Microsoft KB Archive Search

Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

  1. Home
  2. You cannot deploy a Forefront Server Security Management Console agent to a Forefront Security for Exchange Server-based server that is running Windows Server 2008

You cannot deploy a Forefront Server Security Management Console agent to a Forefront Security for Exchange Server-based server that is running Windows Server 2008

View products that this article applies to.

Symptoms

You cannot deploy a Microsoft Forefront Server Security Management Console (FSSMC) agent to a Microsoft Forefront Security for Exchange Server-based server that is running Windows Server 2008. Additionally, you receive the following error message:
Server.Name.Domain.com
Error Failed to deploy the Agent. Reason: "The RPC server is unavailable." error creating the PushInstaller on server Server.Name.Domain.com using the Domain\\UserName account credential.

↑ Back to the top

Cause

This problem occurs because the Windows Server 2008 firewall prevents FSSMC from deploying configuration settings, hotfixes, rollup packages, and service packs.

↑ Back to the top

Workaround

To work around this problem, follow these steps:
  1. On the remote server, click Start, point to Administrative Tools, and then click Windows Firewall with Advanced Security.

    If you are prompted for an administrator password or for confirmation, type the password, or click Continue.
  2. In Windows Firewall with Advanced Security, click Inbound Rules.
  3. On the Action menu, click New Rule.
  4. In the New Inbound Rule Wizard, follow these steps:
    1. Click the Custom option, and then click Next.
    2. Click the All Programs option, and then click Next.
    3. On the Protocol and Ports page, leave the default settings, and then click Next.
    4. Under Which local IP addresses does this rule match, select the These IP Addresses option.
    5. Click Add to insert the local IP address of the Forefront Security for Exchange-based server or the Forefront Security for SharePoint-based server into the This IP Address or Subnet box, and then click OK.
    6. Under Which Remote IP Addresses does this rule match, select the These IP Addresses option.
    7. Click Add to insert the FSSMC IP address into the This IP Address or Subnet box, and then click OK.
    8. On the Scope page, click Next.
    9. On the Action page, leave the default Allow the Connection option, and then click Next.
    10. On the Profile page, leave the default check marks for Domain, for Private, and for Public, and then click Next.
    11. Type the rule name in the Name box, type the description in the Description box, and then click Finish. For example, use "FSSMC Deployment Agent" for the rule name, and use "Firewall rule to allow successful deployment of the FSSMC Agent" for the description.
  5. In Windows Firewall with Advanced Security, click Inbound Rules, and then make sure that your rule is present.

    Note You may have to update the window to see the new rule.
  6. On the server that is running the FSSMC, open the FSSMC.
  7. Click Servers.
  8. On the Manage Servers page, click Add Servers.
  9. On the Add Servers page, type the name of the server on which you configured the firewall rule, click Verify, and then click Add Servers.
  10. On the Manage Servers page, click Deploy Agent.
  11. Type the user name and the password that are required for the installations, and then click Continue. A Status window provides installation details.
  12. When the Status window displays �Agent Installed" and when the Details pane displays �Done," click Close.
  13. On the remote server, click Start, type firewall.cpl in the Start Search box, and then click firewall.cpl in the Programs list.

    If you are prompted for an administrator password or for confirmation, type the password, or click Continue.
  14. Click Allow a program through Windows Firewall.
  15. In the Windows Firewall Settings dialog box, click the Exceptions tab, and then click Add program.
  16. In the Add a Program dialog box, click Browse.
  17. In the Browse dialog box, locate the "drive:\Program Files\Microsoft\FSSMC DeploymentAgent-10.5.1241.0" folder, click the DeploymentAgent.exe file, and then click OK.
  18. In the Add a Program dialog box, click OK.
  19. On the Exceptions tab of the Windows Firewall Settings dialog box, make sure that the DeploymentAgent.exe check box is selected, and then click OK.
  20. On the remote server, click Start, point to Administrative Tools, and then click Windows Firewall with Advanced Security.

    If you are prompted for an administrator password or for confirmation, type the password, or click Continue.
  21. In Windows Firewall with Advanced Security, click Inbound Rules.
  22. In the Inbound Rules pane, right-click the rule that is created in the previous steps, and then click Disable Rule. For example, right-click FSSMC Deployment Agent, and then click Disable Rule.

↑ Back to the top

Keywords: KB950957, kbprb, kbtshoot, kbexpertiseadvanced

↑ Back to the top

Article Info
Article ID : 950957
Revision : 1
Created on : 5/20/2008
Published on : 5/20/2008
Exists online : False
Views : 196