Forefront AV client Automatic approval

Hello all

I am running WSUS 3.0 sp1, and I am also running Forefront Client Security
(seperate server) On the WSUS server I have configured Forefront AV client
Automatic approval and definition updates. With these settings i am noticing
that a client machine will get notified to install the forefront client
application, but the definition updates are automatically getting downloaded
and installed on the client machine. Can i force the client application to
also get automatically installed just like the definition updates?

Thanks

"Sawyer" <> wrote in message
news:6483B9FC-68C4-4266-A2F2-...
> Hello all
>
> I am running WSUS 3.0 sp1, and I am also running Forefront Client Security
> (seperate server) On the WSUS server I have configured Forefront AV client
> Automatic approval and definition updates. With these settings i am
> noticing that a client machine will get notified to install the forefront
> client application, but the definition updates are automatically getting
> downloaded and installed on the client machine. Can i force the client
> application to also get automatically installed just like the definition
> updates?

This really depends on how you have the behavior of the WUAgent to
configure. The updates to the Forefront Client will be installed in exactly
the same manner as other Security Updates, Office Updates, etc. are
installed. If you have your clients configured to install at a scheduled
event then the Forefront Client will be updated during that scheduled event.

Are you sure you're not just seeing the normal WSUS/WUA Notification Icon
for any/all updates, and they just happen to be applicable to Forefront
Client, because that's what you're currently focusing on?

A *common* misconception amongst neophyte WSUS Admins is that the
Notification Icon is somehow indication that updates must be installed by a
user. This is not true. This icon is presented to Administrators logged onto
the system to let them know that they *CAN* install the updates
interactively if they wish. If they do not, the updates will be installed at
the next scheduled installation event (assuming that AUOptions=4 is
configured and the machine is powered on during the scheduled installation
event).

--
Lawrence Garvin, M.S., MCITP:EA, MCDBA
Principal/CTO, Onsite Technology Solutions, Houston, Texas
Microsoft MVP - Software Distribution (2005-2009)

MS WSUS Website: http://www.microsoft.com/wsus
My Websites: http://www.onsitechsolutions.com;
http://wsusinfo.onsitechsolutions.com
My MVP Profile: http://mvp.support.microsoft.com/pro...awrence.Garvin