Help with running Forefront Client Security
- Hey guys, I'm new to Microsoft Forefront Client Security and I am having a few problems. I have done a one server topology server setup. I installed everything on a VM server (which is my FCS management server) except the distribution server component. I have a external (seperate server) setup for WSUS that we use in our corporate environment. I have installed forefront on my management serverand finally got the 14 day chart to come up. Next I setup a XP workstation as a VM for a test client. I then setup a group policy in the FCS console to point at an OU that has this XP workstation in it. My reason for doing this is to install the agent and the components. BUT I cannot get it to install anything. I have approved forefront on my WSUS server and only told it to install the updates to this computer in a group on the WSUS server. What am I missing to get this to install the agent without me doing it manually? Also, I installed the agent manually and it still won't report in to the dashboard on the FCS console. Do I need the distribution server? I would hate to have to install these manually, I need to do this through GPO, but right now after a manual installation it still won't report it and I don't see the agent in the taskbar. Can you guys help? I have checked everything in the MOM 2005 admin console that is supposed to be there, its all enabled.
Answers
Hi,
Thank you the post.
As far as I know, you may use a separate WSUS server as your distribution server. And from your description, I understand that the FCS clients are not reporting to the dashboard on the FCS console.
To resolve this issue, you must rerun the client installation program (Clientsetup.exe). When you rerun the Forefront Client Security installation program, the installation program performs the following tasks:
1.
Reads the collection server group name and the MOM management group name from the deployed policy settings
2.
Installs the MOM agent
3.
Configures the MOM agent to communicate with the collection server
The Forefront Client Security Management Server computer is displayed in the MOM Administrator console after a short time. Additionally, it is displayed as an agent-managed computer in the Forefront Client Security Management Console and in Forefront Client Security reports after approval.
Regards,
Nick Gu - MSFT- Marked As Answer byNick Gu - MSFTMSFT, ModeratorTuesday, November 10, 2009 6:30 AM
All Replies
Hi,
Thank you for your post.
Before going any further, I think you should confirm the network between VM(FCS management server) and distribution server(WSUS). Does it well connected?
After the installation and configuration of WSUS, you need to configure your clients to connect to the WSUS server to download updates. This can be accomplished via Group Policy. For more information, please see: http://technet.microsoft.com/en-us/library/bb404255.aspx
Regards,
Nick Gu - MSFT- Yes the link is fine between the fcs server and distribution server. There are a lot of VM's that connect to the WUS and I monitor it. We already have a GPO applied that makes the clients dnload updates from the WSUS server. This is a seperate server. But I have not installed the distribution server component anywhere yet. Hope you can help.
Hi,
Thank you the post.
As far as I know, you may use a separate WSUS server as your distribution server. And from your description, I understand that the FCS clients are not reporting to the dashboard on the FCS console.
To resolve this issue, you must rerun the client installation program (Clientsetup.exe). When you rerun the Forefront Client Security installation program, the installation program performs the following tasks:
1.
Reads the collection server group name and the MOM management group name from the deployed policy settings
2.
Installs the MOM agent
3.
Configures the MOM agent to communicate with the collection server
The Forefront Client Security Management Server computer is displayed in the MOM Administrator console after a short time. Additionally, it is displayed as an agent-managed computer in the Forefront Client Security Management Console and in Forefront Client Security reports after approval.
Regards,
Nick Gu - MSFT- Marked As Answer byNick Gu - MSFTMSFT, ModeratorTuesday, November 10, 2009 6:30 AM
