Guidance on serve initial FEP definition update with SCCM through DP

Another hot request from Customers about FEP is to allow the initial definition update after FEP client install is served up via Configuration Manager instead of from the live MU. To achieve this, first you should follow the article here to keep your SCCM site with the latest FEP definition update deployed. The next step is…


Manage FEP agents with or without SCCM

There’re some questions about FEP 2010 Standalone. Actually, it’s quite vague about the meaning of FEP 2010 Standalone. FEP 2010 means FEP 2010 Server that are integrated with SCCM 2007. When most customers talk about FEP 2010 Standalone, they actually talk about to manage FEP agents without SCCM. Below is the table break down by…


Troubleshoot Detection Logic Issue for Updates Created by System Center Update Publisher 2011

<update> Add the link to CSILD description: http://msdn.microsoft.com/en-us/library/windows/desktop/bb762494(v=vs.85).aspx System Center Update Publisher 2011 provider customers the ability to create customized updates which can be deployed with System Center Configuration Manager: http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=11940. Some IT admins who use System Center Update Publisher 2011 to create customized updates may face this issue: they create an update and deploy…


FEP Policy UI issue – "Only check alternative sources if definitions on the client computer are older than (days):” setting cannot be saved if you only change this setting with key board.

Issues Description: On FEP 2010 SU1, you edit the FEP Policy and only change the “Only check alternative sources if definitions on the client computer are older than (days):” setting by changing the number in the text box (instead of clicking the up/down button) and you don’t change the focus to other controls. You will…


Use ConfigMgr and FEP 2010 Group Policy Tool together to manage FEP Policy

Some customers may use both Configuration Manager and FEP 2010 Group Policy Tool (http://www.microsoft.com/download/en/details.aspx?id=13088) to manage FEP Client settings, you may find the following issues: You create a FEP policy in Configuration Manager UI and apply it to one client. However, the client doesn’t apply the settings you defined in that policy, but set to…


Understanding FEP 2010 Update Rollup 1 Signature Update Policy Settings

In this blog post, I will give more details on the FEP 2010 Update Rollup 1 Signature Update Policy Settings to help you understand what does each setting mean. The FEP Policy Properties Diagloue, Update Tab:   These settings map to the registry key under: HKEY_LOCAL_MACHINE/Software/Microsoft/Microsoft Antimalware/Signature Updates. AuGracePeriod: (in minutes) Define the time before…


FEP 2010 Definition Update Automation Tools – Issues, Workarounds and Best Practice

A new version of this tool has been released and some of the issues mentioned here have been fixed. Refer here first: http://blogs.technet.com/b/configmgrteam/archive/2011/11/01/how-to-use-definition-update-automation-tool-for-forefront-endpoint-protection-2010-update-rollup-1.aspx ******************************************************************************* This blog list some issues you may meet when using the SoftwareUpdateAutomation.exe tool and provide the workarounds. This blog also give a list of best practice you should follow when using…


FAQ on Configuration Manager 2012 Software Update Point – Changes and New Feature

Below are some FAQ around the changes and new features introduced in Configuration Manager 2012. 1.       Superseded Rules Q: Now SUM has a new setting – ‘superseded rule’ that can expire an superseded update after some time. When does the expiration operation happen? A: It happens on synchronization. In most case, it will happen on…


Common Errors and Resolutions for System Center Updates Publisher 2011

System Center Updates Publisher 2011 has been released recently. You can download it now from: http://www.microsoft.com/downloads/en/details.aspx?FamilyID=083f45ca-1ede-4f7a-be74-77854c3a9b01&displaylang=en When you start your surfing on the new release of SCUP, you may encounter some common errors. This blog will list some of the common error you may receive and tell you the reason and how to solve it: …


Step By Step on How to Use Software Metering

Software Metering is a feature in Configuration Manager that allows you to monitor and collect software usage data from Configuration Manager 2007 clients. Check the following technet document for more about Software Metering: http://technet.microsoft.com/en-us/library/bb694169.aspx. In this article we will show you how to use Software Metering Step by Step. Step 1. Create Metering Rules on…