You can manually download the latest definition updates from Microsoft and then configure clients to download these definitions from a shared folder on the network.

Users can also initiate definition updates when you use this update source.

symantec endpoint managed client not updating-49symantec endpoint managed client not updating-32symantec endpoint managed client not updating-86

This repo contains all currently available Azure Resource Manager templates contributed by the community.

A searchable template index is maintained at

This method can be useful when the client does not have connectivity to the Configuration Manager site or when you want users to be able to initiate definition updates.

You can configure clients to download definition updates from the Microsoft Malware Protection Center.

In addition to manual approval, you can also set an automatic approval rule for definition updates and Endpoint Protection updates.

This will configure WSUS to automatically approve Endpoint Protection definition updates downloaded by WSUS.

Although using Configuration Manager software updates is the recommended method to keep definitions up to date, you can also configure WSUS as a method to allow users to manually initiate definition updated.

Use the following procedures to configure WSUS as a definition update source.

The information in this topic can help you to select and configure these methods.

To update antimalware definitions, you can use one or more of the following methods: You can configure multiple definition update sources and control the order in which they are assessed and applied.

Endpoint Protection definition updates must be approved and downloaded to the WSUS server before they are offered to clients that request the list of available updates.