Forefront Endpoint Protection Tools2.1.1116.0

These tools make it easier for Forefront Endpoint Protection 2010 customers to use Group Policy for centralized management, provide optimized settings for various server roles, and diagnose and troubleshoot support issues.FEP Group Policy Tools (fep2010grouppolicytools-en-us.exe)The FEP Group Policy tool is used to import settings from FEP policy XML files into a Group Policy Object (GPO) in an Active Directory domain, or into the Local Group Policy object on a Windows computer. The tool can also be used to export FEP settings from a GPO into a FEP policy XML file. The FEP ADMX template is used in conjunction with Group Policy Editor in order to manage FEP antimalware settings with Group Policy.

FEP Server Role Policies for Use with System Center Configuration Manager (fepserverrolepoliciesforusewithconfigmgrui.exe)

These files are FEP policy XML files, each with optimized settings for a particular server role such as SQL, Exchange or Active Directory. The settings enable exclusions and change other FEP antimalware engine settings to minimize the impact of FEP on the designated server workload.The policy files for use with ConfigMgr are designed to be used only in conjunction with the FEP management node in the ConfigMgr management console. Each file contains role-optimized settings for a particular server role, as well as default settings appropriate for any Windows server.These files should not be used with the FEP Group Policy tool, as Group Policy merging might not result in the desired configuration being applied to the system if two or more policies are applicable to the same system.

FEP Server Role Policies for Use with Group Policy (fepserverrolepoliciesforusewithgpo.exe)

These files are FEP policy XML files, each with optimized settings for a particular server role such as SQL, Exchange or Active Directory. The settings enable exclusions and change other FEP antimalware engine settings to minimize the impact of FEP on the designated server workload.The policy files for use with Group Policy are designed to be used only in conjunction with the FEP Group Policy tool, and specifically are designed so that Group Policy merging will result in the correct Resultant Set of Policy. Each file contains only role-optimized settings for a particular server role; the default settings applicable for all Windows servers are provided in a separate file.These files should not be used with FEP management node in the ConfigMgr console, as the policy files don't contain all settings required by the policy management UI and might result in error messages when the UI attempts to parse the files.Microsoft Security Support toolThe Microsoft Security Support tool gathers support data necessary to help the Microsoft Support team to resolve support issues.Run The Microsoft Security Support tool on the problematic FEP computer (client or server).  Send the cab file that is created to the Microsoft Support team to enable them to diagnose and resolve the support issues.

FEP 2010 Best Practice Analyzer

The Microsoft Forefront Endpoint Protection 2010 Best Practice Analyzer (BPA) tool scans the System Center Configuration Manager 2007 and Forefront Endpoint Protection (FEP) configuration settings to identify problematic or missing settings that may prevent optimized use of FEP. The tool is based on the Microsoft Baseline Configuration Analyzer (MBCA) 2.0.