Resources For IT Professionals
Post an article
Wikis - Page Details
  • First published by (Microsoft)
  • When: 14 Apr 2010 9:27 AM
  • Last revision by (aMicrosof)
  • When: 25 Oct 2010 10:09 AM
  • Revisions: 5
  • Comments: 2
Options
RSSSubscribe to Article (RSS)
Can You Improve This Article?
Positively! Click Sign In to add the tip, solution, correction or comment that will help other users.

Report inappropriate content using these instructions.
Wiki  >  TechNet Articles  >  Forefront Icon Disappeared from the System Tray

Forefront Icon Disappeared from the System Tray

Forefront Icon Disappeared from the System Tray

This typically occurs when a client update occurs.

Example with the recent update KB979536

  • KB is approved for install on WSUS
  • FCS Client makes WUA API call to detect/download/install any FCS updates (this includes both signatures and client updates)
  • The user for this process is not the logged on user
  • The update for the client is downloaded and installed in the context of the system account, as part of the install the service is stopped and the process associated with the tray icon is terminated (msascui.exe).  The system account does not have a good method of spawning msascui.exe back into the logged on user(s) desktop session(s) and thus you end up with no GUI icon after an upgrade.

Things to be aware of:

  • The client is still protected, the FCSAM service will still be running and if you have it configured RTP is enabled and protecting the system
  • You can restart the user process msascui.exe by clicking on Start>All Programs>Microsoft Forefront>Forefront Client Security
  • The next time the user logs off/on the user process will be restarted normally as well
  • Check for MsMpEng.exe in Task Manager under the Processes tab, this will confirm FCS is still running despite the missing icon from the system tray.
, , [Edit tags]
Leave a Comment
  • Please add 7 and 1 and type the answer here:
  • Post
Wiki - Revision Comment List(Revision Comment)
Sort by: Published Date | Most Recent | Most Useful
Comments
  • 25 Oct 2010 10:09 AM

    Ed Price MSFT edited Revision 3. Comment: Minor title update. Cleaned up and added tags.

  • 14 Apr 2010 11:01 AM

    Sean Jenkin MSFT edited Revision 1. Comment: Updating title to be more specific to forefront

Page 1 of 1 (2 items)
Wikis - Comment List
Sort by: Published Date | Most Recent | Most Useful
Posting comments is temporarily disabled until 10:00am PST on Saturday, December 14th. Thank you for your patience.
Comments
  • Posted by
    on 14 Apr 2010 11:01 AM

    Sean Jenkin MSFT edited Revision 1. Comment: Updating title to be more specific to forefront

  • Posted by
    on 25 Oct 2010 10:09 AM

    Ed Price MSFT edited Revision 3. Comment: Minor title update. Cleaned up and added tags.

Page 1 of 1 (2 items)