How to update your Forefront Client Security deployment share

Microsoft recently created up to date Forefront Client Security installation packages. According to KB976669 these are only available within WSUS. So at least existing installs can get the latest version of the client via WSUS. But what about newly installed clients? Why should we have to install an out of date 2007 version and then do an update just to get the latest client. I want the latest version installed right at the beginning dammit!!!

Well there’s a way of finding the install files if you’re prepared to crawl the WSUS SQL database.

Here are the direct links to the install files with their associated language and architecture.

fcsclientpackage language 2052 x64
fcsclientpackage language 1028 x64
fcsclientpackage language 1033 x64 English
fcsclientpackage language 1040 x64 Italian
fcsclientpackage language 3082 x64
fcsclientpackage language 1041 x64 Japanese
fcsclientpackage language 1031 x64 German
fcsclientpackage language 1042 x64
fcsclientpackage language 1036 x64 French
fcsclientpackage language 1033 x86 English
fcsclientpackage language 2052 x86
fcsclientpackage language 1028 x86
fcsclientpackage language 1041 x86 Japanese
fcsclientpackage language 1040 x86 Italian
fcsclientpackage language 3082 x86
fcsclientpackage language 1031 x86 German
fcsclientpackage language 1042 x86
fcsclientpackage language 1036 x86 French

Basically download the one/s you want and extract to a folder by using /extract
You will then have a folder with the files you should use to overwrite your FCS deployment share.

Of course it’s possible these links might change, in which case you will have to crawl WSUS yourself. The secret is to query the dbo.tbFile table for a value like %fcsclientpackage% in the FileName column. Reasonably easy when you know what to look for 🙂