Remember to do the following on your 2008 and Vista machines when deploying ForeFront Client Security.

1. Create a firewall rule with these settings:
       Name: MOM 2005 MsMgmtAuxiliary
       Program: %systemdrive%\A286B00A-C3DE-414F-A96A-2BD238948D88\MsMgmtAuxiliary.exe
       Profile: Domain
       Scope: Remote IP: IP address of FCS Server.
2. Enable and set the Remote Registry service to Automatic.
3. If installing the client on a DC:
   1. Add the Action Account to the Admnistrators and Performance Montiors Users groups.
   2. Grant the Action Account the Log on Locally and Manage Auditing and Security Log rights in the Default Domain Controller Security Policy.