Removing an existing installation of Client Security
Applies To: Forefront Client Security
Before you remove Client Security from the servers, it is recommended that you prepare your client computers for removing Client Security by undeploying the policies to those computers.
To remove Client Security from the client computers using the standard method, you should undeploy the policy for those computers. After the policy is undeployed, Client Security is no longer automatically updated on the client computer.
To remove Client Security from the client computer by undeploying a policy
In the Client Security console, click the Policy Management tab, and then click the policy you want to undeploy.
Click Undeploy. A confirmation message appears.
Click Undeploy. Client Security undeploys the policy.
If you deployed the policy to an OU and you want the policy to take effect immediately, you can run the gpupdate /force command on each client computer in the OU or restart each client computer. Otherwise, the policy is applied to client computers when the standard Group Policy refresh occurs.
If you deployed the policy to a security group and you want the policy to take effect immediately, you can restart each client computer in the security group. The command gpupdate /force does not update policies for client computers in security groups. Otherwise, the policy is applied to client computers when the standard Group Policy refresh occurs.
If you used registry file deployment for the policy, you must run fcslocalpolicytool.exe on each client computer that you distributed the policy to by using a registry file. At the command prompt, type the following:
fcslocalpolicytool.exe /d
For automated deployments, you can use the
/f
option to suppress the confirmation message.
After undeploying the policies, you can remove Client Security from the client computers by doing the following.
To manually remove Client Security from the client computer
On the client computer, make sure that the Client Security agent is closed.
In Control Panel, double-click Add/Remove Programs.
In the Add/Remove Programs dialog box, remove the following programs:
Microsoft Forefront Client Security Antimalware Service
Microsoft Forefront Client Security State Assessment Service
Microsoft Operations Manager 2005 Agent
Restart the client computer.
You can use these steps to remove Client Security from a single-server topology.
To remove Client Security from a single-server topology
On the server, in Control Panel, double-click Add/Remove Programs.
In the Add/Remove Programs dialog box, remove the following programs:
Microsoft Forefront Client Security Management Server
Microsoft Forefront Client Security Collection Server
Microsoft Forefront Client Security Update Assistant
Microsoft Forefront Client Security Antimalware Service
Microsoft Forefront Client Security Data Warehouse Server
Microsoft Forefront Client Security State Assessment Service
Microsoft Operations Manager 2005
Microsoft Operations Manager 2005 Reporting
Delete the OnePoint and SystemCenterReporting databases in SQL Server 2005:
Important
Consider making a full backup of the database. A deleted database can be re-created only by restoring a backup.
Open SQL Server Management Studio.
In Object Explorer, connect to an instance of the SQL Server 2005 Database Engine, and then expand that instance.
Expand Databases, right-click the appropriate database, and then click Delete.
Confirm the correct database is selected, and then click OK.
Delete the Client Security DTS Microsoft Forefront Client Security job:
Open SQL Server Management Studio.
In Object Explorer, connect to an instance of the SQL Server 2005 Database Engine, and then expand that instance.
Expand SQL Server Agent, expand Jobs, right-click Microsoft Forefront Client Security, and then click Delete.
Confirm the correct job is selected, and then click OK.
Delete the Client Security FCS - Update SystemCenterReporting Partition Function job:
Open SQL Server Management Studio.
In Object Explorer, connect to an instance of the SQL Server 2005 Database Engine, and then expand that instance.
Expand SQL Server Agent, expand Jobs, right-click FCS - Update SystemCenterReporting Partition Function, and then click Delete.
Confirm the correct job is selected, and then click OK.
Delete the Client Security reporting server:
In Internet Explorer, navigate to the MOM Reporting URL.
Click Show Details.
Select the Microsoft Forefront Client Security check box.
Click Delete.
Restart the server.
To remove Client Security from a multiple-server topology, follow the appropriate steps for each server component. If you have a server with multiple components, make sure to follow the steps for removing each of the components.
To remove Client Security from the management server
On the server, in Control Panel, double-click Add/Remove Programs.
In the Add/Remove Programs dialog box, remove the following programs:
Microsoft Forefront Client Security Management Server
Microsoft Forefront Client Security Antimalware Service
Microsoft Forefront Client Security State Assessment Service
Microsoft Operations Manager 2005
Restart the server.
To remove Client Security from the collection server
On the server, in Control Panel, double-click Add/Remove Programs.
In the Add/Remove Programs dialog box, remove Microsoft Forefront Client Security Collection Server.
In the Add/Remove Programs dialog box, select Microsoft Operations Manager 2005, and then click Change.
On the first page of the Microsoft Operations Manager Setup wizard, click Next.
On the next page, click Modify, and then click Next.
On the next page, do the following:
Click the icon next to the MOM 2005 Management Server, and then click This component will not be available.
Click the icon next to the MOM 2005 User Interfaces, and then click This component will not be available.
Finish the wizard.
Restart the server.
To remove Client Security from the collection database server
On the server, in Control Panel, double-click Add/Remove Programs.
In the Add/Remove Programs dialog box, remove Microsoft Operations Manager 2005.
Delete the OnePoint database in SQL Server 2005:
Important
Consider making a full backup of the database. A deleted database can be re-created only by restoring a backup.
Open SQL Server Management Studio.
In Object Explorer, connect to an instance of the SQL Server 2005 Database Engine, and then expand that instance.
Expand Databases, right-click the appropriate database, and then click Delete.
Confirm the correct database is selected, and then click OK.
Restart the server.
To remove Client Security from the reporting database server
On the server, in Control Panel, double-click Add/Remove Programs.
In the Add/Remove Programs dialog box, remove the following programs:
Microsoft Forefront Client Security Data Warehouse Server
Microsoft Operations Manager 2005 Reporting
Delete the SystemCenterReporting database in SQL Server 2005:
Important
Consider making a full backup of the database. A deleted database can be re-created only by restoring a backup.
Open SQL Server Management Studio.
In Object Explorer, connect to an instance of the SQL Server 2005 Database Engine, and then expand that instance.
Expand Databases, right-click the appropriate database, and then click Delete.
Confirm the correct database is selected, and then click OK.
Delete the Client Security DTS Microsoft Forefront Client Security job:
Open SQL Server Management Studio.
In Object Explorer, connect to an instance of the SQL Server 2005 Database Engine, and then expand that instance.
Expand SQL Server Agent, expand Jobs, right-click Microsoft Forefront Client Security, and then click Delete.
Confirm the correct job is selected, and then click OK.
Delete the Client Security FCS - Update SystemCenterReporting Partition Function job:
Open SQL Server Management Studio.
In Object Explorer, connect to an instance of the SQL Server 2005 Database Engine, and then expand that instance.
Expand SQL Server Agent, expand Jobs, right-click FCS - Update SystemCenterReporting Partition Function, and then click Delete.
Confirm the correct job is selected, and then click OK.
Delete the DTS job:
In Control Panel, click Scheduled Tasks.
Right-click SystemCenterDTSPackageTask, and then click Delete.
Restart the server.
To remove Client Security from the distribution server
On the server, in Control Panel, double-click Add/Remove Programs.
In the Add/Remove Programs dialog box, remove Microsoft Forefront Client Security Update Assistant.
Restart the server.
To remove Client Security from the reporting server
In Internet Explorer, navigate to the MOM Reporting URL.
Click Microsoft Operations Manager Reporting.
Click Show Details.
Select the Microsoft Forefront Client Security check box.
Click Delete.