How-To : Install A One Server Forefront Client Security Topology

Some time ago I posted on my blog that I’m running my whole test-infrastructure on a Windows Server 2008 Enterprise Edition with Hyper-V. Right now I don’t have a anti-malware and anti-virus solution solution implemented, so I’m going to get Forefront Client Security running on my Forefront Virtual Machine.

I’m going for the one Server topology, so all the Forefront roles are installed on one server. My initial idea was to install the FCS 1 Server Topology on Windows Server 2008. Too bad MOM 2005 won’t install on Windows Server 2008 so I had to install it on Windows Server 2003. When it’s possible to install FCS on Server 2008 I will let you guys know! (If you have it running please let me know too :-))

Click here to read the How-To

Server specs :
Hyper-V Virtual Machine
Core2Duo E6600
2048 MB Memory
127 GB Harddisk

Forefront Roles to be installed

  • Management Server
  • Collection Server
  • Collection Database
  • Reporting server and reporting database
  • Distribution Server

Installing Prerequisites for Forefront Client Security

I’m assuming that you know how to install Windows Server 2003  before you start installing Forefront, so I’m not telling you how you have to do it. I used Windows Server 2003 R2 SP2 for the installation.

Before you can install Forefront Client Security you have to install the following software prerequisites :

  • Windows Components
  • Internet Information Services
  • Microsoft .NET Framework 2.0
  • Group Policy Management Console with SP1
  • SQL Server 2005 with SP2
    • I used SQL Server 2005 Standard x868 edition
    • You need at least SP1, but I installed SP2
  • Microsoft Report Viewer Redistributable 2005
  • WSUS 3.0 with SP1

    Before you start the installation you will have to create a domain user account which you can use during the Forefront Setup.

    Installing Microsoft Forefront Client Security

    1. Start the setup by clicking the Run the setup wizard on the autorun page
    2. Fill out the form with your name and organization and click Next
    3. Select I accept the terms in the license agreement and click Next
    4. Select all the components and click Next
    5. You can leave the Collection server and Management group name default. Use the domain account you created before at the DAS account info and click Next
    6. Keep the Collection database and Database size default. The Re-use the DAS account for the reporting account checkbox can stay checked (default) and click Next
    7. Keep the Reporting database and Database size default. The Re-use the DAS account for the reporting account checkbox can stay checked (default) and click Next
    8. Keep the Reporting server and URLs for reports default and click Next
    9. Keep the DAS account checkbox checked (default) at the Action account page
    10. Keep the default installation location (C:Program Files| and click Next
    11. On the Verifying Settings and Requirements page everything should be Successful (except my verifying hardware requirements, it has a Warning status). Just click Next
    12. The installation is starting
    13. When the installation is finished Forefront has been installed
  • Pin It
    • Joachim Farla

      Nice thanks!

    • Ray

      My installation keeps erroring out when it installs the collection database. Followed your instructions to the letter. Any idea why this is happening?

    • Ulf Holt

      I have installed FF on Windows 2003 (32 bit). Everything is running on Hyper-V (8 cores + 24 GB memory) with a lot of other VMs, mostly running Windows Server 2008. I would like to try install FF Client Security on Windows Server 2008 64 bit. Can’t find out if this is supported or not. Any Idea?

      BTW ForeFront Client Security reports “Updates Available” but when I click download, I can only select items I want to download, but I cant find any way to start the download.


      Ulf Holt

    • Peterhamilton

      Excellent explanation, with all relevant links to items that must be downloaded first – Thanks, you've saved me hours of work!!! Peter

    • Remove Spyware

      You explain very clearly. It's easy to understand.

    • jeffh

      Hi, I found this and it is very helpful. At the end it says “Before you can use Forefront you have to configure some more things, that will be discussed next week!”, but I can’t find the later article. Also, it says “Before you start the installation you will have to create a domain user account which you can use during the Forefront Setup.” How would I do that? Thanks!

      • Helmer

        Ehh…I think I forgot to add the follow-up article back in 2008. Too bad I don’t have the info available anymore, so I deleted the last line.

        About the domain user. Just add a domain account on a current Windows Server before you start installing Forefront.

    • blu ray disc player

      We sincerely enjoyed your article. It looks like you have placed a lot of effort into your blog and I need more of these on the net these days. I do not really have a large amount to say in reply, I only wanted to sign up to say great work.

    • remove Security Essentials

      I really appreciate your step by step guide.

    • remove Internet Antivirus 2011

      This will be great if it will work. Thanks for sharing it.

    • Best Registry Cleaner

      Excellent, Thanks.

    • Gurudatt Kulkarni

      how to create DAS account as it is not possible to install on Domain Controller…
      please tell em how to create???

    • Golenilesh

      Can u please guide me how to install step by step FCS Server installation.. I have done installation but server not communicate with client…

    • Ketangajare
    • Helmer

      What kind of errors do you get?

    • Helmer

      As far as I know Forefront Client Security (the management part) can’t be installed on a 64-bit Windows Server 2008 machine. You CAN install the Client part (which you also install on your clients) on the Windows Server 2008 64-bit.

      In normal English :You can’t install the FCS Server Roles (Management Server, Reporting Server, Distribution Server) on Windows Server 2008 (not on 32-bit and not on 64-bit), but you CAN install FCS Client on Windows Server 2008 (32-bit and 64-bit)