Understanding FEP 2010 Deployment Status Collections

Starting from this month, you can either install FEP platform updates through Microsoft Update or standalone FEP hotfix. http://blogs.technet.com/b/configmgrteam/archive/2014/03/27/anti-malware-platform-updates-for-endpoint-protection-will-be-released-to-mu.aspx. The latest FEP platform updates on MU is of version 4.5.0215.0. The latest standalone FEP hotfix is also of version 4.5.0.215.0: http://support.microsoft.com/kb/2952678. You can validating the FEP deployment using dashboard: http://technet.microsoft.com/en-us/library/ff823784.aspx. You might already know that…


Guidance on serve initial FEP definition update with SCCM through DP

Another hot request from Customers about FEP is to allow the initial definition update after FEP client install is served up via Configuration Manager instead of from the live MU. To achieve this, first you should follow the article here to keep your SCCM site with the latest FEP definition update deployed. The next step is…


Manage FEP agents with or without SCCM

There’re some questions about FEP 2010 Standalone. Actually, it’s quite vague about the meaning of FEP 2010 Standalone. FEP 2010 means FEP 2010 Server that are integrated with SCCM 2007. When most customers talk about FEP 2010 Standalone, they actually talk about to manage FEP agents without SCCM. Below is the table break down by…


Use ConfigMgr and FEP 2010 Group Policy Tool together to manage FEP Policy

Some customers may use both Configuration Manager and FEP 2010 Group Policy Tool (http://www.microsoft.com/download/en/details.aspx?id=13088) to manage FEP Client settings, you may find the following issues: You create a FEP policy in Configuration Manager UI and apply it to one client. However, the client doesn’t apply the settings you defined in that policy, but set to…


Understanding FEP 2010 Update Rollup 1 Signature Update Policy Settings

In this blog post, I will give more details on the FEP 2010 Update Rollup 1 Signature Update Policy Settings to help you understand what does each setting mean. The FEP Policy Properties Diagloue, Update Tab:   These settings map to the registry key under: HKEY_LOCAL_MACHINE/Software/Microsoft/Microsoft Antimalware/Signature Updates. AuGracePeriod: (in minutes) Define the time before…


FEP 2010 Definition Update Automation Tools – Issues, Workarounds and Best Practice

A new version of this tool has been released and some of the issues mentioned here have been fixed. Refer here first: http://blogs.technet.com/b/configmgrteam/archive/2011/11/01/how-to-use-definition-update-automation-tool-for-forefront-endpoint-protection-2010-update-rollup-1.aspx ******************************************************************************* This blog list some issues you may meet when using the SoftwareUpdateAutomation.exe tool and provide the workarounds. This blog also give a list of best practice you should follow when using…