Endpoint Protection

Hello all, I have all of my clients set to use the Default Management Server and Use the Live Update Server in hopes that using the Default Management server would be used as a priority and LU only be used when there is not connection to the manager.  With this setup it appears that nearly every time they connect for updates it is to LU not the management server.  The only time I have had success with connecting to the management server is when I have allowed a network connection and disabled internet. 

Ultimately I am asking if there is a way to make the Management Server a priority over LU for updates.

Do you have it set in the LU policy to get updates from the Internet? Ideally what you want to do is use location awareness. Set up two locations: one for ON network and one for OFF network.

For on network apply a policy to only get updates from the SEPM and for off network apply a policy to get updates from the Internet.

Setting up Scenario Two location awareness conditions