How-To : Install A One Server Forefront Client Security Topology

Page content

Some time ago I posted on my blog that I’m running my whole test-infrastructure on a Windows Server 2008 Enterprise Edition with Hyper-V. Right now I don’t have a anti-malware and anti-virus solution solution implemented, so I’m going to get Forefront Client Security running on my Forefront Virtual Machine.

I’m going for the one Server topology, so all the Forefront roles are installed on one server. My initial idea was to install the FCS 1 Server Topology on Windows Server 2008. Too bad MOM 2005 won’t install on Windows Server 2008 so I had to install it on Windows Server 2003. When it’s possible to install FCS on Server 2008 I will let you guys know! (If you have it running please let me know too :-))

Click here to read the How-To

**Server specs :

** Hyper-V Virtual Machine

Core2Duo E6600

2048 MB Memory

127 GB Harddisk

Forefront Roles to be installed

  • Management Server
  • Collection Server
  • Collection Database
  • Reporting server and reporting database
  • Distribution Server

Installing Prerequisites for Forefront Client Security

I’m assuming that you know how to install Windows Server 2003� before you start installing Forefront, so I’m not telling you how you have to do it. I used Windows Server 2003 R2 SP2 for the installation.

Before you can install Forefront Client Security you have to install the following software prerequisites :

  • Windows Components

  • Internet Information Services


  • Microsoft .NET Framework 2.0

  • Group Policy Management Console with SP1

  • SQL Server 2005 with SP2

    • I used SQL Server 2005 Standard x868 edition
    • You need at least SP1, but I installed SP2
  • Microsoft Report Viewer Redistributable 2005

  • WSUS 3.0 with SP1

    Before you start the installation you will have to create a domain user account which you can use during the Forefront Setup.

    Installing Microsoft Forefront Client Security

    1. Start the setup by clicking the Run the setup wizard on the autorun page
    2. Fill out the form with your name and organization and click Next
    3. Select I accept the terms in the license agreement and click Next
    4. Select all the components and click Next
    <img style="border-width: 0px;" src="//" border="0" alt="" width="372" height="466" />
    1. You can leave the Collection server and Management group name default. Use the domain account you created before at the DAS account info and click Next
    2. Keep the Collection database and Database size default. The Re-use the DAS account for the reporting account checkbox can stay checked (default) and click Next
    3. Keep the Reporting database and Database size default. The Re-use the DAS account for the reporting account checkbox can stay checked (default) and click Next
    4. Keep the Reporting server and URLs for reports default and click Next
    5. Keep the DAS account checkbox checked (default) at the Action account page
    6. Keep the default installation location (C:Program Files| and click Next
    7. On the Verifying Settings and Requirements page everything should be Successful (except my verifying hardware requirements, it has a Warning status). Just click Next
    8. The installation is starting
    <img style="border-width: 0px;" src="//" border="0" alt="" width="604" height="170" />
    1. When the installation is finished Forefront has been installed