Discussion on:

Four ways to deploy and manage Microsoft Forefront Endpoint Protection 2010

Deployed this using MOM and a MS supplied script. Not the best product and integration with MOM was troublesome. Reporting was sketchy and innacurate although the poduct itself seemed to work ok. Now removed in favour of Sophos Endpoint which doesn't require SCCM to deploy and manage.

....for small to mid-sized networks. The cost and complexity of SCCM and SCOM are just not worth it, and the manual / AD install options don't provide central reporting. We were a long-time Forefront user but switched to Symantec Endpoint Protection last month because of these issues.