Installing the software prerequisites on the distribution server for a three-server topology

Applies To: Forefront Client Security

The distribution server has the following prerequisites:

  • .NET Framework 2.0

  • IIS and ASP.NET

  • WSUS with SP1

Before installing the prerequisites, verify that the server meets the hardware and operating system requirements and that you have installed all critical computer and security updates. As part of the updates, make sure that you have Windows Update Agent 2.0 or later. Windows Update Agent automatically updates itself to the latest versions when you download updates from Microsoft.

In addition, you must synchronize and configure WSUS before installing Client Security on the distribution server.

Install .NET Framework 2.0

To install .NET Framework 2.0

Install IIS and ASP.NET

To install IIS and ASP.NET

  1. Click Start, point to Administrative Tools, and then click Manage Your Server.

  2. In the Manage Your Server window, click Add or Remove a Role.

  3. In the Configure Your Server wizard, click Next.

  4. On the next page, click Application Server (IIS, ASP.NET), and then click Next.

  5. On the next page, select the ASP.NET check box, and then complete the wizard.

Install WSUS with SP1

If you plan to use WSUS to distribute definitions to the client computers, the distribution server will require WSUS 3.0 with SP1 or later. For more information about installing WSUS 3.0 with SP1, see "Step-by-Step Guide to Getting Started" with Microsoft Windows Server Update Services 3.0 (

If you use a proxy server on your network, you can specify the proxy server settings for WSUS after installing it. For more information about configuring proxy server settings, see Configure WSUS to Use a Proxy Server (

To install WSUS

  1. Download and install WSUS 3.0 with SP1 from Windows Server Update Services 3.0 with Service Pack 1 (

  2. On the Windows Server Update Services page, click Install Windows Server Updates Services.

  3. In the File Download - Security Warning dialog box, click Run.

  4. On the first page of the Microsoft Windows Server Update Services Setup wizard, click Next.

  5. On the License Agreement page, click I accept if you accept the license agreement, and then click Next. You must accept the license agreement to complete the installation.

  6. On the Select Update Source page, verify that the Store updates locally check box is selected, and then click Next.

  7. On the Database Options page, choose whether to store the WSUS data on an existing instance of SQL Server or whether to install Microsoft Database Engine, and then click Next. For performance reasons, it is recommended that you use an existing instance of SQL Server.

  8. If you chose to use an existing instance of SQL Server, click Next on the Connecting to SQL Server Instance page.

  9. On the Web Site Selection page, select your Web site preference.

  10. On the same page, record the WSUS management URL and the client configuration URL (you will need this information later), and then click Next.

  11. On the Mirror Update Settings page, verify that the This server should inherit the settings check box is not selected, and then click Next.

  12. On the Ready to Install page, click Next.

  13. On the last page of the wizard, click Finish.

Configure and synchronize WSUS

Before installing Client Security, you must configure and synchronize WSUS.

To configure and synchronize WSUS with SP1

  1. In the WSUS console, click Options, and then click Synchronization Options.

  2. On the Synchronization Options page, under Update Classifications, click Change.

  3. In Add/Remove Classifications, select the Updates check box, and then click OK.


    This setting ensures that WSUS will download the client components for Client Security. Client Security definition updates will be automatically selected as synchronization options when you install the distribution server components of Client Security.

  4. Click Save settings.

  5. To start synchronizing, on the Synchronization Options page, click Synchronize Now.


    The first time you synchronize your WSUS server, it can take several hours.