Repair Forefront Security for Exchange Server
Updated: February 13, 2009
Applies To: Windows SBS 2008
Problem One or more of the following:
On the Home tab of the Windows SBS Console, in Network Essentials Summary, the Security status is Critical.
On the Reports tab, the Security status is Error.
On the Security tab, the Virus protection for e-mail status is Critical.
On the Reports tab, in Other Alerts, there are one or more problems that are associated with Forefront Security for Exchange Server.
Solution Do the following.
Verify that the following services are running. If any of them are not running, restart them. For instructions about how to verify whether a service is running and to restart it, see the procedure “To verify that a service is running,” later in this topic.
FSCController
FSCMonitor
FSCStatisticsService
FSEMailPickup
Microsoft Exchange Active Directory Topology Service
Microsoft Exchange Anti-spam Update
Microsoft Exchange File Distribution
Microsoft Exchange Information Store
Microsoft Exchange Mail Submission
Microsoft Exchange Mailbox Assistants
Microsoft Exchange Replication Service
Microsoft Exchange Search Indexer
Microsoft Exchange Service Host
Microsoft Exchange System Attendant
Microsoft Exchange Transport Log Search
Determine whether you have Internet connectivity: In the Windows SBS Console, click Network, click Connectivity, and then verify that the Internet Connection status is Connected. If it is not connected, click Fix my network, and then complete the wizard. If the problem still exists, run fscdiag.exe to collect the needed support logs, and then contact your Windows SBS 2008 support professional or Microsoft Product Support.
To run fscdiag.exe
Right-click Start, and then click Explore.
Navigate to C:\Program Files (x86)\Microsoft Forefront Security\Exhange Server.
Right-click fscdiag.exe, and then click Run as Administrator.
On the User Account Control page, click Continue.
When the application is complete, a log directory is located at C:\Program Files (x86)\Microsoft Forefront Security\Exchange Server\log\Diagnostics. To verify that a service is running
Click Start, click Administrative Tools, and then click Services.
On the User Account Control page, click Continue.
In the Services (Local) list, find the service that you want to verify, and then check its status. If it is stopped or paused, restart it by right-clicking it and then clicking Restart.
Manual repair of Forefront Security for Exchange Server
To manually repair Forefront Security for Exchange Server, do the following:
Reinstall Forefront Security for Exchange Server.
Apply the Microsoft Forefront Security for Exchange Server software update.
Configure Forefront Security for Exchange Server on your server that is running Windows SBS 2008. This ensures that Forefront Security for Exchange Server has the recommended settings for Windows SBS 2008.
To reinstall Forefront Security for Exchange Server
On the server that is running Windows SBS 2008, click Start, click Control Panel, and then click Programs and Features.
Click Microsoft Forefront Security for Exchange Server, and then click Uninstall.
On the User Account Control page, click Continue.
Insert Windows Small Business Server Disc 2 (Component Technologies for Server Repair) into the server.
Change the directory to cmpnents\fss.
Double-click setup.exe.
On the User Account Control page, click Continue.
On the Forefront Security for Exchange Welcome page, click Next.
Click Yes if you accept the license agreement.
Type your customer information, and then click Next.
Verify that Full Installation is selected, and then click Next.
Verify that Secure Mode is selected, and then click Next.
On the Engine selection page, click Next.
On the Engine Updates Required information page, click Next.
On the Proxy Server page, click Next.
On the Choose Destination Location page, click Next.
On the Select Program Folder page, click Next.
On the Start Copying Files page, click Next.
You might be prompted to restart one or more services. If you are, click Next, and then, when the services are restarted, click Next again.
Click Finish to complete the installation.
To confirm that the installation is successful, open the Windows SBS Console, click the Security tab, and then, in Security Essentials, verify that Virus protection for e-mail is listed and that Source shows Forefront Security for Exchange Server.
To apply the Microsoft Forefront Security for Exchange Server software update
Insert Windows Small Business Server Disc 2 (Component Technologies for Server Repair) into the server.
Change the directory to cmpnents\fss.
Right-click resetclientsid.exe.
On the User Account Control page, click Allow.
Note
The installation finishes without a confirmation page.
To configure Microsoft Forefront Security for Exchange Server on the server
Click Start, in Start Search, type cmd, and then press ENTER.
Change the directory to c:\program files (x86)\Microsoft Forefront Security\Exchange Server.
Type
FSCStarter.exe tlscfn C:\Program Files\Windows Small Business Server\Data\SBSForefrontTemplate.fdb, and then press ENTER.Open the Forefront Security for Exchange Administrator console: Click Start, click All Programs, click Microsoft Forefront Server Security, expand Exchange Server, and then click Forefront Server Security Administrator.
On the User Account Control page, click Continue.
Connect to the server that is running Windows SBS 2008.
On the License Information dialog box, click OK.
In Settings, click General Options, and then apply the settings as follows:
| Scanning | Setting |
|---|---|
Scan on Scanner Update |
Enabled (check box selected) |
Scan Doc Files as Containers - Manual |
Enabled (check box selected) |
Scan Doc Files as Containers - Transport |
Enabled (check box selected) |
Scan Doc Files as Containers - Realtime |
Enabled (check box selected) |
Transport Process Count |
2 |
Realtime Process Count |
2 |
| Background Scanning | Setting |
|---|---|
Enable background scan if ‘Scan on Scanner Update’ Enabled |
Disabled (check box cleared) |
Click Save.
Click Operate, and then click Schedule Job.
Verify that VSAPI Background Scan Job is Enabled, that the Frequency is set to Daily, and that Time is set to 04:00:00. If they are, close the Forefront Security for Exchange Administrator console. If they are not, change them, click Save, and then close the Forefront Security for Exchange Administrator console.
To read the most recent version of this topic, see the Microsoft Web site (https://go.microsoft.com/FWLink/?LinkID=147057). The most recent version might contain additional information that was not available when Windows SBS 2008 was released.