Installing Forefront Client Security

1.Logon to the Client Security server with administrator privileges, and start the
installation
2.Click Run the Setup wizard to start the process
3.In Before You Begin screen, type your name and your organization, and then click Next.
4.On the License Agreement screen, click I accept the terms in the license agreement, and then click Next.
5.On the Component Installation page, select all the check boxes, and then click Next.
6.Due to the WSUS server is located on the same server, we will install distribution server Component also, in case you have a WSUS server in your network, you will need to run this wizard on the WSUS server.

Install client security server:

1.From add/remove program. Choose add/remove windows component.
2.Choose application server, click details, then select the ASP.NET and BITS check box, and then complete the wizard
3.Installing SQL Server 2005
4.Choose the following components during the installation
a. SQL Server Database Services
b. Reporting Services
c. Integration Services
d. Workstation components
5.On the Service Account page of the wizard, click local system account.
6.Configure the SQL Server Agent service start automatically
7.Choose Windows Authentication as the security mode.
8.Download and install SP2 for SQL Server 2005
9.Download and install MMC 3 from http://go.microsoft.com/fwlink/?LinkID=77419
10.Download and install GPMC with SP1 from
http://go.microsoft.com/fwlink/?LinkId=77421
11.Install WSUS 3
12.Synchronize WSUS server with updates and definition update nodes with the required products and classifications
13.Create a GPO in a domain level to use WSUS server as update server and configure
group policy for automatic installation.
14.Create auto approve rule to approve FCS updates to the required computers.
15.Add the reporting server site to the Local intranet zone in Internet Explorer
16.Create a domain user account with name FCS‐DAS.
17.Add FCS‐DAS account to the server local administrator.

Configure and synchronize WSUS

1.In the WSUS console, click Options, and then click Synchronization Options.
2.On the Synchronization Options page, under Update Classifications, click Change.
3.In Add/Remove Classifications, select the Updates check box, and then click OK.
Note:
This setting ensures that WSUS will download the client components for Client Security. Client Security definition updates will be automatically selected as synchronization options when you install the distribution server components of Client Security.
4.Click Save settings.
5.To start synchronizing, on the Synchronization Options page, click Synchronize Now.
Note:
The first time you synchronize your WSUS server, it can take several hours