1. From the Essentials 2007 SP1 setup media, start SetupSCE.exe.

2. Click Agent to install an agent.

3. In the Agent Setup Wizard, select the Specify Management Group Information check box.

4. On the Management Group Configuration page, specify the following:

   • In Management Group Name, enter Management Server netbios name_MG.
     
   • In Management Server Name box, enter the fully qualified domain name (FQDN) of the Essentials 2007 management server.
     

5. Select Local System for the agent action account.

6. Complete the Agent Setup Wizard.

7. Copy the following certificates from the Essentials_2007_folder\Certificates folder of the Essentials 2007 management server to the agent_installation_folder\Certificates folder on the local computer:

   • WSUSSSLCert.cer
     
   • WSUSCodeSigningCert.cer
     

8. Run the following utility, specifying the same settings submitted to the Feature Configuration Wizard on the Essentials 2007 management server (brackets indicate placeholders where you must supply a value):

   [InstallDirectory]\SCECertPolicyConfigUtil.exe /PolicyType local /ManagementGroup [Essentials Management Server netbios name]_MG /SCEServer SCEServer.FQDN /AEMFileShare \\SCESERVER.FQDN\[AEMPATH] /AEMPort [port] /ConfigureRemoteControl [true/false] /ConfigureAEM [true/false] 

9. Import the certification authority (CA) certificate into the Trusted Root Certification Authority store on the workgroup-joined computer using the steps described in How to Import a CA Certificate.

10. Obtain a certificate for the workgroup-joined computer in PFX format. This certificate must be issued against the same certification authority as the certificate used on the Essentials 2007 management server. Import the certificate on the workgroup-joined computer using the steps described in How to Import Certificates in Essentials 2007.

11. Approve the manually installed computer in the Pending Actions view in the Administration pane of the Essentials 2007 console.

Tasks

Concepts