Forum Discussion
Defender Platform not upgrading on some devices
We're part way through a defender for endpoint rollout, migrating from a third party AV solution. We have it on around 1100 devices now.
I've noticed that on around 70 of these, the antimalware platform is not updating automatically. The vast majority of these are stuck on 4.18.1911.3, although there are some on 4.18.1902.5 and 4.18.2001.7. In all of these clients, the virus definitions are updating OK, but the platform isn't. We are using a combination of SCCM and MMPC to update our endpoints.
I copied the 4.18.2205.7 platform exe to a device and manually ran it, and this worked, resulting in it being up to date.
Is there any explanation as to why this would be happening?
2 Replies
- HeyBeer,
KB4052623 is part of SCCM patch cycle, on which also we can see it is coming from SCCM.
But still Platform version is not updating on device and yes manually we can fix it.
Before logging support case I want to understand if any known KB or workaround available to address this issue. MD AV platform updates are offered through KB4052623. This update is released monthly.
The current MD AV platform version is Platform: 4.18.2207.7.
Is this KB added to your SCCM patch cycle? If not you should add it to your monthly deployment.
As far as MMPC is concerned, if you are referring to the signature download source order, this setting is only for MD AV definition updates and not for platform updates.
Here are few articles for you to start.
https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/manage-updates-baselines-microsoft-defender-antivirus?view=o365-worldwide#product-updates
https://support.microsoft.com/en-us/topic/update-for-microsoft-defender-antimalware-platform-kb4052623-92e21611-8cf1-8e0e-56d6-561a07d144cc
