Forefront Endpoint Protection Rollup 1 and Auto Updating Definitions

So, I followed the instructions for deploying FEP 2010 Update Rollup 1.  Which leads into using the Software UpdateAutomation.exe (here) to run a scheduled task to update the Distribution Points and deploy the updated definition files.  The walk through is great, except for a couple of items.

1.  (Disclaimer) I didn't have this problem, but I found a few confused people while researching problem #2.

     The issue is with step 1 and 4 (below).  You do not need to copy SoftwareUpdateAutomation.exe to %ProgramFiles%\...  You need to copy the executable to the install location of the SCCM application on your site server.

Thus the following would be more appropriate:

\AdminUI\Bin\SoftwareUpdateAutomation.exe

2.  I did have this problem.

     Do not copy and paste the arguments from Step 5 (below) as the quotes used on the site are not recognized as quotes when you run the command.  Just replace the quotes with your own and the command should execute just fine.  It is also referenced on a few other blogs that it helps to put single quotes around the number of the article ID.  I personally didn't see an instance where I needed the single quotes, but I did add them, because it appears to work just fine with the extra single quotes.

I hope this helps somebody.

http://technet.microsoft.com/en-us/library/hh297450.aspx

To configure the definition update automation tool

1. On your Configuration Manager site server, in the location to which you copied the fepsuasetup.cab file, open the file and copy SoftwareUpdateAutomation.exe to one of the following locations:
   • %ProgramFiles% \Microsoft Configuration Manager\AdminUI\bin, if the computer is a 32-bit operating system.
     
   • %ProgramFiles(x86)% \Microsoft Configuration Manager\AdminUI\bin, if the computer is a 64-bit operating system.
   Important:
   You must run the SoftwareUpdateAutomation.exe tool in one of the above folders.
   
   
2. Start Task Scheduler, and in the Actions pane, click Create Task.
3. In the Create Task dialog box, give the task a name, and then, under Security Options, make sure that the user account specified has the appropriate Configuration Manager permissions to update the definition package and definition assignment specified in the command line.
4. On the Actions tab, click New, and in the New Action dialog box, specify one of the following command lines to run:
   • For a 32-bit operating system: %ProgramFiles%\Microsoft Configuration Manager\AdminUI\bin\SoftwareUpdateAutomation.exe
     
   • For a 64-bit operating system: %ProgramFiles(x86)%\Microsoft Configuration Manager\AdminUI\bin\SoftwareUpdateAutomation.exe
     
5. In the Add arguments text box, enter the following arguments and then click OK:

   
   

   /AssignmentName AssignmentName /PackageName PackageName /RefreshDP /UpdateFilter “articleid=2461484 AND IsSuperseded=0 AND IsEnabled=1 AND IsExpired=0”
   

   
   
   Where AssignmentName is the name of the software deployment for the definitions which you recorded earlier, and PackageName is the name of the software package that contains the definitions which you recorded earlier. Parameters are not case sensitive.
6. On the Triggers tab, click New.
7. In the New Trigger dialog box, under Settings, select Daily.
8. Under Advanced settings, select the check box for Repeat task every, in the list click 1 hour, and then next to for a duration of, click Indefinitely.
9. In the New Trigger dialog box, click OK, and then in the Create Task dialog box, click OK.