Usually, updating once a day gives you a good level of protection, and it prevents us from constantly updating your software and interfering with how you use your PC. This can be helpful if you have hard-to-remove malware, Windows update isn't working properly, or you aren't always connected to the Internet.Updated: September 14, 2015Applies To: System Center 2012 R2 Endpoint Protection, System Center 2012 Configuration Manager, System Center 2012 Configuration Manager SP2, System Center 2012 R2 Configuration Manager, System Center 2012 Endpoint Protection SP1, System Center 2012 Endpoint Protection, System Center 2012 R2 Configuration Manager SP1With Endpoint Protection in Microsoft System Center 2012 Configuration Manager, you can use any of several available methods to keep antimalware definitions up to date on client computers in your hierarchy.For more information about the Create Automatic Deployment Rule Wizard, see Operations and Maintenance for Software Updates in Configuration Manager.Microsoft is conducting an online survey to understand your opinion of the Technet Web site.This is done in the Configure Definition Update Sources dialog box when you create an antimalware policy.You can configure Configuration Manager software updates to deliver definition updates to client computers.The information in this topic can help you to select and configure these methods.To update antimalware definitions, you can use one or more of the following methods: You can configure multiple definition update sources and control the order in which they are assessed and applied.
This is the same as when Windows automatically downloads the update, and can be useful if you aren't always connected to the Internet or haven't turned your PC on for a few days.
For a list of the latest updates see the change log.
Windows will automatically download and install updates once a day for you.
In many cases, you’re likely just testing the ability to install the application silently (especially true for OSD scenarios).
One thing I like to use is PSExec from Sysinternals.