TEM managed clients should receive updates automatically from the server.
Maintenance may include disk error checks, defragmentation of the hard drive, or other routine health checks.
In "managed" SEP installations -- the kind of installation generally performed by CCIT staff on school-owned computers in offices and labs -- the software will periodically update itself and no further user intervention is required.
The software and updates are "managed" by CCIT servers dedicated to the task.
In Windows, double-click on the gold shield in the taskbar at the bottom-right of the desktop.
In Mac OS X, find the program in the Applications folder (under "Symantec Solutions"). If the button is grayed-out, you likely have a managed installation.