
Configuring antivirus protection by means of Defender you need to put on some server a role Endpoint Protection Point, configure and implement the appropriate client configuration policies. After doing all this, I noticed that some tables in the database SQL with names beginning with EP_. are still empty.

Such a situation is not normal, I observed in the other instances of Configuration Manager, that the said table usually contains more than 200,000 records.
Antivirus protection on client machines, meanwhile, works, only itself Configuration Manager turns out to be unaware of the classification of risks and their materiality, which has its effect in the antivirus reports, where the expected data is not posted. It was the problem with empty reports that stood at the beginning of the inquiry. It quickly became apparent that the data in the reports are also taken from tables that should not be empty, yet contain nothing.
A rather obvious suspicion must have fallen on the Endpoint Protection Point role. Previewing the installation process of this role, it turned out that it is installed there System Center Endpoint Protection client.

This server not being a client Configuration Manager (and, in addition, not being in the collection, intended to manage the Defender) could not, in an isolated lab environment, access antivirus updates. This can be seen nicely below:

Attempting to force the system to download the update ended in failure:

Only indicating the location of the update in the shared directory (UNC track) in the following way causes updates to download.

This time no error message appears:

Looking at the contents EPCntrl.log you can see that the updates have not only been downloaded, but also transferred to the Site Server:

All you have to do now is repeat the SQL database check:

It should be noted that all the difficulty was due to the lack of access to the Internet of the server with the role of Endpoint Protection Point, As a result, it had to be pointed out to him An alternative source of antivirus signature updates.
- Support and development of Microsoft and Nintex based applications
- Application design and development including digital processes
- Invoice management
- Requisition management
- Contract management
- Modern Intranet
ISCG sp. z o.o.
Al. Jerozolimskie 178, 02-486 Warsaw
NIP: 5262798378
KRS: 0000220621
Phone