Baking FCS into your image
Here’s some reache we did to help customers deploy Forefont Client Seurity via imaging process.
1. If you want the FCS clients in managed mode (go to your WSUS for updates and report to your MOM console:
Install FCS via the command line to the image:
Clientsetup.exe /MS xxx /CG xxxxx
MOM installation parameters:
/MS Collection Server Name (Required if /CG pres
/CG Config Group Name (Required if /MS present)
After which this client cannot talk back to the management server until you reimage a machine. If it does the mom server will assign a unique identifier to this client and all other clients trying to connect after imaging will error out.
You can streamline the update process a bit by following the instructions on the following link.
2. If you want clients to be unmanaged (go to Microsoft Update and no reporting to your management console):
Install FCS via the command line to the image:
Clientsetup.exe /nomom
Plus you need to opt these machines into MU to get updates which is not the default, WU is the default on Windows.