Configure the File Transfer Server

Once a server with IIS is identified for use, deploy the agent to the server if it is not yet a MOM agent. Once completed, create a virtual directory for holding the MSSecure.cab file by following these steps:

1. Open the Internet Information Services (IIS) Manager.

2. Connect to the server to be used to host the virtual directory.

3. Drill down to the server name, expand Web Sites, and select Default Web Site.

4. On the Default Web Site, right-click. From the extended menu, select New Virtual Directory. This launches the Virtual Directory Creation Wizard. Click Next to begin.

5. When prompted for the Alias name, type MBSA. Click Next.

6. The Agent installation creates a path on every agent in the directory of \Program Files\Microsoft Operations Manager 2005\Downloaded Files\<Management Group Name>. Supply this for the path. Click Next.

7. At the Virtual Directory Access Permissions window, make sure only Read is checked, as illustrated in Figure 10-1. Click Next.

   
   Figure 10-1

8. Click Finish at the last window.

Now with the virtual directory created, grant access to the Internet Guest Account. Remember that at this point, the only granted permissions are "Read."

1. Navigate to the directory used in Step 6 from the preceding list.

2. View the properties of the <Management Group Name> directory.

3. Choose the Security tab and click Add.

4. Under Select this object type, you should see the Users, Groups, or Built-in security principals option. If not, select Object Types and choose Users at a minimum.

5. For From this location, click the Locations option. At the top of the dialog box, the File Transfer server name should be listed. Select the server name and click OK.

6. In the "Enter the object names to select" section, type IUSR_<File Transfer server name> and select Check Names. When the object is found, it should resolve the name. Click OK to continue.

   Note

   IUSR_<File Transfer server name> should be the name of the computer. If the computer name is FTPServer , for example, the account name would look like IUSR_FTPServer.

7. By default, the Internet Guest Account is granted the following permissions:

   • Read & Execute

   • List Folder Contents

   • Read

8. Remove or add any rights necessary to match the permissions listed above. Click OK to complete.

Configure the MBSA Management Pack

The following steps are required to configure the MBSA Management Pack:

1. In the Administrator Console, navigate to Management Packs/Computer Groups.

2. Select the Computer Group name "MBSA File Transfer Server." Right-click the Computer Group and select Properties.

3. There is no formula-or search-based membership in this Computer Group. Associate the File Transfer server to the Computer Group by selecting the Included Computers tab. Add in the File Transfer server and click OK.