Security updates from a Windows-managed system are possible, but the functionality is disabled by default to control when updates occur.
If you want to allow Windows users to update all products on their managed systems, you must enable this functionality. The icon can't be used to update applications selectively. The user can update all items in the repository, or none of them.
When the user selects Update Security, these items are updated with the contents of the designated repository:
Patch releases
Legacy product plug-in (.DLL) files
Service Pack releases
SuperDAT file (SDAT*.EXE) packages
Supplemental DAT (Extra.DAT) files
DAT files
Antivirus engines
Managed product signatures