Sign in
 
HomeProductsLibraryLearnDownloadsSupportForums
Microsoft Forefront TechCenter >
> 
> 
No More Malware Alerts via E-Mail

Proposed No More Malware Alerts via E-Mail

  • Tuesday, October 23, 2012 6:13 PM
     
     
    Sign In to Vote
    0

    Hello,

    I just updated to FEP rollup 1 and I no longer receive MalWare e-mail alerts from my clients.  I run the eicar test virus on a couple of clients and I get nothing.  I subscribe to daily reports and I get those.  I go to the e-mail settings and send myself a test e-mail and it goes through.  The only alerts I am not getting are the malware alerts.  I used to get them before the rollup.  But I updated to rollup 1 because the alerts did not show whether or no the infection was removed.  Now since the rollup I get no alerts and all my clients went into the "Deployment Pending" collection.  Any suggestions would be helpful.  

     

All Replies

  • Tuesday, October 23, 2012 6:26 PM
     
     
    Sign In to Vote
    0
    Which parent collection did you configure in the settings for your email alert rule? If it's set to "Deployment Succeeded" and now all of your clients are in "Deployment Pending" because of the rollup 1 update, then you would stop receiving email alerts until those machines are back in Deployment Succeeded.
     
  • Tuesday, October 23, 2012 6:31 PM
     
     
    Sign In to Vote
    0

    Hello,

    The parent collection is "All Systems". 

     
  • Tuesday, October 23, 2012 6:46 PM
     
     
    Sign In to Vote
    0
    The next thing I would check is to make sure the associated database job is still running successfully. In SQL Server Management Studio, connect to the config manager database and then expand SQL Server Agent -> Jobs -> FEP_GetNewData_FEPDW. Right-click and view history. If it's working correctly, the job runs every 15 minutes. The email alerts are based off of the new data imported into the DB.
     
  • Tuesday, October 23, 2012 6:50 PM
     
     
    Sign In to Vote
    0

    Hello,

    I am running SQL Management Studio Express 2005.  Where do I find FEP_GetNewData_FEPDW?

     
  • Tuesday, October 23, 2012 6:55 PM
     
     
    Sign In to Vote
    0
    When you connect to the database, it should bring up the Object Explorer view. When you expand the database node, there should be several nodes underneath (I'm using 2008 so I'm not sure what the exact differences are): Databases, Security, Server Objects, Replication, Management, and SQL Server Agent. Expand SQL Server Agent then the Jobs node.
     
  • Tuesday, October 23, 2012 6:58 PM
     
     
    Sign In to Vote
    0

    Hello,

    All are there except for SQL Server Agent.  Maybe it's only in SQL 2008?

     
  • Tuesday, October 23, 2012 7:30 PM
     
     Proposed
    Sign In to Vote
    0

    It looks like the SQL Server Agent feature is not available in express versions. Are you running SQL express on the server or are you running it on your client machine and using it to connect to the remote database? From what I can tell, SQL express is not a supported configuration for FEP:

    http://technet.microsoft.com/en-us/library/ff823830.aspx

     
  • Tuesday, October 23, 2012 7:32 PM
     
     
    Sign In to Vote
    0

    Hello,

    I am running SQL Server 2005.  Here is the info:

    Microsoft SQL Server Management Studio Express      9.00.2047.00
    Microsoft Data Access Components (MDAC)      6.0.6001.18000 (longhorn_rtm.080118-1840)
    Microsoft MSXML      3.0 6.0
    Microsoft Internet Explorer      8.0.6001.19088
    Microsoft .NET Framework      2.0.50727.3623
    Operating System      6.0.6001

     
  • Tuesday, October 23, 2012 8:07 PM
     
     
    Sign In to Vote
    0
    I don't understand. If you're using full SQL Server 2005 (standard or enterprise) why are you using the express version of management studio to access it? Try remoting into the config manager server and running the full version of management studio from there.
     
  • Tuesday, October 23, 2012 8:08 PM
     
     
    Sign In to Vote
    0

    Hello,

    This is what I was given to install.  How do i go about installing the full management studio from the server?

     
  • Tuesday, October 23, 2012 8:18 PM
     
     
    Sign In to Vote
    0
    The easiest thing to do would be to remote desktop into the server and run it directly from there. I was assuming you had full access to your config manager servers and environment, but if not, an admin with the necessary access will need to give you access or do it for you.
     
  • Tuesday, October 23, 2012 8:20 PM
     
     
    Sign In to Vote
    0

    Hello,

    I am remoting into the SQL server and that is the only option I have.  I only have Express.