Deploying Forefront Client Security Using SMS 2003 - Step-By-Step
This is a Step-By-Step guide for using SMS 2003 to Deploy Forefront Client Security Client Agents.
you can also find here a script to run that will kick in another script to remove the current AV solution and only then deploy FCS client agent on the target computer.
Open SMS 2003 Administrator Console (Start->All Programs->Systems Management Server 2003->SMS Administrator Console.
![clip_image002[4]](http://blogs.microsoft.co.il/blogs/yanivf/WindowsLiveWriter/DeployingForefrontClientSecurityUsingSMS_2DB1/clip_image002%5B4%5D_thumb.jpg)
Right-Click Packages -> New -> Package
![clip_image004[4]](http://blogs.microsoft.co.il/blogs/yanivf/WindowsLiveWriter/DeployingForefrontClientSecurityUsingSMS_2DB1/clip_image004%5B4%5D_thumb.jpg)
On the general tab, Update Package details.
![clip_image006[4]](http://blogs.microsoft.co.il/blogs/yanivf/WindowsLiveWriter/DeployingForefrontClientSecurityUsingSMS_2DB1/clip_image006%5B4%5D_thumb.jpg)
On the Data source tab, check the package contains source files and click the Set button.
![clip_image008[4]](http://blogs.microsoft.co.il/blogs/yanivf/WindowsLiveWriter/DeployingForefrontClientSecurityUsingSMS_2DB1/clip_image008%5B4%5D_thumb.jpg)
Choose the location where your FCS Client setup is located (network path \\fcswsus\fcsclient)
![clip_image010[4]](http://blogs.microsoft.co.il/blogs/yanivf/WindowsLiveWriter/DeployingForefrontClientSecurityUsingSMS_2DB1/clip_image010%5B4%5D_thumb.jpg)
and click ok.
Leave the Always obtain files from source directory checked.
Leave the rest of the tabs on default settings click ok.
![clip_image012[4]](http://blogs.microsoft.co.il/blogs/yanivf/WindowsLiveWriter/DeployingForefrontClientSecurityUsingSMS_2DB1/clip_image012%5B4%5D_thumb.jpg)
Expand the package you’ve just created and right-click distribution points -> new -> distribution points.
![clip_image014[4]](http://blogs.microsoft.co.il/blogs/yanivf/WindowsLiveWriter/DeployingForefrontClientSecurityUsingSMS_2DB1/clip_image014%5B4%5D_thumb.jpg)
Check the distribution points where you wish the package will be, and click finish.
![clip_image016[4]](http://blogs.microsoft.co.il/blogs/yanivf/WindowsLiveWriter/DeployingForefrontClientSecurityUsingSMS_2DB1/clip_image016%5B4%5D_thumb.jpg)
Right click programs -> new -> program.
![clip_image018[4]](http://blogs.microsoft.co.il/blogs/yanivf/WindowsLiveWriter/DeployingForefrontClientSecurityUsingSMS_2DB1/clip_image018%5B4%5D_thumb.jpg)
On the General tab, type the package name and command line for installation. It is recommended to use a script that runs the full command line and removes the current AV installation.
Here is a sample for an installation script that also runs a removal scripts and then installs FCS:
Set objWshShell = WScript.CreateObject("WScript.Shell")
sComputerName = objWSHShell.ExpandEnvironmentStrings("%COMPUTERNAME%")
' run XXX Removal Script
strCommand = "\\fcswsus\Fcsclient\UninstallXXXAV.vbs"
intRC = objWshShell.Run(strCommand, 0, TRUE)
' Install FCS Agnet
' Change this to where your ClientSetup.exe full path
ClientAgentLocation = "\\fcswsus\fcsclient\ClientSetup.exe"
' Change this to you Managment server name
ManagementServer = "FCSWSUS"
' Change this to you Managment Group Name
ManagementGroup = "ForefrontClientSecurity"
' Change this to Client Installation path of your choice
InstallationPath = "C:\Program Files\Forefront Client Security"
' Change this to Client Installation Logs path of your choice
LogsPath = "C:\Program Files\Forefront Client Security\Logs"
sInstallCommand = ClientAgentLocation & " /MS " & ManagementServer & " /CG " & ManagementGroup & " /I " & Chr(34) & InstallationPath & Chr(34) & " /L " & Chr(34) & LogsPath & Chr(34)
' Use this mesage box to check for validity of FCS Installation Path
'MsgBox(""& sInstallCommand)
intFCS = objWshShell.Run(sInstallCommand, 0, TRUE) |
Change the run type to hidden.
The Next phase is to create an advertisement and assign it to the appropriate collection. It is recommended to create a separate collection in SMS for Forefront distribution (filter it by whatever criteria you want, but create a separate one).
![clip_image020[4]](http://blogs.microsoft.co.il/blogs/yanivf/WindowsLiveWriter/DeployingForefrontClientSecurityUsingSMS_2DB1/clip_image020%5B4%5D_thumb.jpg)
In this case, we've created a collection called forefront for that purpose.
In order to create the advertisement, right click advertisements -> new -> advertisements.
![clip_image022[4]](http://blogs.microsoft.co.il/blogs/yanivf/WindowsLiveWriter/DeployingForefrontClientSecurityUsingSMS_2DB1/clip_image022%5B4%5D_thumb.jpg)
On the general tab fill the advertisement name, and select the package and program to run. Then select the collection where you wish to advertise the package.
![clip_image024[4]](http://blogs.microsoft.co.il/blogs/yanivf/WindowsLiveWriter/DeployingForefrontClientSecurityUsingSMS_2DB1/clip_image024%5B4%5D_thumb.jpg)
On the schedule tab, create new mandatory assignments with the ![clip_image025[4]](http://blogs.microsoft.co.il/blogs/yanivf/WindowsLiveWriter/DeployingForefrontClientSecurityUsingSMS_2DB1/clip_image025%5B4%5D_thumb.jpg)
button.
- The first assignment should be as soon as possible.
- The second assignment should be an interval by your choice (recommended once a day).
Leave the rest of the tabs on default settings and Click OK.