Example: Deploying Microsoft Forefront Client Security

Introduction

This document describes the process of creating and deploying an install task that deploys "Microsoft Forefront Client Security" through OptiTune.

To deploy Microsoft Forefront Client Security, we will need to create an "Install Task" for this program, and then deploy the install task to one or more computers or groups.

Step by Step

1. We will first create an "Install Task" for Microsoft Forefront Client Security. Start by navigating to "Applications" > "Install Tasks" and click on "Add".

   

2. Download the package creator tool by clicking on "Package Creator Tool", and saving the zip file to your hard drive (e.g. "C:\data\PackageCreator.zip").

3. Unzip the downloaded "PackageCreator.zip" to a local directory, for example "C:\data\package creator".

4. Run the PackageCreator.exe application (e.g. "C:\data\package creator\PackageCreator.exe"), and click "Next" on the welcome screen.

   

5. Enter the name and description you want to use for the package, and click "Next".

   

6. Select the specific Operating Systems you would like to target, and click "Next".
   In this example, we have chosen Windows XP (SP3 or above) through Windows 8, and set it to deploy on either 32-bit or 64-bit systems.

   

7. Copy the installation directory for Microsoft Forefront Client Security to a local folder on your hard drive (e.g. "c:\data\apps\forefront\source").

   

8. Back in the package creator application, specify the following values for your package, and press "Next". You can use the browse icons at the right of each text box for faster entry.

   

   You can also use an alternative location or name for the output file, "forefront.bvx".

9. Select "Msi Product" for the detection method, and either enter the MSI product code as shown (A22989EE-AE7A-42F8-A0C0-9C99CFB644FB). This was retrieved by looking at the Uninstall key in the registry for Microsoft Forefront Client Security. Alternatively, you can use the "Uninstall Key" detection method, if you already have forefront installed on your local machine.

   Click "Next" to start compressing the package.

   

10. Wait for the package creation to complete...

    

11. Once the package has been created, click on the link to view the output package file in windows explorer.

    

12. Copy the ".bvx" file to one or more locations that the client computers have access to. In this example we will copy it to the following locations.

    \\bravurastore\Shared\apps\forefront.bvx
    https://s3.amazonaws.com/acmewidgets/forefront.bvx

    Note that the clients will try to download the package in the order listed, so you typically want to list cheaper or faster locations first. For clients which may not have access to the corporate network, you can list URLs where the clients can obtain the package, as long as they start with "https://".

13. Go back to the OptiTune administration website, and proceed by uploading the manifest created by the package creator. It will be in the same directory as the ".bvx" file, but will have a ".bvxd" extension.

    Click on the "Browse..." button to select the ".bvxd" file, and then click "Upload Manifest".

    

14. Most of the details from the ".bvxd" manifest are entered into the form for you.

    However, you need to enter the locations that you copied the ".bvx" package file in the "Package Locations" text box, one per line:

    

15. On Windows XP systems, Microsoft Forefront Client Security installs a different MSI product (436028CD-6476-4224-9274-8F0320F30FD1) as part of its installation. So, we will add this to the list of installed conditions.

    1. Click on "Edit" next to the "Installed When" label.

       

    2. Select "MSI Product" next to "Add Condition", and click "Add Condition".

    3. Type in 436028CD-6476-4224-9274-8F0320F30FD1 for the MSI product.

    4. Important: Select "Any Exist" for the "Detection" method at the top right.

    5. Click "OK".

16. Click "Save" to save the new Install Task.

17. This will bring you back to the "Install Tasks" page. Click on the checkbox of the task you just created, and click on "Deploy".

    

18. Select the computer or group you wish to deploy the application to, and create a schedule for the deployment. The schedule instructs the OptiTune client when it can try to install the application.

    

19. Click "Save".

20. You are finished. The program will now be deployed to the clients according to the schedule you've defined.