Forefront Client Security Setup and Configuration ForumDiscussions and questions on setting up and deploying the server and client© 2009 Microsoft Corporation. All rights reserved.Tue, 01 Dec 2009 20:30:51 Z231b1544-655a-4e33-8e2f-d2126168f8b8http://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/4d77d4b2-c782-4317-bd9d-9c325a1a52dehttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/4d77d4b2-c782-4317-bd9d-9c325a1a52deBill H Brownhttp://social.technet.microsoft.com/Profile/en-US/?user=Bill%20H%20BrownMicrosoft Forefront Client Security (Managed by a system administrator) on XP. Both left click, right click, and double clicking do nothing.<p class=MsoNormal style="margin:0in 0in 0pt"><span style="font-family:'Times New Roman','serif'"><span style="font-size:small">I am having an issue where on computers with a deployed client the system tray icon does not always show. On a fresh boot, sometimes it will show up and other times not or it might show up initially and then disappear later. A bigger issue is when it does show the clients do not have any ability to manage the settings locally. On a Win XP machine logged on as a domain admin and local admin, I mouse over the system tray icon it says, &quot;Microsoft Forefront Client Security (Managed by a system administrator)&quot;. Both left click, right click, and double clicking do nothing.</span></span></p> <p class=MsoNormal style="margin:0in 0in 0pt"><span style="font-family:'Times New Roman','serif'"><span style="font-size:small"> </span></span></p> <p class=MsoNormal style="margin:0in 0in 0pt"><span style="font-family:'Times New Roman','serif'"><span style="font-size:small">On the Forefront Client Security Management Console, under the Policy Management tab, in the deployed policy, on the Advanced tab, under Client Options, I have set the &quot;Users can view all client security agent settings and messages&quot; and unchecked &quot;Only Administrators can change Client Security agent&quot; and checked &quot;Allow users to add exclusions and overrides&quot;.</span></span></p>Tue, 01 Dec 2009 20:30:51 Z2009-12-01T20:30:51Zhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/bfc5ef0d-9fa9-4128-8168-cfd3f3623507http://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/bfc5ef0d-9fa9-4128-8168-cfd3f3623507Aleksandr Sidorenkohttp://social.technet.microsoft.com/Profile/en-US/?user=Aleksandr%20SidorenkoPolicy deployment : "Unable to create a group policy link"This question may have been asked before, but none of the suggested solutions have worked. Maybe this case is different. <div><br/></div> <div>The error I am getting occurs when I am deploying a policy to a selected OU:</div> <div><br/></div> <div>---</div> <div>The policy cannot be deployed.</div> <div><br/></div> <div>Further details:</div> Unable to create a Group Policy link. <div>Unable to create a Group Policy link.</div> <div>---</div> <div><br/></div> <div>The GPO does get created (I see it in the GPM console), but it is not linked anywhere (as expected, following the error).</div> <div><br/></div> <div>The Forefront Client Security Console (with service pack 1 installed) is running on Windows Server 2008 (32-bit); the domain controller runs on another server (Windows Server 2008 64-bit).</div> <div><br/></div> <div>Does anyone have any suggestions to resolve this issue?</div> <div><br/></div> <div>Thanks!</div>Fri, 20 Nov 2009 17:53:09 Z2009-12-01T14:16:17Zhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/dd790250-b8a2-407a-bc7b-936f50eeedc6http://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/dd790250-b8a2-407a-bc7b-936f50eeedc6Balwan Singhhttp://social.technet.microsoft.com/Profile/en-US/?user=Balwan%20SinghForefront Client Security serverHi Experts,<br/><br/>I had a plan to install FCS. &amp; i m going to use small topolozy.<br/>as microsoft recommend that i should have two H/W server one for FCS &amp; other for WSUS&amp; distribution server.<br/><br/>but i have only one hardware serevr.<br/><br/>is it possible to install fcs &amp; wsus on a single server...<br/><br/><br/>Thnaks in Advance.<br/><br/>Balwan Singh<br/>Thu, 26 Nov 2009 08:11:59 Z2009-12-01T09:09:38Zhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/96b19ebc-85eb-464d-9848-ce9f16995819http://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/96b19ebc-85eb-464d-9848-ce9f16995819_DJ_http://social.technet.microsoft.com/Profile/en-US/?user=_DJ_KB971026.adm does not work for meHi,<br/><br/>I try to make the <span class=userInput>KB971026.adm file work from the corresponfding KB article to &quot;DisableScanningNetworkFiles&quot;. I can see it when loaded as an adm in my policy, i can configure it. I then see it in my group policy management console but the settings is not set on my client. Client is Windows XP SP3, Ad controller is Server 2008 R2. Could it have something to with the 1.0 in the name structure?<br/><br/>KEYNAME &quot;SOFTWARE\Policies\Microsoft\Microsoft Forefront\Client Security\<strong>1.0</strong>\AM\Scan&quot;<br/><br/>When is use the same template i can put the key in KEYNAME &quot;SOFTWARE\Policies\Microsoft\Microsoft Forefront\Client Security&quot;<br/><br/>Any ideas anybody?<br/><br/>Thanx for helping out.<br/><br/>DJITS.</span>Fri, 27 Nov 2009 16:51:39 Z2009-12-01T07:48:22Zhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/a7b53754-e722-41c9-91ff-883ecf8a3afahttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/a7b53754-e722-41c9-91ff-883ecf8a3afaBlue Mindhttp://social.technet.microsoft.com/Profile/en-US/?user=Blue%20Mindright-click menu for Forefront Client Security?I have installed FCS using /NOMOM installation.<br/><br/>Everything works fine but I couldn't find the right-click menu for custom scan. (while most anti-virus programs have it)<br/><br/>I checked the option but I couldn't find something related to it.<br/><br/>I know it is doing real-time protection but I am used to double check for virus scan after download.<br/><br/>Should I just trust the real-time protection and run the downloaded(or un-zipped) files(as well as files in USB) without a custom-scan?<br/><br/>I am concerned about running a program before FCS does real-time scan.Mon, 30 Nov 2009 15:16:28 Z2009-12-01T01:30:47Zhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/7eb15e03-441e-4226-921b-3c4cdf1104b0http://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/7eb15e03-441e-4226-921b-3c4cdf1104b0MAllen99http://social.technet.microsoft.com/Profile/en-US/?user=MAllen99Client Policy SettingsHello everyone, thanks in advance for any help on this.  I feel like I'm missing something obvious here, but I'm not sure exactly what.  We are running Forefront client security 2007 with both admin computers and locked down computers.<br/> <br/> I found this document detailing how the policy setup works.  http://technet.microsoft.com/en-us/library/bb418862.aspx<br/> <br/> I have the following, nondefault settings in the policy...<br/> On the Protection tab, Run a scan every day at 2:00 pm with a quickscan<br/> On the Advanced tab, Check for updates at an interval of 1 hour<br/> On the Advanced tab, Users can view all Client Security...<br/> On the Advanced tab, Only administrators can change Client...<br/> (Adding exclusions and prompting for unclassified software are both unchecked)<br/> <br/> <br/> Now, this is what I'm seeing, on the Protection tab of the policy, if you only set both Malware protection settings to On, client options will be greyed out but visible to admins. I see the custom settings above.  With users, I am not able to view the options or run a manual scan, but the custom settings are in effect. (auto scan ran at the non default time)<br/> <br/> In the protection tab, if you set both Malware protection settings to User Controlled, both admins and users can view and change the client options.  However, the nondefault settings that I applied earlier had been reset to the default values.<br/> <br/> <br/> It would be preferable to have users open the client and see the custom settings but not be able to modify them.  Also the user ability to run manual scans would be helpful.  In addition, administrators should be able able to open the client and have the custom settings but be able to modify them if needed.  Is this a possible configuration for a policy file?<br/> <br/> Sorry, this seems like a lot of info in this post, hopefully it's clear.  If anyone has any questions to clarify the issue please ask.  Thanks again for any help on this.<br/> MikeThu, 19 Nov 2009 18:02:27 Z2009-11-25T17:41:29Zhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/d1f087fb-d552-4d37-9b92-f5e9b328da8dhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/d1f087fb-d552-4d37-9b92-f5e9b328da8dsupanatralhttp://social.technet.microsoft.com/Profile/en-US/?user=supanatralForefront client Security on 64bit?I've tried installing Forefront Client Security on a 64bit computer in the past but the problem was the dependancies because SQL 2005 doesn't come with one of the components for 64 bit that I needed. I forget which one though. Anyways, we've received SQL 2008 in the mail and I was wondering if I were to use the new version of SQL, would I be able to install forefront on Windows Server Standard x64?<font face=Arial size=2></font>Fri, 23 May 2008 20:53:17 Z2009-11-25T14:48:27Zhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/4d781876-ffba-477d-96ac-4053f17c35f5http://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/4d781876-ffba-477d-96ac-4053f17c35f5Alaaayhttp://social.technet.microsoft.com/Profile/en-US/?user=AlaaayInstallation Quesitons<br/>Dears<br/><br/>I m trying to install the Client Security and I have the following questions:<br/><br/>- In my organization the databases are usually stored and handled by the database Server, I understood that the Client Security management must be installed on the database server, and that will be not applicable .... so did i understand the idea wrong. And i still want to use one Server scenario but i only want to host the databases on the database Server.<br/><br/>- Can I put password to prevent other administratos from logging to the admin console and change configuration?<br/><br/>Tue, 24 Nov 2009 08:44:03 Z2009-12-01T09:05:16Zhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/d74ff980-d962-4c6a-851f-9fec3bf79070http://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/d74ff980-d962-4c6a-851f-9fec3bf79070RussRimmhttp://social.technet.microsoft.com/Profile/en-US/?user=RussRimmForefront detected changesEvery time we make a slight change to our firewall rules, all users around the world get &quot;Forefront has detected changes&quot; messages that they have to do something with to get rid of the alert.  How do we prevent this from appearing every time we make the slightest changes to the firewall policies?<br><br>Thanks Tue, 02 Dec 2008 16:39:03 Z2009-11-24T12:22:49Zhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/9235a768-65b2-4005-8852-f2b327c53a87http://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/9235a768-65b2-4005-8852-f2b327c53a87robert_tmphttp://social.technet.microsoft.com/Profile/en-US/?user=robert_tmpMomService taking high CPU utilizationNeed help.<br/>I have a 4CPU, 9GB RAM virtual Machine runing on VMWare hardware acting as a Forefront Server running windows 2003 sp2 enterprise ,SQL server 2005 Enterprise and all components except WSUS running on this system.<br/>Initially when i had 300 computers reporting the systems was working great. Now once it reached 2800 clients now i see that MOMservice is consuming most of the CPU and is acting up. Can't open any other applications on it , it even times out on the network ping from someother system.<br/><br/>When i disable Momservice , i can ping and i can run other applications.<br/><br/>Please advice what can i do?<br/><br/>Thu, 19 Nov 2009 04:21:54 Z2009-11-26T02:42:46Zhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/1df795c8-2f07-45a3-8584-b2edc7bc4219http://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/1df795c8-2f07-45a3-8584-b2edc7bc4219Huggy Bearhttp://social.technet.microsoft.com/Profile/en-US/?user=Huggy%20BearCollection Server Installation Failure<p align=left>Hello!!</p> <p align=left> </p> <p align=left>I have been working on this for a couple of days trying to get FCS installed, and I'm at the final stages with an installtion error that I can't resolve.</p> <p align=left> </p> <p align=left><strong><u>Installation Architecture:</u></strong></p> <p align=left> </p> <p align=left><strong>Server A:</strong></p> <p align=left>Collection Server (Windows 2003 SP2 - Fully Patched)</p> <p align=left>Management Server (Windows 2003 SP2 - Fully Patched)</p> <p align=left> </p> <p align=left><strong>Server B:</strong></p> <p align=left>Reporting Server (Community SQL 2005 Reporting Server)</p> <p align=left> </p> <p align=left><strong>Server C:</strong></p> <p align=left>Collection Database (SQL 2005)</p> <p align=left>Reporting Database (SQL 2005)</p> <p align=left> </p> <p align=left><strong>Server D:</strong></p> <p align=left>Distribution Server (WSUS 3.0)</p> <p> </p> <p align=left>I have the Collection Database and the Reporting Database installed successfully.  Additionally, I have the Reporting Server installed successfully as well.  Now, I'm trying to install the Collection Server, but I continue to get the same error, and I'm completely out of ideas.  When installing the Collection Server, the &quot;Verifying Settings and Requirements&quot; section completes successfully (all green check marks).  The following screen (&quot;Completing Setup Wizard&quot;) fails on the first step (Install Collection Server Component).  The error from the log is listed below:</p> <p align=left> </p> <p align=left><font color="#0000ff">[4/17/2008 2:23:50 PM] Task(Install Collection Server Component)<br>Installing from this MSI: 'c:\documents and settings\forefront\desktop\forefront\1.0\Server\MOMServer.msi'<br>Log file: 'D:\Program Files\Microsoft Forefront\Client Security\Server\Logs\MOMServer.log'.<br>[4/17/2008 2:23:50 PM] Task(Install Collection Server Component)<br>Starting Install Collection Server Component.<br>[4/17/2008 2:23:50 PM] Task(Install Collection Server Component)<br>Starting C:\WINDOWS\system32\msiexec.exe.<br>[4/17/2008 2:23:50 PM] Task(Install Collection Server Component)<br>Process command 'C:\WINDOWS\system32\msiexec.exe'<br>[4/17/2008 2:23:50 PM] Task(Install Collection Server Component)<br>Process arguments '/i &quot;c:\documents and settings\forefront\desktop\forefront\1.0\Server\MOMServer.msi&quot; /norestart /qn /l*v &quot;D:\Program Files\Microsoft Forefront\Client Security\Server\Logs\MOMServer.log&quot; INSTALLDIR=&quot;D:\Program Files\Microsoft Forefront\Client Security\Server\Microsoft Operations Manager 2005&quot; CONFIG_GROUP=&quot;ForefrontClientSecurity&quot; ADDLOCAL=&quot;MOMXServer,MOMXUI&quot; ACTIONSUSER=&quot;forefront&quot; ACTIONSDOMAIN=&quot;**********&quot; ACTIONSPASSWORD=&quot;*****&quot; MOM_DB_SERVER=&quot;SERVER C\S5P01&quot; SQLSVR_INSTANCE=&quot;SERVER C\S5P01&quot; MOM_SERVER=&quot;SERVER A&quot; DAS_ACCOUNT=&quot;forefront&quot; DAS_PASSWORD=&quot;*****&quot; DAS_DOMAIN=&quot;**********&quot; '<br>[4/17/2008 2:23:55 PM] Task(Install Collection Server Component)</font></p> <p align=left><font color="#0000ff">[4/17/2008 2:23:55 PM] Task(Install Collection Server Component)<br>The following process failed.<br>Process: C:\WINDOWS\system32\msiexec.exe<br>Exit code: 1603Number of tasks completed: [4/17/2008 2:23:55 PM]</font></p> <p align=left><font color="#0000ff"></font> </p> <p align=left><font color="#000000">Here is the log from the &quot;MOM SERVER&quot; install:</font></p> <p align=left> </p> <p align=left><font color="#0000ff">MSI (s) (50:5C) [14:23:55:447]: Note: 1: 1708 <br>MSI (s) (50:5C) [14:23:55:447]: Product: Microsoft Operations Manager 2005 -- Installation failed.</font></p> <p align=left><font color="#0000ff">MSI (s) (50:5C) [14:23:55:462]: Cleaning up uninstalled install packages, if any exist<br>MSI (s) (50:5C) [14:23:55:462]: MainEngineThread is returning 1603<br>MSI (s) (50:68) [14:23:55:572]: Destroying RemoteAPI object.<br>MSI (s) (50:EC) [14:23:55:572]: Custom Action Manager thread ending.<br>=== Logging stopped: 4/17/2008  14:23:55 ===<br>MSI (c) (98:AC) [14:23:55:572]: Decrementing counter to disable shutdown. If counter &gt;= 0, shutdown will be denied.  Counter after decrement: -1<br>MSI (c) (98:AC) [14:23:55:572]: MainEngineThread is returning 1603<br>=== Verbose logging stopped: 4/17/2008  14:23:55 ===</font></p> <p align=left><font color="#0000ff"></font> </p> <p align=left>Here is the Event Log Error:</p> <p align=left> </p> <p align=left><font color="#0000ff">Source:  MsiInstaller</font></p> <p align=left><font color="#0000ff">Event ID:  11708</font></p> <p align=left><font color="#0000ff">Description:  <font size=1><font size=2>Product: Microsoft Operations Manager 2005 -- Installation failed.</font></font></font></p> <p align=left><font color="#0000ff"><font size=1><font size=2></font></font></font> </p> <p align=left><font color="#0000ff"><font size=1><font color="#000000" size=2>I ran the following command to determine why the MSI was failing:</font></font></font></p> <p align=left><font color="#0000ff"><font size=1><font color="#000000" size=2></font></font></font> </p> <p align=left><font color="#0000ff"><font size=1><font size=2>msiexec.exe /i &quot;c:\documents and settings\forefront\desktop\forefront\1.0\Server\MOMServer.msi&quot; /l* c:\forefront.txt</font></font></font></p> <p align=left><font color="#0000ff"></font> </p> <p align=left><font color="#000000">The installation said that I didn't have all of the prerequsites to complete the MSI install.  According to the log, I was missing a SQL Server installation.  Since I'm not running SQL Server on the Collection Server (Server A), I deceided to install the Microsoft SQL Server Native Client...hoping that would satisfy the requirements.  But no luck with that.  I have all of the prerequsites installed on the Collection Server (Server A):</font></p> <p align=left><font color="#0000ff"></font> </p> <p align=left><font color="#0000ff">.NET 2.0 +</font></p> <p align=left><font color="#0000ff">Network COM+ Access</font></p> <p align=left><font color="#0000ff">Windows Update Agent 2.0 +</font></p> <p align=left><font color="#0000ff"></font> </p> <p align=left><font color="#0000ff">Link:  <a title="http://technet.microsoft.com/en-us/library/bb404276.aspx" href="http://technet.microsoft.com/en-us/library/bb404276.aspx">http://technet.microsoft.com/en-us/library/bb404276.aspx</a></font></p> <p align=left><font color="#0000ff"></font> </p> <p align=left><font color="#000000">From what I can gather from the error logs, I have to install a full version of SQL on the Collection Server (Server A) even though it will not be housing the Collection Database.  I really don't want to do that if it is not necessary.  If anyone has any thoughts to this, I would really appreciate them.</font></p> <p align=left> </p> <p align=left><font color="#ff0000">UPDATE:  I installed Microsoft SQL (2005) Access Client Tools with no luck either.  This is starting to become fustrating.</font></p> <p align=left> </p> <p align=left>Thanks!</p> <p align=left>Huggy Bear</p>Thu, 17 Apr 2008 19:54:23 Z2009-11-19T21:46:18Zhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/05b7f19d-274c-4041-90f3-cdd476027acchttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/05b7f19d-274c-4041-90f3-cdd476027accitconstructhttp://social.technet.microsoft.com/Profile/en-US/?user=itconstructInstall ForeFront with SQL Server 2008Is it possible to install forefront with sql server 2008??<br><br>If not when is the expected date for this method to be made available?<br><br>I am running Windows Server 2008 Enterprise Edition.<br> Sat, 11 Oct 2008 05:50:01 Z2009-11-19T15:09:55Zhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/251a0394-dfa7-47b8-a6e6-e267922f647fhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/251a0394-dfa7-47b8-a6e6-e267922f647fMr Haugenhttp://social.technet.microsoft.com/Profile/en-US/?user=Mr%20HaugenComputers not showing up in FCSMC / Clients definition don't install automaticly<p align=left>As stated in the headline I have a couple of problems:</p> <p align=left>1. NO computers showing up in FCS Management Console (number of managed computers = 0)</p> <p align=left>2. Client agent definition updates are not Automaticly installed after download from WSUS. FCS agent are in a warning state and the Automatic Update warning icon states that forefront updates are ready to install.</p> <p align=left> </p> <p align=left>My setup is FCS 2 topolygy:</p> <p align=left>Server 1: Reporting, management console, databases etc.</p> <p align=left>Server 2: Distribution (WSUS 3.0 with SP1)</p> <p align=left> </p> <p>What I have done is:</p> <ul> <li> <div align=left>Follow the deployment guide for a 2 topology line after line.</div> <div align=left></div> <li> <div align=left>On the WSUS server:</div> <ul> <li> <div align=left>Selected the Forefront product category</div> <li> <div align=left>Enabled the Automatic approval</div> <li> <div align=left>Manually approved the forefront agent for installation (had to accept the license thingy)</div></li></ul> <div></div> <li> <div align=left>I made a WSUS policy for servers and clients with this things, among others:</div> <ul> <li> <div align=left>Configure Automatic Updates Enabled <br>Configure automatic updating: 4 - Auto download and schedule the install <br>Scheduled install day:  0 - Every day <br>Scheduled install time: 05:00</div> <li> <div align=left>Allow Automatic Updates imidiate installation - Enabled</div> <li> <div align=left>Changed the update service location to the WSUS server</div> <li> <div align=left>Applied it to all relevant computers</div> <li> <div align=left>Updates seems to be installed, and the computers restarted when necessary (at night)</div></li></ul> <li> <div align=left>I made a FCS policy (in management console) with the following:</div> <ul> <li> <div align=left>Full scan once a week and quick scan every day</div> <li> <div align=left>Check for updates before scanning</div></li></ul></li></ul> <p align=left>I also ran the GPMC modeling tool to check that the policies was applied.</p> <p align=left>The updates are not installed automatically, except from around 5 am. </p> <p align=left>Is there something I have forgotten here? You have to do this manually??</p>Wed, 09 Apr 2008 11:28:41 Z2009-11-19T12:53:27Zhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/e821635b-bea2-4c8c-91f0-238aa79b600bhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/e821635b-bea2-4c8c-91f0-238aa79b600bJeniferAhttp://social.technet.microsoft.com/Profile/en-US/?user=JeniferAError 0x80240016 downloading definition updates<p>I came in this morning to the nice orange icon in my tray telling me I needed to download definition updates. When I click on &quot;Check for Updates Now&quot; I get &quot;Error found: Code 0x802400016.&quot;</p> <p>What do I need to do to download the updates?</p> <p> </p> <p>Thanks.</p>Fri, 16 Feb 2007 16:10:22 Z2009-11-19T00:56:29Zhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/bdcc7f6b-6b42-43dc-a134-5733d0697a3fhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/bdcc7f6b-6b42-43dc-a134-5733d0697a3fjoanbennetthttp://social.technet.microsoft.com/Profile/en-US/?user=joanbennettRepeated reinstallation for Forefront Client update after hotfix KB952265 I installed KB952265 when it came down from WSUS and it appeared to install successfully. However, my automatic update client now shows the FCS client update (1.0.1703) as a needed update repeatedly. It appears to apply successfully, but automatic updates continues to say it is needed. Anyone else seeing this in the last few days?Thu, 24 Jul 2008 16:25:04 Z2009-11-18T07:16:57Zhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/154caa9a-c400-4e6e-bfae-3f6ae8633a74http://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/154caa9a-c400-4e6e-bfae-3f6ae8633a74Marco Lelli - Progelhttp://social.technet.microsoft.com/Profile/en-US/?user=Marco%20Lelli%20-%20ProgelCentrally manage the setting "Do not scan files accessed by these processes" Hi all, <br>Is there a way to centrally manage this setting that is (for the moment) available only in client console??<br>I've found the solution of copiyng registry keys between PCs but is not so smart.<br>I think that it may be done via and ADM/ADMX on Active Directory.<br>I' hope that the FCS team would include this feature in next revision of the product, but the customers are asking me for this feature right now... :) <br><br>Thanks,<br>Marco LelliMon, 23 Jun 2008 08:50:30 Z2009-11-17T18:35:34Zhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/43fa62f1-f743-4ac6-8ff0-7fade0c91845http://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/43fa62f1-f743-4ac6-8ff0-7fade0c91845remorahttp://social.technet.microsoft.com/Profile/en-US/?user=remoraEvent Notifications-Any ideasHi All,<br/><br/>I am getting the following errors in my event viewer from Forefront. Can anyone shed any light on this? Is there someway I can accept these messages across the domain, by adding an exclusion to the policy? Users are convinced these events are causing there machines to run slower.....<br/><br/> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt">Scan ID: {68EE2AB2-54B9-4977-B321-232A9F37AB2D}</span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt">                Agent: IE Configuration</span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt">                User: PROD\shanc</span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt">                Name: Unknown</span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt">                ID: </span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt">                Severity: Not Yet Classified</span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt">                Category: Not Yet Classified</span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt">                Path Found: iemain:HKCU@S-1-5-21-1606262815-1649469861-2962907493-2295\SOFTWARE\Microsoft\Internet Explorer\Main\\Search Bar</span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt">                Alert Type: Unclassified software</span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt">                Process Name: </span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt">                Detection Type: </span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt">                Status: </span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt"> </span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt">For more information, see Help and Support Center at <a href="http://go.microsoft.com/fwlink/events.asp"><span style="color:#0000ff">http://go.microsoft.com/fwlink/events.asp</span></a>.</span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt"> </span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt">Microsoft Forefront Client Security Real-Time Protection agent has detected changes. Microsoft recommends you analyze the software that made these changes for potential risks. You can use information about how these programs operate to choose whether to allow them to run or remove them from your computer.  Allow changes only if you trust the program or the software publisher. Microsoft Forefront Client Security can't undo changes that you allow.</span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt"> For more information please see the following:</span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt"><a href="http://go.microsoft.com/fwlink/?linkid=74409">http://go.microsoft.com/fwlink/?linkid=74409</a></span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt">                Scan ID: {25BDC744-52B7-4E05-A4FF-0A1C5BB7014C}</span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt">                Agent: IE Configuration</span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt">                User: PROD\shanc</span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt">                Name: Unknown</span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt">                ID: </span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt">                Severity: Not Yet Classified</span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt">                Category: Not Yet Classified</span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt">                Path Found: iemain:HKCU@S-1-5-21-1606262815-1649469861-2962907493-2295\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Page_URL</span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt">                Alert Type: Unclassified software</span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt">                Process Name: </span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt">                Detection Type: </span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt">                Status: </span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt"> </span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt">For more information, see Help and Support Center at <a href="http://go.microsoft.com/fwlink/events.asp"><span style="color:#0000ff">http://go.microsoft.com/fwlink/events.asp</span></a>.</span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt"> </span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt">Microsoft Forefront Client Security Real-Time Protection agent has detected changes. Microsoft recommends you analyze the software that made these changes for potential risks. You can use information about how these programs operate to choose whether to allow them to run or remove them from your computer.  Allow changes only if you trust the program or the software publisher. Microsoft Forefront Client Security can't undo changes that you allow.</span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt"> For more information please see the following:</span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt"><a href="http://go.microsoft.com/fwlink/?linkid=74409">http://go.microsoft.com/fwlink/?linkid=74409</a></span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt">                Scan ID: {FD35BB9C-F216-493D-8351-52AD7E1334C0}</span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt">                Agent: IE Configuration</span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt">                User: PROD\shanc</span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt">                Name: Unknown</span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt">                ID: </span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt">                Severity: Not Yet Classified</span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt">                Category: Not Yet Classified</span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt">                Path Found: iemain:HKCU@S-1-5-21-1606262815-1649469861-2962907493-2295\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page</span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt">                Alert Type: Unclassified software</span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt">                Process Name: </span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt">                Detection Type: </span></p> <p class=MsoNormal style="margin:0cm 0cm 0pt"><span style="font-family:'MS Shell Dlg','sans-serif';font-size:8.5pt">                Status: </span></p>Mon, 16 Nov 2009 03:05:09 Z2009-11-23T02:09:39Zhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/890f8804-a837-473a-a499-62a5028b9815http://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/890f8804-a837-473a-a499-62a5028b9815remorahttp://social.technet.microsoft.com/Profile/en-US/?user=remoraHow to delay scanHi All,<br/><br/>At present I have a policy that says all machines on the network get scanned at 13:00 on a Fri. This is because despite trying to get users to leave pc's on over the weekend some still shut them down. Is there a way I can schedule the policy to run over the weekend? If the pc was shut down over the weekend the scan should run two hours after the pc is switched on so as not to interfere with login scripts, logons etc etc.<br/><br/>ThanksMon, 16 Nov 2009 03:08:28 Z2009-11-18T06:16:55Zhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/368ee5f4-b743-40db-9399-ceb92ff1663bhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/368ee5f4-b743-40db-9399-ceb92ff1663bPERXCAPhttp://social.technet.microsoft.com/Profile/en-US/?user=PERXCAPForefront installation - Failed to initialize 0x80070424 I have the same issue mentioned in another posting, but I already re-installed XP SP2.  At first attempt to install Forefront, it failed, apparently because I was not at SP3.  I upgraded to SP3 and now I get the &quot;failed to initialize&quot; message.  Do I have to re-install again?Sat, 14 Nov 2009 18:27:03 Z2009-11-23T02:08:43Zhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/ec8771c2-a7a3-4889-9d80-b265955514echttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/ec8771c2-a7a3-4889-9d80-b265955514ecGroenbechhttp://social.technet.microsoft.com/Profile/en-US/?user=GroenbechInstalling one-server topology fails on Windows Server 2008 x86 Standard Edition<p>Hi,<br/>I am trying to install FFCS on a fresh Windows Server 2008 x86 Standard Edition. I have followed <a href="http://technet.microsoft.com/da-dk/library/cc901471(en-us).aspx">http://technet.microsoft.com/da-dk/library/cc901471(en-us).aspx</a> preparing the server for FFCS installation, but when the installation starts, it fails at the very first action (Install the Collection Database).<br/><br/>I have pasted the log below:<br/><br/>Number of verifications started: [13-11-2009 10:16:53]</p> <p>[13-11-2009 10:16:53] Verification(Verifying operating system requirements)</p> <p><br/>[13-11-2009 10:16:54] Verification(Verifying hardware requirements)<br/>Warning: Having two or more processors is recommended for the specified component(s).  Recommended processor speed (in MHz): 2850<br/>Warning: More RAM is recommended for the specified component(s).  Recommended RAM (in MB): 4096<br/>Warning:  More disk space is recommended for the specified component(s).  Recommended available disk space on drive D (in MB): 107520</p> <p>[13-11-2009 10:16:54] Verification(Verifying software prerequisites)</p> <p><br/>[13-11-2009 10:16:55] Verification(Verifying collection database)</p> <p><br/>[13-11-2009 10:16:55] Verification(Verifying access to collection server)</p> <p><br/>[13-11-2009 10:16:56] Verification(Verifying DAS account)</p> <p><br/>[13-11-2009 10:16:56] Verification(Verifying access to reporting server)</p> <p><br/>[13-11-2009 10:16:56] Verification(Verifying reporting database configuration)</p> <p><br/>[13-11-2009 10:16:57] Verification(Verifying URLs for reports)</p> <p><br/>[13-11-2009 10:16:57] Verification(Verifying action account)</p> <p><br/>[13-11-2009 10:16:58] Verification(Verifying DAS account)</p> <p><br/>[13-11-2009 10:16:58] Verification(Verifying DTS account)</p> <p><br/>[13-11-2009 10:16:59] Verification(Verifying reporting database service startup)</p> <p>Number of verifications completed: [13-11-2009 10:16:59]<br/>Tasks started: [13-11-2009 10:17:01]<br/>Root Directory: E:\SERVER<br/>Current Directory: E:\<br/>[13-11-2009 10:17:01] Task(Install the Collection Database)<br/>Installing from this MSI: 'e:\Server\MOMServer.msi'<br/>Log file: 'C:\Program Files\Microsoft Forefront\Client Security\Server\Logs\MOMDB.log'.<br/>[13-11-2009 10:17:01] Task(Install the Collection Database)<br/>Starting Install the Collection Database.<br/>[13-11-2009 10:17:01] Task(Install the Collection Database)<br/>Starting C:\Windows\system32\msiexec.exe.<br/>[13-11-2009 10:17:01] Task(Install the Collection Database)<br/>Process command 'C:\Windows\system32\msiexec.exe'<br/>[13-11-2009 10:17:01] Task(Install the Collection Database)<br/>Process arguments '/i &quot;e:\Server\MOMServer.msi&quot; /norestart /qn /l*v &quot;C:\Program Files\Microsoft Forefront\Client Security\Server\Logs\MOMDB.log&quot; INSTALLDIR=&quot;C:\Program Files\Microsoft Forefront\Client Security\Server\Microsoft Operations Manager 2005&quot; ADDLOCAL=&quot;MOMXDB&quot; MOM_SERVER=&quot;server&quot; SQLSVR_INSTANCE=&quot;server&quot; DAS_ACCOUNT=&quot;das&quot; DAS_PASSWORD=&quot;*****&quot; DAS_DOMAIN=&quot;domain&quot; DB_SIZE=&quot;15360&quot; CONFIG_GROUP=&quot;ForefrontClientSecurity&quot; '<br/>[13-11-2009 10:17:07] Task(Install the Collection Database)</p> <p>[13-11-2009 10:17:07] Task(Install the Collection Database)<br/>The following process failed.<br/>Process: C:\Windows\system32\msiexec.exe<br/>Exit code: 1603Number of tasks completed: [13-11-2009 10:17:07]<br/><br/>Does anyone have an idea, why it is failing?<br/><br/>My SQL-databases are located on D: - is that a problem?<br/><br/>Thanks in advance!<br/><br/>/Michael</p>Fri, 13 Nov 2009 09:21:43 Z2009-11-16T07:40:30Zhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/9e59687d-b66d-4292-ac33-941aaf224d2chttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/9e59687d-b66d-4292-ac33-941aaf224d2cShahin Zamanhttp://social.technet.microsoft.com/Profile/en-US/?user=Shahin%20ZamanInstalling Forefront Client Security on server 2008 standard<span lang=EN-GB> <p>Hi <br/>I am getting these error and have tried what seems to be everything but cannot get past it...<br/>Error: Could not access this address: <a href="http://server/Reports">http://server/Reports</a> Details: The remote server returned an error: (500) Internal Server Error.<br/><span lang=EN-GB>Error: Could not access this address: http://TRINBMNP01/ReportServer Details: The remote server returned an error: (500) Internal Server Error.<br/><br/>Can anyone please help me as I seem to have a brick wall on this<br/>many thanks<br/>Shahin</span></p> </span>Tue, 08 Sep 2009 15:44:51 Z2009-11-15T10:43:30Zhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/e09770fb-0e84-495d-88d3-6685371b72achttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/e09770fb-0e84-495d-88d3-6685371b72acdndoorlaghttp://social.technet.microsoft.com/Profile/en-US/?user=dndoorlagxp forefront client install/uninstall fail manual removal<p>I have an XP client who has a problem with their Forefront Client install. When I attempt to uninstall the Forefront client security antimalware service they are receiving an error &quot;Application failed to initialize: 0x80070424. The specified service does not exist as an installed service&quot;.</p> <p>I have then attempted to install with the /R switch to &quot;force&quot; a reinstall and I receive the same error.</p> <p>Are there any instructions on MANUALLY REMOVING FOREFRONT so I can then install the client succesfully?</p> <p>Any help appreciatted.</p> <p>THANKS</p>Wed, 15 Jul 2009 19:50:03 Z2009-11-14T18:23:35Zhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/07c11dbf-8de4-4751-884e-3c203652a90ahttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/07c11dbf-8de4-4751-884e-3c203652a90aPaskualehttp://social.technet.microsoft.com/Profile/en-US/?user=PaskualeDeploy FCS without MOM agent<span style="" lang=EN-US><span style="font-size:small"><span style="font-family:Calibri"> <p class=MsoNormal style="line-height:normal;margin:0cm 0cm 10pt"><span style="color:black;font-size:12pt" lang=EN-US>Is it possible deploy FCS to my domain client without install MOM agent, by using AD-GPO policy?</span></p> <p class=MsoNormal style="line-height:normal;margin:0cm 0cm 10pt"><span style="color:black;font-size:12pt" lang=EN-US>If yes, how can I do?</span></p> <span style="" lang=EN-US><font size=3><font face=Calibri> <p class=MsoNormal style="line-height:normal;margin:0cm 0cm 10pt"><span style="color:black;font-size:12pt" lang=EN-US>Thanks you</span></p> </font></font></span></span><span style="" lang=EN-US><font size=3> <p class=MsoNormal style="line-height:normal;margin:0cm 0cm 10pt"> </p> </font></span></span> <p class=MsoNormal style="line-height:normal;margin:0cm 0cm 10pt"> </p> </span>Fri, 13 Nov 2009 14:35:05 Z2009-11-23T02:06:23Zhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/be61d5e1-8075-4f97-b0b9-ae6641eeb8f7http://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/be61d5e1-8075-4f97-b0b9-ae6641eeb8f7Paskualehttp://social.technet.microsoft.com/Profile/en-US/?user=PaskualeFCS /NOMOM fail with wsus<p class=MsoNormal style="margin:0cm 0cm 10pt"><span style="" lang=EN-US><span style="font-size:small"><span style="font-family:Calibri">Hi, to all and sorry for my poor English<br/><br/></span></span></span><span style="" lang=EN-US><span style="font-size:small"><span style="font-family:Calibri">I have installed my FCS on a notebook that is not domain member by doing this tasks.</span></span></span><span style="" lang=EN-US><span style="font-size:small"><span style="font-family:Calibri"><br/>-Forced Windows Update to point my local Wsus by editing local policy; (Wsus test pass successful)<br/></span></span></span><span style="" lang=EN-US><span style="font-size:small"><span style="font-family:Calibri">-CLIENTSETUP /NOMOM<br/></span></span></span><span style="" lang=EN-US><span style="font-size:small"><span style="font-family:Calibri">-FCSLOCALPOLICYTOLS /I FCS.REG<br/></span></span></span><span style="" lang=EN-US><span style="font-size:small"><span style="font-family:Calibri"><br/>In my installed application I can’t initially seen any Microsoft MOM 2005 client Agent, but as soon as client windows update contact my wsus, it want upgrade my FCS (Client) and virus definition to newer version.</span></span></span><span style="" lang=EN-US><span style="font-size:small"><span style="font-family:Calibri"><br/>-Definition upgrade was ok.<br/></span></span></span><span style="" lang=EN-US><span style="font-size:small"><span style="font-family:Calibri">-Client installation start but fail with error!<br/></span></span></span><span style="" lang=EN-US><span style="font-size:small"><span style="font-family:Calibri"><br/>After the installation failure, I can see in my installed application a new entry: Microsoft MOM 2005 client Agent.<br/></span></span></span><span style="" lang=EN-US><span style="font-size:small"><span style="font-family:Calibri">Why the local wsus try to install MOM client when upgrade my FCS on my notebook, even if I have initially installed with /NOMOM And why the upgrade fail?<br/><br/>Thanks</span></span></span></p>Thu, 12 Nov 2009 17:41:14 Z2009-11-23T02:04:56Zhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/00945134-1bfa-4623-90b6-e0228f2df485http://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/00945134-1bfa-4623-90b6-e0228f2df485mjpxhttp://social.technet.microsoft.com/Profile/en-US/?user=mjpxAction: Collection server role Failures<p>Hi, I'm doing a single server test setup and am running into the following error during the installation of &quot;Collection Server Disabling Rules&quot;</p> <p><font size=1>[1/9/2007 11:52:36 AM] Task(Collection Server Disabling Rules)</font></p> <p><font size=1>Exception Execution against the runtime failed. See inner exception for more details.</font></p> <p><font size=1>Stacktrace</font></p> <p><font size=1>   at Microsoft.EnterpriseManagement.Mom.Internal.RuntimeInterop.CommitConfigurationChange(String momServer, String configurationName)</font></p> <p><font size=1>   at Microsoft.EnterpriseManagement.Mom.ManagementServer.CommitConfigurationChange()</font></p> <p><font size=1>   at Microsoft.Forefront.ClientSecurity.Configure.MOMDisableMOMRulesTask.CollectionServerTask()</font></p> <p><font size=1>   at Microsoft.Forefront.ClientSecurity.Configure.MOMDisableMOMRulesTask.ThreadedWebServiceTask(Object x)</font></p> <p>Any thoughts on this issue?  Everything else completes successfully (except for the three steps following this error).  Thanks!</p>Tue, 09 Jan 2007 16:58:46 Z2009-11-12T02:34:20Zhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/59178030-7341-42d5-87c7-889f0a9391e0http://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/59178030-7341-42d5-87c7-889f0a9391e0Kidilam Sameerhttp://social.technet.microsoft.com/Profile/en-US/?user=Kidilam%20SameerForeFont Server Installation, Error at MOM Reporting Service, return code 1603 <p><br/><br/>Hi<br/><br/>I am trying to install forefront Server in an office environment.. But i got stuck while it reached Install MOM reporting service.<br/>The Server is installed with SQL Server 2005 and OS with windows Server 2003 with SP 1 ...<br/><br/>I got the following log error in the installation time...<br/>Please help me to solve this as it is a critical situation.<br/><br/><br/>Property(S): Welcome_Title = Welcome to the Microsoft Operations Manager 2005 Reporting Setup Wizard<br/>Property(S): SP1WelcomeDlg_Title = Welcome to the Microsoft Operations Manager 2005 SP1 Software Update Wizard<br/>Property(S): Welcome_Desc = The wizard will install Microsoft Operations Manager 2005 Reporting on your computer. To continue, close all other programs and click Next.<br/>Property(S): PatchWelcomeDlg_Desc = The wizard will Update MOM 2005 Reporting on your computer. To continue, close all other programs and click Next.<br/>Property(S): Maintenance_Text2 = The setup wizard will allow you to reinstall or remove Microsoft Operations Manager 2005 Reporting. To continue, click Next.<br/>Property(S): Resume_ResumeText = The setup wizard will complete the suspended installation of Microsoft Operations Manager 2005 Reporting on your computer. To continue, click Next.<br/>Property(S): Resume_PreselectedText = The setup wizard will complete the installation of Microsoft Operations Manager 2005 Reporting on your computer. To continue, click Next.<br/>Property(S): Resume_Text1 = Resuming the setup wizard for Microsoft Operations Manager 2005 Reporting<br/>Property(S): ProgressDlg_Desc1 = The program components you selected are being installed.<br/>Property(S): ProgressDlg_Desc2 = The program components you selected are being uninstalled.<br/>Property(S): ProgressDlg_Title1 = Installing Microsoft Operations Manager 2005 Reporting<br/>Property(S): ProgressDlg_Title2 = Uninstalling Microsoft Operations Manager 2005 Reporting<br/>Property(S): ProgressDlg_Text1 = Please wait while the setup wizard installs Microsoft Operations Manager 2005 Reporting. This may take several minutes.<br/>Property(S): ProgressDlg_Text2 = Please wait while the setup wizard uninstalls Microsoft Operations Manager 2005 Reporting. This may take several minutes.<br/>Property(S): Progress_lbStatus = Status:<br/>Property(S): InitDlg_Text1 = Welcome to the Microsoft Operations Manager 2005 Reporting Setup Wizard<br/>Property(S): InitDlg_Text2 = Please wait while the setup wizard prepares to guide you through the setup.<br/>Property(S): Exit_DlgTitle = Completing the Microsoft Operations Manager 2005 Reporting Setup Wizard<br/>Property(S): ExitDialog_RunDTSTask = Transfer data from the MOM database now<br/>Property(S): Exit_DlgDesc1 = The setup wizard has successfully installed Microsoft Operations Manager 2005 Reporting. To close this wizard, click Finish.<br/>Property(S): Exit_DlgDesc2 = The setup wizard has successfully uninstalled Microsoft Operations Manager 2005 Reporting. To close this wizard, click Finish.<br/>Property(S): UserExit_FinishText1 = Your system has not been modified. To install this program at a later time, please run the installation again.<br/>Property(S): UserExit_RestContText1 = You can either keep any existing installed elements on your system to continue this installation at a later time or you can restore your system to its original state prior to the installation.<br/>Property(S): UserExit_TextLine = The setup wizard was interrupted before Microsoft Operations Manager 2005 Reporting could be installed.<br/>Property(S): FatalError_FinishText1 = Your system has not been modified. To complete installation at another time, please run setup again.<br/>Property(S): FatalError_RestContText1 = You can either keep any existing installed elements on your system to continue this installation at a later time or you can restore your system to its original state prior to the installation.<br/>Property(S): FatalError_RestContText2 = Click Restore or Continue Later to exit the wizard.<br/>Property(S): FatalError_TextLine = The setup wizard was interrupted before Microsoft Operations Manager 2005 Reporting could be installed.<br/>Property(S): DirectorySelectionDlg_Title = Destination Folder<br/>Property(S): DirectorySelectionDlg_Text = Click Next to install in this folder, or click Change to install in a different folder.<br/>Property(S): DirectorySelectionDlg_Path = Install Microsoft Operations Manager 2005 Reporting to:<br/>Property(S): ReadyToInstallDlg_Desc = The setup wizard is ready to begin installation.<br/>Property(S): ReadyToInstallDlg_Title1 = Ready to Modify the Program<br/>Property(S): ReadyToInstallDlg_Title3 = Ready to Install<br/>Property(S): ReadyToInstallDlg_Text1 = Click Install to begin the installation.<br/>Property(S): ReadyToInstallDlg_Text2 = If you want to review or change any of your installation settings, click Back. Click Cancel to exit the setup wizard.<br/>Property(S): ReadyToRemoveDlg_Text1 = Click Remove to remove Microsoft Operations Manager 2005 Reporting from your computer. After removal, this program will no longer be available for use.<br/>Property(S): ReadyToRemoveDlg_Text2 = If you want to review or change any settings, click Back.<br/>Property(S): ReadyToRemoveDlg_Title = Remove the Program<br/>Property(S): ReadyToRemoveDlg_Desc = You have chosen to remove the program from your system.<br/>Property(S): FileInUse_DlgTitle = Files in Use<br/>Property(S): FileInUse_DlgDesc = Some files that need to be updated are currently in use.<br/>Property(S): FileInUse_DlgText = The following applications are using files that need to be updated by this setup. Close these applications and click Retry to continue.<br/>Property(S): RegisterUserDlg_Name = &amp;User Name:<br/>Property(S): RegisterUserDlg_Company = &amp;Organization:<br/>Property(S): RegisterUserDlg_Title = Registration Information<br/>Property(S): RegisterUserDlg_Desc = Enter your name. It is not necessary to enter a company name.<br/>Property(S): LicenseDlg_Desc = Please read the following License Agreement. Press the PAGE DOWN key to see the rest of the agreement.<br/>Property(S): LicenseDlg_Title = End-User License Agreement<br/>Property(S): DiskSpaceDlg_Text = The highlighted volumes do not have enough disk space available for the currently selected components. You can remove files from the highlighted volumes, choose to install less components onto local drives, or select different destination drives.<br/>Property(S): DiskSpaceDlg_Title = Disk Space Requirements<br/>Property(S): DiskSpaceDlg_Desc = The disk space required for the installation of the selected components.<br/>Property(S): MaintenanceDlg_Remove = Remove Microsoft Operations Manager 2005 Reporting from your computer.<br/>Property(S): MaintenanceDlg_Title = Program Maintenance<br/>Property(S): MaintenanceDlg_Desc = Repair, or remove the program.<br/>Property(S): MaintenanceDlg_Repair = Repair Microsoft Operations Manager 2005 Reporting. Use this option to fix missing or corrupt files, shortcuts, and registry entries.<br/>Property(S): BrowseFolderDlg_Combo = &amp;Look in:<br/>Property(S): BrowseFolderDlg_Tail = &amp;Folder name:<br/>Property(S): BrowseFolderDlg_Desc = Browse to the destination folder.<br/>Property(S): BrowseFolderDlg_DescData = Browse to the folder you want to create database data file in.<br/>Property(S): BrowseFolderDlg_DescLog = Browse to the folder you want to create database log file in.<br/>Property(S): BrowseFolderDlg_Title = Change Current Destination Folder<br/>Property(S): BrowseFolderDlg_TitleData = Change Database Data File Folder<br/>Property(S): BrowseFolderDlg_TitleLog = Change Database Log File Folder<br/>Property(S): OutOfSpaceDlg_Title = Out of Disk Space<br/>Property(S): OutOfSpaceDlg_Text = The highlighted volumes do not have enough disk space available for the currently selected components. You can remove files from the highlighted volumes, choose to install less components onto local drives, or select different destination drives.<br/>Property(S): OutOfSpaceDlg_Desc = Disk space required for the installation exceeds available disk space.<br/>Property(S): CancelSetupDlg_Text = Are you sure you want to cancel the Microsoft Operations Manager 2005 Reporting installation?<br/>Property(S): SetupErrorDlg_Error = &lt;error text goes here&gt;&lt;error text goes here&gt;&lt;error text goes here&gt;&lt;error text goes here&gt;&lt;error text goes here&gt;&lt;error text goes here&gt;&lt;error text goes here&gt;&lt;error text goes here&gt;&lt;error text goes here&gt;&lt;error text goes here&gt;&lt;error text goes here&gt;<br/>Property(S): User_Account = &amp;User Name:<br/>Property(S): User_Password = &amp;Password:<br/>Property(S): User_Domain = &amp;Domain or local computer:<br/>Property(S): AccountVerificationErrDlg_Text3 = To continue setup, go back and enter the correct account information.<br/>Property(S): DatabaseOptionsDlg_Title = Database and Log File Information<br/>Property(S): DatabaseOptionsDlg_Desc = Enter the size and location for the database data and log files. For more information about calculating the space required, refer to the product documentation.<br/>Property(S): DatabaseOptionsDlg_Size = Database size:<br/>Property(S): DatabaseOptionsDlg_DataLocation = Data file location:<br/>Property(S): DatabaseOptionsDlg_LogLocation = Log file location:<br/>Property(S): DatabaseOptionsDlg_FilesGroup = Database files<br/>Property(S): AdvancedDBOptionsDlg_Title = Database Files Location<br/>Property(S): AdvancedDBOptionsDlg_Desc = Select the location for the database and log files<br/>Property(S): AdvancedDBOptionsDlg_DataLoc = Database Data File Location:<br/>Property(S): AdvancedDBOptionsDlg_LogLoc = Database log file location:<br/>Property(S): DatabaseOptionsErrDlg_Title1 = Invalid Database Size<br/>Property(S): DatabaseOptionsErrDlg_Title2 = Out of disk space<br/>Property(S): DatabaseOptionsErrDlg_Title3 = Database Or Database Files Already Exists<br/>Property(S): DatabaseOptionsErrDlg_Text11 = The Microsoft Operations Manager 2005 Reporting database requires a minimum of 300MB. To continue setup, go back and change the database size to be greater or equal to 300.<br/>Property(S): DatabaseOptionsErrDlg_Text12 = Setup found that the selected database files locations do not contain sufficent disk space. To continue setup go back and either choose a different drive or reduce the database size.<br/>Property(S): DatabaseOptionsErrDlg_Text13 = Setup found that either the selected database instance already contains the 'Microsoft Operations Manager 2005 Reporting' database or the specified file locations already contain database files RepData.mdf or RepLog.ldf. To continue setup go back and either remove the database, database files, or select a different directory.<br/>Property(S): SQLServerInstanceDlg_Title = SQL Server Database Instance<br/>Property(S): SQLServerInstanceDlg_Desc = Select the name of the SQL Server instance to host the Microsoft Operations Manager 2005 Reporting database.<br/>Property(S): SQLServerInstanceDlg_Note = (Note: Setup will automatically start the Microsoft SQL Server and SQL Server Agent services if they are not running.)<br/>Property(S): SQLServerInstanceDlg_SQLServer = SQL &amp;Server Instance<br/>Property(S): RosettaServerDlg_Title = SQL Server Reporting Services Server<br/>Property(S): RosettaServerDlg_Desc = Select the machine name of the SQL Server Reporting Services Server.<br/>Property(S): RosettaServerDlg_RosettaServer = Enter the SQL Server Reporting Services &amp;Server Name<br/>Property(S): RosettaServerDlg_ManualRosettaVDirs = &amp;Automatically detect virtual directories<br/>Property(S): RosettaServerDlg_ReportServerVDir = Report Server &amp;Virtual Directory (e.g. ReportServer)<br/>Property(S): RosettaServerDlg_ReportManagerVDir = Report Manager Virtual &amp;Directory (e.g. Reports)<br/>Property(S): RosettaServerDlg_Desc2 = For example by specifying &quot;ReportServer&quot;, report server can be accessed as: <a href="http://&lt;servername&gt;/ReportServer">http://&lt;servername&gt;/ReportServer</a><br/>Property(S): ClusterNode_Text = &amp;Passive node of a Windows Server Cluster<br/>Property(S): OperationalDataReportingSettingsDlg_Title = Operational Data Reports Settings<br/>Property(S): OperationalDataReportingSettingsDlg_Yes = &amp;Yes, I want to send operational reports (Recommended)<br/>Property(S): OperationalDataReportingSettingsDlg_No = N&amp;o, I do not want to send operational reports<br/>Property(S): OperationalDataReportingSettingsDlg_Desc = Enabling this feature requires a MOM Agent to be installed.<br/>Property(S): ReadyToInstall_DlgDesc_UpgradeText = The wizard is ready to begin Operations Manager Reporting Services upgrade.<br/>Property(S): ReadyToInstall_DlgText_UpgradeText = Click Upgrade to begin the upgrade.<br/>Property(S): ButtonText_Upgrade = &amp;Upgrade<br/>Property(S): Upgrade_Welcome_Text1 = Welcome to the Microsoft Operations Manager 2005 Reporting Upgrade Wizard<br/>Property(S): Upgrade_Welcome_Text2 = Select this option to upgrade your Microsoft Operations Manager 2005 Reporting. Setup will remove previous versions, and install the new version based on your current configuration.<br/>Property(S): Upgrade_Welcome_Text3 = It is recommended that you back up your database prior to starting the upgrade.<br/>Property(S): UpgradeVerification_Text = Upgrade MOM 2005 Reporting<br/>Property(S): SQLServerNotFoundDlg_Title = Microsoft SQL Server 2000 Service Pack 3 or Higher Not Found<br/>Property(S): SQLServicesErrDlg_Title = Setup failed to start Microsoft SQL Server services<br/>Property(S): SQLServerNotFoundDlg_Text1 = The Microsoft Operations Manager 2005 Reporting database component requires Microsoft SQL Server 2000 Service Pack 3 or above version. The selected instanace does not have the correct version. To continue setup, go back, choose custom setup, and unselect the database component.<br/>Property(S): SQLServicesErrDlg_Text1 = The Microsoft Operations Manager 2005 Reporting setup failed to start Microsoft SQL Server services. To continue setup, start the SQL Server services for the selected SQL Server instance or go back and choose a different SQL Server instance.<br/>Property(S): LicenseDlg_No = I &amp;do not accept the terms in the license agreement<br/>Property(S): LicenseDlg_Yes = I &amp;accept the terms in the license agreement<br/>Property(S): DatabaseOptionsDlg_MB = MB<br/>Property(S): MOMDBServerDlg_Title = MOM Database Server Instance<br/>Property(S): MOMDBServerDlg_Desc = You have chosen to install a Microsoft Operations Manager 2005 component that requires a MOM database.<br/>Property(S): MOMDBServerDlg_Help = Type the name of the SQL Server instance that hosts the Microsoft Operations Manager database.<br/>Property(S): MOMDBServerDlg_DBInstance = &amp;MOM Database Server (server\instance)<br/>Property(S): MOMDBServerErrDlg_Title1 = MOM Database Server Name cannot be Blank<br/>Property(S): MOMDBServerErrDlg_Title2 = Setup was unable to contact the database server.<br/>Property(S): MOMDBServerErrDlg_Title3 = Invalid Microsoft Operations Manager Database Version<br/>Property(S): MOMDBServerErrDlg_Title4 = Invalid Microsoft Operations Manager Database Version<br/>Property(S): MOMDBServerErrDlg_Title5 = Unable to determine Microsoft Operations Manager Database Version<br/>Property(S): MOMDBServerErrDlg_Text1 = You did not provide a name for the MOM database server name.  To provide the MOM database server name, click Back.  Click Cancel to exit the installer.<br/>Property(S): MOMDBServerErrDlg_Desc11 = Missing MOM database server name.<br/>Property(S): MOMDBServerErrDlg_Desc12 = To continue setup, go back and provide a database server computer name which hosts the Microsoft Operations Manager database.<br/>Property(S): MOMDBServerErrDlg_Desc21 = Setup was unable to locate a MOM database on the specified database server.<br/>Property(S): MOMDBServerErrDlg_Desc22 = To continue setup, go back and either change the database server name or verify that Microsoft SQL Server is running on the specified computer and that the database is installed.<br/>Property(S): MOMDBServerErrDlg_Desc31 = Setup found that the Microsoft Operations Manager database version on the specified database server is not the same as the current product version.<br/>Property(S): MOMDBServerErrDlg_Desc32 = To continue setup, go back and either change the database server name or upgrade the database on the specified server to the current version.<br/>Property(S): MOMDBServerErrDlg_Desc41 = Reporting cannot be installed against a MOM Express install<br/>Property(S): MOMDBServerErrDlg_Desc42 = To continue setup, go back and change the database server name to a non-express version of Microsoft Operations Manager.<br/>Property(S): MOMDBServerErrDlg_Desc51 = Unable to determine the Microsoft Operations Manager Database Version<br/>Property(S): MOMDBServerErrDlg_Desc52 = To continue setup, go back and change the database server name or validate that MOM is installed peroperly.<br/>Property(S): MOMReportURLDlg_Text1 = You have chosen to install a Microsoft Operations Manager component that requires a Reporting Server.<br/>Property(S): MOMReportURLDlg_Text2 = Type the name of the Report Server that will host the Microsoft Operations Manager Reports.<br/>Property(S): MOMReportURLDlg_Server = &amp;Report Server<br/>Property(S): MOMReportURLDlg_Title = Microsoft Operations Manager Reports Server<br/>Property(S): ReportingNotInstalled = Microsoft SQL Server Reporting Services must be installed prior to installing Microsoft Operations Manager 2005 Reporting.<br/>Property(S): MinimumOSMsg = This product must be installed on Windows 2000 or later.<br/>Property(S): NetFrameworkNotInstalled = The .NET framework is required to install this application.<br/>Property(S): NotAdministrator = This product requires administrator privileges to install.<br/>Property(S): SchedulerTaskAccountDlg_Title = Data Transfer Task Account<br/>Property(S): SchedulerTaskAccountDlg_Desc = Specify a domain account that has access to both the MOM database and the Microsoft Operations Manager 2005 Reporting database.<br/>Property(S): SchedulerTaskAccountDlg_Help = The Data Transfer Task Account will be used to run the scheduled task to transfer data between the MOM database and the MOM reporting database.<br/>Property(S): AccountVerificationErrDlg_Text1 = Setup is unable to confirm the account.<br/>Property(S): AccountVerificationErrDlg_Title = Account Verification Error<br/>Property(S): PreReqResultDlg_PreReq_Recommended_Not_Met = The recommended requirements are not met. You may continue to install MOM, but optimal performance may not be achieved. Click on View Log for more information.<br/>Property(S): PreReqResultDlg_PreReq_Met = Requirements are met for the installation. Click on View Log for more information.<br/>Property(S): PreReqResultDlg_PreReq_Not_Met = The minimum requirements are not met. Click on View Log for more information<br/>Property(S): PreReqResultDlg_PreReq_No_Component_Selected = No Components have been selected for install. Please go back and select one or more components for install. <br/>Property(S): PreReqResultDlg_Title_PreReq_Met = Prerequisite Check Passed<br/>Property(S): PreReqResultDlg_Title_PreReq_Recommended_Not_Met = Prerequisite Check Passed with Warnings<br/>Property(S): PreReqResultDlg_Title_PreReq_Not_Met = Prerequisite Check Failed<br/>Property(S): ButtonText_ViewLog = &amp;View Log<br/>Property(S): ReportingUserDlg_Title = Reporting User Account<br/>Property(S): ReportingUserDlg_Desc = Specify the credentials that should be used by the MOM Reporting Server to connect to the MOM Reporting database.<br/>Property(S): This_Computer =  (this Computer)<br/>Property(S): _CreateDatabase.B8A67CEF_63FF_40C5_B79F_68FE309F3E50 = REPORTINGDW QIQ-SRR1-SUS1 SystemCenterReporting 1024 C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Data\ C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Data\<br/>Property(S): _RollBack_CreateDatabase.B8A67CEF_63FF_40C5_B79F_68FE309F3E50 = REPORTINGDW QIQ-SRR1-SUS1 SystemCenterReporting<br/>Property(S): _ExecuteSqlScripts.B8A67CEF_63FF_40C5_B79F_68FE309F3E50 = REPORTINGDW QIQ-SRR1-SUS1 SystemCenterReporting 1 DWBuildReportingSQL C:\Program Files\Microsoft Forefront\Client Security\Server\Reporting\Database\Build_reporting_db.sql DWMOM2005LocaleSQLInstall C:\Program Files\Microsoft Forefront\Client Security\Server\Reporting\Database\MOMDW2005LOCALE.sql DWMOM2005SP1 C:\Program Files\Microsoft Forefront\Client Security\Server\Reporting\Database\MOMXDWSP1Upgrade.sql<br/>Property(S): _ImportSchema.B8A67CEF_63FF_40C5_B79F_68FE309F3E50 = C:\Program Files\Microsoft Forefront\Client Security\Server\Reporting\Reporting\SMC.ImportSchema.dll;C:\Program Files\Microsoft Forefront\Client Security\Server\Reporting\Schema\;QIQ-SRR1-SUS1;SystemCenterReporting;true<br/>Property(S): _GenerateMTViews.B8A67CEF_63FF_40C5_B79F_68FE309F3E50 = C:\Program Files\Microsoft Forefront\Client Security\Server\Reporting\Reporting\SMC.MTViewGenerator.dll;QIQ-SRR1-SUS1;SystemCenterReporting;C:\Program Files\Microsoft Forefront\Client Security\Server\Reporting\Reporting\PropertyViews.sql;<br/>Property(S): _ImportReports.B8A67CEF_63FF_40C5_B79F_68FE309F3E50 = C:\Program Files\Microsoft Forefront\Client Security\Server\Reporting\Reporting\MOM.Reporting.ReportImportExport.dll;C:\Program Files\Microsoft Forefront\Client Security\Server\Reporting\Reporting\MicrosoftOperationsManager2005Reports.xml;http://QIQ-SRR1-SUS1//ReportServer;QIQ-SRR1-SUS1;SystemCenterReporting<br/>Property(S): _LinkReporting = Write QIQ-SRR1-SUS1 OnePoint <a href="http://QIQ-SRR1-SUS1//ReportServer">http://QIQ-SRR1-SUS1//ReportServer</a> <a href="http://QIQ-SRR1-SUS1//Reports/Pages/Folder.aspx?ItemPath=/Microsoft+Operations+Manager+Reporting&amp;IsDetailsView=False">http://QIQ-SRR1-SUS1//Reports/Pages/Folder.aspx?ItemPath=%2fMicrosoft+Operations+Manager+Reporting&amp;IsDetailsView=False</a> QIQ-SRR1-SUS1 SystemCenterReporting<br/>Property(S): _Rollback_LinkReporting = Delete QIQ-SRR1-SUS1 OnePoint <a href="http://QIQ-SRR1-SUS1//ReportServer">http://QIQ-SRR1-SUS1//ReportServer</a> <a href="http://QIQ-SRR1-SUS1//Reports/Pages/Folder.aspx?ItemPath=/Microsoft+Operations+Manager+Reporting&amp;IsDetailsView=False">http://QIQ-SRR1-SUS1//Reports/Pages/Folder.aspx?ItemPath=%2fMicrosoft+Operations+Manager+Reporting&amp;IsDetailsView=False</a> QIQ-SRR1-SUS1 SystemCenterReporting<br/>Property(S): _AddSchedulerTask = **********<br/>Property(S): _CreateDataSource.B8A67CEF_63FF_40C5_B79F_68FE309F3E50 = **********<br/>Property(S): _RegisterDTSEventSource.B8A67CEF_63FF_40C5_B79F_68FE309F3E50 = C:\Program Files\Microsoft Forefront\Client Security\Server\Reporting\Reporting\MOM.Datawarehousing.DTSPackageGenerator.exe<br/>Property(S): _ExecuteStoredProcedures.B8A67CEF_63FF_40C5_B79F_68FE309F3E50 = QIQ-SRR1-SUS1 SystemCenterReporting p_SetupLogins N'QIQ-SRR1-SUS1' p_CreateDWGroomJob @ownerLogin=N'qiqatar\fcsadmin',@destCatalog=N'SystemCenterReporting'<br/>Property(S): _SetSCSecurity = C:\Program Files\Microsoft Forefront\Client Security\Server\Reporting\<br/>Property(S): _CreateLocalGroups = SC DW Reader  SC DW Reader can view data in SC DW database SC DW DTS  SC DW DTS can view data in MOM DB, can modify data in SC DW database<br/>Property(S): _Rollback_CreateLocalGroups = SC DW Reader <br/>Property(S): _AddUserAccountToLocalGroup = SC DW Reader qiqatar\fcsadmin  SC DW DTS qiqatar\fcsadmin  SC DW DTS qiqatar\fcsadmin QIQ-SRR1-SUS1<br/>Property(S): VersionNT = 502<br/>Property(S): SecureCustomProperties = MOMX_REPORTING_FOUND<br/>Property(S): Redist.51D569E0_8A28_11D2_B962_006097C4DE24 = C:\WINDOWS\system32\<br/>Property(S): MS.51D569E0_8A28_11D2_B962_006097C4DE24 = C:\WINDOWS\system32\<br/>Property(S): System.51D569E0_8A28_11D2_B962_006097C4DE24 = C:\WINDOWS\system32\<br/>Property(S): Redist.51D569E3_8A28_11D2_B962_006097C4DE24 = C:\WINDOWS\system32\<br/>Property(S): MS.51D569E3_8A28_11D2_B962_006097C4DE24 = C:\WINDOWS\system32\<br/>Property(S): System.51D569E3_8A28_11D2_B962_006097C4DE24 = C:\WINDOWS\system32\<br/>Property(S): ReportingModuleDir.B8A67CEF_63FF_40C5_B79F_68FE309F3E50 = C:\Program Files\Microsoft Forefront\Client Security\Server\Reporting\<br/>Property(S): REPORTING_DIR.B8A67CEF_63FF_40C5_B79F_68FE309F3E50 = C:\Program Files\Microsoft Forefront\Client Security\Server\Reporting\Reporting\<br/>Property(S): RESOURCE_DIR.B8A67CEF_63FF_40C5_B79F_68FE309F3E50 = C:\Program Files\Microsoft Forefront\Client Security\Server\Reporting\Reporting\en\<br/>Property(S): DATABASE_DIR.B8A67CEF_63FF_40C5_B79F_68FE309F3E50 = C:\Program Files\Microsoft Forefront\Client Security\Server\Reporting\Database\<br/>Property(S): SCHEMA_DIR.B8A67CEF_63FF_40C5_B79F_68FE309F3E50 = C:\Program Files\Microsoft Forefront\Client Security\Server\Reporting\Schema\<br/>Property(S): _RollbackDTSEventSource.B8A67CEF_63FF_40C5_B79F_68FE309F3E50 = C:\Program Files\Microsoft Forefront\Client Security\Server\Reporting\Reporting\MOM.Datawarehousing.DTSPackageGenerator.exe<br/>Property(S): _SetReportingFolderSecurity.B8A67CEF_63FF_40C5_B79F_68FE309F3E50 = C:\Program Files\Microsoft Forefront\Client Security\Server\Reporting\Reporting<br/>Property(S): SQLSVR_INSTANCE.B8A67CEF_63FF_40C5_B79F_68FE309F3E50 = QIQ-SRR1-SUS1<br/>Property(S): DatabaseName.B8A67CEF_63FF_40C5_B79F_68FE309F3E50 = SystemCenterReporting<br/>Property(S): MOM_DB_SERVER.B8A67CEF_63FF_40C5_B79F_68FE309F3E50 = QIQ-SRR1-SUS1<br/>Property(S): ROSETTA_SERVER.B8A67CEF_63FF_40C5_B79F_68FE309F3E50 = QIQ-SRR1-SUS1<br/>Property(S): ServerReportingCmnModuleDir.0FBCB50B_2336_4A38_9BCC_74F7EB32265C = C:\Program Files\Microsoft Forefront\Client Security\Server\Reporting\<br/>Property(S): PackageCode = {F51B3310-5805-4174-86B8-AF0013E818DD}<br/>Property(S): ProductState = -1<br/>Property(S): PackagecodeChanging = 1<br/>Property(S): HTTPCONNECTIONTYPE = http://<br/>Property(S): CURRENTDIRECTORY = I:\AUTORUN<br/>Property(S): CLIENTUILEVEL = 3<br/>Property(S): CLIENTPROCESSID = 4628<br/>Property(S): CURRENTMEDIAVOLUMELABEL = FCS_RTM_EN-US_1703.0<br/>Property(S): VersionDatabase = 200<br/>Property(S): VersionMsi = 3.01<br/>Property(S): WindowsBuild = 3790<br/>Property(S): ServicePackLevel = 1<br/>Property(S): ServicePackLevelMinor = 0<br/>Property(S): MsiNTProductType = 3<br/>Property(S): WindowsFolder = C:\WINDOWS\<br/>Property(S): WindowsVolume = C:\<br/>Property(S): System16Folder = C:\WINDOWS\system\<br/>Property(S): RemoteAdminTS = 1<br/>Property(S): TempFolder = C:\DOCUME~1\fcsadmin\LOCALS~1\Temp\<br/>Property(S): CommonFilesFolder = C:\Program Files\Common Files\<br/>Property(S): AppDataFolder = C:\Documents and Settings\fcsadmin\Application Data\<br/>Property(S): FavoritesFolder = C:\Documents and Settings\fcsadmin\Favorites\<br/>Property(S): NetHoodFolder = C:\Documents and Settings\fcsadmin\NetHood\<br/>Property(S): PersonalFolder = C:\Documents and Settings\fcsadmin\My Documents\<br/>Property(S): PrintHoodFolder = C:\Documents and Settings\fcsadmin\PrintHood\<br/>Property(S): RecentFolder = C:\Documents and Settings\fcsadmin\Recent\<br/>Property(S): SendToFolder = C:\Documents and Settings\fcsadmin\SendTo\<br/>Property(S): TemplateFolder = C:\Documents and Settings\All Users\Templates\<br/>Property(S): CommonAppDataFolder = C:\Documents and Settings\All Users\Application Data\<br/>Property(S): LocalAppDataFolder = C:\Documents and Settings\fcsadmin\Local Settings\Application Data\<br/>Property(S): MyPicturesFolder = C:\Documents and Settings\fcsadmin\My Documents\My Pictures\<br/>Property(S): AdminToolsFolder = C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\<br/>Property(S): StartupFolder = C:\Documents and Settings\All Users\Start Menu\Programs\Startup\<br/>Property(S): StartMenuFolder = C:\Documents and Settings\All Users\Start Menu\<br/>Property(S): DesktopFolder = C:\Documents and Settings\All Users\Desktop\<br/>Property(S): FontsFolder = C:\WINDOWS\Fonts\<br/>Property(S): GPTSupport = 1<br/>Property(S): OLEAdvtSupport = 1<br/>Property(S): ShellAdvtSupport = 1<br/>Property(S): Intel = 6<br/>Property(S): PhysicalMemory = 4085<br/>Property(S): VirtualMemory = 4848<br/>Property(S): AdminUser = 1<br/>Property(S): LogonUser = fcsadmin<br/>Property(S): UserSID = S-1-5-21-1646942584-1055729856-2927860159-1108<br/>Property(S): UserLanguageID = 1033<br/>Property(S): ComputerName = QIQ-SRR1-SUS1<br/>Property(S): SystemLanguageID = 1033<br/>Property(S): ScreenX = 1440<br/>Property(S): ScreenY = 900<br/>Property(S): CaptionHeight = 19<br/>Property(S): BorderTop = 1<br/>Property(S): BorderSide = 1<br/>Property(S): TextHeight = 16<br/>Property(S): ColorBits = 32<br/>Property(S): TTCSupport = 1<br/>Property(S): Time = 12:18:39<br/>Property(S): Date = 11/5/2009<br/>Property(S): MsiWin32AssemblySupport = 5.2.3790.1830<br/>Property(S): RedirectedDllSupport = 2<br/>Property(S): DATABASE = C:\WINDOWS\Installer\3a1144.msi<br/>Property(S): OriginalDatabase = i:\Server\MOMReporting.msi<br/>Property(S): UILevel = 2<br/>Property(S): ACTION = INSTALL<br/>Property(S): ROOTDRIVE = D:\<br/>Property(S): CostingComplete = 1<br/>Property(S): OutOfDiskSpace = 0<br/>Property(S): OutOfNoRbDiskSpace = 0<br/>Property(S): PrimaryVolumeSpaceAvailable = 0<br/>Property(S): PrimaryVolumeSpaceRequired = 0<br/>Property(S): PrimaryVolumeSpaceRemaining = 0<br/>Property(S): CLUSTERED = 0<br/>Property(S): SOURCEDIR = i:\Server\<br/>Property(S): SourcedirProduct = {63C847C6-07A0-4A6F-8A78-8A066C9F9773}<br/>Property(S): ProductToBeRegistered = 1<br/>MSI (s) (64:20) [12:18:39:161]: Note: 1: 1708 <br/>MSI (s) (64:20) [12:18:39:161]: Product: Microsoft Operations Manager 2005 Reporting -- Installation failed.</p> <p>MSI (s) (64:20) [12:18:39:161]: Cleaning up uninstalled install packages, if any exist<br/>MSI (s) (64:20) [12:18:39:161]: MainEngineThread is returning 1603<br/>MSI (s) (64:E8) [12:18:39:271]: Destroying RemoteAPI object.<br/>MSI (s) (64:18) [12:18:39:286]: Custom Action Manager thread ending.<br/>=== Logging stopped: 11/5/2009  12:18:39 ===<br/>MSI (c) (14:A0) [12:18:39:286]: Decrementing counter to disable shutdown. If counter &gt;= 0, shutdown will be denied.  Counter after decrement: -1<br/>MSI (c) (14:A0) [12:18:39:286]: MainEngineThread is returning 1603<br/>=== Verbose logging stopped: 11/5/2009  12:18:39 ===</p> <p><br/>thanks alot<br/>Sameer</p>Thu, 05 Nov 2009 09:28:34 Z2009-11-12T09:44:20Zhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/d5064fb9-4ac0-4131-b261-63906644324ehttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/d5064fb9-4ac0-4131-b261-63906644324eNazmul Hasanhttp://social.technet.microsoft.com/Profile/en-US/?user=Nazmul%20HasanActive Directory Security GroupI would like to find out, that all the security group of AD, where it is implemented. Like for example I have a security group called GRP Client Access. I would like to kno where i i have used this security group, what are the folders, and files have this security group. Simmilarly, i would like to know all the security groups in my AD where it is using at  the momentMon, 09 Nov 2009 00:21:05 Z2009-11-09T08:30:10Zhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/6376b854-3d24-4136-ba18-efd28df32008http://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/6376b854-3d24-4136-ba18-efd28df32008Elgannyhttp://social.technet.microsoft.com/Profile/en-US/?user=ElgannyFCS & WIn Server 2008 R2<p>بسم الله الرحمن الرحيم<br/>what can i do ?<br/>I have SCCM 2007 SP2 + WSUSSP2 + SQL 2005 SP3  on Windows server 2008 R2 <br/>I want install FCS server and FCS server need SQL &amp; WSUS server <strong><span style="text-decoration:underline">But FCS not support Windows 2008 R2 and i can't run FCS CD on 2008 R2<br/></span></strong>I can setup it on another server but how can connect My WSUS and SQL without run FCS CD on 2008 R2</p>Sun, 08 Nov 2009 13:33:48 Z2009-11-13T07:37:06Zhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/a8d5a0e9-9c26-4a58-a250-cb82f67e19cehttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/a8d5a0e9-9c26-4a58-a250-cb82f67e19ceMGMNVAhttp://social.technet.microsoft.com/Profile/en-US/?user=MGMNVAClients going into unmanaged mode<p>Is there a document that describes the rules that forefront uses to put machines into the pending actions group with a pending action of &quot;uninstall agent&quot;. I am trying to figure out the details of what this means.</p>Mon, 02 Nov 2009 20:55:31 Z2009-11-10T06:30:33Zhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/407e270b-05fd-4d8c-9ce5-705f9dac1568http://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/407e270b-05fd-4d8c-9ce5-705f9dac1568Jtf8751http://social.technet.microsoft.com/Profile/en-US/?user=Jtf8751Help with running Forefront Client SecurityHey guys, I'm new to Microsoft Forefront Client Security and I am having a few problems. I have done a one server topology server setup. I installed everything on a VM server (which is my FCS management server) except the distribution server component. I have a external (seperate server) setup for WSUS that we use in our corporate environment. I have installed forefront on my management serverand finally got the 14 day chart to come up. Next I setup a XP workstation as a VM for a test client. I then setup a group policy in the FCS console to point at an OU that has this XP workstation in it. My reason for doing this is to install the agent and the components. BUT I cannot get it to install anything. I have approved forefront on my WSUS server and only told it to install the updates to this computer in a group on the WSUS server. What am I missing to get this to install the agent without me doing it manually? Also, I installed the agent manually and it still won't report in to the dashboard on the FCS console. Do I need the distribution server? I would hate to have to install these manually, I need to do this through GPO, but right  now after a manual installation it still won't report it and I don't see the agent in the taskbar. Can you guys help? I have checked everything in the MOM 2005 admin console that is supposed to be there, its all enabled.Mon, 02 Nov 2009 20:51:29 Z2009-11-10T06:30:14Zhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/7d873474-ea69-4c84-832e-d56ed3d469c5http://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/7d873474-ea69-4c84-832e-d56ed3d469c5natfishhttp://social.technet.microsoft.com/Profile/en-US/?user=natfishForefront Client Security Server - Reinstallation IssuesHi Folks,<br/> <br/>   I'm having issues with reinstalling Forefront Client Security for our evaluation of this product.  I had everything setup and working, did not like how, by default, the mom agents use netbios names to communicate.  I'm implementing a multi domain setup, and don't want to configure the netbios setup nor want the netbios chatter.  After much digging, I found that changing any of the sever name bits required a reinstall and here I am.  Any comments on this part is appreciated as well.  <br/> <br/> Setup:<br/> <br/> <br/> <ul> <li> Windows 2008</li> <li> SQL Server 2005 sp3</li> <li> IIS with required bits installed</li> <li>WSUS installed and verified </li> <li>All in one sever topography</li> <li>Virtual Server (VMWare)</li> <li>FCS CD - FCS_RTM_EVAL_EN-US_1703.0 </li> </ul>   <br/>   The installer currently hangs up on the &quot;Installing MOM Reporting Service&quot; task with a generic error of &quot;Exit code: 1603&quot;.<br/> <br/> ServerSetupXX.log tail end:<br/> <pre>[11/3/2009 2:53:24 PM] Task(Install MOM Reporting Service) Process command 'C:\Windows\system32\msiexec.exe' [11/3/2009 2:53:24 PM] Task(Install MOM Reporting Service) Process arguments ' /i &quot;d:\Server\MOMReporting.msi&quot; ROSETTA_SERVER=&quot;myserver.location.tld.com&quot; SQLSVR_INSTANCE=&quot;myserver.location.tld.com&quot; TASK_USER_ACCOUNT=&quot;forefront&quot; TASK_USER_PASSWORD=&quot;*****&quot; TASK_USER_DOMAIN=&quot;location&quot; REPORTING_USER=&quot;forefront&quot; REPORTING_PASSWORD=&quot;*****&quot; REPORTING_DOMAIN=&quot;tld&quot; MOM_DB_SERVER=&quot;myserver.location.tld.com&quot; INSTALLDIR=&quot;C:\Program Files\Microsoft Forefront\Client Security\Server\Reporting&quot; REPORT_SERVER_VDIR=&quot;ReportServer&quot; REPORT_MANAGER_VDIR=&quot;Reports&quot; HttpConnectionType=&quot;http://&quot; DB_SIZE=&quot;1024&quot; AUTOMATICALLY_DETECT_ROSETTA_VDIRS=&quot;0&quot; /qn /l*v &quot;C:\Program Files\Microsoft Forefront\Client Security\Server\Logs\MOMReporting.log&quot;' [11/3/2009 2:53:28 PM] Task(Install MOM Reporting Service) [11/3/2009 2:53:28 PM] Task(Install MOM Reporting Service) The following process failed. Process: C:\Windows\system32\msiexec.exe Exit code: 1603Number of tasks completed: [11/3/2009 2:53:28 PM]</pre> I've scoured the logs and google but have still come up short.  There's a few errors in those logs, but nothing that has come out as a smoking gun:<br/> <br/> MOMReporting.Log<br/> <pre>CPreReqVerifier::CheckCurrentUserIsDBAdmin: Reporting registry key not found. Error Code: 0x80070002. </pre> <br/> <pre>CheckForMomExpress: MOM_DB_SERVER:. myserver.location.tld.com CheckForMomExpress: Unable to format computer name. Error Code: 0x8007007A. </pre> <br/> <br/> <ul> <li>I've tried running the MOMReporting.MSI package independently, but there are reported bugs with that as well (http://support.microsoft.com/kb/909846).  I've never gotten the MOMReporting.MSI package to install manually, either auto detecting settings or specifying the report/reportserver urls.  Both urls come up fine in a web browser (ReportServer just shows a directory listing however, while /Reports/ lets me browse through reports, although none exist yet).  </li> <li>There's 52 gig free the hard drive and i'm showing  &quot;Adding OutOfDiskSpace property. Its value is '0'.&quot; in the MOMReporting.Log.</li> <li>I've also reinstalled SQL Server, IIS, and WSUS to attempt start from the ground up, but it led me to the same error.</li> <li>I've cleared out the %windir%\temp and \users\&lt;myserver&gt;\appdata\local\temp folders</li> <li>I've cleared out the windows\installer folders of any MOM or Forefront msi's</li> <li>I've cleared out the registry of anything referencing 'forefront', 'mom' or 'operations manager'</li> <li>I've added the location\forefront AD service account we're using for this product to the local admin group for the machine (as a shotgun security approach)</li> </ul> <br/> Any thoughts?Tue, 03 Nov 2009 22:35:11 Z2009-11-05T16:52:01Zhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/6a2e2b5c-96ea-4181-a647-367254e2e12ahttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/6a2e2b5c-96ea-4181-a647-367254e2e12aZamimhttp://social.technet.microsoft.com/Profile/en-US/?user=ZamimExtending Microsoft Front Front Security server across AD Forests<p>Hi,<br/><br/>we are planning to implement the Microsoft Forefront security for our organization. Our organization has spread across many sites and has many ActiveDirectory forest..would like to know how to design the forefront security architeture for these multiforest scenario's. <br/><br/>Objective is , Forefront security policy and polling needs to be executed centrally and VDf updates needs to be pushed to the clients from their local AD site and local AD forest.<br/><br/>Could you please assit me to design..</p>Wed, 04 Nov 2009 07:07:08 Z2009-11-10T06:31:26Zhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/fe5571d6-7f9e-4053-8840-7f03c3b9dfadhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/fe5571d6-7f9e-4053-8840-7f03c3b9dfadMoreirfihttp://social.technet.microsoft.com/Profile/en-US/?user=MoreirfiFCS installation Issue<p>Hi all,<br/><br/>       Im trying to instal FSC (FCS_RTM_EVAL_en-us_1703.0) on a server 2008 Standard x64, with only WSUS SP2 (needed) and SQL 2005 (32Bit)<br/>       <br/>       Im having this error, when setup gets to Collection Server Disabling Rules:<br/><br/>       Starting collection server disabling rules.<br/>[04-11-2009 15:45:01] Task(Collection Server Disabling Rules)<br/>Microsoft.EnterpriseManagement.Mom.MomSdkException: Loading the rule failed. ---&gt; <strong>System.Runtime.InteropServices.COMException (0x80040154): Retrieving the COM class factory for component with CLSID {31CFCB56-0A22-4176-927E-5EEDD3C252D5} failed due to the following error: 80040154.<br/></strong>   at Microsoft.EnterpriseManagement.Mom.Rule.Intialize()<br/>   --- End of inner exception stack trace ---<br/>   at Microsoft.EnterpriseManagement.Mom.Rule.Intialize()<br/>   at Microsoft.EnterpriseManagement.Mom.Rule..ctor(DasProcessRule dasRule)<br/>   at Microsoft.EnterpriseManagement.Mom.Administration.GetRule(Guid ruleId)<br/>   at Microsoft.Forefront.ClientSecurity.Configure.MOMDisableMOMRulesTask.CollectionServerTask()<br/>   at Microsoft.Forefront.ClientSecurity.Configure.MOMDisableMOMRulesTask.ThreadedWebServiceTask(Object x)Number of tasks completed: [04-11-2009 15:45:02]<br/><br/>    I already seen a post with this error, but the DAS account already belongs to local administrators group, and the problem persist....<br/>    Can you help me solve this problem?<br/><br/>    Thank you very much</p>Wed, 04 Nov 2009 16:30:35 Z2009-11-12T05:47:52Zhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/d1f890c2-ea7c-4fc4-be31-67949d8d9e02http://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/d1f890c2-ea7c-4fc4-be31-67949d8d9e02Jacob Herigeshttp://social.technet.microsoft.com/Profile/en-US/?user=Jacob%20HerigesForefront client computers not schedule scanning<span style="font-family:Tahoma;font-size:10pt"> <p class=MsoNormal style="margin:0in 0in 12pt"><span style="font-family:Tahoma;color:black;font-size:10pt">Hello fellow Forefronters:<br/><br style=""><br style=""></span></p> <p class=MsoNormal style="margin:0in 0in 0pt"><span style="font-family:Tahoma;color:black;font-size:10pt">I have looked and looked before I made a new post with no results. And I have been going back and forth where to put this post here or in the group policy forum.<br/><br/>My client computers are not scanning when scheduled to. I have several policies created in Forefront Client Security &quot;Policy Management&quot; and I have confirmed that my policies are making it to my Active Directory Organizational Units. Now the problem is that my clients registry entries are broke. HKLM\Software\Policies\Microsoft\Microsoft Forefront\Client Security\1.0. I have over 1000 computers so un-joining and rejoining them one by one isn't an option. GPUPDATE /Force also don’t work. Making a test policy in &quot;Policy Management&quot; and a test Organization Unit in Active Directory and adding a single computer also doesn't work. I know that the problem is that my client registry isn't correct. Is there a place in Start\Run\gpedit.msc on a client where I can find the break down? Is there a way to see the Forefront Policy as you would the Group Policy MMC? Or can someone help me with this? Thank you very much for your time and interest.</span></p> <p class=MsoNormal style="margin:0in 0in 0pt"><span style="font-family:Tahoma;color:black;font-size:10pt"> </span></p> <p class=MsoNormal style="margin:0in 0in 0pt"><span style="font-family:Tahoma;color:black;font-size:10pt">Jake</span></p> <p class=MsoNormal style="margin:0in 0in 12pt"> </p> </span>Tue, 03 Nov 2009 16:11:02 Z2009-11-05T03:29:09Zhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/51299bc8-1c77-4c43-8fc0-5e3d03ca504fhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/51299bc8-1c77-4c43-8fc0-5e3d03ca504fadam_Lussier_hotmail.comhttp://social.technet.microsoft.com/Profile/en-US/?user=adam_Lussier_hotmail.comDeploying FCS on Windows 7 32bit<p>I am trying to deploy FCS on Windows 7 32bit. It fails.<br/>The other box is frustrating too. one error is the firewall, which is off and the other is that Task sheduler is not running, but in the services.msc the task scheduler shows that it is running.<br/>here is on log.<br/>p: 172.16.3.150<br/>[03/11/2009 16:15:43]  Recconecting<br/>[03/11/2009 16:15:43]  Executing Forefront Installations<br/>[03/11/2009 16:15:43] executing proccess: 3724<br/>[03/11/2009 16:16:14] Failed to install Forefront cilent<br/>StackTrace:    at Microsoft.FCS.deployment.Wmi.install(Object obj) in C:\projects\Microsoft.FCS.Deployment\Microsoft.FCS.Deployment\classes\Wmi.cs:line 547</p> <p>Could not find file '\\GVMITDIR03\C$\15c28818-d38c-4618-b6cc-217b7e16ee9a\forefront\clientsetup.log'.<br/>StackTrace:    at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)</p> <p>   at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy)</p> <p>   at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options)</p> <p>   at System.IO.StreamReader..ctor(String path, Encoding encoding, Boolean detectEncodingFromByteOrderMarks, Int32 bufferSize)</p> <p>   at System.IO.StreamReader..ctor(String path, Encoding encoding)</p> <p>   at System.IO.File.ReadAllText(String path, Encoding encoding)</p> <p>   at Microsoft.FCS.deployment.Wmi.install(Object obj) in C:\projects\Microsoft.FCS.Deployment\Microsoft.FCS.Deployment\classes\Wmi.cs:line 532</p><hr class="sig">adam LussierTue, 03 Nov 2009 21:42:49 Z2009-11-04T23:51:22Zhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/2cbb935f-4175-4c0f-b17e-de96155bd967http://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/2cbb935f-4175-4c0f-b17e-de96155bd967Sandy Woodhttp://social.technet.microsoft.com/Profile/en-US/?user=Sandy%20WoodForefront Client Security Client on a File Server - Or Not?<p>Does anyone else have the Forefront Client Security client installed on their Windows 2008 file server? We recently ran into an issue where we had to disable the real-time protection of a malware product (CounterSpy) on our file server because it was causing lockups every week or so. We continue to keep the Forefront Client running on the server in real-time mode however. <br/><br/>In talking to my colleages, I've found that many say they do not have AV or Malware protection running on their file server; they say they stay protected at the client-pc level so why put that load on the server? Some have AV and Malware installed but don't run it in real-time mode, they only scan their servers every night. I've never looked at it that way and wonder what others are doing in the same situation.</p><hr class="sig">Orange County District AttorneyWed, 30 Sep 2009 15:09:22 Z2009-11-04T03:47:01Zhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/3acadb6d-f41b-4d93-9647-9e095e3a2746http://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/3acadb6d-f41b-4d93-9647-9e095e3a2746SergioTorreshttp://social.technet.microsoft.com/Profile/en-US/?user=SergioTorresRemote Single ServerI lease a dedicated Windows 2003 SP2 server from Godaddy.<br/><br/>I would like to use Forefront Client Security to protect it.<br/><br/>Do I need to install all components (remember, the server is &quot;isolated&quot; from my LAN, so I have no desktops or servers to manage or protect).<br/><br/>Is there a way to install only a subset of the components?<br/><br/>Thank you for your help.Thu, 29 Oct 2009 22:24:56 Z2009-11-03T19:11:19Zhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/3052bfbf-b7fe-4d0b-b162-10cf55504a1chttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/3052bfbf-b7fe-4d0b-b162-10cf55504a1csmadgehttp://social.technet.microsoft.com/Profile/en-US/?user=smadgeReassigning clients to different MSWe have started deploying FCS with our SCCM environment.<br/><br/>Due to acquisitions our number of clients will surpass 10,000.<br/><br/>Would like to know an easier/best practice way to reassign clients and servers to different MS.  <br/>i.e. FCSPOD1 to FCSPOD2Fri, 30 Oct 2009 19:01:19 Z2009-11-09T02:23:09Zhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/bfe1e0dd-3045-4179-9eea-d6b620af6740http://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/bfe1e0dd-3045-4179-9eea-d6b620af6740debug019http://social.technet.microsoft.com/Profile/en-US/?user=debug019Reinstalling Forefront Client Security issue<p align=left>Dear experts,</p> <p align=left> </p> <p align=left>I have installed Forefront Client Security successfully and clients got installed on the member computers in the security group created on Active Directory. For disk space reasons and crashing problems, I decided to re-format and re-install the client security server. After re-installation (with the same computer name), i was thinking it will still connect to both WSUS and Forefront servers and would report fine since I used the same computer name and same IP address. </p> <p align=left> </p> <p align=left>It didnt work, no computers connecting to wsus nor to the forefront server. I tried renaming the computer to another name, deploying a new policy to the same security group but still not working.</p> <p align=left> </p> <p align=left>Would anyone please enlighten me.</p> <p align=left> </p> <p align=left>Many thanks,</p> <p align=left> </p> <p align=left>Joel</p>Thu, 27 Sep 2007 08:28:34 Z2009-10-29T14:22:09Zhttp://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/d67687fb-aa15-40d6-a95f-e96ac95e9820http://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/thread/d67687fb-aa15-40d6-a95f-e96ac95e9820RomanPethttp://social.technet.microsoft.com/Profile/en-US/?user=RomanPetSQL for 3 server topologyHello.<br/>I'm trying to deploy FFCS in 3 server topology. We have a server with SQL Ent. installed, and another one with WSUS, so I think the 3 server topology is the best choice. <br/>The reporting database server role require SQL Std./Ent. - that's ok. But the Management, collection and reporting server role require one more SQL Std./Ent. <br/>My company is an MS Golden Partner, so we have limited licenses for SQL server. If you buy the FFCS, you get the licence for SQL Ent. included to the FFCS license, but in the case of MS Golden Partner internal use rights it is not the same. Golden Partner should use the licence for SQL Ent. granted for internal use.<br/>And it may be OK for all-in-one topology, but looks bad for 3 and more server topology.<br/>All SQL licenses for internal use are utilised. Do anybody know how to solve this problem without payments. The installation of the FFCS on the server with SQL Ent. thet i'm going to use for the reporting database server role is restricted.<br/><br/>Best regardsSun, 25 Oct 2009 14:40:31 Z2009-11-03T01:35:03Z