locked
FCS next? RRS feed

  • Question

  • Hello,

    We have Forefront Client Security  1.1.1710.90 SP1 with MOM 2005.

    As the new one is under a SCCM infrastructuire if I correctly understood, I have:

    -       CONFIGMGRDB

    o   Operating System from Windows Server 2003 R2 SP2 

    o   SQL 2005

    o   RAM 14 Gb 

    -       CONFIGMGRDTS

    o   Operating System from Windows Server 2003 R2 SP2

    o   RAM 4Gb

    5,500 Clients ==> 7,500 Client in one year!!!

     

    What is the next upgrade:

    - FCS 2010?

    - FEP?

    Thanks,
    Dom

     


    System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 Support
    Thursday, November 4, 2010 5:40 PM

Answers

  • Hi,

    1# OpsMgr 2007 will not be included with FEP as MOM 2005 with FCS, so you need purchase OpsMgr.

    2# As far as I know there is FEPSecurityManagementPack to monitor critical and high priority systems via OpsMgr, other components as reporting services, databases, ... can be monitored by SQL management pack, ConfigMgr management pack, IIS management pack, ... take a look at Microsoft connect to download the FEP RC version.

    3#  To know the different senarios of FEP/ConfigMgr, take a look at these links :

    http://technet.microsoft.com/en-gb/library/ff823816.aspx ; http://technet.microsoft.com/en-gb/library/bb735860.aspx

    • Marked as answer by Felyjos Friday, November 5, 2010 5:20 PM
    Friday, November 5, 2010 8:05 AM

All replies

    • Proposed as answer by Bechir Gharbi Thursday, November 4, 2010 9:45 PM
    Thursday, November 4, 2010 8:09 PM
  • Juste note that FEP 2010 needs Configuration Manager 2007 SP2 R2, otherwise FEP clients will be unmanaged, and in addition there is no a real upgrade but an installation from zero for server (or an integration in an existing ConfigMgr infra) and client agents.
    Thursday, November 4, 2010 9:45 PM
  • I have already SCCM SP2 R2 installed so I will need to integrate FEP 2010 in it

    What about the change between MOM 2005 and SCOM 2007 anything on this part?

    What is the impact on SCCM?

    As it is not an upgarde from FCS to FEP could it be installed on separated servers from SCCM? Do we need specific installtion on the Configuration Manager Servers (SCCM - DB server , SCCM Application Server, etc..)

    Thanks,

    Dom


    System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 Support
    Thursday, November 4, 2010 10:11 PM
  • Hi,

    1# OpsMgr 2007 will not be included with FEP as MOM 2005 with FCS, so you need purchase OpsMgr.

    2# As far as I know there is FEPSecurityManagementPack to monitor critical and high priority systems via OpsMgr, other components as reporting services, databases, ... can be monitored by SQL management pack, ConfigMgr management pack, IIS management pack, ... take a look at Microsoft connect to download the FEP RC version.

    3#  To know the different senarios of FEP/ConfigMgr, take a look at these links :

    http://technet.microsoft.com/en-gb/library/ff823816.aspx ; http://technet.microsoft.com/en-gb/library/bb735860.aspx

    • Marked as answer by Felyjos Friday, November 5, 2010 5:20 PM
    Friday, November 5, 2010 8:05 AM
  • Juste note that FEP 2010 needs Configuration Manager 2007 SP2 R2, otherwise FEP clients will be unmanaged, and in addition there is no a real upgrade but an installation from zero for server (or an integration in an existing ConfigMgr infra) and client agents.


    What about MOM2005 to be replaced by SCOM 2007? I don't see the information...

    Thanks,
    Dom


    System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 Support
    Friday, November 5, 2010 4:27 PM
  • Hi,

    1# OpsMgr 2007 will not be included with FEP as MOM 2005 with FCS, so you need purchase OpsMgr.

    2# As far as I know there is FEPSecurityManagementPack to monitor critical and high priority systems via OpsMgr, other components as reporting services, databases, ... can be monitored by SQL management pack, ConfigMgr management pack, IIS management pack, ... take a look at Microsoft connect to download the FEP RC version.

    3#  To know the different senarios of FEP/ConfigMgr, take a look at these links :

    http://technet.microsoft.com/en-gb/library/ff823816.aspx ; http://technet.microsoft.com/en-gb/library/bb735860.aspx


    #1 I have SCOM 2007 running, but does SCOM 2007 replaces MOM 2005 used under FCS or is it a complete change from FCS-MOM to FEP no MOM no SCOM but SCCM?

          If I have FEP test and Production, do I need SCCM Test and Production as well or FEP Test and production could share the same SCCM? ... Does FEP updates SCCM or it is just a read module?

          If I have FEP test and Production, do I need SCOM Test and Production as well or FEP Test and production could share the same SCOM? Does FEP updates SCOM or it is just a read module?

    #2 Excellent I will need to upload it

    #3 let me read again these documents

    Thanks,

    Dom


    System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 Support
    Friday, November 5, 2010 5:31 PM
  • #1 I have SCOM 2007 running, but does SCOM 2007 replaces MOM 2005 used under FCS or is it a complete change from FCS-MOM to FEP no MOM no SCOM but SCCM?

          If I have FEP test and Production, do I need SCCM Test and Production as well or FEP Test and production could share the same SCCM? ... Does FEP updates SCCM or it is just a read module?

          If I have FEP test and Production, do I need SCOM Test and Production as well or FEP Test and production could share the same SCOM? Does FEP updates SCOM or it is just a read module?

    With FEP we don't realy need to install the OpsMgr agent on client computers and note that OpsMgr is not a requirement for FEP as MOM for FCS. All tasks related to FEP client can be done via ConfigMgr (Client installation, reporting, update definition deployment, ...). But OpsMgr can help FEP Admin to monitor FEP server components as SQL, IIS, ... 

    Now FEP is RC version, so I not recommend install it on production, it is better to make your tests on a lab environment.

    About FEP updates, with ConfigMgr it is most simple because it is based on the Software Update Point role of ConfigMgr;

    Friday, November 5, 2010 5:47 PM
  • Excellent explanation Thanks Bechir.

    I am looking for the FEPSecurityManagementPack but it is not in the Catalog from the SCOM Console!!! I have only Forefront Protection 2010 for exchnage or SharePoint...or Forefront Security let me check on pinpoint...

    Thanks,

    Dom

     


    System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 Support
    Friday, November 5, 2010 6:27 PM
  • That is normal because FEP is still RC version and that management pack is available on Microsoft connect.

    Friday, November 5, 2010 6:44 PM
  • Does FEP 2010 support SCCM R3 or only SCCM R2?

    On https://connect.microsoft.com/directory/ looking for Forefront Products I found only:

    - Forefront Identity Manager 2010

    - Forefront Server Security

    - Microsoft Forefront Client Security

    Not sure if I have access to this RC???

    Thnaks,
    Dom


    System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 Support

    • Edited by Felyjos Friday, November 5, 2010 7:47 PM
    Friday, November 5, 2010 7:39 PM
  • Both. Note that R2 is included in R3.
    Friday, November 5, 2010 7:43 PM
  • It does not see correct as when I launched from the folder ConfigMgr2007R3Eval_RTM_ENU_6561 the msi ConfigMgr2007R3.msi I got an error:

    " Microsoft System Center Configuration Manager 2007 R3 requires a Configuration Manager 2007 SP2 (4.00.6487.200) or higher ."

    Do I have the wrong installation file?

    it is confirmed by this article:

    http://technet.microsoft.com/en-us/library/ff977062.aspx

    Please Note: SC Configuration Manager 2007 R3 Evaluation will only install on the System Center Configuration Manager SP2 Evaluation product.

    and also http://support.microsoft.com/hotfix/KBHotfix.aspx?kbnum=977384&kbln=en-us

    Thanks,

    Dom

     

     


    System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 Support
    Friday, November 5, 2010 9:55 PM
  • Hi,

    Please note that R3 is not a full package, you should install ConfigMgr with SP2 first. R3 eval version can be installed only on ConfigMgr wSP2 eval version. To obtain R3 (not eval version) you need to have Software Assurance or totally re-purchase SCCM.

    For more info http://www.microsoft.com/systemcenter/en/us/configuration-manager/cm-pricing-licensing.aspx

     

    Saturday, November 6, 2010 6:59 AM
  • Hello,

    Now When I run the setup install ConfigMgr07SP2 it gives me only the option to install a Seconday site... as it is the first site for this environment I am trying to install a Primary site not a secondary why I don't have the option available...

    Thanks,

    Dom


    System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 Support
    Monday, November 8, 2010 4:21 AM
  • That is because you trying to install ConfigMgr with an update package not a full one. So go to this link to download the correct file http://www.microsoft.com/downloads/en/details.aspx?displaylang=en&FamilyID=bad49573-6ad7-4521-a898-2ef99bc868c4
    Monday, November 8, 2010 8:28 AM
  • But this is an eval version... I need the System Center Configuration manager SP2 let me check ... as it seems for SP2 it was already only an upgrade... I got (: the only one which is a Full installation is SP1 !!!

    Thanks,

    Dom


    System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 Support
    Tuesday, November 9, 2010 1:24 AM
  • Hi,

    Note that R3 eval version can be installed only on ConfigMgr SP2/R2 eval version. So, if you upgrade ConfigMgr SP1 release version to SP2 with the update package therefore you will not able to install R3 eval after.

    In your case, to try R3 eval version, you should install ConfigMgr SP2/R2 eval version in a test lab then apply the R3 eval package.

    Tuesday, November 9, 2010 8:25 AM
  • Hi,

    I have a Full R3 version so i should be able to use it...

    Thanks,
    Dom


    System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 Support
    Tuesday, November 9, 2010 4:43 PM
  • Absolutly yes, and it can be installed on ConfigMgr with SP2 release version. So let me know now if you still have an issue to start the troubleshoot.
    Tuesday, November 9, 2010 4:57 PM
  • Thanks Bechir,

    What is exactlty the Alternate Path for the prerequisite to be downloaded? it seems asking each time even the pre-requisites have already been installed...

    so now when running the SP2 upgrade on VOTFCSCS1 (The Site Server) I am getting:

    It is recommended to specify a Fully Qualified Domain Name(FQDN) for site systems in mixed mode Configuration Manager sites. It is required to specify an FQDN for site systems in native mode sites to allow clients to authenticate with site systems.

    and also

    The SMS Provider computer for the site being upgraded does not have the correct version of the Windows Automated Installation Kit (WAIK) installed. To resolve this error, uninstall WAIK from the SMS Provider computer, restart the SMS Provider computer, and run setup again. Setup cannot continue.

    I have upgraded the WAIK on VOTFCSMS1 which is the management Server. waikx86.msi where could I verify the version installed and the version needed? is it on the Managem,ent Server which it should be installed? it seems I have Windows Automated Installation Kit (Windows AIK) 1.1

    the SQL server is VOTFCSSQL1.

    Thanks,

    Dom


    System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 Support
    Tuesday, November 9, 2010 5:19 PM
  • 1# on your configmgr console, go to Site Settings/Site Systems/YourConfigMgr, right click on Configmgr Site System/Properties then

    in the "Specify a fully qualified domain name (FQDN) for this site system on the intranet” write the FQDN name of your server.

    2# The waik 1.1 included into ConfigMgr SP1 does not support Windows 7 deployment, for that we need install the waik 2.0 http://www.microsoft.com/downloads/en/details.aspx?displaylang=en&FamilyID=696dd665-9f76-4177-a811-39c26d3b3b34

    So remove waik 1.1 and install the new one then retart the upgrade.

    In addition, have a look at this link http://technet.microsoft.com/en-us/library/ee344152.aspx 

    Tuesday, November 9, 2010 5:36 PM
  • 1# it is already the FQDN which is here

    VOTFCSCS1.AD.xxxxxx.xxxx.xxx (ConfigMgr Site System (Site Server))

    VOTFCSMS1.AD.xxxxxx.xxxx.xxx (ConfigMgr Site System (Management Server))

    only the SQL server does not have the FQDN should I add it?

    Downloading Waik Now ... it is big 1,7 GB!!!

    Thanks,

    Dom

     


    System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 Support
    Tuesday, November 9, 2010 9:30 PM
  • only the SQL server does not have the FQDN should I add it?

    Yes do it.

    Also note that if you have ConfigMgr 2007 with SP2 full version, you don't need to download WAIK 2.0 because it is included in ConfigMgr media and in this case you remove waik 1.1 then start the upgrade. Otherwise, when using the upgrade file so in this case we should download the waik 2.0 because it is not included into the upgrade media.

    Wednesday, November 10, 2010 7:40 AM