the scan frequency, as no internal system is utilized for scanning of new updates. Monthly Cumulative Updates and other Updates are not affected by this setting.Īs MECM admin, you only must configure this setting once, test it and you will most likely not hear of outdated Defender Definitions anymore. If you configure Microsoft Update in the Definition Update Sources only Defender will update from Microsoft Update. The most frustration-free way of distributing Defender Updates is to let Defender update itself using Microsoft Update. Especially in large environments the changed content is not completely processed before the next Definition Update needs to be handled. If you use the build-in mechanism of distributing Definition Updates with MECM, every few hours the package transfer manager and distribution manager thread need to process the changes. If you have a lot of Distribution Points (DPs), slow links or other conditions, it will be difficult to keep them updated every few hours. With this Blog, I would like to share my learnings from the field.ĭefender Updates are getting updated multiple times per day. Over the past month, some of my customers had challenges with the distribution of Defender Definition Updates using MECM. ![]() I'm Stefan Röll, Customer Engineer at Microsoft Germany for Microsoft Endpoint Manager. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |