Anti-Virus Exclusions and You!

So there is some amount of confusion on what exclusions are needed for various Microsoft products.  This blog is not necessarily meant to be a definitive list, but is a compilation, a list, of KB articles that point to the various products and their individual guidance on AV exclusions.

A special shout-out to Aaron Ellison for compiling this list internally!  Go team PFE!

(social wiki has a dynamic list that may be more updated here: 


Enterprise Configuration Recommendations:

http://support.microsoft.com/kb/822158

Forefront Configuration:

http://support.microsoft.com/kb/943556

Forefront:

http://support.microsoft.com/kb/943620

http://technet.microsoft.com/en-us/library/cc707727.aspx

Windows / Active Directory: 

http://support.microsoft.com/kb/822158

http://support.microsoft.com/kb/837932

FRS: 

http://support.microsoft.com/kb/815263

SQL:
http://support.microsoft.com/kb/309422

IIS:
http://support.microsoft.com/kb/821749
http://support.microsoft.com/kb/817442

DHCP:
http://support.microsoft.com/kb/927059

SCOM / MOM:

http://support.microsoft.com/kb/975931

Hyper-V:

http://support.microsoft.com/default.aspx/kb/961804

http://support.microsoft.com/kb/2628135

Exchange:

http://support.microsoft.com/kb/328841

http://support.microsoft.com/kb/823166

http://support.microsoft.com/kb/245822

http://technet.microsoft.com/en-us/library/bb332342(EXCHG.80).aspx

http://technet.microsoft.com/en-us/library/bb332342.aspx

Cluster:

http://support.microsoft.com/kb/250355

SharePoint:

http://support.microsoft.com/kb/320111
http://support.microsoft.com/kb/322941

SMS:

http://support.microsoft.com/kb/327453

ISA:

http://support.microsoft.com/kb/887311

WSUS:

http://support.microsoft.com/kb/900638

SBS:

http://support.microsoft.com/kb/885685

DPM:

technet.microsoft.com/…/bb808691.aspx

Dynamics CRM:

http://community.dynamics.com/product/crm/crmtechnical/b/crminthefield/archive/2011/01/24/anti-virus-exclusions-for-microsoft-dynamics-crm.aspx

Hope this helps with your configurations!

 

Cheers,
Jeff

7 Comments

  1. @Brian – Treat this like a DC in terms of exclusions I am told, as the Certificate Service is another ESE engine.  Specifically you might want to exclude the transaction logs located at "C:windowssystem32certlog" by default.  Shout out to Sean Ivey for this tidbit by the way!

  2. Are there any antivirus exclusions for Microsoft Certificate Services, specifically on an Enterprise CA?

  3. Anyone have any recommendations for Windows Storage Server 2008?

Comments are closed.