Exporting Policy Settings to a FEP Policy File

Updated: January 1, 2011

Applies To: Forefront Endpoint Protection

In some cases, you may want to apply policy settings contained in a Group Policy object (GPO) locally to FEP clients. Or, you may want to export FEP policy settings from a GPO in one domain and then import those settings to a GPO in another domain. You can export policy settings contained in a configured FEP GPO to a FEP policy file. The FEP policy file can then be used to apply policy settings locally to FEP clients, or be imported to a different domain. In order to export policies, you must first download and install the Forefront Endpoint Protection Group Policy Tool. For more information about extracting and installing the Group Policy Tool, see Converting FEP Policies to Group Policy.

To export FEP policy settings

  1. Locate and double-click fep2010gptool.exe in order to open the Forefront Endpoint Protection Group Policy Tool.

  2. On the Export tab, select the Domain and the name of the Group Policy object in that domain that contains the settings with which you want to populate the new FEP policy file.

  3. Click Select Policy File. Select the location and name for the destination .xml policy file that will contain the exported policy settings.

  4. Click OK to export the FEP GPO policy settings to the .xml policy file.

    For more information about how to apply FEP policy settings, see Applying Policies from the Command Prompt.

    When exporting policy settings from a configured GPO, only the FEP policy settings are exported. If the GPO contains non-FEP policy settings, those settings will not be present in the new FEP policy file.