Why and how to use offline updates

It would be wise to have the Universal Naming Convention (UNC) share for offline updates as there might be machines with issues getting updated in the regular way.

If the Windows Update agent is corrupted or broken, then most likely neither Microsoft Update nor Configuration Manager can be used to update definitions. This is where both Microsoft Malware Protection Center and UNC shares come in. Neither of those channels depends on the Windows Update agent.

Just to be clear, though, that the Microsoft Malware Protection Center is not an offline update source.

How to do it…

You need to have the UNC update source enabled in the policy as shown following:

Definition Update Sources within the Antimalware policy

Then you ...

Get Microsoft System Center Endpoint Protection Cookbook - Second Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.