SCEP 2012 Definitions downloads fine on the SCCM/WSUS server and install on Win7 clients, but not Windows 2008/2012 servers they only download it unless I set a maintenance window, but as I understand then the Windows updates deployed via ADR installs to everytime there is a maintenance window and I only want to allow SCEP definitions to be installed every day.
I have tried to enable the GPO setting "Allow Automatic Updates immediate installation", but it did not make any difference. I did think it should allow minor updates like def. updates that does not require restart of server or service.
Automatic updates was already enabled via GPO for all servers with setting 2. Notify for download and Notify for install. Is that correct setting if immediate installation of def. updates should be working?
After several days 5-6 it checks for def. updates and downloads from MS and I do not know why.
MpCmdRun.Log looks like this:
-------------------------------------------------------------------------------------MpCmdRun: Command Line: "C:\Program Files\Microsoft Security Client\Antimalware\MpCmdRun.exe" SignaturesUpdateService -ScheduleJob -ManagedUpdate
Start Time: lø aug 08 2015 02:31:14
Start: Signatures Update Service
Update Started
Search Started (WSUS update) (Path: http://SCCMservername:8530)...
Search Completed
Update completed succesfully. no updates needed
End: Signatures Update Service
MpCmdRun: End Time: lø aug 08 2015 02:31:17
-------------------------------------------------------------------------------------
-------------------------------------------------------------------------------------
MpCmdRun: Command Line: "C:\Program Files\Microsoft Security Client\Antimalware\MpCmdRun.exe" SignatureUpdate -ScheduleJob -RestrictPrivileges
Start Time: lø aug 08 2015 04:31:14
MpCmdRun: End Time: lø aug 08 2015 04:31:14
-------------------------------------------------------------------------------------
-------------------------------------------------------------------------------------
MpCmdRun: Command Line: "C:\Program Files\Microsoft Security Client\Antimalware\MpCmdRun.exe" SignaturesUpdateService -ScheduleJob -ManagedUpdate
Start Time: lø aug 08 2015 04:31:14
Start: Signatures Update Service
Update Started
Search Started (WSUS update) (Path: http://SCCMservername:8530)...
Search Completed
Update completed succesfully. no updates needed
End: Signatures Update Service
MpCmdRun: End Time: lø aug 08 2015 04:31:14
-------------------------------------------------------------------------------------
-------------------------------------------------------------------------------------
MpCmdRun: Command Line: "C:\Program Files\Microsoft Security Client\Antimalware\MpCmdRun.exe" SignatureUpdate -ScheduleJob -RestrictPrivileges
Start Time: lø aug 08 2015 06:31:14
MpCmdRun: End Time: lø aug 08 2015 06:31:14
-------------------------------------------------------------------------------------
-------------------------------------------------------------------------------------
MpCmdRun: Command Line: "C:\Program Files\Microsoft Security Client\Antimalware\MpCmdRun.exe" SignaturesUpdateService -ScheduleJob -ManagedUpdate
Start Time: lø aug 08 2015 06:31:14
Start: Signatures Update Service
Update Started
Search Started (WSUS update) (Path: http://SCCMservername:8530)...
Search Completed
Update completed succesfully. no updates needed
End: Signatures Update Service
MpCmdRun: End Time: lø aug 08 2015 06:31:17
-------------------------------------------------------------------------------------
-------------------------------------------------------------------------------------
MpCmdRun: Command Line: "C:\Program Files\Microsoft Security Client\Antimalware\MpCmdRun.exe" SignaturesUpdateService -ScheduleJob -UnmanagedUpdate
Start Time: lø aug 08 2015 06:31:17
Start: Signatures Update Service
Update Started
Search Started (MU/WU update) (Path: http://www.microsoft.com)...
Search Completed
Download Started...
Download Progress-
Update Index:0 of 1 - 0%
Download Progress-
Update Index:0 of 1 - 0%
Download Progress-
Update Index:0 of 1 - 0%
Download Progress-
Update Index:0 of 1 - 0%
Download Progress-
Update Index:0 of 1 - 0%
Download Progress-
Update Index:0 of 1 - 0%
Download Progress-
Update Index:0 of 1 - 0%
Download Progress-
Update Index:0 of 1 - 0%
Download Progress-
Update Index:0 of 1 - 1%
Download Progress-
Update Index:0 of 1 - 3%
Download Progress-
Update Index:0 of 1 - 6%
Download Progress-
Update Index:0 of 1 - 12%
Download Progress-
Update Index:0 of 1 - 22%
Download Progress-
Update Index:0 of 1 - 34%
Download Progress-
Update Index:0 of 1 - 46%
Download Progress-
Update Index:0 of 1 - 59%
Download Progress-
Update Index:0 of 1 - 72%
Download Progress-
Update Index:0 of 1 - 85%
Download Progress-
Update Index:0 of 1 - 98%
Download Progress-
Update Index:0 of 1 - 100%
Download Progress-
Update Index:0 of 1 - 100%
Download Completed
Download Completed
Installation Started...
Installation Progress-
Percent Complete:0,
Current Update Index:0 (of 1)
Installation Progress-
Percent Complete:0,
Current Update Index:0 (of 1)
Installation Progress-
Percent Complete:100,
Current Update Index:0 (of 1)
Installation Completed
Update completed succesfully
End: Signatures Update Service
MpCmdRun: End Time: lø aug 08 2015 06:32:02
-------------------------------------------------------------------------------------
UpdatesDeployment.log looks like this with the "error" no service window"
Update (Site_2728341F-ACE8-4CBA-9498-114DBE21775E/SUM_8d4cb8a7-d8c6-4e3f-acf7-5d173ad70878) Name (Definition Update for Microsoft Endpoint Protection - KB2461484 (Definition 1.207.1665.0)) ArticleID (2461484) added to the targeted list of deployment ({bfa7bab4-5f79-43b7-ae4b-a878278447cb})UpdatesDeploymentAgent02-10-2015 05:43:415076 (0x13D4)Starting install for assignment ({bfa7bab4-5f79-43b7-ae4b-a878278447cb})UpdatesDeploymentAgent02-10-2015 05:43:415076 (0x13D4)
Update (Site_2728341F-ACE8-4CBA-9498-114DBE21775E/SUM_e357e451-815c-400f-94fe-b3d074729d97) not actionable, no attempt requiredUpdatesDeploymentAgent02-10-2015 05:43:415076 (0x13D4)
Update (Site_2728341F-ACE8-4CBA-9498-114DBE21775E/SUM_277cc8a0-f3fb-439a-8c16-41991f894354) not actionable, no attempt requiredUpdatesDeploymentAgent02-10-2015 05:43:415076 (0x13D4)
Update (Site_2728341F-ACE8-4CBA-9498-114DBE21775E/SUM_5a7caf18-4f8b-42ec-b873-72dc693ba615) not actionable, no attempt requiredUpdatesDeploymentAgent02-10-2015 05:43:415076 (0x13D4)
Update (Site_2728341F-ACE8-4CBA-9498-114DBE21775E/SUM_a90c3005-7b59-4268-8b11-12d9be5c8ea0) not actionable, no attempt requiredUpdatesDeploymentAgent02-10-2015 05:43:415076 (0x13D4)
Update (Site_2728341F-ACE8-4CBA-9498-114DBE21775E/SUM_12d710cf-9eb7-408b-ba1b-b55e33c4585f) not actionable, no attempt requiredUpdatesDeploymentAgent02-10-2015 05:43:415076 (0x13D4)
Update (Site_2728341F-ACE8-4CBA-9498-114DBE21775E/SUM_c22c4358-0189-4bfa-8a3d-2d2201b3ef8c) not actionable, no attempt requiredUpdatesDeploymentAgent02-10-2015 05:43:415076 (0x13D4)
Update (Site_2728341F-ACE8-4CBA-9498-114DBE21775E/SUM_4ec5536e-0662-46c4-86d1-f29739b4e22d) not actionable, no attempt requiredUpdatesDeploymentAgent02-10-2015 05:43:415076 (0x13D4)
Update (Site_2728341F-ACE8-4CBA-9498-114DBE21775E/SUM_70e0e9ac-f660-41e2-90bc-7d82ec5c6216) not actionable, no attempt requiredUpdatesDeploymentAgent02-10-2015 05:43:415076 (0x13D4)
No current service window available to run updates assignment with time required = 300UpdatesDeploymentAgent02-10-2015 05:43:415076 (0x13D4)
No service window available to run updates assignmentUpdatesDeploymentAgent02-10-2015 05:43:415076 (0x13D4)
Pls hlp.