Protecting home computers

Applies To: Forefront Client Security

Client Security is licensed under a subscription model: on a per-user or per-device basis for the Client Security agent, and on a per-server basis for the Client Security console. For more information about Client Security licensing, see How to Buy Microsoft Forefront Client Security (https://go.microsoft.com/fwlink/?LinkId=93608).

Customers who license the Client Security agent on a per-user basis can provide the Client Security agent to employees at no additional cost for protecting home computers.

Consider the following for home-use scenarios:

  • Client Security supports client computers running the following operating systems:

    • Windows Vista Business

    • Windows Vista Ultimate

    • Windows Vista Home

    • Windows Vista Enterprise

    • Windows Vista Business with Service Pack 1 or later

    • Windows Vista Ultimate with Service Pack 1 or later

    • Windows Vista Home with Service Pack 1 or later

    • Windows Vista Enterprise with Service Pack 1 or later

    • Windows XP with Service Pack 2 or later

    • Windows 2000 with Service Pack 4

    For more information about supported operating systems, see Verifying your system requirements.

  • It is likely that home computers will not be members of an Active Directory domain that contains a Client Security deployment. In this situation, you must manually install the Client Security agent without reporting capabilities.

  • Home-use installations must use Microsoft Update to download definition updates, rather than a corporate WSUS server. Consequently, the home computers must be opted into Microsoft Update manually.

Configuring your computer to use Microsoft Update

For the home computer to receive definition updates, you must configure it to use Microsoft Update. It is highly recommended you do this first, so that the Client Security agent can immediately connect to Microsoft Update and get definition updates.

The steps to do this are different for Windows Vista and Windows XP.

To configure a computer running Windows Vista to use Microsoft Update

  1. Click Start, point to All Programs, and click Windows Update.

  2. In the Windows Update window, next to You receive updates, verify that it states For Windows and other products from Microsoft Update Service.

    The presence of this statement indicates that the computer is configured to use Microsoft Update. No further steps are necessary.

  3. If the statement For Windows only is present, click Get updates for more products.

  4. In Internet Explorer, read the Terms of Use, select the I accept the Terms of Use check box, and then click Install.

  5. If the User Account Control dialog box appears, click Continue.

To configure a computer running Windows XP to use Microsoft Update

  1. Click Start, point to All Programs, and click Windows Update.

    If the computer is already configured to use Microsoft Update, you will be directed to the Welcome to Microsoft Update page. No further steps are necessary.

  2. In the Internet Explorer window, next to Get Microsoft Update today, click Go.

  3. Under Try Microsoft Update today, click Start Now.

  4. Read the license agreement and click Continue.

  5. If prompted, right-click the Internet Explorer Information Bar and choose InstallActiveX control, and in the Internet Explorer - Security Warning dialog box, click Install.

  6. If notified that Automatic Updates is turned off, configure it as you want. Automatic Updates need not be enabled to receive Client Security definition updates.

Distributing the Client Security agent installation program

The Client Security agent installation program, clientsetup.exe, is located in the Client folder on the Client Security installation CD. Clientsetup.exe calls the Windows Installer files needed for the Client Security components. For this reason, when distributing the Client Security agent to home users, you must distribute both the appropriate processor platform version of clientsetup.exe and the supporting MSI installer files.

The following table lists the files you need to include for each processor platform when distributing the Client Security agent for home use.

Files needed for x86-based computers (from the Client folder) Files needed for x64-based computers (from the Client\x64 folder)

Clientsetup.exe

Fcsssa.msi

Mp_ambits.msi

Windowsxp-kb914882-x86-LNG.exe  where LNG is the language of the operating system installation

Clientsetup.exe

Fcsssa.msi

Mp_ambits.msi

Installing the Client Security agent

To install the Client Security agent in a home-use scenario, you must install it without the reporting and alerting component.

To install the Client Security agent on Windows Vista without the reporting and alerting component

  1. On computers running Windows Vista, click Start, point to All Programs, and then click Accessories.

  2. Right-click Command Prompt, and then click Run as administrator.

  3. In the User Account Control dialog box, click Continue.

  4. In the Command Prompt window, change to the location of the Client Security Client folder, type the following command, and then press ENTER:

    clientsetup.exe /NOMOM

To install the Client Security agent on Windows XP and Windows 2000 without the reporting and alerting component

  1. Click Start, click Run, type cmd, and click OK.

  2. In the Command Prompt window, change to the location of the Client Security Client folder, type the following command, and then press ENTER:

    clientsetup.exe /NOMOM

After the Client Security agent installation completes, the Client Security icon appears in the notification area. Additionally, the Client Security agent will automatically check Microsoft Update for definition updates.

Troubleshooting

You may see an exclamation point icon in the notification area immediately after the installation of Client Security completes. When you open the Client Security user interface, you may see the following error.

Error

Client Security can't check for definition updates: 0x80240016

The most frequent cause of this error is that the installation of the Client Security agent has not yet fully completed. Wait for a short period of time and check the Client Security user interface again. If the error persists, verify that your Internet connection works and that you can successfully connect to the Microsoft Update Web site.

If you installed the Client Security agent prior to configuring the computer to use Microsoft Update, the Client Security icon in the notification area will be an exclamation point. To resolve this problem, you must enable Microsoft Update. After enabling Microsoft Update, install any Client Security definition updates offered to bring your Client Security agent installation up to date.

For additional troubleshooting information, see the Client Security Troubleshooting Guide (https://go.microsoft.com/fwlink/?LinkID=88222).