+ Post New Thread
Results 1 to 7 of 7
General Chat Thread, microsoft antivirus for my domain (confused!) in General; Could some explain what I need to setup microsofts enterprise antivirus on my domain? I know that I'm entitled to ...
  1. #1
    chazzy2501's Avatar
    Join Date
    Jan 2008
    Location
    South West
    Posts
    1,801
    Thank Post
    215
    Thanked 265 Times in 215 Posts
    Rep Power
    68

    microsoft antivirus for my domain (confused!)

    Could some explain what I need to setup microsofts enterprise antivirus on my domain? I know that I'm entitled to use it for my workstations but am unclear what I download. how I deploy (wsus?) how I manage it and what my servers need? Oh and do I need a seperate exchange one? Whats the software called? forefront client security, forefront endpoint2010?

    What do licences do I purchase for my servers 12x standard servers mix of 2003 to 2012 one running standard exchange 2007.

    {RANT}I'm fed up of asking M$ cause all I get is cloud features in system centre 2012 and other rubbish that doesn't tell me the basics.{Double RANT!} Do I need that on every server or just one! Does it manage or actually antivirus the server?!!

    Confused!

  2. #2
    Norphy's Avatar
    Join Date
    Jan 2006
    Location
    Harpenden
    Posts
    2,385
    Thank Post
    54
    Thanked 315 Times in 245 Posts
    Blog Entries
    6
    Rep Power
    120
    Microsoft's antivirus client is called either ForeFront Endpoint Protection or System Center Endpoint Protection. Both products are largely identical, it's just that they've moved it from the ForeFront family to the System Center one instead.

    If you have an EES license with MS, you should be licensed to run FEP/SCEP. Both will run on servers and workstations. If you want an Exchange or other server production specific plugin (e.g. SharePoint), you'll have to look elsewhere as Microsoft don't provide a product to do this any more.

    Officially, both products are managed and deployed through System Center Configuration Manager. However, with FEP at least, you can manage the thing using just GPOs and deploy it with a startup script, there are posts elsewhere on here on how to do this. If you do use SCCM to manage it, you will probably find it a little simpler to deploy and manage and SCCM will give you all sorts of pretty reports as to what it's doing and where it is.

    They can update themselves from SCCM, WSUS or from Microsoft Update.

    In my MVLS, they show up as Microsoft ForeFront Endpoint Protection with Update Rollup 1 and System Center Endpoint Protection with Service Pack 1 respectively.

  3. Thanks to Norphy from:

    chazzy2501 (11th March 2013)

  4. #3
    chazzy2501's Avatar
    Join Date
    Jan 2008
    Location
    South West
    Posts
    1,801
    Thank Post
    215
    Thanked 265 Times in 215 Posts
    Rep Power
    68
    So I run system center endpoint on all my clients and servers and I need one server to manage. This server would have the SCCM service installed. My EES licence covers my workstations and servers for endpoint protection? Do I just purchase one copy of SCCM to manage everything?

  5. #4

    tmcd35's Avatar
    Join Date
    Jul 2005
    Location
    Norfolk
    Posts
    5,713
    Thank Post
    858
    Thanked 904 Times in 749 Posts
    Blog Entries
    9
    Rep Power
    330
    Just a word of warning on SCEP. I have a System Center Config Man server setup in a VM, largely sitting idle while I config and ready for eventual roll out. It's using 9Gb/16Gb ram - just idling! A Hungry beast indeed. Use Forefront 2010 unless you need/want to use all the features of SCCM.

    As for licencing, so long as you subscribe to EES you are fully covered to run a SCCM server to manage this, no extra licensing required. Outside of EES you just need to purchase client management licenses for each desktop. There are no server licenses unless you want to install the client on a server.

    If you want to install the forefront AV client or SCCM client on servers - then you'd need a server ML for each server you want to install the client on.
    Last edited by tmcd35; 11th March 2013 at 02:27 PM.

  6. Thanks to tmcd35 from:

    chazzy2501 (11th March 2013)

  7. #5

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,054
    Thank Post
    888
    Thanked 1,729 Times in 1,492 Posts
    Blog Entries
    12
    Rep Power
    454
    Quote Originally Posted by tmcd35 View Post
    Just a word of warning on SCEP. I have a System Center Config Man server setup in a VM, largely sitting idle while I config and ready for eventual roll out. It's using 9Gb/16Gb ram - just idling! A Hungry beast indeed. Use Forefront 2010 unless you need/want to use all the features of SCCM.
    That will be SQL doing that. My default SQL will gobble the RAM and try to store the whole database in the RAM. You can limit the amount of RAM SQL uses and it will fix the issue.

  8. #6
    Norphy's Avatar
    Join Date
    Jan 2006
    Location
    Harpenden
    Posts
    2,385
    Thank Post
    54
    Thanked 315 Times in 245 Posts
    Blog Entries
    6
    Rep Power
    120
    As for licencing, so long as you subscribe to EES you are fully covered to run a SCCM server to manage this, no extra licensing required. Outside of EES you just need to purchase client management licenses for each desktop. There are no server licenses unless you want to install the client on a server
    That is incorrect. You get SCCM CALs under the EES, yes but you don't get the server component automatically. You will have to buy the server component separately. It's not expensive, something like £300 for that and the SQL license but it's an extra cost to take into account.

  9. #7

    tmcd35's Avatar
    Join Date
    Jul 2005
    Location
    Norfolk
    Posts
    5,713
    Thank Post
    858
    Thanked 904 Times in 749 Posts
    Blog Entries
    9
    Rep Power
    330
    Quote Originally Posted by Norphy View Post
    That is incorrect. You get SCCM CALs under the EES, yes but you don't get the server component automatically. You will have to buy the server component separately. It's not expensive, something like £300 for that and the SQL license but it's an extra cost to take into account.
    No, it's not - see repeated threads on SCCM licensing and Microsoft's own FAQ on the subject. System Center is licensed per managed end device only. The rights to run the managing server software is included in the end client device licenses. And that include the right to run the required SQL server. Server licenses are only required for servers being managed by one of the SC components.

    Admittedly this is a new chance for SC2012 - so if you're licensed the old way under SC 2007/2010 then I can see where the confusion is coming from.

SHARE:
+ Post New Thread

Similar Threads

  1. Recomend me a new registrar for my .sch.uk domain
    By Oaktech in forum Internet Related/Filtering/Firewall
    Replies: 15
    Last Post: 9th March 2013, 11:31 AM
  2. Replies: 5
    Last Post: 21st March 2011, 12:01 PM
  3. GPO or WSUS ? For deploying Powershell 2.0 automatically in my domain ?
    By albertwt in forum Windows Server 2000/2003
    Replies: 2
    Last Post: 19th April 2010, 03:32 AM
  4. Gmail for your domain beta live
    By mark in forum Educational Software
    Replies: 21
    Last Post: 14th July 2006, 08:48 AM
  5. Microsoft tool for schools
    By russdev in forum Windows
    Replies: 8
    Last Post: 28th July 2005, 06:15 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •