询问者
SCEP通过命令的方式更新病毒库

问题
-
如题,我希望通过命令的方式更新病毒库,效果就和点击【更新】一样
目前查到了一条升级的命令:
1:MpCmdRun.exe -SignatureUpdate -UNC -Path <path>
2:MpCmdRun.exe -SignatureUpdate -MMPC
如果,是在一个网络没做任何限制的环境下,我想连接到官方的服务器中,命令是否应该是上面的第2条命令
如果,环境为公司环境,有WSUS服务器(域名为XXX.local),命令是否应该为:
MpCmdRun.exe -SignatureUpdate -UNC -Path <XXX.local>
以上,感谢
全部回复
-
你好,
客户端更新病毒库可以从图中几个地方获得,排序是有优先级的。
>>1:MpCmdRun.exe -SignatureUpdate -UNC -Path <path>
这条应该是通过UNC的方式获得补丁。
>>2:MpCmdRun.exe -SignatureUpdate -MMPC
这条命令,我没有找到,你是在哪里看到的?
执行完命令,可以查看日志文件确认结果。C:\Users\ME\AppData\Local\Temp\MpCmdRun.log
参考:
Command-line Switches to Automate Windows Defender GUI (MSASCui.exe)
https://www.winhelponline.com/blog/msascui-exe-switches-defender-gui-mpcmdrun/
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com. -
MpCmdRun.exe -SignatureUpdate -MMPC
这条命令是通过MpCmdRun.exe -h 查到的
Usage:
MpCmdRun.exe [command] [-options]
Command Description
-? / -h Displays all available options
for this tool
-Scan [-ScanType #] [-File <path> [-DisableRemediation]] Scans for malicious
software
-Trace [-Grouping #] [-Level #] Starts diagnostic tracing
-GetFiles Collects support information
-RemoveDefinitions [-All] Restores the installed
signature definitions
to a previous backup copy or to
the original default set of
signatures
[-DynamicSignatures] Removes only the dynamically
downloaded signatures
-SignatureUpdate [-UNC [-Path <path>] | -MMPC] Checks for new
definition updates
-Restore -Name <name> [-All] Restore the most recently or all
quarantined item(s) based on threat name
-AddDynamicSignature [-Path] Loads a dynamic signature
-ListAllDynamicSignatures List the loaded dynamic signatures
-RemoveDynamicSignature [-SignatureSetID] Removes a dynamic signature***************************
-SignatureUpdate
Checks for new definition updates
[-UNC [-Path <path>]]
Performs update directly from UNC file share specified in <path>
If -Path is not specified, update will be performed directly from the
preconfigured UNC location
[-MMPC]
Performs update directly from Microsoft Malware Protection Center
***************************
另外想问下“UNC的方式获得补丁”
这个UNC方式是什么方式,有没有相关文献参考呢
感谢
-
对的-MMPC 应该是直接去连接微软官网。
UNC方式,就是共享目录的方式。类似 \\server\share\path\file。
参考:
Naming Files, Paths, and Namespaces
https://docs.microsoft.com/en-us/windows/desktop/FileIO/naming-a-file
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.- 已建议为答案 Xin GuoMicrosoft contingent staff, Moderator 2018年12月12日 8:27
-
问题解决帮忙标记下答案。
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.