SCOM 2007 R2 Forefront Endpoint Protection Management Pack

Hi All,
Question about Forefront Endpoint Protection Management Pack Alert configuration.
We are receiving “Malware Outbreak” Monitor alert with below Alert Description:
Protected Endpoints Watcher Forefront Endpoint Protection has detected active malware on more than 5% of your computers.
Our customer is asking, How to find out the name of the 5% of computers with affected malware information. Kindly assist me on this. I could find only Watcher node.
Thanks & Regards,
Mohamed Sybulla

Malware outbreak alert show Number of computers with the same malware detected
To Generate report of computer names and version, see
Viewing and printing reports.
To resolve this alert, you can refer below links
http://technet.microsoft.com/en-us/library/bb418869.aspx
http://technet.microsoft.com/en-us/library/ff823761.aspx
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"
Mai Ali | My blog: Technical | Twitter:
Mai Ali

Similar Messages

  • Steps to install Forefront Endpoint Protection 2010?

    I've been searching on how to install Forefront Endpoint Protection 2010 on a Windows Server 2012 R2 Server.  I can't seem to find anything about this.  Can someone tell me the steps I need to take.  I installed SQL 2012, then SCCM
    2012, but when I launch the Forefront 2010 installer its saying it can't find SCCM 2007.  I take it its not supported in Forefront 2010? Anyways, if there are instructions on how to install the Endpoint Protection and Exchange Online protection I'd appreciate
    it.  
    Fernando

    Hi,
    In SCCM 2012 Endpoint Protection 2012 is integrated so you cannot install FEP 2010 in it. Add the Site System role called "Endpoint Protection" on your Primary site server, CAS if you use a CAS and then you are good to go.
    the steps are described here:
    http://blogs.technet.com/b/anilm/archive/2012/02/19/how-to-enable-configuration-manager-2012-endpoint-protection.aspx
    Regards,
    Jörgen
    -- My System Center blog ccmexec.com -- Twitter
    @ccmexec

  • SCCM 2012 R2: Forefront Endpoint protection via automatic updates only work when manually triggering automatic updat rule

    Hi,
    I followed this manual to configure forefront endpoint protection on clients: http://www.windows-noob.com/forums/index.php?/topic/6106-using-system-center-2012-configuration-manager-part-6-adding-the-endpoint-protection-role-configure-alerts-and-custom-antimalware-policies/
    Now in short: everything works fine ... as long as I trigger the audomatic deployment rules.
    Current situation:
    1. ADR ran fine (3:30 this night)
    2.Software update group is NOT ok
    3.I run ADR manually (right click on ADR, run)
    4.software update group is ok (green icon)
    Then virusupdates are succesfull. This means that clients only update their virus definitions when I manually run the ADR-rule.
    I'm missing something here.
    Please advise.
    J.
    Jan Hoedt

    Probably this issue: http://social.technet.microsoft.com/Forums/en-US/c6109678-785b-4c6d-9cb4-c9dfc1e34b2e/sccm-2012-automatic-deployment-rule-not-executing-updates-for-scep?forum=configmanagerapps
    Iow: wsus updates were scheduled at 3, automatic update rules at 3:15, probably sync wasn't done yet so it doesn't find updates. "The day after" updates are marked as expired.
    Jan Hoedt

  • SCCM and ForeFront Endpoint Protection point site system role

    Thanks for looking at this......I am working with SCCM 2012, and ForeFront Endpoint Protection has been set up as an Endpoint Protection point site system role.  Up to now we just haven't had to mess with it much, it just has worked.  I
    have been busy packaging applications for the eager public. I have one pc that has had the Endpoint client self destruct.  Had to remove it via the control panel.  I next did a machine policy retrieval and evaluation cycle (among others) and sccm
    shows that it is aware that this particular machine needs FEP. It lists it as "To Be Installed".  How long will this take?  I have things set for "as soon as possible".   Am I at the mercy of Sccm?  Also, is there
    a way to force the install?  Thanks for any light you can shed on this!

    This will depend on your SCCM client policy settings to allow SCEP installation outside of maintenance windows (if you have any).
    It will also depend if you are using 2 hour deployment "randomizer" option in your SCCM client policy.
    Lastly, you can install it with BITS that have already been downloaded with SCCM client install.
    c:\windows\ccmsetup\scepintall.exe

  • Forefront Endpoint Protection Monitoring Service

    Hello,
    I just saw that the Forefront Endpoint Protection Monitoring Service is stoppable. I had a virus a few weeks ago on my machine at home that has security essential installed. The virus continually disabled the service. Does it make sense to control the service
    via gpo to not make it stoppable even by the system and admin user?
    Cheers
    Sebastian
    Sebastian Bammer

    This is old discussion, but let me explain some improvements in Microsoft Anti-Malware Engine. When a program tried to disable any service, process or anything related to Windows Security or Microsoft Anti-Malware Engine , Firewall, etc. It will be detected
    as a suspicious behavior and it will be blocked (no matter whether it is known malware or unknown program). In case of unknown program, you might be asked to send more details or submit it to Microsoft Malware Protection Center.
    In addition, in Windows Vista and later version of Windows such as Windows 7, Windows 8.x when you have User Account Control (UAC), all programs run as an standard user unless you grand them permission as administrator. So by default, if a program tried
    to disable any Security related service in Windows is unable to that because it won't run as administrator and is unable to perform something which runs as administer unless, if you are in administrator account and UAC is off or you grand administrator privilege
    to the program (e.g. right click and run as administrator).
    However, if you still face any programs which might try to disable services and it won't block by FEP , Microsoft Security Essentials or other Microsoft Anti-Malware products, you could submit it sample to Microsoft Malware Protection Center for more analysis.

  • Is Forefront Endpoint Protection 2010 detecting and removing CryptoLocker?

    Is Forefront Endpoint Protection 2010 detecting and removing CryptoLocker?

    Hi,
    For antimalware and antispyware, the latest definitions are
    1.187.361.0. You can install the latest updates:
    Updating your Microsoft antimalware and antispyware software
    If that threat cannot be detected or removed, you can feedback or submit a malware file in the Malware Protection Center.
    Best regards,
    Susie

  • Forefront Endpoint Protection 2010 Antimalware Activity and Antimalware Protection Summary Reports aren't rendering properly.

    The Antimalware Activity and Antimalware Protection Summary Reports aren't rendering properly.  When I export them to PDF, they look normal but when I run either one of these reports through they don't display properly.  In the Antimalware
    Protection Summary report, the Latest Antimalware Protection Summary title bar has been extended and the Status legend is coved by white space and Latest Antimalware Definitions Summary title bar has been extended and Period legend
    are covered by white space.  On the same page the Antimalware Protection History-Week has been flushed to the right to where it only dispays Antimalw and the Antimalware Definitions History-Week has been flushed to the right to where it only dispays
    Antimalw.  On the Antimalware Activity the Actions legend has been flushed to the left.

    This is an old question but you may try it using the latest version of Forefront Endpoint Protection or System Center Endpoint Protection and let us know if you are able to reproduce the problem. There are many improvements in latest release of SCEP and
    FEP.

  • Forefront Endpoint Protection 2010 - Exclude files and locations == Exclude processes??

    Hi,
    I have a server with Forefront Endpoint Protection 2010 installed.
    This server is running Backup Exec. I have created an files and folder exclusion pointing to:
    C:\Program Files\Symantec
    There are various references online like this one
    http://www.symantec.com/business/support/index?page=content&id=TECH74529
    Which highlight excluding the processes rather than what I have done...
    If the process is inside the Symantec folder is there any technical difference between using the files and folder exclusion as opposed to the process exclusion?

    Yes, the difference is that excluding the folder location will only exclude the folder and the child items of that specific location from scanning activity whereas excluding a process will exclude any activity by the process regardless of location. So,
    with a process exclusion, if that process under C:\Program Files\Symantec produces activity in C:\Windows, the activity will be excluded from scanning, but if you just have the C:\Program Files\Symantec folder excluded, the activity in C:\Windows will not
    be excluded.

  • Endpoint Protection Managed Workstations: Antimalware policy application failed

    Hello,
    When looking at the Endpoint statistics I have the line for systems failing to apply policy. An easy fix to this is to delete the registry.pol file. I would like to make a collection that automates this task for me. Basically if it reports back failure,
    it gets added to a collection, an advertisement runs on it to fix it and redeploy the policy.
    The only thing I need to know is the query behind the "Endpoint Protection Managed Workstations: Antimalware policy application failed" so I can make a collection for it. Does anyone happen to know it?
    Thanks

    Client logs:
    Client 1:
    Create Process Command line: "c:\Program Files\Microsoft Security Client\\ConfigSecurityPolicy.exe" "C:\WINDOWS\CCM\EPAMPolicy.xml". EndpointProtectionAgent 11/3/2014 12:27:00 PM 2056 (0x0808)
    Failed to apply the policy C:\WINDOWS\CCM\EPAMPolicy.xml with error (0x80004005). EndpointProtectionAgent 11/3/2014 12:27:00 PM 2056 (0x0808)
    Failed to apply policy with error 0x80004005, retry number : 1 after 60 second. EndpointProtectionAgent 11/3/2014 12:27:00 PM 2056 (0x0808)
    Create Process Command line: "c:\Program Files\Microsoft Security Client\\ConfigSecurityPolicy.exe" "C:\WINDOWS\CCM\EPAMPolicy.xml". EndpointProtectionAgent 11/3/2014 12:28:00 PM 2056 (0x0808)
    Failed to apply the policy C:\WINDOWS\CCM\EPAMPolicy.xml with error (0x80004005). EndpointProtectionAgent 11/3/2014 12:28:00 PM 2056 (0x0808)
    Failed to apply policy with error 0x80004005, retry number : 2 after 60 second. EndpointProtectionAgent 11/3/2014 12:28:00 PM 2056 (0x0808)
    Create Process Command line: "c:\Program Files\Microsoft Security Client\\ConfigSecurityPolicy.exe" "C:\WINDOWS\CCM\EPAMPolicy.xml". EndpointProtectionAgent 11/3/2014 12:29:00 PM 2056 (0x0808)
    Failed to apply the policy C:\WINDOWS\CCM\EPAMPolicy.xml with error (0x80004005). EndpointProtectionAgent 11/3/2014 12:29:00 PM 2056 (0x0808)
    Failed to apply policy with error 0x80004005, retry number : 3 after 60 second. EndpointProtectionAgent 11/3/2014 12:29:00 PM 2056 (0x0808)
    Create Process Command line: "c:\Program Files\Microsoft Security Client\\ConfigSecurityPolicy.exe" "C:\WINDOWS\CCM\EPAMPolicy.xml". EndpointProtectionAgent 11/3/2014 12:30:00 PM 2056 (0x0808)
    Failed to apply the policy C:\WINDOWS\CCM\EPAMPolicy.xml with error (0x80004005). EndpointProtectionAgent 11/3/2014 12:30:00 PM 2056 (0x0808)
    Failed to apply policy with error 0x80004005, retry number : 4 after 60 second. EndpointProtectionAgent 11/3/2014 12:30:00 PM 2056 (0x0808)
    Create Process Command line: "c:\Program Files\Microsoft Security Client\\ConfigSecurityPolicy.exe" "C:\WINDOWS\CCM\EPAMPolicy.xml". EndpointProtectionAgent 11/3/2014 12:31:00 PM 2056 (0x0808)
    Failed to apply the policy C:\WINDOWS\CCM\EPAMPolicy.xml with error (0x80004005). EndpointProtectionAgent 11/3/2014 12:31:00 PM 2056 (0x0808)
    Failed to apply policy with error 0x80004005, retry number : 5 after 60 second. EndpointProtectionAgent 11/3/2014 12:31:00 PM 2056 (0x0808)
    Create Process Command line: "c:\Program Files\Microsoft Security Client\\ConfigSecurityPolicy.exe" "C:\WINDOWS\CCM\EPAMPolicy.xml". EndpointProtectionAgent 11/3/2014 12:32:00 PM 2056 (0x0808)
    Failed to apply the policy C:\WINDOWS\CCM\EPAMPolicy.xml with error (0x80004005). EndpointProtectionAgent 11/3/2014 12:32:01 PM 2056 (0x0808)
    Save new policy state 2 to registry SOFTWARE\Microsoft\CCM\EPAgent\PolicyApplicationState EndpointProtectionAgent 11/3/2014 12:32:01 PM 2056 (0x0808)
    State 2 and ErrorCode -2147467259 and ErrorMsg Failed to open the local machine Group Policy and PolicyName Antimalware Policy and GroupResolveResultHash 23496E87C22E7CA5048254CC04CCF582A084C108 is NOT changed. EndpointProtectionAgent 11/3/2014 12:32:01 PM 2056 (0x0808)
    Skip sending state message due to same state message already exists. EndpointProtectionAgent 11/3/2014 12:32:01 PM 2056 (0x0808)
    Client 2:
    Apply AM Policy. EndpointProtectionAgent 11/4/2014 7:27:50 AM 2536 (0x09E8)
    Failed to generate AM policy XML with error code 0x8000ffff EndpointProtectionAgent 11/4/2014 7:27:50 AM 2536 (0x09E8)
    Save new policy state 2 to registry SOFTWARE\Microsoft\CCM\EPAgent\PolicyApplicationState EndpointProtectionAgent 11/4/2014 7:27:50 AM 2536 (0x09E8)
    start to send State Message with topic type = 2002, state id = 2, error code = 0x8000ffff, and message = <Instance><AppliedAmPolicies/></Instance>
    EndpointProtectionAgent 11/4/2014 7:27:50 AM 2536 (0x09E8)
    Start to send state message. EndpointProtectionAgent 11/4/2014 7:27:50 AM 2536 (0x09E8)
    Send state message successfully EndpointProtectionAgent 11/4/2014 7:27:51 AM 2536 (0x09E8)
    Firewall provider is installed. EndpointProtectionAgent 11/4/2014 7:27:51 AM 2536 (0x09E8)
    Installed firewall provider meet the requirements. EndpointProtectionAgent 11/4/2014 7:27:51 AM 2536 (0x09E8)
    Endpoint is triggered by WMI notification. EndpointProtectionAgent 11/4/2014 7:27:51 AM 2536 (0x09E8)
    File C:\Windows\ccmsetup\SCEPInstall.exe version is 4.3.215.0. EndpointProtectionAgent 11/4/2014 7:27:51 AM 2536 (0x09E8)
    EP version 4.3.215.0 is already installed. EndpointProtectionAgent 11/4/2014 7:27:51 AM 2536 (0x09E8)
    Expected Version 4.3.215.0 is exactly same with installed version 4.3.215.0. EndpointProtectionAgent 11/4/2014 7:27:51 AM 2536 (0x09E8)
    Handle EP AM policy. EndpointProtectionAgent 11/4/2014 7:27:51 AM 2536 (0x09E8)
    Apply AM Policy. EndpointProtectionAgent 11/4/2014 7:27:51 AM 2536 (0x09E8)
    Failed to generate AM policy XML with error code 0x8000ffff EndpointProtectionAgent 11/4/2014 7:27:51 AM 2536 (0x09E8)
    Save new policy state 2 to registry SOFTWARE\Microsoft\CCM\EPAgent\PolicyApplicationState EndpointProtectionAgent 11/4/2014 7:27:51 AM 2536 (0x09E8)
    State 2 and ErrorCode -2147418113 and ErrorMsg Failed to load WMI instances. and PolicyName Antimalware Policy and GroupResolveResultHash 2B22C160D3BC8DC4BECF08D4F632D4756D4C9622 is NOT changed. EndpointProtectionAgent 11/4/2014 7:27:51 AM 2536 (0x09E8)
    Skip sending state message due to same state message already exists. EndpointProtectionAgent 11/4/2014 7:27:51 AM 2536 (0x09E8)
    Client 3:
    Apply AM Policy. EndpointProtectionAgent 11/3/2014 12:26:00 PM 1768 (0x06E8)
    Create Process Command line: "c:\Program Files\Microsoft Security Client\\ConfigSecurityPolicy.exe" "C:\Windows\CCM\EPAMPolicy.xml". EndpointProtectionAgent 11/3/2014 12:26:00 PM 1768 (0x06E8)
    Failed to apply the policy C:\Windows\CCM\EPAMPolicy.xml with error (0x80004005). EndpointProtectionAgent 11/3/2014 12:26:00 PM 1768 (0x06E8)
    Failed to apply policy with error 0x80004005, retry number : 1 after 60 second. EndpointProtectionAgent 11/3/2014 12:26:00 PM 1768 (0x06E8)
    Create Process Command line: "c:\Program Files\Microsoft Security Client\\ConfigSecurityPolicy.exe" "C:\Windows\CCM\EPAMPolicy.xml". EndpointProtectionAgent 11/3/2014 12:27:00 PM 1768 (0x06E8)
    Failed to apply the policy C:\Windows\CCM\EPAMPolicy.xml with error (0x80004005). EndpointProtectionAgent 11/3/2014 12:27:00 PM 1768 (0x06E8)
    Failed to apply policy with error 0x80004005, retry number : 2 after 60 second. EndpointProtectionAgent 11/3/2014 12:27:00 PM 1768 (0x06E8)
    Create Process Command line: "c:\Program Files\Microsoft Security Client\\ConfigSecurityPolicy.exe" "C:\Windows\CCM\EPAMPolicy.xml". EndpointProtectionAgent 11/3/2014 12:28:00 PM 1768 (0x06E8)
    Failed to apply the policy C:\Windows\CCM\EPAMPolicy.xml with error (0x80004005). EndpointProtectionAgent 11/3/2014 12:28:00 PM 1768 (0x06E8)
    Failed to apply policy with error 0x80004005, retry number : 3 after 60 second. EndpointProtectionAgent 11/3/2014 12:28:00 PM 1768 (0x06E8)
    Create Process Command line: "c:\Program Files\Microsoft Security Client\\ConfigSecurityPolicy.exe" "C:\Windows\CCM\EPAMPolicy.xml". EndpointProtectionAgent 11/3/2014 12:29:00 PM 1768 (0x06E8)
    Failed to apply the policy C:\Windows\CCM\EPAMPolicy.xml with error (0x80004005). EndpointProtectionAgent 11/3/2014 12:29:01 PM 1768 (0x06E8)
    Failed to apply policy with error 0x80004005, retry number : 4 after 60 second. EndpointProtectionAgent 11/3/2014 12:29:01 PM 1768 (0x06E8)
    Create Process Command line: "c:\Program Files\Microsoft Security Client\\ConfigSecurityPolicy.exe" "C:\Windows\CCM\EPAMPolicy.xml". EndpointProtectionAgent 11/3/2014 12:30:01 PM 1768 (0x06E8)
    Failed to apply the policy C:\Windows\CCM\EPAMPolicy.xml with error (0x80004005). EndpointProtectionAgent 11/3/2014 12:30:01 PM 1768 (0x06E8)
    Failed to apply policy with error 0x80004005, retry number : 5 after 60 second. EndpointProtectionAgent 11/3/2014 12:30:01 PM 1768 (0x06E8)
    Create Process Command line: "c:\Program Files\Microsoft Security Client\\ConfigSecurityPolicy.exe" "C:\Windows\CCM\EPAMPolicy.xml". EndpointProtectionAgent 11/3/2014 12:31:01 PM 1768 (0x06E8)
    Failed to apply the policy C:\Windows\CCM\EPAMPolicy.xml with error (0x80004005). EndpointProtectionAgent 11/3/2014 12:31:01 PM 1768 (0x06E8)
    Save new policy state 2 to registry SOFTWARE\Microsoft\CCM\EPAgent\PolicyApplicationState EndpointProtectionAgent 11/3/2014 12:31:01 PM 1768 (0x06E8)
    State 2 and ErrorCode -2147467259 and ErrorMsg Failed to open the local machine Group Policy and PolicyName Antimalware Policy and GroupResolveResultHash 23496E87C22E7CA5048254CC04CCF582A084C108 is NOT changed. EndpointProtectionAgent 11/3/2014 12:31:01 PM 1768 (0x06E8)
    Skip sending state message due to same state message already exists. EndpointProtectionAgent 11/3/2014 12:31:01 PM 1768 (0x06E8)
    I have 12 systems total having issues with Policy right now.

  • Symantec Endpoint Protection Manager Installer Information Script Error

    hi
    I can't install SEP Manager 14.1 in our windows 2012 R2 server I got an error during the installation.While was installing symantec endpoint production 14.01 , I am getting an error right at the end of the install. I understand that . I should do it with
    vbs running for symantec installing. however I dont know How can I do it ?,
    "Symantec Endpoint Protection Manager Installer Information - Error 1722. There is a problem with this Windows Installer package. A
    program run as part of the setup did not finish as expected. Contact your support personnel or package vendor. Action RunFIPSScript, location: c:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\bin\, command: C:\Windows\SysWOW64\...\FIPSMode.vbs"
    -install"

    Hi,
    I am Chetan Savade from Symantec Technical Support Team.
    I think you are talking about SEP 12.1 product. There is not any product by code 14.1.
    With reference to mentioned issue there is a Public Kb available. Refer the following KB:
    Symantec Endpoint Protection "Error 1722: There is a problem with this Windows Installer package..."
    http://www.symantec.com/docs/TECH103131
    Possible Solution as per KB: To fix the problem, run the Windows Installer CleanUp utility and then remove Symantec AntiVirus manually. Then, install Symantec Endpoint Protection again.
    To learn how to obtain and use the Windows Installer CleanUp utility, read the
    Microsoft article Description of the Windows Installer CleanUp Utility.
    Click the entry for Symantec AntiVirus or Symantec Client Security, and then click Remove.
    If more than one entry appears, remove the earliest program version first. After you remove all entries for Symantec AntiVirus and Symantec Client Security, remove Symantec AntiVirus manually.
    To find directions for your version of Symantec AntiVirus, read
    Manual uninstallation documents for Symantec Client Security products.
    Symantec connect forum link to raise SEP related issue: https://www-secure.symantec.com/connect/security/forums/endpoint-protection-antivirus
    Best Regards,
    Chetan

  • SCOM 2007 extest_ user mailbox maintenance/management.

    I use SCOM 2007 to monitor our Exchange 2010 environment.  I use the test-* commands in powershells on my desktop to catch anything that may occur between SCOM alert thresholds.  Several of these use the extest_ account.  
    Today, I looked at the extest_ user mailbox and found that the tests are accumulating in the mailbox.  What do I need to configure so the tests are purged from the mailbox, including the deleted items folder?  
    Information, links, and comments are all welcome.  
    TIA.  

    Hi,
    Do you mean that there are many test mailbox and you want to remove them? As far as I know,  those account is used for synthetic transaction tests for the Exchange. Those synthetic transactions will perform several tests on your Exchange infrastructure
    and warn you if there is a problem with your mail flow. In order to perform such tests the requirement is to have specific users with mailboxes created.  Those users is created by script named New-TestCasConnectivityUser.ps1.
    Each site will have a test account, please refer to the below link for more details:
    http://stefanroth.net/2013/02/09/scom-exchange-2010-mp-extest_-user/
    From my point of view, we can remove those account, but then the script can create them again.
    If you don't create a test mailbox on one or more Mailbox servers, the Management Pack will return the following warning: “The test mailbox was not initialized. Run new-TestCasConnectivityUser.ps1 to ensure that the test mailbox is created.”
    More details:
    http://technet.microsoft.com/en-us/library/ee758052(v=exchg.140).aspx
    Regards,
    Yan Li
    Please remember to mark the replies as answers if they help and unmark them if they provide no help.

  • Forefront Endpoint Protection Client filling OS drive with scan and definition files.

    I have installed FEP on our client servers, one of server filling C: drive space with scan files (.bin.xx) and with definitions. Why its not clearing like other servers? Please suggest!
    We haven't using it through SCCM, we have only FEP client which download updates directly from Internet. 
    Thanks in advance. 

    Hi,
    Please check the logs below to see if there is any error.
    %allusersprofile%\Microsoft\Microsoft Antimalware\Support—Log files specific for the antimalware service
    %allusersprofile%\Microsoft\Microsoft Security Client\Support—Log files specific for the SCEP client software
    %windir%\WindowsUpdate.log—Windows Update log files, which include information about definition updates
    %windir%\CCM\Logs\EndpointProtectionagent.log – Shows Endpoint version and policies applied
    %windir%\temp\MpCmdRun.log – Activity when performing scans and signature updates
    %windir%\temp\MpSigStub.log – Update progress for signature and Engine updates
    Reference:http://kickthatcomputer.wordpress.com/2014/03/04/endpoint-protection-log-locations/
    Note: Microsoft provides third-party contact
    information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.
    Best Regards,
    Joyce

  • SCCM Server says Forefront Endpoint Protection failed to install update(s)

    I have a single SCCM 2012 SP1 CU4 server running on Windows Server 2012.  I primarily use this for Endpoint Protection and Windows Updates.
    Recently I started seeing a lot of errors in the Endpoint Protection deployments.  This one has me baffled because the Endpoint Protection client on the machine says that it is up-to-date.  However, when I go to
    Monitoring --> Deployments on the server, I see tons of errors that read "Failed to install update(s)."
    Under the "Last Enforcement Error Code" heading, it reads: 
    0x80070643. 
    I have spent several days searching about this, but the only info I can find is about Endpoint Protection
    installation problems.  In my case, though, I have Endpoint Protection installed...it is the
    update(s) that are showing the errors.
    Server screen-shot:
    Client screen-shot:
    Thanks in advance for any help.

    I see these entries starting at 6:19 PM last night and ending at 6:09 AM today:  I put in
    bold what kind of stands out to me. 
    Assignment {7b642d5f-623d-4c44-a902-a414bef0adf7} has total CI = 1    UpdatesDeploymentAgent    5/15/2014 6:19:29 PM    1232 (0x04D0)
    OnPolicyModify for assignment ({7b642d5f-623d-4c44-a902-a414bef0adf7})...     UpdatesDeploymentAgent    5/15/2014 6:19:29 PM    1232 (0x04D0)
    Starting forced trigger (TriggerActivate) for assignment {7b642d5f-623d-4c44-a902-a414bef0adf7}    UpdatesDeploymentAgent    5/15/2014 6:19:29 PM    1232 (0x04D0)
    Detection job ({F7A501B7-38F4-458B-AA62-F32212D3B614}) started for assignment ({7b642d5f-623d-4c44-a902-a414bef0adf7})    UpdatesDeploymentAgent    5/15/2014 6:19:29 PM    1232 (0x04D0)
    Progress received for assignment ({7b642d5f-623d-4c44-a902-a414bef0adf7})    UpdatesDeploymentAgent    5/15/2014 6:20:02 PM    1072 (0x0430)
    DetectJob completion received for assignment ({7b642d5f-623d-4c44-a902-a414bef0adf7})    UpdatesDeploymentAgent    5/15/2014 6:20:02 PM    4632 (0x1218)
    Update (Site_A0C81BE8-8706-4378-B3C3-9149D17EA00E/SUM_ba89c7f4-5400-4c40-aa1b-aefa5fbdffb2) Name (Definition Update for Microsoft Endpoint Protection - KB2461484 (Definition 1.173.2187.0)) ArticleID (2461484) added to the targeted list of deployment ({7b642d5f-623d-4c44-a902-a414bef0adf7})  
     UpdatesDeploymentAgent    5/15/2014 6:20:02 PM    4632 (0x1218)
    Update (Site_A0C81BE8-8706-4378-B3C3-9149D17EA00E/SUM_4fcb1b37-19a1-4c12-a77c-bbe513872a43) Name (Definition Update for Microsoft Endpoint Protection - KB2461484 (Definition 1.173.2219.0)) ArticleID (2461484) added to the targeted list of deployment ({7b642d5f-623d-4c44-a902-a414bef0adf7})  
     UpdatesDeploymentAgent    5/15/2014 6:20:02 PM    4632 (0x1218)
    DownloadCIContents Job ({8C3E7548-DA29-48EB-B3C3-12B96B31D492}) started for assignment ({7b642d5f-623d-4c44-a902-a414bef0adf7})    UpdatesDeploymentAgent    5/15/2014 6:20:02 PM    4632 (0x1218)
    Progress received for assignment ({7b642d5f-623d-4c44-a902-a414bef0adf7})    UpdatesDeploymentAgent    5/15/2014 6:20:03 PM    4632 (0x1218)
    Progress received for assignment ({7b642d5f-623d-4c44-a902-a414bef0adf7})    UpdatesDeploymentAgent    5/15/2014 6:20:03 PM    4508 (0x119C)
    Update (Site_A0C81BE8-8706-4378-B3C3-9149D17EA00E/SUM_ba89c7f4-5400-4c40-aa1b-aefa5fbdffb2) Progress: Status = ciStateDownloading, PercentComplete = 0, Result = 0x0    UpdatesDeploymentAgent    5/15/2014 6:20:03 PM  
     4508 (0x119C)
    Update (Site_A0C81BE8-8706-4378-B3C3-9149D17EA00E/SUM_4fcb1b37-19a1-4c12-a77c-bbe513872a43) Progress: Status = ciStateDownloading, PercentComplete = 0, Result = 0x0    UpdatesDeploymentAgent    5/15/2014 6:20:03 PM  
     4508 (0x119C)
    Progress received for assignment ({7b642d5f-623d-4c44-a902-a414bef0adf7})    UpdatesDeploymentAgent    5/15/2014 6:20:03 PM    4508 (0x119C)
    Progress received for assignment ({7b642d5f-623d-4c44-a902-a414bef0adf7})    UpdatesDeploymentAgent    5/15/2014 6:20:03 PM    4508 (0x119C)
    Progress received for assignment ({7b642d5f-623d-4c44-a902-a414bef0adf7})    UpdatesDeploymentAgent    5/15/2014 6:20:03 PM    4508 (0x119C)
    DownloadJob completion received for assignment ({7b642d5f-623d-4c44-a902-a414bef0adf7})    UpdatesDeploymentAgent    5/15/2014 6:20:03 PM    1128 (0x0468)
    Update (Site_A0C81BE8-8706-4378-B3C3-9149D17EA00E/SUM_ba89c7f4-5400-4c40-aa1b-aefa5fbdffb2) Name (Definition Update for Microsoft Endpoint Protection - KB2461484 (Definition 1.173.2187.0)) ArticleID (2461484) added to the targeted list of deployment ({7b642d5f-623d-4c44-a902-a414bef0adf7})  
     UpdatesDeploymentAgent    5/15/2014 6:20:03 PM    1128 (0x0468)
    Update (Site_A0C81BE8-8706-4378-B3C3-9149D17EA00E/SUM_4fcb1b37-19a1-4c12-a77c-bbe513872a43) Name (Definition Update for Microsoft Endpoint Protection - KB2461484 (Definition 1.173.2219.0)) ArticleID (2461484) added to the targeted list of deployment ({7b642d5f-623d-4c44-a902-a414bef0adf7})  
     UpdatesDeploymentAgent    5/15/2014 6:20:03 PM    1128 (0x0468)
    Message received: '<?xml version='1.0' ?>
        <CIAssignmentMessage MessageType='Activation'>
            <AssignmentID>{7b642d5f-623d-4c44-a902-a414bef0adf7}</AssignmentID>
        </CIAssignmentMessage>'    UpdatesDeploymentAgent    5/15/2014 6:37:00 PM    452 (0x01C4)
    Assignment {7b642d5f-623d-4c44-a902-a414bef0adf7} has total CI = 2    UpdatesDeploymentAgent    5/15/2014 6:37:00 PM    452 (0x01C4)
    Assignment ({7b642d5f-623d-4c44-a902-a414bef0adf7}) received activation trigger    UpdatesDeploymentAgent    5/15/2014 6:37:00 PM    452 (0x01C4)
    Detection job ({726D8962-0690-46DB-B9A0-FF5D979AE3CF}) started for assignment ({7b642d5f-623d-4c44-a902-a414bef0adf7})    UpdatesDeploymentAgent    5/15/2014 6:37:00 PM    452 (0x01C4)
    Progress received for assignment ({7b642d5f-623d-4c44-a902-a414bef0adf7})    UpdatesDeploymentAgent    5/15/2014 6:37:00 PM    620 (0x026C)
    DetectJob completion received for assignment ({7b642d5f-623d-4c44-a902-a414bef0adf7})    UpdatesDeploymentAgent    5/15/2014 6:37:01 PM    4496 (0x1190)
    Update (Site_A0C81BE8-8706-4378-B3C3-9149D17EA00E/SUM_ba89c7f4-5400-4c40-aa1b-aefa5fbdffb2) Name (Definition Update for Microsoft Endpoint Protection - KB2461484 (Definition 1.173.2187.0)) ArticleID (2461484) added to the targeted list of deployment ({7b642d5f-623d-4c44-a902-a414bef0adf7})  
     UpdatesDeploymentAgent    5/15/2014 6:37:01 PM    4496 (0x1190)
    Update (Site_A0C81BE8-8706-4378-B3C3-9149D17EA00E/SUM_4fcb1b37-19a1-4c12-a77c-bbe513872a43) Name (Definition Update for Microsoft Endpoint Protection - KB2461484 (Definition 1.173.2219.0)) ArticleID (2461484) added to the targeted list of deployment ({7b642d5f-623d-4c44-a902-a414bef0adf7})  
     UpdatesDeploymentAgent    5/15/2014 6:37:01 PM    4496 (0x1190)
    DownloadCIContents Job ({7EEA627C-B1B3-457D-BE69-6F3A8DDDA692}) started for assignment ({7b642d5f-623d-4c44-a902-a414bef0adf7})    UpdatesDeploymentAgent    5/15/2014 6:37:01 PM    4496 (0x1190)
    Progress received for assignment ({7b642d5f-623d-4c44-a902-a414bef0adf7})    UpdatesDeploymentAgent    5/15/2014 6:37:01 PM    452 (0x01C4)
    Progress received for assignment ({7b642d5f-623d-4c44-a902-a414bef0adf7})    UpdatesDeploymentAgent    5/15/2014 6:37:01 PM    1648 (0x0670)
    Update (Site_A0C81BE8-8706-4378-B3C3-9149D17EA00E/SUM_ba89c7f4-5400-4c40-aa1b-aefa5fbdffb2) Progress: Status = ciStateDownloading, PercentComplete = 0, Result = 0x0    UpdatesDeploymentAgent    5/15/2014 6:37:01 PM  
     1648 (0x0670)
    Update (Site_A0C81BE8-8706-4378-B3C3-9149D17EA00E/SUM_4fcb1b37-19a1-4c12-a77c-bbe513872a43) Progress: Status = ciStateDownloading, PercentComplete = 0, Result = 0x0    UpdatesDeploymentAgent    5/15/2014 6:37:01 PM  
     1648 (0x0670)
    Progress received for assignment ({7b642d5f-623d-4c44-a902-a414bef0adf7})    UpdatesDeploymentAgent    5/15/2014 6:37:01 PM    1648 (0x0670)
    Progress received for assignment ({7b642d5f-623d-4c44-a902-a414bef0adf7})    UpdatesDeploymentAgent    5/15/2014 6:37:01 PM    1648 (0x0670)
    Progress received for assignment ({7b642d5f-623d-4c44-a902-a414bef0adf7})    UpdatesDeploymentAgent    5/15/2014 6:37:01 PM    1648 (0x0670)
    DownloadJob completion received for assignment ({7b642d5f-623d-4c44-a902-a414bef0adf7})    UpdatesDeploymentAgent    5/15/2014 6:37:01 PM    1648 (0x0670)
    Update (Site_A0C81BE8-8706-4378-B3C3-9149D17EA00E/SUM_ba89c7f4-5400-4c40-aa1b-aefa5fbdffb2) Name (Definition Update for Microsoft Endpoint Protection - KB2461484 (Definition 1.173.2187.0)) ArticleID (2461484) added to the targeted list of deployment ({7b642d5f-623d-4c44-a902-a414bef0adf7})  
     UpdatesDeploymentAgent    5/15/2014 6:37:01 PM    1648 (0x0670)
    Update (Site_A0C81BE8-8706-4378-B3C3-9149D17EA00E/SUM_4fcb1b37-19a1-4c12-a77c-bbe513872a43) Name (Definition Update for Microsoft Endpoint Protection - KB2461484 (Definition 1.173.2219.0)) ArticleID (2461484) added to the targeted list of deployment ({7b642d5f-623d-4c44-a902-a414bef0adf7})  
     UpdatesDeploymentAgent    5/15/2014 6:37:01 PM    1648 (0x0670)
    CUpdateAssignmentsManager received a SERVICEWINDOWEVENT START Event    UpdatesDeploymentAgent    5/15/2014 10:00:00 PM    3736 (0x0E98)
    Suspend activity in presentation mode is selected    UpdatesDeploymentAgent    5/15/2014 10:00:00 PM    3736 (0x0E98)
    Atleast one user has elected to suspend non-business hours activity when in presentation mode. Checking for presentation mode.    UpdatesDeploymentAgent    5/15/2014 10:00:00 PM    3736 (0x0E98)
    Proceeding to non-business hours activites as presentation mode is off.    UpdatesDeploymentAgent    5/15/2014 10:00:00 PM    3736 (0x0E98)
    Auto install during non-business hours is disabled or never set, selecting only scheduled updates.    UpdatesDeploymentAgent    5/15/2014 10:00:00 PM    3736 (0x0E98)
    A user-defined service window(non-business hours) is available. We will attempt to install any scheduled updates.    UpdatesDeploymentAgent    5/15/2014 10:00:00 PM    3736 (0x0E98)
    Attempting to install 0 updates    UpdatesDeploymentAgent    5/15/2014 10:00:00 PM    3736 (0x0E98)
    No actionable updates for install task. No attempt required.    UpdatesDeploymentAgent    5/15/2014 10:00:00 PM    3736 (0x0E98)
    Updates could not be installed at this time. Waiting for the next maintenance window.    UpdatesDeploymentAgent    5/15/2014 10:00:00 PM    3736 (0x0E98)
    CUpdateAssignmentsManager received a SERVICEWINDOWEVENT END Event    UpdatesDeploymentAgent    5/16/2014 5:00:00 AM    3500 (0x0DAC)
    No current service window available to run updates assignment with time required = 1    UpdatesDeploymentAgent    5/16/2014 5:00:00 AM    3500 (0x0DAC)
    Attempting to cancel any job started at non-business hours.    UpdatesDeploymentAgent    5/16/2014 5:00:00 AM    3500 (0x0DAC)
    Message received: '<?xml version='1.0' ?>
        <CIAssignmentMessage MessageType='EnforcementDeadline'>
            <AssignmentID>{7b642d5f-623d-4c44-a902-a414bef0adf7}</AssignmentID>
        </CIAssignmentMessage>'    UpdatesDeploymentAgent    5/16/2014 6:09:00 AM    2768 (0x0AD0)
    Assignment {7b642d5f-623d-4c44-a902-a414bef0adf7} has total CI = 2    UpdatesDeploymentAgent    5/16/2014 6:09:00 AM    2768 (0x0AD0)
    Deadline received for assignment ({7b642d5f-623d-4c44-a902-a414bef0adf7})    UpdatesDeploymentAgent    5/16/2014 6:09:00 AM    2768 (0x0AD0)
    Detection job ({41BE2786-E548-429E-9590-5102B1F8DE2A}) started for assignment ({7b642d5f-623d-4c44-a902-a414bef0adf7})    UpdatesDeploymentAgent    5/16/2014 6:09:00 AM    2768 (0x0AD0)
    Progress received for assignment ({7b642d5f-623d-4c44-a902-a414bef0adf7})    UpdatesDeploymentAgent    5/16/2014 6:09:00 AM    4660 (0x1234)
    DetectJob completion received for assignment ({7b642d5f-623d-4c44-a902-a414bef0adf7})    UpdatesDeploymentAgent    5/16/2014 6:09:01 AM    4660 (0x1234)
    Update (Site_A0C81BE8-8706-4378-B3C3-9149D17EA00E/SUM_ba89c7f4-5400-4c40-aa1b-aefa5fbdffb2) Name (Definition Update for Microsoft Endpoint Protection - KB2461484 (Definition 1.173.2187.0)) ArticleID (2461484) added to the targeted list of deployment ({7b642d5f-623d-4c44-a902-a414bef0adf7})  
     UpdatesDeploymentAgent    5/16/2014 6:09:01 AM    4660 (0x1234)
    Update (Site_A0C81BE8-8706-4378-B3C3-9149D17EA00E/SUM_4fcb1b37-19a1-4c12-a77c-bbe513872a43) Name (Definition Update for Microsoft Endpoint Protection - KB2461484 (Definition 1.173.2219.0)) ArticleID (2461484) added to the targeted list of deployment ({7b642d5f-623d-4c44-a902-a414bef0adf7})  
     UpdatesDeploymentAgent    5/16/2014 6:09:01 AM    4660 (0x1234)
    UpdateAssginment Download: CCM_CONTENT_WF_DEADLINE_DOWNLOAD set    UpdatesDeploymentAgent    5/16/2014 6:09:01 AM    4660 (0x1234)
    DownloadCIContents Job ({D484DF2D-C472-478E-A75F-1C50DACF6A5D}) started for assignment ({7b642d5f-623d-4c44-a902-a414bef0adf7})    UpdatesDeploymentAgent    5/16/2014 6:09:01 AM    4660 (0x1234)
    Progress received for assignment ({7b642d5f-623d-4c44-a902-a414bef0adf7})    UpdatesDeploymentAgent    5/16/2014 6:09:01 AM    4660 (0x1234)
    Progress received for assignment ({7b642d5f-623d-4c44-a902-a414bef0adf7})    UpdatesDeploymentAgent    5/16/2014 6:09:01 AM    748 (0x02EC)
    Update (Site_A0C81BE8-8706-4378-B3C3-9149D17EA00E/SUM_ba89c7f4-5400-4c40-aa1b-aefa5fbdffb2) Progress: Status = ciStateDownloading, PercentComplete = 0, Result = 0x0    UpdatesDeploymentAgent    5/16/2014 6:09:01 AM  
     748 (0x02EC)
    Update (Site_A0C81BE8-8706-4378-B3C3-9149D17EA00E/SUM_4fcb1b37-19a1-4c12-a77c-bbe513872a43) Progress: Status = ciStateDownloading, PercentComplete = 0, Result = 0x0    UpdatesDeploymentAgent    5/16/2014 6:09:01 AM  
     748 (0x02EC)
    Progress received for assignment ({7b642d5f-623d-4c44-a902-a414bef0adf7})    UpdatesDeploymentAgent    5/16/2014 6:09:01 AM    748 (0x02EC)
    Progress received for assignment ({7b642d5f-623d-4c44-a902-a414bef0adf7})    UpdatesDeploymentAgent    5/16/2014 6:09:01 AM    748 (0x02EC)
    Progress received for assignment ({7b642d5f-623d-4c44-a902-a414bef0adf7})    UpdatesDeploymentAgent    5/16/2014 6:09:01 AM    748 (0x02EC)
    DownloadJob completion received for assignment ({7b642d5f-623d-4c44-a902-a414bef0adf7})    UpdatesDeploymentAgent    5/16/2014 6:09:01 AM    748 (0x02EC)
    Update (Site_A0C81BE8-8706-4378-B3C3-9149D17EA00E/SUM_ba89c7f4-5400-4c40-aa1b-aefa5fbdffb2) Name (Definition Update for Microsoft Endpoint Protection - KB2461484 (Definition 1.173.2187.0)) ArticleID (2461484) added to the targeted list of deployment ({7b642d5f-623d-4c44-a902-a414bef0adf7})  
     UpdatesDeploymentAgent    5/16/2014 6:09:02 AM    748 (0x02EC)
    Update (Site_A0C81BE8-8706-4378-B3C3-9149D17EA00E/SUM_4fcb1b37-19a1-4c12-a77c-bbe513872a43) Name (Definition Update for Microsoft Endpoint Protection - KB2461484 (Definition 1.173.2219.0)) ArticleID (2461484) added to the targeted list of deployment ({7b642d5f-623d-4c44-a902-a414bef0adf7})  
     UpdatesDeploymentAgent    5/16/2014 6:09:02 AM    748 (0x02EC)
    Starting install for assignment ({7b642d5f-623d-4c44-a902-a414bef0adf7})    UpdatesDeploymentAgent    5/16/2014 6:09:02 AM    748 (0x02EC)
    ApplyCIs - JobId = {24FEF2A6-EFAB-4675-B3DE-E357BD4D7384}    UpdatesDeploymentAgent    5/16/2014 6:09:02 AM    748 (0x02EC)
    Raising client SDK event for class NULL, instance NULL, actionType 13l, value NULL, user NULL, session 4294967295l, level 0l, verbosity 30l    UpdatesDeploymentAgent    5/16/2014 6:09:02 AM    748 (0x02EC)
    Update (Site_A0C81BE8-8706-4378-B3C3-9149D17EA00E/SUM_4fcb1b37-19a1-4c12-a77c-bbe513872a43) Progress: Status = ciStateDetecting, PercentComplete = 0, DownloadSize = 0, Result = 0x0    UpdatesDeploymentAgent    5/16/2014 6:09:02
    AM    4660 (0x1234)
    Update (Site_A0C81BE8-8706-4378-B3C3-9149D17EA00E/SUM_ba89c7f4-5400-4c40-aa1b-aefa5fbdffb2) Progress: Status = ciStateDetecting, PercentComplete = 0, DownloadSize = 0, Result = 0x0    UpdatesDeploymentAgent    5/16/2014 6:09:02
    AM    4660 (0x1234)
    Update (Site_A0C81BE8-8706-4378-B3C3-9149D17EA00E/SUM_4fcb1b37-19a1-4c12-a77c-bbe513872a43) Progress: Status = ciStateDownloading, PercentComplete = 0, DownloadSize = 0, Result = 0x0    UpdatesDeploymentAgent    5/16/2014 6:09:02
    AM    2788 (0x0AE4)
    Update (Site_A0C81BE8-8706-4378-B3C3-9149D17EA00E/SUM_ba89c7f4-5400-4c40-aa1b-aefa5fbdffb2) Progress: Status = ciStateDownloading, PercentComplete = 0, DownloadSize = 0, Result = 0x0    UpdatesDeploymentAgent    5/16/2014 6:09:02
    AM    2788 (0x0AE4)
    Update (Site_A0C81BE8-8706-4378-B3C3-9149D17EA00E/SUM_4fcb1b37-19a1-4c12-a77c-bbe513872a43) Progress: Status = ciStateWaitInstall, PercentComplete = 0, DownloadSize = 0, Result = 0x0    UpdatesDeploymentAgent    5/16/2014 6:09:02
    AM    4660 (0x1234)
    Update (Site_A0C81BE8-8706-4378-B3C3-9149D17EA00E/SUM_ba89c7f4-5400-4c40-aa1b-aefa5fbdffb2) Progress: Status = ciStateWaitInstall, PercentComplete = 0, DownloadSize = 0, Result = 0x0    UpdatesDeploymentAgent    5/16/2014 6:09:02
    AM    4660 (0x1234)
    Update (Site_A0C81BE8-8706-4378-B3C3-9149D17EA00E/SUM_4fcb1b37-19a1-4c12-a77c-bbe513872a43) Progress: Status = ciStateInstalling, PercentComplete = 0, DownloadSize = 0, Result = 0x0    UpdatesDeploymentAgent    5/16/2014 6:09:22
    AM    2788 (0x0AE4)
    Update (Site_A0C81BE8-8706-4378-B3C3-9149D17EA00E/SUM_4fcb1b37-19a1-4c12-a77c-bbe513872a43) Progress: Status = ciStateInstalling, PercentComplete = 100, DownloadSize = 0, Result = 0x0    UpdatesDeploymentAgent    5/16/2014 6:09:22
    AM    4660 (0x1234)
    Update (Site_A0C81BE8-8706-4378-B3C3-9149D17EA00E/SUM_4fcb1b37-19a1-4c12-a77c-bbe513872a43) Progress: Status = ciStateVerifying, PercentComplete = 0, DownloadSize = 0, Result = 0x0    UpdatesDeploymentAgent    5/16/2014 6:09:22
    AM    4660 (0x1234)
    Update (Site_A0C81BE8-8706-4378-B3C3-9149D17EA00E/SUM_ba89c7f4-5400-4c40-aa1b-aefa5fbdffb2) Progress: Status = ciStateInstalling, PercentComplete = 100, DownloadSize = 0, Result = 0x0    UpdatesDeploymentAgent    5/16/2014 6:09:22
    AM    4660 (0x1234)
    Update (Site_A0C81BE8-8706-4378-B3C3-9149D17EA00E/SUM_ba89c7f4-5400-4c40-aa1b-aefa5fbdffb2) Progress: Status = ciStateVerifying, PercentComplete = 0, DownloadSize = 0, Result = 0x0    UpdatesDeploymentAgent    5/16/2014 6:09:22
    AM    2788 (0x0AE4)
    CUpdatesJob({24FEF2A6-EFAB-4675-B3DE-E357BD4D7384}): Job completion received.    UpdatesDeploymentAgent    5/16/2014 6:09:51 AM    4660 (0x1234)
    Update (Site_A0C81BE8-8706-4378-B3C3-9149D17
    I did not specifically specify any maintenance windows.  It looks like the default business hours are set on the client though:
    Is this maybe causing my problems???  Is it possible to change that default value from the SCCM console??
    Thanks again for all of your help!

  • Forefront Endpoint Protection pricing model

    Is it possible to deploy FEP when you don't have a server?
    I am volunteering for a small non-profit, and while we may be deploying our first server soon, It won't be deployed immediately, and we would like to get AV protection on all client machines without violating any license agreements, (All free AV Products
    license only for use in a home environment.)
    Will FEP running in this manner still be a fully functional AV, just lacking the central management features?

    Hi,
    Thank you for your post here.
    I think you can consider standalone FEP as your solution. Standalone FEP can run without SCCM.
    Detailed information about how to install it, you can refer the similar threads or helpful articles below:
    http://social.technet.microsoft.com/Forums/forefront/en-US/a400091e-1dc2-426f-8de1-82c513a66bcd/standalone-fep-installation?forum=FCSNext
    http://social.technet.microsoft.com/Forums/forefront/en-US/b78e9d43-fb91-470a-9450-d5fa7e0e4a69/standalone-fep-fep-without-sccm-fep-with-sce2010-managed-or-unmanaged-some-clear-answers-here?forum=FCSNext
    Best Regards
    Quan Gu

  • Hotfix 2919357 on Forefront Endpoint Protection 2010 for Exchange 11.0.727.0

    I currently have FF for Exhange 2010 version 11.0.727.0, but I have event ID errors 5314, 7009 and 7011. the question is, the version of files content in zip file  of hotfix have the same versions of files on my productive environment on my exchange
    servers,  Do I must install this hotfix in same versions of files to try to solve these errors?
    Donato

    Hi,
    The article KB2919357 indicated that this fix is ONLY viable on the latest FPE build which is 11.0.0727.0.
    If you want to fix the issue and have the exactly same errors in the article, you need to install this hotfix.
    Best Regards,
    Joyce
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Maybe you are looking for