I've done a little digging around and have found that the problem is the SUS
server. It only serves up updates for IE and the OS. The new WSUS has the
ability to serve up updates for a lot of things, including Office, Defender,
driver updates, etc. My company has a WSUS server that is in test mode, and
they have given me access to use it now. I am told that while trying to get
'force' an update 'manually' will not work, letting it run automagically will
work. In fact, by turning off automatic updates, and then turning it back
on, it did find, download, and install a bunch of updates, including 2 for
Defender.
Hope that helps...
tk