The document is archived and information here might be outdated
Prerequisites for Deploying Forefront Endpoint Protection on a Client
Updated: January 1, 2012
Applies To: Forefront Endpoint Protection
The following table is a list of the prerequisites for deploying the Endpoint Protection on client computers.
A Microsoft System Center Configuration Manager 2007 site that has Endpoint Protection server installed.
If you have client computers that do not require the central deployment and management features of Endpoint Protection server and you intend to manually install the Endpoint Protection client, the Configuration Manager prerequisites stated for client computers are not required. For more information, see Deploying the Client Software by Using the Command Prompt.
Windows 7 (x86 or x64)
Windows 7 XP mode
Windows Vista (x86 or x64) or later versions
Windows XP Service Pack 2 (x86 or x64) or later versions
Windows Server 2008 R2 (x64) or later versions
Windows Server 2008 R2 Server Core (x64)
Windows Server 2008 (x86 or x64) or later versions
Windows Server 2003 Service Pack 2 (x86 or x64) or later versions
Windows Server 2003 R2 (x86 or x64) or later versions
For the following operating system, you can deploy the Endpoint Protection client and deploy Endpoint Protection policies, but the client will not be able to report status back to the Endpoint Protection dashboard.
Windows Server 2008 Server Core (x86 or x64)
The following operating systems support file-based write filters (FBWF) and enhanced write filters (EWF). These filters must be disabled to install FEP client and definition updates. For information about how Windows Embedded Device Manager 2011 installs FEP client and definition updates to write filter (FBWF and EWF) enabled devices, see Windows Embedded and Forefront Endpoint Protection 2010.
Windows Embedded Standard 7 SP1 images based on the FEP 2010 dependency template
Windows Embedded POSReady 7
On the following operating systems, the Endpoint Protection client software can be installed manually. However, policies cannot be applied to them, nor can they be centrally managed by Endpoint Protection:
Windows 7 Starter
Windows 7 Home Premium
Windows Vista Basic
Windows Vista Home Premium
Windows XP Home Edition
Available disk space
Windows Installer 3.1 or later versions
Secondary Logon service must not be disabled
Filter manager rollup package for Windows XP Service Pack 2 (x86) KB914882 (http://go.microsoft.com/fwlink/?LinkID=207000)
The client installation checks for and uninstalls the following existing antimalware clients:
Symantec Endpoint Protection version 11
Symantec Corporate Edition version 10
McAfee VirusScan Enterprise version 8.5 and version 8.7 and its agent
Forefront Client Security version 1 and the Operations Manager agent