I am in a testing phase wiht 25 Windows 7 embedded thin clients. I installed the CM2012 Client while the write protect was unlocked. Once the SCEP install completed I locked the client agai. System are communicating with the server as I see that the ClientHealth checks are successful. I noticed that the SCEP definition files are not getting installed. I verified the WUAHandler.log and see the following error message after it scans and verifies that there are indeed defintions missing "Installation job encountered some failures. Error = 0x80240022. This even after I added the following exclusions
%ProgramData%\Microsoft\Microsoft Antimalware\Definition Updates\
%ProgramData%\Microsoft\Microsoft Antimalware\scans\
%ProgramData%\Microsoft\Microsoft Antimalware\Support\
%ProgramFiles%\Microsoft Security Client\
%WinDir%\WindowsUpdate.log
%WinDir%\Temp\MpCMDRun.log
%SystemRoot%\ServiceProfiles\LocalService\AppData\Local\Temp\MpCmdRun*.log
%SystemRoot%\ServiceProfiles\NetworkService\AppData\Local\Temp\MpCmdRun*.log
%WinDir%\System32\CCM\logs
Any help sent my way would be greatly appreciated as I have to deploy over 500 of these Thin clients within two weeks.