I wrote a post a while back on how to install the SCCM 2007 Admin Console including R3 and required hotfixes: https://ccmexec.com/2012/01/unattended-installation-of-sccm-2007-admin-console-including-r3/ In that post i also promised to write a post on how to install the SCCM 2007 Admin Console + R3 + FEP. It turned out to be a bit of a challenge as
In Forefront Endpoint protection 2010 there is no possibility to password protect the uninstallation of the FEP client. This makes it possible for instance for local admins to remove the FEP Client. I started testing to advertise the FEP client to the “Locally Removed” collection where the client will end up if the FEP client
After 4 weeks’ vacation I started working again and the first thing I planned to do was to implement the new feature in FEP 2010 Update Rollup 1 for automating approval of FEP 2010 definition updates in SCCM instead of doing it separately in WSUS on the SCCM server as many of us do today.