You are currently offline, waiting for your internet to reconnect

A hotfix is available to resolve two problems with the Forefront Client Security Management Server

This article has been archived. It is offered "as is" and will no longer be updated.
You experience the following symptoms when you are using Microsoft Forefront Client Security.

Symptom 1

In an environment that has many managed client computers, you request an on-demand scan from the Forefront Client Security Dashboard. However, the client computers take many hours to receive the scan request and to start the scan.

During this period, the ScanNow button on the Forefront Client Security Dashboard remains unavailable. Additionally, the following notification appears in the notification list:
Preparing to scan all managed computers

Symptom 2

When the Forefront Client Security Management Service tries to import the anti-malware signatures into the Microsoft SQL OnePoint database, you experience one of the following problems:
  • The import operation fails, and an event that resembles the following is logged in the System event log:

    Event Type: Error
    Event Source: FcsMs
    Event Category: None
    Event ID: 10002
    Date: Date
    Time: Time
    User: N/A
    Computer: Computer
    Description:The Management Server Service failed to import the updated antimalware definition.

    Result code: 0x8007007a
    Connection string:
    Provider=SQLOLEDB.1;Integrated Security=SSPI;Persist Security Info=False;Initial Catalog=OnePoint;Data Source=Computer;Use Procedure for Prepare=1;Auto Translate=True;Packet Size=4096;Workstation ID=Computer;Use Encryption for Data=False;Tag with column collation when possible=False

  • The Category Overrides drop-down list in the Forefront Client Security Dashboard contains incorrect items.

Cause 1

Symptom 1 occurs because Forefront Client Security calls each computer individually to run the scan when Forefront Client Security sends a scan request. In addition, Forefront Client Security calls the Anti-malware (AM) scan and the Security State Assessment (SSA) scan as separate tasks. After you apply this hotfix, the individual scan requests are handled in batches to increase performance.

Cause 2

Symptom 2 occurs because of the number of characters in various entries that are in the signatures files. After you apply this hotfix, the entries are truncated to 64 characters.

Hotfix information

To resolve this problem, apply the Forefront Client Security Management server hotfix that is described in the following Microsoft Knowledge Base article:
940060 A hotfix is available that resolves several symptoms in Forefront Client Security Management Server

Hotfix replacement information

This hotfix has been replaced by hotfix 940060.
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
More information
For more information, click the following article number to view the article in the Microsoft Knowledge Base:
824684 Description of the standard terminology that is used to describe Microsoft software updates
fcs On-demand scan 10002 overrides signature FCS

Article ID: 936729 - Last Review: 01/16/2015 15:59:35 - Revision: 6.0

Microsoft Forefront Client Security

  • kbnosurvey kbarchive kbexpertiseinter kbbug kbfix kbqfe fep2010swept KB936729