Troubleshooting FCS Definition Update Issues

Here are a few steps you can perform to troubleshoot the Forefront Client Security (FCS) definition update issues:

1. Make sure Widnows Automatic Updates service (wuauser) is running.
2. FCS creates the following registry key on the clients. If there is no such registry key, it means FCS will get definition from Microsoft Update website.

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"WUServer"=<http://WSUSServerName>
"WUStatusServer"="<http://WSUSServerName>"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"NoAutoUpdate"=dword:00000000
"AUOptions"=dword:00000003
"UseWUServer"=dword:00000001

3.     All the Automatic Updates logs are located in  %Windir%\WindowsUpdate.log.  http://support.microsoft.com/?id=902093
4.     Try these options to update the FCS definition manually: http://portal.sivarajan.com/2010/04/forefront-client-security-fcs.html
5.     Use these options to install FCS agents: http://portal.sivarajan.com/2010/05/installing-forefront-client-security.html

Posted in: ForeFront,Forefront Client Security