locked
Automatic removal of virus or spyware RRS feed

  • Question

  • Hello!

    I'm new to MSFCS.  The documentation mentions that you can define how clients respond to threats, but I haven't been able to find it.

    Testing with the EICAR, I see that the client will eventually handle it, but how can I make it automatically remove the threat without prompting the user for action?

    Any help you can offer is greatly appreciated.

    Thanks,

    Scott
    NetAdmin
    Tuesday, November 18, 2008 12:00 AM

All replies

  •  Hi,

    By derfault FCS client will respond with the recommended action within 10 min. (non-configurable delay)

    Have you tried to wait that long?

    /J
    MCSE, forefront spec | www.msforefront.com
    Tuesday, November 18, 2008 4:08 PM
  •  

    Description

    Registry key

    New values from policy

    Default values

    without policy

    Scan type**



    Designates whether the Client Security agent will take action on items detected during a real-time protection scan (after a non-configurable delay)

    AM\Real-Time Protection\

    AutomaticallyCleanRealTimeAfterDelay

    On (1)

    Off (0)

    R


    MCSE, forefront spec | www.msforefront.com
    Tuesday, November 18, 2008 4:14 PM