Deploying client components by using disk images

  • Article

Applies To: Forefront Client Security

You can use disk images to simplify the deployment of Client Security client components to a large number of managed computers. Disk images allow you to deploy the client components just once (to the master computer from which you create the image) instead of multiple times (to each client computer in your deployment).

For more information about imaging, see Windows Vista Deployment Step-by-Step Guide (https://go.microsoft.com/fwlink/?LinkId=144546).

When you install the Client Security client components on the master computer, you can use the /CG switch to specify the server name for the collection server and use the /MS switch to specify the management server. The specified collection server and management server do not have to be available at the time you create the image; however, the client must be able to communicate with the specified servers after the image has been deployed. For more information about installing Client Security client components, see Deploying manually to each client computer.

When you deploy Client Security client components through a disk image, ensure that the master computer does not communicate with the Client Security server after the client components are installed. If communication occurs between the master computer and the Client Security server, the Client Security clients will not connect properly once the image is deployed. If communication should occur, it is recommended that you recreate and redeploy the image.

To deploy Client Security client components through disk images

  1. Build and patch the master computer image computer.

  2. Optionally, download the latest antimalware agent updates. For information about obtaining the latest version of the antimalware agent, see "Obtaining the latest antimalware agent updates," later in this topic.

  3. Remove the master computer from the network.

    Important

    The master computer must not communicate with Client Security servers after the Client Security client components have been installed.

  4. Install the Client Security client components. Use the /CG and /MS switches in order to reference the server names for the collection server and the management server to which the imaged clients will connect.

  5. Optionally, install the latest antimalware agent updates obtained in step 2.

    Important

    Do not connect the master computer to the network in order to download and install antimalware agent updates.

  6. Run the Sysprep tool, and then create an image of the master computer.

Obtaining the latest antimalware agent updates

Prior to creating the image, you may want to install the latest antimalware agent updates to your master computer. You can download the latest Client Security antimalware agent updates to the master computer prior to removing the computer from the network. You can then install the updates to the master computer after installing the Client Security Client components, prior to running the Sysprep tool and imaging the computer.

Obtaining the latest antimalware agent updates

  1. To determine the latest antimalware client, go to the following location: https://go.microsoft.com/fwlink/?LinkId=125926

    Obtain the KB number listed at the end of the URL that is located in the address bar. Example: for the URL https://support.microsoft.com/default.aspx/kb/956280, the referenced KB is 956280.

  2. Visit the Microsoft Update Catalog (https://go.microsoft.com/fwlink/?LinkId=145533). In the Search box, type Forefront Client Security, and then click Search.

  3. Locate the referenced KB from step 1, and then download the software package in the language that you require.

    Note

    Both the 32-bit and 64-bit versions of the software package are downloaded.