Deploying by Using Configuration Manager Packages
Applies To: Forefront Endpoint Protection
Forefront Endpoint Protection includes a Configuration Manager package that contains the Forefront Endpoint Protection client installation program. To deploy the package, you use the Configuration Manager software distribution feature to send the package data to one or more distribution points, and then create advertisements that specify which collections will receive the program and the package.
Advertising the program makes a program available to a specified collection of clients. When you create advertisements, it is strongly recommended that you test advertised programs in a controlled environment before you create advertisements for the clients in your site hierarchy.
There are multiple ways to distribute the Forefront Endpoint Protection client software to client computers using the Configuration Manager tools. This topic provides the steps for one of the deployment methods. For information about other distributions methods, see Software Distribution in Configuration Manager (https://go.microsoft.com/fwlink/?LinkId=196839).
Important
The Forefront Endpoint Protection server installation does not automatically add the FEP – Deployment package to a Configuration Manager distribution point. Before the Forefront Endpoint Protection client software can be installed, the package must be sent to a distribution point. For more information, see How to Manage Distribution Points (https://go.microsoft.com/fwlink/?LinkId=205328).
To deploy Forefront Endpoint Protection 2010 client software
In the Configuration Manager console, expand System Center Configuration Manager, expand Site Database, expand Computer Management, and then click Collections.
Right-click the collection to which you want to deploy the FEP client software, for example, All Systems, point to Distribute, and then click Software.
The Distribute Software to Collection Wizard opens.
On the Welcome page, click Next.
On the Package page, click Select an existing package, click Browse, click the Microsoft Corporation FEP – Deployment 1.0 package, click OK, and then click Next.
On the Distribution Points page, select the distribution points for the package, and then click Next.
Configuration Manager uses distribution points to store the files needed by the Forefront Endpoint Protection client installation package in order for the installation program to run on client computers. For more information, see About Distribution Points (https://go.microsoft.com/fwlink/?LinkId=196840).
On the Select Program page, select the Install program, and then click Next.
On the Advertisement Name page, enter a name that is less than 100 characters, and then click Next.
On the Advertisement Subcollection page and on the Advertisement Schedule page, make your selections, and then click Next.
On the Assign Program page, select Yes, assign the program, and then click Next.
On the Summary page, review the Details, and then click Next.
On the Wizard Completed page, click Close.
If necessary, modify the advertisement configuration to suit your environment. For more information, see How to Modify an Advertisement (https://go.microsoft.com/fwlink/?LinkId=196841).
Important
If you delete the advertisement or move a computer out of the collection targeted by the advertisement, the following Forefront Endpoint Protection dashboard deployment status categories can be affected:
- Removed—Once the advertisement has completed, if the client software is uninstalled manually, the computer will show up in the Not Targeted category and not in the expected Removed category. For more information about manually uninstalling the client software, see Uninstalling manually.
- Failed—If the advertisement fails to install the client software, the computer will show up in the Not Targeted category and not in the expected Failed category.
- Removed—Once the advertisement has completed, if the client software is uninstalled manually, the computer will show up in the Not Targeted category and not in the expected Removed category. For more information about manually uninstalling the client software, see Uninstalling manually.
Next Steps
Once you’ve deployed the Forefront Endpoint Protection client software, you should validate the deployment. For more information, see Validating Deployment.