Microsoft KB Archive/929076

= How to use the Fscutility.exe program to disconnect the Forefront Security services from Exchange Server or from SharePoint Portal Server =

Article ID: 929076

Article Last Modified on 2/22/2007

-

APPLIES TO


 * Forefront Security for Exchange
 * Forefront Security for SharePoint

-





Beta Information
This article discusses a Beta release of a Microsoft product. The information in this article is provided as-is and is subject to change without notice.

No formal product support is available from Microsoft for this Beta product. For information about how to obtain support for a Beta release, see the documentation that is included with the Beta product files, or check the Web location where you downloaded the release.



Important This article contains information that shows you how to help lower security settings or how to turn off security features on a computer. You can make these changes to work around a specific problem. Before you make these changes, we recommend that you evaluate the risks that are associated with implementing this workaround in your particular environment. If you implement this workaround, take any appropriate additional steps to help protect the computer.



INTRODUCTION
This article describes how to use the Fscutility.exe program in Microsoft Forefront Security for Exchange or in Microsoft Forefront Security for SharePoint to disconnect the Forefront Security services from Microsoft Exchange Server or from Microsoft SharePoint Portal Server.

Note Forefront Security for Exchange was previously called Microsoft Antigen for Exchange. Forefront Security for SharePoint was previously called Antigen for SharePoint.



MORE INFORMATION
Warning This workaround may make a computer or a network more vulnerable to attack by malicious users or by malicious software such as viruses. We do not recommend this workaround but are providing this information so that you can implement this workaround at your own discretion. Use this workaround at your own risk.

If you are an administrator, you can use the Fscutility.exe program to disconnect the Forefront Security services from the Exchange server or from the SharePoint server. After you disconnect the Forefront Security services from the Exchange server or from the SharePoint server, Forefront Security is disabled.

In this scenario, Forefront Security remains installed. However, it is no longer connected to the Exchange server or to the SharePoint server. Therefore, Forefront Security cannot scan incoming and outgoing e-mail messages. You may have to disable Forefront Security to do any of the following:
 * Troubleshoot issues with Forefront Security
 * Run diagnostics on the server
 * Install a service pack on the server

For example, if you are experiencing an issue with Forefront Security but you are not sure whether the issue is caused by Forefront Security, you can use the Fscutility.exe program to disable Forefront Security. Then, you can test to see whether the issue still occurs.

You can use the following command-line options with the Fscutility.exe program:
 * /status Use this option to display the status of Forefront Security and of the Exchange server or the SharePoint server.
 * /enable Use this option to enable Forefront Security if the Exchange server or the SharePoint server services have been stopped.
 * /disable Use this option to disable Forefront Security if the Exchange server or the SharePoint server services have been stopped.
 * /remove Use this option to remove Microsoft Forefront Security’s registry keys.
 * /regmon Use this option to register FSCMonitor.
 * /unregmon Use this option to unregister FSCMonitor.

To use the Fscutility.exe program to disconnect the Forefront Security services from the Exchange server or from the SharePoint server, follow these steps:  Stop the Exchange server services or the SharePoint server services and the Forefront Security services. To do this, follow these steps:  Click Start, click Run, type services.msc, and then click OK. Right-click the service that you want to stop, and then click Stop.

Note Stop the Exchange server services in the following order:  FSCController Microsoft Exchange Transport Service System Attendant</li> Information Store</li></ol>

Note Stop the SharePoint server services in the following order: <ol> FSCController</li> IIS Admin Service</li></ol>

Note When you stop the Exchange server services or the SharePoint server services, the Forefront Security services will be stopped automatically. If a Forefront Security service is still running after you stop the Exchange server services or the SharePoint server services, right-click the Forefront Security service that is still running. Then, click Stop.</li></ol> </li> Start a command prompt, and then move to the Forefront Security for Exchange folder. By default, the Forefront Security for Exchange folder is in the following location:

Program Files (x86)\Microsoft Forefront Security\Exchange Server

The Forefront Security for SharePoint folder is in one of the following locations: <ul> x86

Program Files\Microsoft Forefront Security\SharePoint

</li> x64 or IA-64

Program Files (x86)\Microsoft Forefront Security\SharePoint

</li></ul> </li> At the command prompt, type the following command to disable the Forefront Security service, and then press ENTER.

Important When you run this command, the Forefront Security services will be disconnected from the Exchange Server or from the SharePoint server. During this time, Forefront Security will be disabled. Forefront Security will not be protecting your environment by using enhanced virus protection. We recommend that you use the Fscutility.exe program to disable Forefront Security only in a controlled environment. Additionally, make sure that you use an alternative method to maintain enhanced virus protection when Forefront Security is disabled.

Fscutility /disable

After you run this command, you receive the following message:

Microsoft Forefront Server Security VSAPI hooking dll is disabled.

Status: Microsoft Forefront Server Security NOT Integrated

To enable the Forefront Security service, type the following command, and then press ENTER:

Fscutiliy /enable

After you run the command, you receive the following message:

Microsoft Forefront Server Security VSAPI hooking dll is enabled.

Status: Microsoft Forefront Server Security successfully integrated!

</li> To make sure that the Forefront Security services are disconnected from the Exchange server or from the SharePoint server, type Fscutility /status, and then press ENTER.</li> Troubleshoot Forefront Security, run diagnostics, or install a service pack.</li> Restart the Exchange server or the SharePoint server services that you stopped. To do this, follow these steps: <ol style="list-style-type: lower-alpha;"> Click Start, click Run, type services.msc, and then click OK.</li> Right-click the Exchange server services or the SharePoint server services that you want to start, and then click Start.

After you start the Exchange server services or the SharePoint server services, make sure that the Forefront Security services have restarted. The Forefront Security services should automatically restart after you restart the Exchange server services. If a Forefront Security service has not restarted, right-click the Forefront Security service, and then click Start.</li></ol> </li></ol>

Additional query words: Fscutility the Fscutility.exe program Fscutility /disable Fscutility /enable unhook disassociate

Keywords: kbhowto kbinfo kbexpertiseinter KB929076

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.