The FEP BPA includes checks to scan both Forefront Endpoint Protection (FEP) and Configuration Manager for configuration problems, missing dependencies, incorrect settings, or other issues that could adversely affect the health of your FEP installation.

  1. Download and install The Microsoft Baseline Configuration Analyzer Version 2.0 (MBCA).
  2. MBCA requires Windows PowerShell 2.0.  It’s included in Windows Server 2008 R2 but must be installed for Windows Server 2008 or Windows Server 2003.
  3. Download and install the FEP BPA.  There’s one for x86 and one for x64.
  4. Run FEP MBCA checks on the ConfigMgr server FEP is installed on.


Start the application.


Make sure you choose FEP 2010 for your product.


It’s running.


Below are my results.


Below are more of my results.


The first example is expected for my lab environment.  I have the ConfigMgr agents check in every 5 minutes.  In a real world environment this would be way too often.  The default is 60 minutes.

The second example is expected for my lab environment.  I don’t have any alerts setup yet. 


So there you have it.  Let a tool tell you what’s wrong!