I have a server that is Server 2008 x64. It has the client for Microsoft Forefront Client Security installed. It has been showing that it needed to update the client, but every time I told it to run, it would fail.
I found this in the Application log:
Application ‘C:\Program Files\Microsoft Forefront\Client Security\Client\Antimalware\MSASCui.exe’ (pid 3304) cannot be restarted – Application SID does not match Conductor SID..
And this in the update history:
Update for Microsoft Forefront Client Security (KB956280)
Installation date: 3/25/2009 2:23 PM
Installation status: Failed
Error details: Code 643
Update type: Important
This patch updates the Microsoft Forefront Client Security Anti-Malware Agent.
I started to do a little bit of searching on the “Application SID does not match Conductor SID..” and saw that it comes from the restart manager. With that nugget of info, I went and stopped all the Forefront services, and ran the update again:
Update for Microsoft Forefront Client Security (KB956280)
Installation date: 3/25/2009 2:33 PM
Installation status: Successful
Update type: Important
This patch updates the Microsoft Forefront Client Security Anti-Malware Agent.