Disturbing the end user as little as possible
I use PM and policy-based updates to update Client Security on my clients. This works very well but I have a few thoughts about the end user experience.
Unfortunately the client computer needs to be restarted after every update - would be nice if that could be avoided... But what bothers the end user the most is the network quarantine after the restart. The end user often get a message that the virus definitions are to old and need to be updated (the definitions were up-to-date before the CS update) and therefore the computer is in network quarantine. It takes several minutes (sometimes five to ten minutes) before the computer is released from quarantine. I can understand that users are frustrated.
My question: Is this a "normal" behavior or am I missing some settings in the policy?
I must add that I have Network quarantine enabled in the policy but the "Virus definition age..." is set at 30 days. Normally I have five days but as a test i increased it to 30.