April 2009 - Forefront Client Security Administration

In this Blog Entry I use a Group Policy Object to modify Security Settings for both Services and Registry Keys critical to Forefront Client Security. This GPO removes Local Administrator ability to modify the Forefront Client Security Services and Registry Entries while providing the Administrative Capabilities to a separate Domain Global Security Group (DGSG) designated as Forefront Client Security SP1 Agent Administrators. ...

In this Blog entry I have taken a single Target Client Workstation running a Standalone Installation of the Forefront Client Security SP1 Agent, created a new Forefront Client Security Client Policy to manage this Target Client Workstation, pushed out the Client Policy using Group Policy Objects (GPOs), then pushed out the MOM 2005 Agent for Alerting and Reporting to the Target Client Workstation. In the end, the Target Client Workstation moved from a Standalone Installation of the Forefront Client Security SP1 Agent to a Fully Managed Forefront Client Security SP1 Agent. Thereby allowing ongoing Support and Management from a single Console....