April 2009 - Posts
Forefront Client Security: Using a Group Policy Object (GPO) to Harden Service and Registry Key Entries for the Forefront Client Security SP1 Agent on a Windows Vista Enterprise SP1 Workstation
In order to improve availability of the Forefront Client Security SP1 Agent on Target Workstations and Servers it is important to reduce the number of Users and Groups who can manage these Services. This concept termed 'least privilege' is part of the broader goal of improving Service Availability while permitting appropriate access to the Forefront Client Security SP1 Graphical User Interface...
Forefront Client Security: Using the Log Files from the Forefront Client Security Agent SP1for Analysis
The Forefront Client Security SP1 Agent includes a number of useful Log Files when Troubleshooting, Identifying General Health or Validating Client Policy. I am offering an example in this Blog entry of several of the FCS SP1 Agent specific Log Files. Typically these Log Files are used in conjunction with the standard tools built into the Operating System (in this case Vista Enterprise SP1) which include...
Forefront Client Security: Deploying the FCS Client Agent in a Corporate Environment to a Target currently running an unmanaged FCS Client Agent
I want to present a Scenario recently encountered in a Corporate Environment where a number of Target Workstations and Servers were running 'Standalone' versions of the Forefront Security Client SP1, but was in need of including those Targets into a 'Managed' Forefront Client Security environment. When I speak of a 'Managed' FCS Environment I am simply considering an environment...