Microsoft KB Archive/943557

= Forefront Client Security software does not receive definition updates =

Article ID: 943557

Article Last Modified on 11/19/2007

-

APPLIES TO


 * Microsoft Forefront Client Security

-



SYMPTOMS
You have installed Microsoft Forefront Client Security software on a client computer. However, the Forefront Client Security software does not receive definition updates. You experience this issue when all the following conditions are true:
 * The client computer has no Windows Server Update Services (WSUS) server configured.
 * The client computer does not use the Microsoft Update Web site to search for the latest updates.



CAUSE
This issue may occur if the client computer uses the Automatic Update service to receive updates. By default, the Automatic Update service uses Windows Update as the service provider. However, Windows Update does not host Forefront Client Security definition updates. Therefore, the computer cannot find any definition updates for Forefront Client Security.



RESOLUTION
To resolve this issue, use one of the following methods.

Method 1: Use the Microsoft Update Web site
You can access the Microsoft Update Web site to receive definition updates for the Forefront Client Security software. The Microsoft Update Web site hosts the definition updates for the Forefront Client Security software. When you access the Microsoft Update Web site, the default service is changed from Windows Update to Microsoft Update. The client computer can now receive the definition updates.

Method 2: Configure and then deploy a Forefront Client Security policy on client computers to use the Microsoft Update site
You can use a policy setting to configure client computers to use the Microsoft Update site when the WSUS server is unavailable. This method enables the client computers to receive the Forefront Client Security definition updates from the Microsoft Update site. To configure this policy, follow these steps:  Click Start, point to All Programs, point to Microsoft Forefront, point to Client Security, and then click Microsoft Forefront Client Security Console. In the Forefront Client Security console, click the Policy Management tab. In the Policy Management tab, click New to create a new policy, or double-click a policy that you want to edit. In the New Policy dialog box or in the Edit Policy dialog box, click the Advanced tab. Under Malware definition updates, click to select the Check for updates on Microsoft Update when WSUS is unavailable check box if it is not already selected.

Note You must accept the Microsoft Software License Terms to use the Microsoft Update site. After you finish creating or editing the policy, click OK. Deploy the policy to a registry file. To do this, follow these steps: <ol style="list-style-type: lower-alpha;"> On the Policy Management tab, click the policy that you want to deploy, and then click Deploy. The Deploy dialog box appears. You use the Deploy dialog box to specify deployment targets.</li> In the Deploy dialog box, click Add File. The Save As dialog box appears.</li> Select a location to save the .reg file.</li> In File name box, type the name that you want to use for the policy .reg file.</li> Click Save. The file is listed in the Deploy dialog box.</li> Click Deploy to export the policy to a .reg file.</li></ol> </li> Apply the .reg policy file to a client computer. To do this, follow these steps: <ol style="list-style-type: lower-alpha;"> Copy the .reg file that you created in step 7 to the client computer on which you want to apply the policy.</li> On the client computer, insert the Forefront Client Security CD.</li> Open a Command Prompt window.</li> At the command prompt, type cd \Client, and then press ENTER.</li> At the command prompt, type the following command, and then press ENTER:

fcslocalpolicytool /f /i 

</li></ol>

Notes <ul> The  placeholder is the .reg policy file that you want to apply to the client computer. After you apply a policy, previously applied Forefront Client Security policies are deleted.</li> For automated deployments, you can use the /f option to suppress the confirmation message.</li></ul> </li></ol>

Keywords: kbtshoot kbexpertiseadvanced kbprb KB943557

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.