Configuration manager endpoint protection not updating definitions
Before you install the Endpoint protection role you need to install the prerequisites.
Windows Server Update Services (WSUS) must be installed and configured for software updates synchronization if you want to use Configuration Manager software updates to deliver definition and engine updates. When you install the Endpoint Protection with Configuration Manager you get following advantages :-Where Should I Install the Endpoint Protection Role ?
– The Endpoint Protection point site system role must be installed on one site system server only, and it must be installed at the top of the hierarchy on a central administration site or a stand-alone primary site.
Before you begin installing the endpoint protection role, you must have the WSUS installed and configured for software updates synchronization.
In the Administration workspace, expand Site Configuration, click Servers and Site System Roles, right click the server and click Add site system roles. For MAPS membership type select Basic Membership, click Next.
The Endpoint Protection role has been installed successfully. After the installation of Endpoint Protection role, we will now create a Custom client device settings for Endpoint protection.
New installation: Install System Center 2012 Configuration Manager SP2 first, and then install System Center 2012 R2 Configuration Manager SP1 at the top-tier site of your hierarchy.A recent forum question was raised about whether or not System Center Endpoint Protection (SCEP) CALs were needed to manage Windows Defender in Windows 10 using System Center Configuration Manager (Config Mgr).I wasn’t sure so posed the question to the product group.Likewise you can configure the remaining settings as per you requirement. The EP client device settings that we created in above step is deployed to the target collection named All Windows 7 Computers.After few minutes when you log in to one of the machines which was a part of target collection to which the EP client device settings was applied, we see that the EP client has been installed but it needs to be updated (Status color is RED) as the definition updates are missing.