locked
Newbie to FCS RRS feed

  • Question

  • Forefront admin left so got stuck doing the work. Need to find out how clients are getting the latest defs.

    We dont have a WSUS server. I see a setting in the policy to check for updates before scanning. i am assuming

    this is how the clients get updated?

    thanks

    Marz

    Thursday, February 16, 2012 2:09 AM

Answers

  • If you go to the Microsoft Forefront Client Security console and go to the Policy Management tab there should be different policies deployed to OUs. If you select one and click edit and select the Advanced tab you cans see the interval for checking for updates. Just below that setting you can see a checkbox that says "Check for updates on Microsoft Update when WSUS is unavailable" (this should be unchecked since you are not using a WSUS.) If this is the case you should be getting updates from MS Update.

    • Edited by Nublin Thursday, February 16, 2012 11:09 PM
    • Marked as answer by Rick Tan Monday, February 27, 2012 1:56 AM
    Thursday, February 16, 2012 11:03 PM
  • Hi Marz,

    Thank you for your post.

    Please read Configuring fallback for updates article to know the details.

    Moreover, verify the updated method in %windir%\WindowsUpdate.log file.

    If there are more inquiries on this issue, please feel free to let us know.

    Regards


    Rick Tan

    TechNet Community Support



    • Edited by Rick Tan Friday, February 17, 2012 7:14 AM
    • Marked as answer by Rick Tan Monday, February 27, 2012 1:56 AM
    Friday, February 17, 2012 6:59 AM

All replies

  • If you go to the Microsoft Forefront Client Security console and go to the Policy Management tab there should be different policies deployed to OUs. If you select one and click edit and select the Advanced tab you cans see the interval for checking for updates. Just below that setting you can see a checkbox that says "Check for updates on Microsoft Update when WSUS is unavailable" (this should be unchecked since you are not using a WSUS.) If this is the case you should be getting updates from MS Update.

    • Edited by Nublin Thursday, February 16, 2012 11:09 PM
    • Marked as answer by Rick Tan Monday, February 27, 2012 1:56 AM
    Thursday, February 16, 2012 11:03 PM
  • Hi Marz,

    Thank you for your post.

    Please read Configuring fallback for updates article to know the details.

    Moreover, verify the updated method in %windir%\WindowsUpdate.log file.

    If there are more inquiries on this issue, please feel free to let us know.

    Regards


    Rick Tan

    TechNet Community Support



    • Edited by Rick Tan Friday, February 17, 2012 7:14 AM
    • Marked as answer by Rick Tan Monday, February 27, 2012 1:56 AM
    Friday, February 17, 2012 6:59 AM