Sign in
 
HomeLibraryLearnDownloadsSupportForums
Forefront Client Security TechCenter > Forefront Client Security Forums > Forefront Client Security Setup and Configuration > Does FCS support other directory services like open LDAP??
Ask a questionAsk a question
Search Forums:
 

QuestionDoes FCS support other directory services like open LDAP??

All Replies

  • Wednesday, January 03, 2007 2:48 PMTeddy Tsang Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote
    or say does FCS can work on workgroup? anyone can help??
     
  • Wednesday, January 03, 2007 5:42 PMChris Sfanos - MSFTMSFTUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote

    Hi Teddy

    Thanks for your questions!

    I'll address both your questions:

    Q1:  Does FCS support other services like open LDAP?

    A1:  At this time, we do not support any other directory services besides Active Directory

    Q2:  Can FCS work in a workgroup environment?

    A2:  I've covered this topic in a previous post and will cover a few details again here.  This breaks down into a few different scenarios:

    Scenario 1:  All machines are non-domain joined

    You can disable MOM's Mutual Authentication on the server and clients, but there are associated risks with this (see the previous posting linked above).  You can use all the features in the FCS product in this scenario, but with the stated risks

    Scenarios 2: Mixed environment of non-domain joined machines

    You could disable MOM's Mutual Auth to support the non-domain joined machines, but that would not be a best practice, since it's likely the majority of your machines are domain-joined. In this case, you could have two instances of the FCS server, one for the domain joined and one for the non-domain joined hosts.  Or, if you were not concerned about reporting and alerting on the non-domain joined machines, you could not install the MOM agent (use the /NOMOM switch), leave Mutual Authentication on and gather data only on the domain joined machines

    Hope this helps

    Thanks

    Chris

    Forefront Client Security PM