How to Install ForeFront Protection 2010 for Exchange Servers


Prepared by Ian Matthews Written April 20, 2010, Last Updated April 21, 2010
NOTE: This is MY cookbook for ForeFront 2010 installs and you should use with caution.�
As usual my instructions are provided without warrenty or guarentee of any sort.

So you have installed your Exchange 2007 or 2010 server and you want to get the latest Microsoft AntiVirus and AntiSpam running.  Well, it isn’t hard but it is completely different from AntiGen or ForeFront 9 or 10.  Lets get to it:

  1. Run Windows Update and patch everything
  2. Manually stop all Microsoft Exchange services now using Services Control Manager.
  3. Insert the Forefront disk or just start the Forefront install .exe/.msi from where ever you have it
  4. Click through the obvious screens and select ENABLE ANTISPAM when prompted
    Forefront 2010 for Exchange - Enable AntiSpam
  5. The first time Forefront starts it takes a minute… so don’t sweat it!
    Forefront 2010 for Exchange - Startup
  6. Be carefull NOT to install the ONLINE version after you install the LOCAL version of Forefront (unless you already have an account with a Forefront provider)
    Forefront 2010 for Exchange - Install Forefront Online
  7. You will be prompted to enter your licence key when Forefront starts up. Note that if you are using a TechNet/MSDN version of Forefront, your CD Key will give you three years of coverage and you do NOT need to enter a licence key.
    Forefront 2010 for Exchange - Licence KeyOpen the Forefront Protection Administration Console.
  8. In the Policy Management view, in the Global Settings – Engine Options pane, click Update All Engines Now
    Forefront 2010 for Exchange - Initial Update
  9. Wait a few minutes for engines to update.
  10. Start all Microsoft Exchange services using the Service Control Manager.
  11. I would (and did) set notifications on a number of items.
    Forefront 2010 for Exchange - How to Set NotificationsBelow are are a few screen shots of other items I changed from their defaults.
  12. Forefront 2010 for Exchange - Stamp Header  Forefront 2010 for Exchange - Malware to Dynamic 2010 for Exchange - How to Process .RAR and .ZIP 
  13. By this time your Engine Updates should be complete and you might want to look at the status of all of the engines:

Forefront 2010 for Exchange - How to Check the Engine Status / Summary

And that is about it! 

Every once in a while you should check your MONITORING, SERVER SECURITY VIEWS, FILTERING DETAILS and QUARENTINE to see what up.

Don’t be surprised to see your Outlook JUNK MAIL folder go to zero items.  Microsofts internal numbers are ONE peice of spam for each mailbox every THREE YEARS.  You won’t get that number, but so far it has been working very well for me.


  1. Avatar
    Free Wordpress Themes September 22, 2010 at 3:59 pm

    Genial fill someone in on and this mail helped me alot in my college assignement. Thank you seeking your information.

Questions or Comments?