Hi everybody,

I was looking for a way to update a SEP Client over a Script with using Definition Files stored on the SEPM.

As I could not find anything I wrote a little PowerShell script, which I´d like to share with you.

It is not very intelligent yet, but it´s doing the things I needed.

What does it do?

The script is searching for the latest definitions stored on the SEPM, downloads them and placing it into the “inbox” folder on the local SEP Client.

Why it was needed?

We don´t have an internal LiveUpdate Server and I was looking for a fast way to update a SEP Client with using the definition files which are already stored on an internal server.

What environment is needed?

It works with SEPM 12.1 and SEP 12.1 Clients. I tested it only on Windows 7-

Are there any Parameters?

Not yet, but maybe I add some improvements in the future.

What do I need to configure?

You have to enable “Third Party Management” in the LiveUpdate Policy and share two folders on the SEPM (Everyone – Read Permissions are enough)

You need to get the Group ID where the Clients are.

Now you can edit the first lines of the script:

#Needs to be modified for each environment:

$SEPM             = "SEPM.mycompany.local"

$GoupID           = "5A176F310AF06355010E3A00D3B0626F"

$outbox           = "\Outbox$"

$content          = "\Content$"

Now you are ready to run the script (rename from .txt to .ps1):

Here you see a client that needs definition updates

Now we run the script and definitions are getting downloaded:

After a while the Client is up to date..

...and Live Update confirms this:

Known Issues:

Script always downloads the full.zip and not incremental updates. So be aware that every time you run the script, it will create ~200MB of traffic

Script is not using GUPs to download definitions

If the Client is already up to date the definitions get moved to the “invalid” folder and you will see an error in the Client log

Maybe it is usefull for somebody else as well :-)

Cheers!