Questions tagged [microsoft-forefront]
Forefront is Microsoft's umbrella brand for Security, Identity and Access Management products. Note: Questions tagged *Forefront* should usually be tagged as something more specific.
66
questions
0
votes
1
answer
3k
views
What do the SFS entries mean in X-Forefront-Antispam-Report?
Is there any explanation to cryptic IDs of Microsoft Exchange SFS results in X-Forefront-Antispam-Report? I can't seem to find any documentation about these and in current format they are 100% useless ...
0
votes
1
answer
2k
views
How to configure password synchronization between two Active Directory Domains with Microsoft Identity Manager PCNS?
I have two domains with a two-ways trust relationship (selective authentication). Microsoft Identity Manager is installed, configured and "Password Change Notification Service" is configured and ...
1
vote
0
answers
154
views
Forefront 2010 (TMG): infinite redirection loop
The behaviour of the internal web server is to detect an incoming request over HTTP and respond with a 301 response to a HTTPS location (for all or only specific URLs), then TMG interferes and the ...
1
vote
2
answers
227
views
Files deleted every day
I have a folder of video files and every day at 10pm, most of the files are deleted leaving just the folder structure.
\Device\HarddiskVolume3\Video_Library\DM\
Users have the folder Video_Library ...
0
votes
0
answers
482
views
How to create user in AD using FIM 2010 Sync Service Only?
I am new to FIM 2010 R2(MIM 2016). I want to create user in AD from my DB. I have DB that contains student information and based on that I want to create user in AD.
I want to perform this action ...
13
votes
3
answers
50k
views
All External Mail to Office 365 Fails SPF, Marked as Junk by EOP in a Hybrid Deployment
In short: legitimate emails are landing in Junk folders as EOP (Exchange Online Protection) stamps email messages as junk (SCL5) and SPF-failed. This happens with all external domains (e.g. gmail.com/...
2
votes
0
answers
24
views
Hosted Exchange and Directory Sync
We're about to host Exchange 2013 for some clients of ours. We have a multi-tenant Exchange environment.
We would like to sync passwords between our Exchange Servers on our AD and the clients AD.
...
12
votes
2
answers
21k
views
Migrate user accounts from Azure AD to on-premise AD?
My company uses Office 365 for Exchange, SharePoint, Lync etc. including the build-in user administration via Azure Active Directory.
Now we want to switch to a local AD on a Windows Server. It shall ...
0
votes
1
answer
376
views
FIM2010 R2 SP1 service account requirements on database after installation
We're in the process of updating our Forefront Identity Manager to 2010 R2 SP1. The SQL Server instance for the old installation has the FIM service account in the sysadmin role, as is required for ...
7
votes
6
answers
13k
views
Acrobat Reader XI addon gets disabled periodically in Internet Explorer within Windows domain
We have a followig problem that happens on new workstations with Windows 7 x64 and Acrobat Reader XI only.
Every few days the following key is automatically added to registry:
HKCU\Software\...
1
vote
0
answers
18
views
Scheduling Forefront Endpoint Protection with SCCM 2007
I just started using SCCM 2007 in our network (replacing the old IT assistant) and I was wondering how to schedule a scan for a group of computers using Forefront Endpoint Protection.
What would be ...
0
votes
1
answer
548
views
Microsoft AV - Do Exclusions Apply to Full Scans or Realtime Protection Only?
The vendor for a new system we're setting up sent us specs for their recommended A/V exclusions. They recommend that we exclude .PDF, .JAR, .BIN, and .DAT files (among others) from real-time scanning....
0
votes
1
answer
696
views
What is the relationship between DirectAccess, Web Application Proxy, and Forefront UAG?
We're exploring the feasibility of deploying DirectAccess to our off-campus laptops as a more seamless alternative to our TS-Gateway server, and I would like to know the benefits and relationship ...
1
vote
0
answers
116
views
How to stop Forefront from blocking my program?
(I'm not sure if this should go on StackOverflow.)
I have a program running at a customer site for ten years now. It takes their data and uses it to fill out web forms. It works by attaching itself ...
1
vote
0
answers
269
views
Microsoft Forefront TMG, IIS and SQL server on one server
We have a Windows 2008 VPS with IIS and SQL Server, hosted by a provider. We use it for hosting web applications on the Internet. The only firewall we can use is Windows firewall. I would like to have ...
0
votes
0
answers
77
views
ForeFront TMG server is removing bits of URL
My ForeFront TMG server is removing window.location.hash from url provided before redirecting user to the default page.
so I have a url like,
www.example.com/sites/default.aspx#id=2342|someTable
...
2
votes
0
answers
360
views
Forefront UAG with SSL/X509 auth for REST API
I'm not a network engeneer, but a software engeneer, so this theme is quite unfamiliar for me. We develop a solution, that consists of a server-side web application (with a rest api), working on java ...
1
vote
3
answers
831
views
SCCM 2012 Virtual Lab
I am building an SCCM 2012 virtual lab and I have about 70% of it completed, but I want to test patching, but I dont want to connect my virtual lab to the production environment to pull patches. My ...
0
votes
0
answers
54
views
Configuring MS forefront for internal network
This is my first foray into MS Forefront and I'm trying to understand UAG better.
I am running a Windows 8 host with 2 VMs:
VM1 is the domain controller (Windows Server 2012, IP 5.5.5.5)
VM2 is the ...
-1
votes
1
answer
921
views
Server infected with Backdoor:Win32/Caphaw.D virus [duplicate]
The virsu hiding all of the folders and replace it with shortcut.
These are the setting in shortcuts.
C:\Windows\system32\cmd.exe /C start cmd.exe /C if exist "\\server\folder\hAoix.NCf" start "" "\\...
1
vote
0
answers
4k
views
Outlook client behind forefront TMG 2010 unable to connect to External Exchange server
Here is my situation. Our office just got sold and we are working on the migration to the new company's environment. Everything has worked fine until the Outlook client's migration.
Our firewall is ...
1
vote
0
answers
578
views
Is there a way to check registry definitions in Forefront on remote systems?
After playing with the script found in This Thread yesterday, I found that the script did exactly what I was looking for. However, I need to run these checks on remote systems on our network. I spent ...
1
vote
1
answer
275
views
SCCM migration to SCCM 2012
I am trying to plan a migration from SCCM 2007 to SCCM 2012. I am unable to find if I can migrate the Forefront from SCCM 2007 in SCCM 2012, or if I will have to uninstall all agents and install new ...
0
votes
1
answer
473
views
Forefront TMG and IIS on one internet gateway server
I have two servers in a datacenter.
One is IIS and another is SQL Server machine. I'd like to install Forefront on a gateway server to make use of "smart" web site publishing and VPN that come with ...
1
vote
1
answer
2k
views
Syntax for file and process exclusions in Forefront Endpoint Protection?
I can't seem to find an official and up-to-date documentation on how to set up file and process exclusions in Forefront Endpoint Protection 2012.
For file types, which of these will work? Are they ...
1
vote
1
answer
208
views
How to stop UAG authenticating requests via LDAP
I want UAG to not authenticate ActiveSync requests before passing them on. I can see that at the moment the requests aren't being passed through because UAG checks with LDAP, which says that the user ...
3
votes
2
answers
1k
views
Does System Center 2012 Endpoint Protection require the use of Configuration Manager?
We have a relatively small organization (~15 users), and have used the ForeFront EndPoint Protection 2010 desktop client without the use of central management, like Configuration Manager.
Now that ...
0
votes
2
answers
2k
views
Setting up a VPN connection before login automatically
Our company's domain controller is located in data center behind the Forefront TMG with a VPN gateway set up.
I want my Windows 7 machines to be able to work in an active directory domain environment....
0
votes
1
answer
1k
views
Accessing domain controller in data center
We used to have a domain controller in our local office network. Now we have moved the servers to data center and the dc is there, behind the forefront TMG firewall.
In order for my office computers ...
-1
votes
1
answer
1k
views
Installing forefront identity manager 2010, need a guide/tutorial
Im trying to install forefront identity manager 2010 (FIM) in my test environment. Since I never done it before I need somekind of help how to do it. I've been trying to find a guide or a video that ...
1
vote
0
answers
166
views
FIM: Put connector space object in metaverse
I am using Forefront Identity Manager and am new to it. I made a simple management Agent and imported some data in the connector space.
I used a "Full Import and Full Synchronisation" Run script.
...
0
votes
1
answer
691
views
Trying to setup Exchange 2010 certificate on TMG
I'm running into a problem here, and I'm positive it's simply that I'm not doing something correct (as opposed to it not working). I have a current Exchange 2007 server setup with a third party cert ...
1
vote
1
answer
3k
views
RDP Certificate Distribution Points
I am receiving the message "Your computer can't connect to the remote computer because the Remote Desktop Gateway's server's certificate has expired or has been revoked" when trying to access a TS ...
1
vote
1
answer
946
views
TMG with client certificates for TS Gateway
How to set up client side certificate authentication using an enterprise CA for a TS gateway via Forefront TMG 2010?
To date I have executed the following:
I have a Terminal Services Gateway ...
1
vote
1
answer
776
views
Secure Skype traffic through Forefront
How can I allow Skype to function correctly with restricted outbound ports, HTTPS inspection and the IE proxy enabled? All the documentation I've come across suggest disabling at least one of these ...
0
votes
2
answers
487
views
Forefront TMG - segregate authenticated traffic
I am running Forefront TMG SP1 rollup 3. All desktop clients will have the Firewall Client installed. Servers will not.
I would like to segregate my outbound network traffic according to traffic ...
1
vote
5
answers
603
views
Cisco 2811 to Forefront - stop broadcast traffic
I recently upgraded from an old ISA to a Forefront box. I'm now receiving a ton of 0xc0040050 errors. The vast majority are to an internal broadcast address - 100.100.100.255. This is a legacy subnet ...
0
votes
2
answers
382
views
Forefront TMG page denied display
Forefront TMG - URL categorization reason not displays although it should be for denied pages.
I have tried all the available checkboxes on the Forefront rule regarding the message displayed with no ...
1
vote
1
answer
2k
views
Main mode SA stopped responding?
I'm having connection problems with a site to site VPN. My site uses Forefront TMG box, the remote site a Cisco VPN concentrator. The connection is dropping frequently.
The only entry that shows up ...
1
vote
1
answer
815
views
789 connecting Forefront VPN
I am receiving event 789 when connecting to my Forefront TMG VPN server from windows 7 clients via L2TP. This does not occur on XP systems. I've run through the debugging at http://blogs.technet.com/b/...
4
votes
2
answers
668
views
Is it hard to set up Microsoft Forefront Endpoint protection?
I have seen that Microsoft Forefront Endpoint protection has pretty decent pricing, although it seems to require a separate System Configuration Manager installed that's quite pricey.
I am currently ...
0
votes
2
answers
134
views
Since MS ForeFront firewall is installed the network is going crazy
a few weeks ago we installed the new MS Forefront Firewall server.
Since that day we have trouble in our network.
example:
a user is trying to visit www.google.com -> his browser opens www.facebook....
0
votes
1
answer
520
views
Exchange online mark email as spam from a legitimate address?
A client of us, working for a college, is using his work email to send us questions regarding a SharePoint implementation we have done. A couple of weeks ago we stopped recieving emails from him and ...
1
vote
1
answer
540
views
Removing ForeFront Client Security and MOM Server - How to repoint managed clients to unmanaged?
Like the title says, how can I remove FCS and MOM and not have the clients wait for updates from the server and go on its own to get updates from Windows Update automatically? Reason for this is we ...
0
votes
1
answer
208
views
Hostname change not reflected in MOM 2005
So I have a bit of a weird thing here. I was testing Forefront with MOM 2005 and WSUS and ran into a problem. One of the computers I was testing with had to be re-imaged due to a failed SP update. ...
1
vote
1
answer
32k
views
Forefront TMG Proxy blocking internal HTTP requests for FQDN
I have Forefront TMG installed as a proxy server. However, whenever I make HTTP requests to servers on the Internal network with a fully qualified DNS name, the proxy denies the connection.
Denied ...
2
votes
3
answers
4k
views
Forefront TMG 2010: Can you monitor realtime TCP connections and bandwidth on a per-user basis?
I'm just starting a trial of ForeFront TMG to use as a proxy server.
I know I can get a real time activity monitor and filter on a per user basis, but would like to be able to get a real time ...
0
votes
1
answer
320
views
Forefront TMG - URL Overrides - how long does it take for them to come into play?
Adding a URL to a category seems seems to take an age, somewhere along the lines of 3 to 4 hours.
Is this normal behaviour?
Could someone tell me what is the default length of time that it takes ...
2
votes
0
answers
526
views
How does ForeFront UAG implement single sign-on?
One feature of Forefront is the ability to pre-authenticate external users before their requests are sent to a published web application. In addition, it is supposed to be able to forward the ...
3
votes
1
answer
4k
views
Limiting bandwidth of workstations in MS Forefront TMG
We have configured Microsoft forefront TMG 2010 Enterprise as the cache server which provides internet access for all computers in our department.
Is there any way to limit download speed per host/...