Endpoint Definition Updates for Thin Clients

This may actually apply to regular clients as well, not just Thin Clients...

We are testing out some management of thin clients with CM2012 and I've read up on how to deploy updates to them to avoid unnecessary rebooting due to the Write Filter, but I'm a bit confused..the example I was looking at was at http://technet.microsoft.com/en-us/library/jj721567.aspx; mainly this part:

To configure definition updates for Endpoint Protection, Jane uses software updates and runs the Create Automatic Deployment Rule Wizard. She selects the Definition Updatestemplate to prepopulate the wizard with settings that are appropriate for Endpoint Protection.

These settings include the following on the User Experience page of the wizard:

  • Deadline behavior: The Software Installation check box is not selected.
  • Write filter handling for Windows Embedded devices: The Commit changes at deadline or during a maintenance window (requires restarts) check box is not selected.

Jane keeps these default settings. Together, these two options with this configuration allow any software update definitions for Endpoint Protection to be installed in the overlay during the day and not wait to be installed and committed during the maintenance window. This configuration best meets the company security policy for computers to run up-to-date antimalware protection.

This ----- 

"Deadline behavior: The Software Installation check box is not selected" and  "these two options with this configuration allow any software update definitions for Endpoint Protection to be installed in the overlay during the day and not wait to be installed and committed during the maintenance window."

Wouldn't this mean that the definition updates would actually have to wait until the maintenance window to install, since the deadline behavior "Software Installation" checkbox is NOT selected? Meaning: Do not allow these updates to install outside of the MW?

Exact wording in Update Properties in console:

Deadline behavior: When the installation deadline is reached, allow the following activities to be performed outside the maintenance window.     --This example wants this UNchecked, but says updates will install.

Is it just a typo, or am I missing something that only pertains to Endpoint Updates on Thin Clients?

December 5th, 2013 2:37pm

Yes, I know this is an old post, Im trying to clean up the post, did you ever figure this out? If so how?

Free Windows Admin Tool Kit Click here and download it now
December 14th, 2013 9:51am

The clients are applying the SCEP updates with the "Install Software" at deadline option checked. So, this is against the example, but it's working as intended for us.

Thanks for the follow up; I had forgotten about this post.

  • Marked as answer by Paul_131 20 hours 28 minutes ago
December 14th, 2013 10:49am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics