Share via

Prerequisites for Deploying Forefront Endpoint Protection on a Client

  • Article

Applies To: Forefront Endpoint Protection

The following table is a list of the prerequisites for deploying the Endpoint Protection on client computers.

Prerequisite Requirement

Configuration Manager

A Microsoft System Center Configuration Manager 2007 site that has Endpoint Protection server installed.

Note

If you have client computers that do not require the central deployment and management features of Endpoint Protection server and you intend to manually install the Endpoint Protection client, the Configuration Manager prerequisites stated for client computers are not required. For more information, see Deploying the Client Software by Using the Command Prompt.

Operating system
  • Windows 7 (x86 or x64)

  • Windows 7 XP mode

  • Windows Vista (x86 or x64) or later versions

  • Windows XP Service Pack 2 (x86 or x64) or later versions

  • Windows Server 2008 R2 (x64) or later versions

  • Windows Server 2008 R2 Server Core (x64)

  • Windows Server 2008 (x86 or x64) or later versions

  • Windows Server 2003 Service Pack 2 (x86 or x64) or later versions

  • Windows Server 2003 R2 (x86 or x64) or later versions

For the following operating system, you can deploy the Endpoint Protection client and deploy Endpoint Protection policies, but the client will not be able to report status back to the Endpoint Protection dashboard.

  • Windows Server 2008 Server Core (x86 or x64)

The following operating systems support file-based write filters (FBWF) and enhanced write filters (EWF). These filters must be disabled to install FEP client and definition updates. For information about how Windows Embedded Device Manager 2011 installs FEP client and definition updates to write filter (FBWF and EWF) enabled devices, see Windows Embedded and Forefront Endpoint Protection 2010.

  • Windows Embedded Standard 7 SP1 images based on the FEP 2010 dependency template

  • Windows Embedded POSReady 7

  • Windows ThinPC

Note

On the following operating systems, the Endpoint Protection client software can be installed manually. However, policies cannot be applied to them, nor can they be centrally managed by Endpoint Protection:

  • Windows 7 Starter

  • Windows 7 Home Premium

  • Windows Vista Basic

  • Windows Vista Home Premium

  • Windows XP Home Edition

Available disk space

255 MB

Additional requirements
  • Windows Installer 3.1 or later versions

  • Secondary Logon service must not be disabled

  • Filter manager rollup package for Windows XP Service Pack 2 (x86) KB914882 (https://go.microsoft.com/fwlink/?LinkID=207000)

Competitive uninstall

The client installation checks for and uninstalls the following existing antimalware clients:

  • Symantec Endpoint Protection version 11

  • Symantec Corporate Edition version 10

  • McAfee VirusScan Enterprise version 8.5 and version 8.7 and its agent

  • Forefront Client Security version 1 and the Operations Manager agent

  • TrendMicro OfficeScan version 8 and version 10