There is an update available for Forefront Client Security that could, potentially, result in less help desk phone calls for existing and future deployments. You will want to look into
KB 940060.
Why less support calls? Mainly due to a change in "end-user notification when allowing an application that is blocked by default" and the fact that the FCS icon will
no longer turn red for the user when the program has been marked by the Administrator to be "ignored".
Real world example: Numerous places use VNC everyday to administer pre-XP machines. VNC by default, the last I checked, gets marked as a suspicious program by FCS and Windows Defender. Most IT admins that are using VNC do not want their FCS icon to be red all the time, even though they have specifically set VNC to 'ignore'.
In a nutshell, this update fixes that issue plus a few others!
You can read more in-depth analysis about the update from the FCS guys
here and read the actual KB article
here.