Clients do not update with the latest antimalware definition files after you install the Endpoint Protection point site system role in System Center 2012 Configuration Manager

 

Workaround…

http://support.microsoft.com/kb/2688242

Beware the default setting…..

Must Set to NO