Use ConfigMgr and FEP 2010 Group Policy Tool together to manage FEP Policy

Some customers may use both Configuration Manager and FEP 2010 Group Policy Tool (https://www.microsoft.com/download/en/details.aspx?id=13088) to manage FEP Client settings, you may find the following issues:

You create a FEP policy in Configuration Manager UI and apply it to one client. However, the client doesn’t apply the settings you defined in that policy, but set to some other values.

This could be happen if there is also a domain Group Policy is targeted on this client. The setting deployed through CM channel will be save as local policy and it will always be overwritten by the domain group policy if there is. (Domain Group Policy always wins over local policy).

There’s one tricky thing you need to know: there is an issue with how GPEdit deal with string value. So the setting “Define the order of sources for downloading definition updates” always shows “Not configured” even if you have configured. This setting maps to the “Clients will pull updates from the selected sources in order specified below (from top to bottom):” settings in CM UI.

 

To make sure you have really disabled this setting. Edit the setting, click “Enable” and make sure in Options, the text box “Define the order of sources for downloading definition updates” is empty. Then check “Not Configure” and Apply.