It is imperative that you test this on one or two systems before rolling it out, and make sure it works well in your environment.I used this KB to identify Local Service and Network Service: The Release Candidate of Forefront Endpoint Protection (FEP) 2010 shipped today and is now available for download here.Microsoft have published a set of policy settings which you can download for various server roles.Note: By default each policy you import will merge with the existing settings in the GPO, unless you tick the “clear the existing Forefront Endpoint Protection settings before import” option. Windows uses it’s existing ‘Windows updates’ path for getting updates. The following list is a summary of the updates in FEP Update Rollup 1 for server functionality. Update(Software Update Automation Arguments arguments) at Microsoft. These new features and updates are summarized below.The cause has been found to be the Windows Firewall/ICS service that cannot be started.When an attempt is made to start the service, the resulting error is: Error 0x80004015: The class is configured to run as a security id different from the caller.
The FEP 2010 Definition Update Automation Tool may fail to add new definition updates to your deployment package. In other words, this impacts scale quite a bit, and forefront definitions come out at a very frequent pace meaning they are hitting you software update point harder than anything else.
Main(String args) More than one FEP 2010 definition update is being detected as active by the tool.
Soon I will launch a blog post to see if this is a real workable solution.
With a Microsoft Core CAL you can use the FEP client, so if you already have Core CALs, then it’s a solution that can save you some cash on your corporate AV strategy.
The client software is available in x64 and x86 bit flavours, it is installed from a single executable (FEPInstall.exe). ) So if you want to roll it out on mass, you need to either install it using a startup script, include the software in your ‘Master/Golden Image’ and re-image you machines, or tear your hair out trying to work out SCCM. First you need to download the policy definitions, copy the FEP2010file to %Systemroot%Policy Definitions. Then copy the FEP2010file to %Systemroot%Policy Definitions EN-US 3.