FSOCS services
Applies to: Forefront Security for Office Communications Server
The Microsoft Forefront Security for Office Communications Server (FSOCS) services are the components that run on the OCS 2007 or OCS 2007 R2 server and control all back-end functionality of FSOCS. The services process requests from the Microsoft Forefront Server Security Administrator, control the scanning process, generate e-mail notifications, and store virus incident data (which can be viewed by using the Forefront Server Security Administrator). An Administrator-only installation does not install the FSOCS services.
About services
The following sections describe the services used by FSOCS.
FSCController
FSCController acts as the server component that Forefront Server Security Administrator connects to for configuration and monitoring. FSCController coordinates all scanning activities. The FSCController startup type defaults to manual.
Note
If you change the startup type to anything other than manual, FSOCS may not scan properly.
After being installed, the FSCController becomes a dependency on the ForefrontRTCProxy service.
ForefrontRTCProxy
ForefrontRTCProxy is responsible for managing the SIP traffic routed through the OCS server. This service hooks into the OCS message stream and hands off the data to the FSOCScanner for scanning. After installation, the RtcSrv service becomes dependent on the ForefrontRTCProxy service, and the ForefrontRTCProxy service is dependent on the FSCController service.
FSCStatisticsService
The FSCStatisticsService logs scanning statistics for all scan jobs.
Disabling the FSOCS services
To disable the FSOCS services, in the General Options pane, in the Enable Forefront option, select Disable. For more information, see FSOCS Forefront Server Security Administrator.
To disable the FSOCS services
Open the Forefront Server Security Administrator.
In the Shuttle Navigator, in the SETTINGS section, click General Options.
In the General Options pane, in the Scanning section, in the Enable Forefront option, select Disable, and then click Save.
Stop the FSCController service.
The FSOCS services can be enabled by following the same procedure and selecting Enable.
Warning
While the FSOCS services are unavailable, messages continue to flow but are not scanned for viruses.
Note
FSOCS services must be recycled for the change to take effect. For more information, see Recycling the FSOCS services.
Recycling the FSOCS services
The Service Control Manager is used to recycle the FSOCS services.
To recycle the FSOCS services
Stop all FSOCS services. (For details, see Disabling the FSOCS services.)
Wait for all services to complete shutting down.
Use Task Manager in order to make sure that no FSOCS processes are still running.
Start the Office Communications Server Front End service (RTCSrv)
Securing the service from unauthorized use
The FSCController service utilizes DCOM in order to launch and authenticate Forefront Server Security Administrator connections. You can build an access list of authorized users that can connect to the FSCController by utilizing the Forefront Server Security Administrator.
To build an access list of authorized users
Open a command prompt.
Type DCOMCNFG, and then press ENTER.
On the Component Services dialog box, in the Console Root section, expand Component Services.
Expand Computers, expand My Computer, and then expand DCOM Config.
In the list of applications, right-click FSCController, and then click Properties.
On the FSCController property dialog box, on the Identity tab, configure your user accounts.
On the Security tab, use the permissions lists in order to control which user accounts have rights to launch and activate the FSCController, access the FSCController, or change the DCOM configuration, and then click OK.