So there is some amount of confusion on what exclusions are needed for various Microsoft products. This blog is not necessarily meant to be a definitive list, but is a compilation, a list, of KB articles that point to the various products and their individual guidance on AV exclusions.
A special shout-out to Aaron Ellison for compiling this list internally! Go team PFE!
(social wiki has a dynamic list that may be more updated here:
Enterprise Configuration Recommendations:
http://support.microsoft.com/kb/822158
Forefront Configuration:
http://support.microsoft.com/kb/943556
Forefront:
http://support.microsoft.com/kb/943620
http://technet.microsoft.com/en-us/library/cc707727.aspx
Windows / Active Directory:
http://support.microsoft.com/kb/822158
http://support.microsoft.com/kb/837932
FRS:
http://support.microsoft.com/kb/815263
SQL:
http://support.microsoft.com/kb/309422
IIS:
http://support.microsoft.com/kb/821749
http://support.microsoft.com/kb/817442
DHCP:
http://support.microsoft.com/kb/927059
SCOM / MOM:
http://support.microsoft.com/kb/975931
Hyper-V:
http://support.microsoft.com/default.aspx/kb/961804
http://support.microsoft.com/kb/2628135
Exchange:
http://support.microsoft.com/kb/328841
http://support.microsoft.com/kb/823166
http://support.microsoft.com/kb/245822
http://technet.microsoft.com/en-us/library/bb332342(EXCHG.80).aspx
http://technet.microsoft.com/en-us/library/bb332342.aspx
Cluster:
http://support.microsoft.com/kb/250355
SharePoint:
http://support.microsoft.com/kb/320111
http://support.microsoft.com/kb/322941
SMS:
http://support.microsoft.com/kb/327453
ISA:
http://support.microsoft.com/kb/887311
WSUS:
http://support.microsoft.com/kb/900638
SBS:
http://support.microsoft.com/kb/885685
DPM:
technet.microsoft.com/…/bb808691.aspx
Dynamics CRM:
Hope this helps with your configurations!
Cheers,
Jeff
@Brian – Treat this like a DC in terms of exclusions I am told, as the Certificate Service is another ESE engine. Specifically you might want to exclude the transaction logs located at "C:windowssystem32certlog" by default. Shout out to Sean Ivey for this tidbit by the way!
You can add DPM in as well :
technet.microsoft.com/…/bb808691.aspx
Are there any antivirus exclusions for Microsoft Certificate Services, specifically on an Enterprise CA?
Anyone have any recommendations for Windows Storage Server 2008?
How about the Microsoft Dynamics line of Enterprise Software? I found a link for Dynamics CRM:
community.dynamics.com/…/anti-virus-exclusions-for-microsoft-dynamics-crm.aspx
Anyone have any info for Dynamics AX? (AX 2009)
Great stuff Jeff!
Another one for Hyper-V / SCVMM:
support.microsoft.com/…/2628135
Includes one entry not included in the existing Hyper-V article