Microsoft is conducting an online survey to understand your opinion of the Technet Web site.
If you choose to participate, the online survey will be presented to you when you leave the Technet Web site.
In my observations, the most common solution that administrators use is to create an ADR (see below) and let it run on a schedule: This will certainly get the updates deployed, but there is more to consider.
In these situations, we’ll need to better understand the setting for definition update sources in the Antimalware Policy.
If you’re not familiar with this, navigate to Assets and Compliance, Endpoint Protection, Antimalware Policies.
You must uninstall earlier (unsupported) versions of Symantec Endpoint Protection, or upgrade it to a supported version, before you upgrade the operating system.
The operating system upgrade stops if it detects an earlier version of Symantec Endpoint Protection.