If you feel this tip has saved you time or effort, please consider buying us a cuppa coffee to keep things going!

Guide for deploying Microsoft Forefront Endpoint Protection to your network.

Manually install Microsoft Forefront Endpoint Protection

Script install Microsoft Forefront Endpoint Protection

Manually install Microsoft Forefront Endpoint Protection

The manual process for installation is quite straigtfoward:

On the client PC, run the file FEPInstall.exe -  ensure that you use the correct version for the version of Windows that you are running - x86  or x64.

Follow through the prompts, and choose the settings you require - easy as that!

After the installation is complete, the system will attempt to update to the latest definition files (either via Windows update or your WSUS server). I recommend the WSUS approach, as you are likely to have forefront on all your machines, and having them all pull from windows udpate is going to cause a fair bit of internet traffic!

Script install Microsoft Forefront Endpoint Protection

Microsoft Forefront Endpoint Protection can also be installed from the command line, which means it can be scripted to install during login/startup

Start by preparing a network shared folder that the client machines can access, and copy the installer file FEPInstall.exe. Optionally copy the definitions file mpam-fe.exe and mpam-fex64.exe to the shared folder too.

A sample script for the installation:

@echo off

\\FILESERVER\FEPclient\FEPInstall.exe /nofw /s /q

REM FEP Definition 32

@echo off

\\FILESERVER\FEPclient\mpam-fe.exe /nofw /s /q

REM FEP Definition 64

@echo off

\\FILESERVER\FEPclient\mpam-fex64.exe /nofw /s /q