Enable Endpoint Protection malware definitions to download from a network share

Applies to: Configuration Manager (current branch)

You can manually download the latest definition updates from Microsoft and then configure clients to download these definitions from a shared folder on the network. Users can also initiate definition updates when you use this update source.

Note

Clients must have read access to the shared folder to be able to download definition updates.

For more information about how to download the definition and engine updates to store on the file share, see Install the latest Microsoft antimalware and antispyware software.

To configure definition downloads from a file share

  1. In the Configuration Manager console, click Assets and Compliance.

  2. In the Assets and Compliance workspace, expand Endpoint Protection, and then click Antimalware Policies.

  3. Open the properties page of the Default Antimalware Policy or create a new antimalware policy. For more information about how to create antimalware policies, see How to create and deploy antimalware policies for Endpoint Protection.

  4. In the Security Intelligence updates section of the antimalware properties dialog box, click Set Source.

    • The Definition updates section was renamed to Security Intelligence updates starting in Configuration Manager version 1902.
  5. In the Configure Definition Update Sources dialog box, select Updates from UNC file shares.

  6. Click OK to close the Configure Definition Update Sources dialog box.

  7. Click Set Paths. Then, in the Configure Definition Update UNC Paths dialog box, add one or more UNC paths to the location of the definition updates files on a network share.

  8. Click OK to close the Configure Definition Update UNC Paths dialog box.