There may be a need for System Center Endpoint Protection clients to update definitions directly from Microsoft Update vs. updating from your SCCM server. An example would be when you have remote users that are constantly moving around in the field. Here are the settings to configure this:
- You would go into client settings and set this to False.
- Then you can go into the actual Antimalware Policies and adjust the policy.