TEM managed clients should receive updates automatically from the server.
Windows update should fail - we're not downloading OS patches to the UNC and are planning on installing these using an offline solution.
My only thought is that as this is failing, it's somehow impacting on SCEP autoupdate.
\globalroot\systemroot\system32\when i run that scan could that be blocking it or something?
Open Notepad and paste it in to notepad with the first line being killall:: 4.
If you choose to participate, the online survey will be presented to you when you leave the Technet Web site.