Recent updates to the Client Security Best Practice Analyzer

At the end of last week we published additions to the FCS BPA. The revisions are again described in KB976986. The new checks are focused on database related issues including: Database sizing DTS job failures Last backup times Threat metadata problems As promised in our last BPA announcement, it also contains usability improvements like a…


Keeping FCS up to date

FCS antimalware updates are classified in WSUS as critical updates. Therefore, if you want to automatically approve these updates you must create a rule for the Forefront Client Security product and the Critical Updates category in WSUS. There are two items to note: Antimalware client updates (not definition updates, but the program updates published periodically)…


Thoughts on Enterprise Manager

Enterprise Manager is a great way for Client Security customers to do centralized management and reporting across two or more down-level deployments. Enterprise Manager is a separate FCS server installation that does not support client connectivity and is used for management of down-level deployments. Typically this is done when the down-level deployments would exceed the…


Additions to the Client Security Best Practice Analyzer

The Client Security BPA was posted to the download center shortly after FCS released. The initial release included five basic checks of an FCS server installation which are described in the TechNet documentation here. This week we released the first additions to those checks. These new checks focus on the FCS-related configuration of a WSUS…


Setting the Collection server during WSUS deployment

Last month in the Client Security blog the Forefront Client Security team announced the availability of a revised installation package, which is available via WSUS. More information about the new installation package is found in Microsoft Knowledge Base article 976669. In that article I wrote a section called WSUS Applicability Logic, which briefly discusses how…


Best Practice for Multiple FCS Deployments

Hi Folks, Here’s a FCS Best Practice from the Engineering team for those of you that have deployed or will deploy multiple FCS deployments across an enterprise. Best Practice:  As indicated in the FCS v1.0 Release Notes, each FCS deployment should be given a unique Management Group name during FCS Server setup.   We would…