How do I get Microsoft forefront client security to update by itself RRS feed

  • Question

  • Hi There

    I have about 1500 pc's that are in different domains at different sites. I have deployed a few pcs with forefront but they dont seem to be updating the definitions. I have to manually go to each pc & download the updates using the windows catalog.

    Is there a way for the Client software to download the updates with a Wsus server & using the windows catalog. like how windows defender worked.
    Monday, February 9, 2009 11:22 AM


  • Hi


    Ok.  The simple answer to your question is yes, they can download their definitions and updates from WSUS. 

    To accomplish this you need to do the following:


    1. Ensure the clients have a WSUS group policy setting set.  (Also ensure that the "Allow immediate updates installation" WSUS group policy setting is enabled.  This enables definitions to be deployed automatically outside of the WSUS schedule.
    2. Ensure WSUS is pulling down Forefront updates.
    3. Ensure WSUS automatically approves definition updates.
    4. Ensure the Forefront client in WSUS has been approved for installation.

     How have you deployed your Forefront clients?

    Are they being deployed by WSUS?

    Remember in order for the to be deployed by WSUS they require a Forefront policy.

    • Marked as answer by Umang.Anand Monday, August 10, 2009 1:36 PM
    Monday, February 9, 2009 1:02 PM