Anti-Virus Exclusions and You!

So there is some amount of confusion on what exclusions are needed for various Microsoft products.  This blog is not necessarily meant to be a definitive list, but is a compilation, a list, of KB articles that point to the various products and their individual guidance on AV exclusions.

A special shout-out to Aaron Ellison for compiling this list internally!  Go team PFE!

(social wiki has a dynamic list that may be more updated here: 


Enterprise Configuration Recommendations:

http://support.microsoft.com/kb/822158

Forefront Configuration:

http://support.microsoft.com/kb/943556

Forefront:

http://support.microsoft.com/kb/943620

http://technet.microsoft.com/en-us/library/cc707727.aspx

Windows / Active Directory: 

http://support.microsoft.com/kb/822158

http://support.microsoft.com/kb/837932

FRS: 

http://support.microsoft.com/kb/815263

SQL:
http://support.microsoft.com/kb/309422

IIS:
http://support.microsoft.com/kb/821749
http://support.microsoft.com/kb/817442

DHCP:
http://support.microsoft.com/kb/927059

SCOM / MOM:

http://support.microsoft.com/kb/975931

Hyper-V:

http://support.microsoft.com/default.aspx/kb/961804

http://support.microsoft.com/kb/2628135

Exchange:

http://support.microsoft.com/kb/328841

http://support.microsoft.com/kb/823166

http://support.microsoft.com/kb/245822

http://technet.microsoft.com/en-us/library/bb332342(EXCHG.80).aspx

http://technet.microsoft.com/en-us/library/bb332342.aspx

Cluster:

http://support.microsoft.com/kb/250355

SharePoint:

http://support.microsoft.com/kb/320111
http://support.microsoft.com/kb/322941

SMS:

http://support.microsoft.com/kb/327453

ISA:

http://support.microsoft.com/kb/887311

WSUS:

http://support.microsoft.com/kb/900638

SBS:

http://support.microsoft.com/kb/885685

DPM:

technet.microsoft.com/…/bb808691.aspx

Dynamics CRM:

http://community.dynamics.com/product/crm/crmtechnical/b/crminthefield/archive/2011/01/24/anti-virus-exclusions-for-microsoft-dynamics-crm.aspx

Hope this helps with your configurations!

 

Cheers,
Jeff

7 Comments

  1. @Brian – Treat this like a DC in terms of exclusions I am told, as the Certificate Service is another ESE engine.  Specifically you might want to exclude the transaction logs located at "C:windowssystem32certlog" by default.  Shout out to Sean Ivey for this tidbit by the way!

Leave a Reply