Dude where's my PFE?

I am a Premier Field Engineer (PFE) for Microsoft.

Anti-Virus Exclusions and You!

Anti-Virus Exclusions and You!

  • Comments 7
  • Likes

So there is some amount of confusion on what exclusions are needed for various Microsoft products.  This blog is not necessarily meant to be a definitive list, but is a compilation, a list, of KB articles that point to the various products and their individual guidance on AV exclusions.

A special shout-out to Aaron Ellison for compiling this list internally!  Go team PFE!

(social wiki has a dynamic list that may be more updated here: 


Enterprise Configuration Recommendations:

http://support.microsoft.com/kb/822158

Forefront Configuration:

http://support.microsoft.com/kb/943556

Forefront:

http://support.microsoft.com/kb/943620

http://technet.microsoft.com/en-us/library/cc707727.aspx

Windows / Active Directory: 

http://support.microsoft.com/kb/822158

http://support.microsoft.com/kb/837932

FRS: 

http://support.microsoft.com/kb/815263

SQL:
http://support.microsoft.com/kb/309422

IIS:
http://support.microsoft.com/kb/821749
http://support.microsoft.com/kb/817442

DHCP:
http://support.microsoft.com/kb/927059

SCOM / MOM:

http://support.microsoft.com/kb/975931

Hyper-V:

http://support.microsoft.com/default.aspx/kb/961804

http://support.microsoft.com/kb/2628135

Exchange:

http://support.microsoft.com/kb/328841

http://support.microsoft.com/kb/823166

http://support.microsoft.com/kb/245822

http://technet.microsoft.com/en-us/library/bb332342(EXCHG.80).aspx

http://technet.microsoft.com/en-us/library/bb332342.aspx

Cluster:

http://support.microsoft.com/kb/250355

SharePoint:

http://support.microsoft.com/kb/320111
http://support.microsoft.com/kb/322941

SMS:

http://support.microsoft.com/kb/327453

ISA:

http://support.microsoft.com/kb/887311

WSUS:

http://support.microsoft.com/kb/900638

SBS:

http://support.microsoft.com/kb/885685

DPM:

technet.microsoft.com/.../bb808691.aspx

Dynamics CRM:

http://community.dynamics.com/product/crm/crmtechnical/b/crminthefield/archive/2011/01/24/anti-virus-exclusions-for-microsoft-dynamics-crm.aspx

Hope this helps with your configurations!

 

Cheers,
Jeff

Comments
  • You can add DPM in as well :

    technet.microsoft.com/.../bb808691.aspx

  • Are there any antivirus exclusions for Microsoft Certificate Services, specifically on an Enterprise CA?

  • @Brian - Treat this like a DC in terms of exclusions I am told, as the Certificate Service is another ESE engine.  Specifically you might want to exclude the transaction logs located at "C:\windows\system32\certlog" by default.  Shout out to Sean Ivey for this tidbit by the way!

  • Anyone have any recommendations for Windows Storage Server 2008?

  • How about the Microsoft Dynamics line of Enterprise Software? I found a link for Dynamics CRM:

    community.dynamics.com/.../anti-virus-exclusions-for-microsoft-dynamics-crm.aspx

    Anyone have any info for Dynamics AX? (AX 2009)

  • Great stuff Jeff!

  • Another one for Hyper-V / SCVMM:

    support.microsoft.com/.../2628135

    Includes one entry not included in the existing Hyper-V article

Your comment has been posted.   Close
Thank you, your comment requires moderation so it may take a while to appear.   Close
Leave a Comment