Share via


Repair Forefront Security for Exchange Server

Updated: February 13, 2009

Applies To: Windows SBS 2008

Problem   One or more of the following:

  • On the Home tab of the Windows SBS Console, in Network Essentials Summary, the Security status is Critical.

  • On the Reports tab, the Security status is Error.

  • On the Security tab, the Virus protection for e-mail status is Critical.

  • On the Reports tab, in Other Alerts, there are one or more problems that are associated with Forefront Security for Exchange Server.

Solution   Do the following.

  • Verify that the following services are running. If any of them are not running, restart them. For instructions about how to verify whether a service is running and to restart it, see the procedure “To verify that a service is running,” later in this topic.

    • FSCController

    • FSCMonitor

    • FSCStatisticsService

    • FSEMailPickup

    • Microsoft Exchange Active Directory Topology Service

    • Microsoft Exchange Anti-spam Update

    • Microsoft Exchange File Distribution

    • Microsoft Exchange Information Store

    • Microsoft Exchange Mail Submission

    • Microsoft Exchange Mailbox Assistants

    • Microsoft Exchange Replication Service

    • Microsoft Exchange Search Indexer

    • Microsoft Exchange Service Host

    • Microsoft Exchange System Attendant

    • Microsoft Exchange Transport Log Search

  • Determine whether you have Internet connectivity: In the Windows SBS Console, click Network, click Connectivity, and then verify that the Internet Connection status is Connected. If it is not connected, click Fix my network, and then complete the wizard. If the problem still exists, run fscdiag.exe to collect the needed support logs, and then contact your Windows SBS 2008 support professional or Microsoft Product Support.

    To run fscdiag.exe

    1. Right-click Start, and then click Explore.

    2. Navigate to C:\Program Files (x86)\Microsoft Forefront Security\Exhange Server.

    3. Right-click fscdiag.exe, and then click Run as Administrator.

    4. On the User Account Control page, click Continue.

      When the application is complete, a log directory is located at C:\Program Files (x86)\Microsoft Forefront Security\Exchange Server\log\Diagnostics. To verify that a service is running

    5. Click Start, click Administrative Tools, and then click Services.

    6. On the User Account Control page, click Continue.

    7. In the Services (Local) list, find the service that you want to verify, and then check its status. If it is stopped or paused, restart it by right-clicking it and then clicking Restart.

Manual repair of Forefront Security for Exchange Server

To manually repair Forefront Security for Exchange Server, do the following:

  1. Reinstall Forefront Security for Exchange Server.

  2. Apply the Microsoft Forefront Security for Exchange Server software update.

  3. Configure Forefront Security for Exchange Server on your server that is running Windows SBS 2008. This ensures that Forefront Security for Exchange Server has the recommended settings for Windows SBS 2008.

To reinstall Forefront Security for Exchange Server

  1. On the server that is running Windows SBS 2008, click Start, click Control Panel, and then click Programs and Features.

  2. Click Microsoft Forefront Security for Exchange Server, and then click Uninstall.

  3. On the User Account Control page, click Continue.

  4. Insert Windows Small Business Server Disc 2 (Component Technologies for Server Repair) into the server.

  5. Change the directory to cmpnents\fss.

  6. Double-click setup.exe.

  7. On the User Account Control page, click Continue.

  8. On the Forefront Security for Exchange Welcome page, click Next.

  9. Click Yes if you accept the license agreement.

  10. Type your customer information, and then click Next.

  11. Verify that Full Installation is selected, and then click Next.

  12. Verify that Secure Mode is selected, and then click Next.

  13. On the Engine selection page, click Next.

  14. On the Engine Updates Required information page, click Next.

  15. On the Proxy Server page, click Next.

  16. On the Choose Destination Location page, click Next.

  17. On the Select Program Folder page, click Next.

  18. On the Start Copying Files page, click Next.

  19. You might be prompted to restart one or more services. If you are, click Next, and then, when the services are restarted, click Next again.

  20. Click Finish to complete the installation.

  21. To confirm that the installation is successful, open the Windows SBS Console, click the Security tab, and then, in Security Essentials, verify that Virus protection for e-mail is listed and that Source shows Forefront Security for Exchange Server.

To apply the Microsoft Forefront Security for Exchange Server software update

  1. Insert Windows Small Business Server Disc 2 (Component Technologies for Server Repair) into the server.

  2. Change the directory to cmpnents\fss.

  3. Right-click resetclientsid.exe.

  4. On the User Account Control page, click Allow.

Note

The installation finishes without a confirmation page.

To configure Microsoft Forefront Security for Exchange Server on the server

  1. Click Start, in Start Search, type cmd, and then press ENTER.

  2. Change the directory to c:\program files (x86)\Microsoft Forefront Security\Exchange Server.

  3. Type FSCStarter.exe tlscfn C:\Program Files\Windows Small Business Server\Data\SBSForefrontTemplate.fdb, and then press ENTER.

  4. Open the Forefront Security for Exchange Administrator console: Click Start, click All Programs, click Microsoft Forefront Server Security, expand Exchange Server, and then click Forefront Server Security Administrator.

  5. On the User Account Control page, click Continue.

  6. Connect to the server that is running Windows SBS 2008.

  7. On the License Information dialog box, click OK.

  8. In Settings, click General Options, and then apply the settings as follows:

Scanning Setting

Scan on Scanner Update

Enabled (check box selected)

Scan Doc Files as Containers - Manual

Enabled (check box selected)

Scan Doc Files as Containers - Transport

Enabled (check box selected)

Scan Doc Files as Containers - Realtime

Enabled (check box selected)

Transport Process Count

2

Realtime Process Count

2

Background Scanning Setting

Enable background scan if ‘Scan on Scanner Update’ Enabled

Disabled (check box cleared)

  1. Click Save.

  2. Click Operate, and then click Schedule Job.

  3. Verify that VSAPI Background Scan Job is Enabled, that the Frequency is set to Daily, and that Time is set to 04:00:00. If they are, close the Forefront Security for Exchange Administrator console. If they are not, change them, click Save, and then close the Forefront Security for Exchange Administrator console.

To read the most recent version of this topic, see the Microsoft Web site (https://go.microsoft.com/FWLink/?LinkID=147057). The most recent version might contain additional information that was not available when Windows SBS 2008 was released.