subscribe to the RSS Feed

Friday, September 3, 2010

Forefront Client Security: The SHV for Forefront Client Security does not run and the NAP clients are quarantined if there are no active users logged on to the Network Policy Server (NPS)

By TechSupport


SUPPORT PROBLEM: The SHV for Forefront Client Security does not run and the NAP clients are quarantined if there are no active users logged on to the Network Policy Server (NPS)

Applications Supported:

COPYRIGHT NOTICE: (c) 2007 Microsoft Corporation. All rights reserved.

SUPPORT SOLUTION:
Consider the following scenario:
You install the system health validator (SHV) for Microsoft Forefront Client Security on a Network Policy Server (NPS).Note The SHV for Forefront Client Security runs by using the interactive user account.You log off the Network Policy Server or restart the Network Policy Server.Note There are no other active users logged on to the Network Policy Server.In this scenario, the SHV for Forefront Client Security does not run. Additionally, the following error is added to the Access Services log on the Network Policy Server:Microsoft Forefront Client Security System Health ValidatorNonCompliantNo DataServer Component 0×80270007
When this issue occurs, the NAP clients may state the following:This computer complies with the security requirements. Fix is not needed.However, these NAP clients are quarantined for noncompliance if the following conditions are true:The NAP policy uses the system health agent (SHA) for Forefront Client Security.The NAP enforcement mode is set for the NAP clients.A policy that sets restricted network access for the noncompliant NAP clients is configured.Note When the NAP policy uses the option for a delayed quarantine, the NAP clients receive a message that they will be quarantined in delayed_days days if they do not resolve the issue. The delayed_days placeholder represents a value that is configured through the NAP policy..To resolve this issue, apply this hotfix on both the Network Policy Servers that have the SHV for Forefront Client Security installed and on the NAP clients that have the SHA for Forefront Client Security installed..Hotfix information
2, ‘resolution’);
A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing the problem described in this article. This hotfix might receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next software update that contains this hotfix.If the hotfix is available for download, there is a “Hotfix download available” section at the top of this Knowledge Base article. If this section does not appear, contact Microsoft Customer Service and Support to obtain the hotfix. Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft Web site: http://support.microsoft.com/contactus/?ws=support
(http://support.microsoft.com/contactus/?ws=support)
Note The “Hotfix download available” form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.Prerequisites
3, ‘resolution’);
There are no prerequisites for installing this hotfix. However, you have to uninstall any earlier installed version of the SHV for Forefront Client Security or of the SHA for Forefront Client Security before you install this hotfix. Restart requirement
3, ‘resolution’);
You do not have to restart the computer after you apply this hotfix.Hotfix replacement information
3, ‘resolution’);
This hotfix does not replace a previously released hotfix.File information
3, ‘resolution’);
The global version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel. Forefront Client Security SHV, 32-bit versions
4, ‘resolution’);
Collapse this tableExpand this tableFile nameFile versionFile sizeDateTimePlatformFcsnapshv.dll1.0.1727.393,59207-Feb-201019:04×86Fcsnapshvdlg.dll1.0.1727.361,33607-Feb-201019:04×86Fcsnapshvdlglauncher.dll1.0.1727.343,41607-Feb-201019:04×86Forefront Client Security SHV, 64-bit versions
4, ‘resolution’);
Collapse this tableExpand this tableFile nameFile versionFile sizeDateTimePlatformFcsnapshv.dll1.0.1727.3100,76007-Feb-201014:25×64Fcsnapshvdlg.dll1.0.1727.371,06407-Feb-201014:25×64Fcsnapshvdlglauncher.dll1.0.1727.351,09607-Feb-201014:25×64Forefront Client Security SHA, 32-bit versions
4, ‘resolution’);
Collapse this tableExpand this tableFile nameFile versionFile sizeDateTimePlatformFcsnapsha.exe1.0.1727.349,56007-Feb-201019:04×86Fcsnapshainfo.dll1.0.1727.384,88807-Feb-201019:04×86Forefront Client Security SHA, 64-bit versions
4, ‘resolution’);
Collapse this tableExpand this tableFile nameFile versionFile sizeDateTimePlatformFcsnapsha.exe1.0.1727.354,16807-Feb-201014:25×64Fcsnapshainfo.dll1.0.1727.389,49607-Feb-201014:25×64.Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the “Applies to” section..

For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:

824684 

(http://support.microsoft.com/kb/824684/
)

Description of the standard terminology that is used to describe Microsoft software updates

.

For File Repair and Data Recovery, visit File Repair / Data Recovery