Digging led to the discovery that the PATH has changed :-/ omg why change that…
Namely I ran two commands weekly on all our servers;
"C:\Program Files\Microsoft Security Client\Antimalware\MpCmdRun.exe" -SignatureUpdate -MMPC"
"C:\Program Files\Microsoft Security Client\Antimalware\MpCmdRun.exe" -scan -scantype 2"
The first foreces Forefront to update it’s definitions straight from the Internet repository, and the second forces a full scan.
but the “Antimalware” part of Forefront (or at least MpCmdRun.exe) seem to have moved from;
“C:\Program Files\Microsoft Security Client\Antimalware” to “”C:\Program Files\Microsoft Security Client”
But why 🙁 – anyhow, if you update your Forefront Endpoint Protection be sure to check any manual scripts you have running.
Downloading the updates manually;
You can still download the update file manually (80mb aprox), it’s the same file as for Endpoint Protection – get them here;
or try this undocumented one (direct download link); http://go.microsoft.com/fwlink/?LinkID=121721