Can't understand the huge gap between OneCare and Forefront. OneCare is practically unmanagable in order to protect users who don't understand security, and Forefront can only be managed by purchasing a $3,000 server-based management console. This leaves out tens of thousands of small businesses in the 10 - 30 workstation range.
OneCare would be very suitable if I could control its actions. It seems that everytime I have gotten OneCare under control where it wasn't upsetting my users it "upgraded" itself and started back to being a royal pain. Why should they ever be asked to log into Live ID with some account they have never heard of? I handle IT here and have records of all Live ID accounts and licenses. Why should they ever be asked about "circles" when all machines are members of our Active Directory domain? And the list goes on.
If I could control OneCare via a custom administrative template that I could distribute through group policy it would be perfect, but apparently that doesn't exist. Forefront is controlled via group policy but the administrative template is created by the expensive server component! However, someone could easily post the administrative template for those of us who want to install Forefront in "standalone" mode and still configure it through Active Directory.
Can't control OneCare, can't control Forefront unless you fork over $3,000. Guess what? I'm an MCSE and would much rather stick with a Microsoft solution but you guys are driving me to the competition.
