SCEP SCCM 2012

[Rocket Man]

Have set up the forefront role on the primary SCCM server. The SCCM 2012 server has been plugged in to the already existing network. There is a good amount clients already on this network which spans multiple sites with FEP 2010 already installed as the previous OS build.

 

I have followed the guidelines to installing this role and creating the automatic deployment rule for the first 4 definition updates. I created the policies, but instead of specifying to install SCEP as part of the policy the only alteration I made was to manage Forefront clients ( I assume this is the correct configuration as my clients already have the FEP client installed previous to building SCCM 2012)and I just want them managed.

 

 

 

Does it take long before the clients start reporting from the main forefront node on the server. At the moment I have only some of the clients on the network successfully deployed with ConfigMgr client and have deployed the SCEP policies also.

 

Just curious to know if this will work or will I have to specify in the policy to install the new SCEP on the clients and overwrite or uninstall the already installed FEP client on the machines?

 

 

Thanks

 

Rocket Man

[anyweb]

have you deployed any antimalware policy to a collection ? are your computers a member of that collection ?

[Rocket Man]

Hi

 

Yes I have created the windows 7 collection and all of these would have the standard FEP client installed. I pushed out both policies to this collection 3 days ago.

I have an update on this question through some testing. I created a new collection and added 3 clients to it. I changed the above policy in my previous post to actually install SCEP, the same configuration from your guidelines and it installed SCEP and now these 3 are reporting.

 

So I think that you must have to specify to install SCEP in the policy as the standard FEP2010 is not manageable. Basically it removes the old FEP client and installs SCEP.

Have to push the new updated policy to the windows 7 collection again!!

 

Just another query while on this subject. I noticed when i browsed into the ccmcache directory of most of the machines that have the ConfigMgr client installed that there are approximately 6 folders in the cache all with AM delta exe or AM delta patches. This is the definitions for SCEP according to some research.

 

Will the cache continuously grow with these definition updates or is this just the initial 4 definitions downloaded and deployed automatically via the automatic deployment created?

 

Thanks

 

Rocket Man