SCCM ADR for Windows Defender Security Intelligence Updates failing

Question

Since 9/27/21, our ADR for deploying Security Intelligence definition updates for Windows Defender has been failing. If I download the updates through the ConfigMgr console and then run the ADR, the update download completes and the ADR runs.

The ADR fails with this message in the logs

Failed to download the update content with ID 18681960 from internet. Error = 80 SMS_RULE_ENGINE 10/4/2021 3:52:33 PM 9764 (0x2624)
Failed to download ContentID 18681960 for UpdateID 18774199. Error code = 80 SMS_RULE_ENGINE 10/4/2021 3:52:33 PM 9764 (0x2624)

Anyone know what this means?

Answer 1

I was able to track the issue down to a known issue with Configuration Manager 2010

https://learn.microsoft.com/en-us/troubleshoot/mem/configmgr/adr-updates-download-failure
https://learn.microsoft.com/en-us/answers/questions/276360/automatic-deployment-rules-adr-error-0x87d20417-do.html

After clearing out the TMP files in C:\Windows\Temp on the site server, the ADR ran successfully.

Answer 2

Hi there,

First, try Managing the sources for Microsoft Defender Antivirus protection updates

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/manage-protection-updates-microsoft-defender-antivirus?view=o365-worldwide

You can also follow these forum and see if the answer is Helpful

https://social.technet.microsoft.com/Forums/en-US/63fbf076-cc17-47f9-9742-b3a6ff4d451c/software-updates-adr-issue-quotfailed-to-download-the-update-from-the-internet-error-5quot?forum=configmanagergeneral

--------------------------------------------------------------------------------------------------------------------------------

If the reply is helpful, please Upvote and Accept it as an answer