You cannot deploy a Forefront Server Security Management Console agent to a Forefront Security for Exchange Server-based server that is running Windows Server 2008

Posted in Commerce Server 2007, Microsoft Exchange Server, Microsoft SQL Server, Windows Defender, Windows Server 2008, Windows Server 2008 - HowTo, Windows Server 2008 - Tips | No Comments »

You cannot deploy a Forefront Server Security Management Console agent to a Forefront Security for Exchange Server-based server that is running Windows Server 2008
View products that this article applies to.
Article ID : 950957
Last Review : May 20, 2008
Revision : 1.0

SYMPTOMS

You cannot deploy a Microsoft Forefront Server Security Management Console (FSSMC) agent to a Microsoft Forefront Security for Exchange Server-based server that is running Windows Server 2008. Additionally, you receive the following error message:
Server.Name.Domain.com
Error Failed to deploy the Agent. Reason: The RPC server is unavailable. error creating the PushInstaller on server Server.Name.Domain.com using the Domain UserName account credential.

Back to the top

CAUSE

This problem occurs because the Windows Server 2008 firewall prevents FSSMC from deploying configuration settings, hotfixes, rollup packages, and service packs.

Back to the top

WORKAROUND

To work around this problem, follow these steps:
1. On the remote server, click Start, point to Administrative Tools, and then click Windows Firewall with Advanced Security.

User If you are prompted for an administrator password or for confirmation, type the password, or click Continue.
2. In Windows Firewall with Advanced Security, click Inbound Rules.
3. On the Action menu, click New Rule.
4. In the New Inbound Rule Wizard, follow these steps:
a. Click the Custom option, and then click Next.
b. Click the All Programs option, and then click Next.
c. On the Protocol and Ports page, leave the default settings, and then click Next.
d. Under Which local IP addresses does this rule match, select the These IP Addresses option.
e. Click Add to insert the local IP address of the Forefront Security for Exchange-based server or the Forefront Security for SharePoint-based server into the This IP Address or Subnet box, and then click OK.
f. Under Which Remote IP Addresses does this rule match, select the These IP Addresses option.
g. Click Add to insert the FSSMC IP address into the This IP Address or Subnet box, and then click OK.
h. On the Scope page, click Next.
i. On the Action page, leave the default Allow the Connection option, and then click Next.
j. On the Profile page, leave the default check marks for Domain, for Private, and for Public, and then click Next.
k. Type the rule name in the Name box, type the description in the Description box, and then click Finish. For example, use FSSMC Deployment Agent for the rule name, and use Firewall rule to allow successful deployment of the FSSMC Agent for the description.
5. In Windows Firewall with Advanced Security, click Inbound Rules, and then make sure that your rule is present.

Note You may have to update the window to see the new rule.
6. On the server that is running the FSSMC, open the FSSMC.
7. Click Servers.
8. On the Manage Servers page, click Add Servers.
9. On the Add Servers page, type the name of the server on which you configured the firewall rule, click Verify, and then click Add Servers.
10. On the Manage Servers page, click Deploy Agent.
11. Type the user name and the password that are required for the installations, and then click Continue. A Status window provides installation details.
12. When the Status window displays “Agent Installed and when the Details pane displays “Done, click Close.
13. On the remote server, click Start, type firewall.cpl in the Start Search box, and then click firewall.cpl in the Programs list.

User If you are prompted for an administrator password or for confirmation, type the password, or click Continue.
14. Click Allow a program through Windows Firewall.
15. In the Windows Firewall Settings dialog box, click the Exceptions tab, and then click Add program.
16. In the Add a Program dialog box, click Browse.
17. In the Browse dialog box, locate the drive: Program Files Microsoft FSSMC DeploymentAgent-10.5.1241.0 folder, click the DeploymentAgent.exe file, and then click OK.
18. In the Add a Program dialog box, click OK.
19. On the Exceptions tab of the Windows Firewall Settings dialog box, make sure that the DeploymentAgent.exe check box is selected, and then click OK.
20. On the remote server, click Start, point to Administrative Tools, and then click Windows Firewall with Advanced Security.

User If you are prompted for an administrator password or for confirmation, type the password, or click Continue.
21. In Windows Firewall with Advanced Security, click Inbound Rules.
22. In the Inbound Rules pane, right-click the rule that is created in the previous steps, and then click Disable Rule. For example, right-click FSSMC Deployment Agent, and then click Disable Rule.

Back to the top


APPLIES TO
• Microsoft Forefront Server Security Management Console
• Windows Server 2008 Datacenter without Hyper-V
• Windows Server 2008 Enterprise without Hyper-V
• Windows Server 2008 Standard without Hyper-V
• Windows Server 2008 Datacenter
• Windows Server 2008 Enterprise
• Windows Server 2008 Standard
• Windows Server 2008 for Itanium-Based Systems

Back to the top

Keywords: 
 kbexpertiseadvanced kbtshoot kbprb KB950957

Back to the top

 

Microsoft Knowledge Base Article

This article contents is Microsoft Copyrighted material.
Microsoft Corporation. All rights reserved. Terms of Use | Trademarks

Related Articles or Pages

You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

AddThis Social Bookmark Button

Leave a Reply

*
To prove that you're not a bot, enter this code
Anti-Spam Image

Additional Articles From "Commerce Server 2007"

«
»