How to Install ForeFront Protection 2010 for Exchange Servers

Prepared by Ian Matthews Written April 20, 2010, Last Updated April 21, 2010
NOTE: This is MY cookbook for ForeFront 2010 installs and you should use with caution.�
As usual my instructions are provided without warrenty or guarentee of any sort.

So you have installed your Exchange 2007 or 2010 server and you want to get the latest Microsoft AntiVirus and AntiSpam running.  Well, it isn’t hard but it is completely different from AntiGen or ForeFront 9 or 10.  Lets get to it:

1. Run Windows Update and patch everything
2. Manually stop all Microsoft Exchange services now using Services Control Manager.
3. Insert the Forefront disk or just start the Forefront install .exe/.msi from where ever you have it
4. Click through the obvious screens and select ENABLE ANTISPAM when prompted
   
5. The first time Forefront starts it takes a minute… so don’t sweat it!
   
6. Be carefull NOT to install the ONLINE version after you install the LOCAL version of Forefront (unless you already have an account with a Forefront provider)
   
7. You will be prompted to enter your licence key when Forefront starts up. Note that if you are using a TechNet/MSDN version of Forefront, your CD Key will give you three years of coverage and you do NOT need to enter a licence key.
   Open the Forefront Protection Administration Console.
8. In the Policy Management view, in the Global Settings – Engine Options pane, click Update All Engines Now
   
9. Wait a few minutes for engines to update.
10. Start all Microsoft Exchange services using the Service Control Manager.
11. I would (and did) set notifications on a number of items.
    Below are are a few screen shots of other items I changed from their defaults.
12.      
13. By this time your Engine Updates should be complete and you might want to look at the status of all of the engines: