locked
FCS Schedule and run time RRS feed

  • Question

  • Hello,

    How to know:

    - When the FCS Scan starts?

    - How long it runs?

    Can I have a report in FCS? SCOM? etc...

    I have on the two sides:

    - 700 servers and I would like to spread them

    - 7,000+ desktops

    I would like to have start time/end time or duration to show for each client the time used.

    I tried to collect the FCSAM event ID 1000 & 1001 but I am missing a lot of 1001... what does this mean?

    http://social.technet.microsoft.com/Forums/en-US/operationsmanagergeneral/thread/c35b25c5-06ba-41e8-8762-6d39ee988ab4/

    Thanks,

    Dom


    System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager





    • Edited by Felyjos Monday, April 23, 2012 10:53 PM
    Monday, April 23, 2012 9:32 PM

Answers

  • Hi Dom,

    Thank you for the post.

    When the FCS Scan starts? How long it runs?
    FCS scan time is configured by policy with the registry key:
    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Microsoft Forefront\Client Security\1.0\AM\Scan

    FCS run schedule scan via Scheduled Tasks. To view these schedule task, you must choose to View Hidden in the Scheduled Tasks UI:
    .MP Scheduled Quick Scan
    .MP Scheduled Scan

    I tried to collect the FCSAM event ID 1000 & 1001 but I am missing a lot of 1001... what does this mean?
    FCS client stop scan with event ID 1002 by user or client computer shutdown system which cause the schedule scan not complete.

    If there are more inquiries on this issue, please feel free to let us know.

    Regards


    Rick Tan

    TechNet Community Support

    • Marked as answer by Rick Tan Monday, April 30, 2012 3:49 AM
    Wednesday, April 25, 2012 6:39 AM