I'm having an unexplained situation that I hope someone can help me with. I have my SEPM configured to download virus def every morning at 2:00AM, one day something happened with the data base server in the middle of the night (hung I think) and needed to be rebooted. Prior to the reboot its possible that some of the workstations failed over to our DR site that was working fine. After the reboot everything was fine except about 12 desktops at the same location decided to download full virus def. I checked few of them and they were left on for several days and did receive virus def the day before. So my question is why did they download full def's? This only happened at one of our site, the rest were fine.
The DR site has the same amount of virus def and same policies.
Thanks for your help