locked
Possible to identify Forefront Client version programmatically RRS feed

  • Question

  • We are writing some custom FCS client monitoring for SCOM 2007 (functionality not in the Forefront Server  management packs) for stand-alone Forefront Clients and are trying to definitely identify the client version in the registry or VBScript. When I look at the Forefront Client UI, it shows me
    Client Version:  1.5.1937.0
    Engine Version: 1.1.6004.0
    Antivirus definition: 1.87.645.0
    Antispyware definition: 1.87.645.0

    However, I cannot find '1.5.1937.0' in the registry. Is there a way to retrieve client version number programmatically?

    Pete Zerger, MVP-OpsMgr and SCE | http://www.systemcentercentral.com
    Tuesday, July 27, 2010 3:24 PM

Answers

  • Hello Pete,

    Please take a look at the script I posted here(through Kim): http://social.technet.microsoft.com/wiki/contents/articles/determining-fcs-client-state-from-script.aspx?wa=wsignin1.0

    The sample below uses several of the registry keys described in the FCS documentation to output information similar to what is presented in the FCS Home and Help>About UI.

    Microsoft Forefront Client Security version:  1.5.1973.0
    Engine version:  1.1.5605.0
    Antivirus Definition:  Version 1.79.1025.0 created on 4/2/2010 4:26:40 AM
    Antispyware Definition:  Version 1.79.1025.0 created on 4/2/2010 4:26:41 AM
    Last scan:  4/2/2010 4:00:01 AM (Quick Scan)

    As you see, the sample retrieves the version of the FCS antimalware service binary, msmpeng.exe.  Please see if that fits your needs.

    Thanks,
    Craig Wiand
    Microsoft Forefront Escalation Engineer


    Forefront Client Security Support
    Friday, July 30, 2010 1:41 PM

All replies

  • Hello Pete,

    Please take a look at the script I posted here(through Kim): http://social.technet.microsoft.com/wiki/contents/articles/determining-fcs-client-state-from-script.aspx?wa=wsignin1.0

    The sample below uses several of the registry keys described in the FCS documentation to output information similar to what is presented in the FCS Home and Help>About UI.

    Microsoft Forefront Client Security version:  1.5.1973.0
    Engine version:  1.1.5605.0
    Antivirus Definition:  Version 1.79.1025.0 created on 4/2/2010 4:26:40 AM
    Antispyware Definition:  Version 1.79.1025.0 created on 4/2/2010 4:26:41 AM
    Last scan:  4/2/2010 4:00:01 AM (Quick Scan)

    As you see, the sample retrieves the version of the FCS antimalware service binary, msmpeng.exe.  Please see if that fits your needs.

    Thanks,
    Craig Wiand
    Microsoft Forefront Escalation Engineer


    Forefront Client Security Support
    Friday, July 30, 2010 1:41 PM
  • Craig, we just figured out last night that file we could use, but  I had not written the script yet. That sample will serve as a base we can adapt.

    Vielen Danke (Many Thanks)

     


    Pete Zerger, MVP-OpsMgr and SCE | http://www.systemcentercentral.com
    Friday, July 30, 2010 1:44 PM