Event ID 2001

Log Name:      Application
Source:        Microsoft Security Client
Date:          4/30/2014 9:01:01 AM
Event ID:      2001
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      server 2008
The size of the generated detection instance was more than 14KB, which exceeds the limit of 10KB. The detection instance was discarded.

Running SCCM 2012 Endpoint protection....
Who is Participating?
btanConnect With a Mentor Exec ConsultantCommented:
The link is exactly as per described on update failed. E.g. MALWAREPROTECTION_SIGNATURE_UPDATE_FAILED
There is no need to resolve as the updatr can be manually resolved and retry next Rd after fresh reinstall.
Try to update the definitions manually by downloading the full definitions files. To download the definitions, see the alternative download location (http://go.microsoft.com/fwlink/?LinkId=214316).

For more information about this error, review the entries in the %Windir%\WindowsUpdate.log log file.
to consider it as answer
euschererAuthor Commented:
Have uninstalled and reinstalled Endpoint software.  Ran Full Scan regularly.  Definitions are updating.
btanConnect With a Mentor Exec ConsultantCommented:
According to technet, this should have something to do with updating forefront definitions: http://technet.microsoft.com/en-us/library/hh144990

Quick means is as what you done by removing endpoint protection 2012 from the machine and re-install and update the definition.

Else can also try restarting WSUS
net stop wuauserv
rename %windir%\SoftwareDistribution  SoftwareDistributionOld
net start wuauserv

and run below, then wait for it to attempt update again.
wuauclt /detectnow
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.