Endpoint Protection

We have an LU policy defined which stipulates that clients will use explicit GUP's. Additionally, the option to use the Management Server is selected.

My problem is that any client that does not meet the criteria for usage of an explicit GUP, does not appear to be obtaining any updates at all.

With this configuration, I presume that the client should use the explicitly defined GUPs first (so long as they match the criteria) and then fallback to the management server.

Is my thinking correct?

Do you have option "maximum time that clients try to download updates from a GUP before trying the default management server" set in the policy?

It was set to never

Make sure to set it to either minutes, hours, or days. Whatever you feel is best for your environment.