Anti-Virus Exclusions and You!


So there is some amount of confusion on what exclusions are needed for various Microsoft products.  This blog is not necessarily meant to be a definitive list, but is a compilation, a list, of KB articles that point to the various products and their individual guidance on AV exclusions.

A special shout-out to Aaron Ellison for compiling this list internally!  Go team PFE!

(social wiki has a dynamic list that may be more updated here: 


Enterprise Configuration Recommendations:

http://support.microsoft.com/kb/822158

Forefront Configuration:

http://support.microsoft.com/kb/943556

Forefront:

http://support.microsoft.com/kb/943620

http://technet.microsoft.com/en-us/library/cc707727.aspx

Windows / Active Directory: 

http://support.microsoft.com/kb/822158

http://support.microsoft.com/kb/837932

FRS: 

http://support.microsoft.com/kb/815263

SQL:
http://support.microsoft.com/kb/309422

IIS:
http://support.microsoft.com/kb/821749
http://support.microsoft.com/kb/817442

DHCP:
http://support.microsoft.com/kb/927059

SCOM / MOM:

http://support.microsoft.com/kb/975931

Hyper-V:

http://support.microsoft.com/default.aspx/kb/961804

http://support.microsoft.com/kb/2628135

Exchange:

http://support.microsoft.com/kb/328841

http://support.microsoft.com/kb/823166

http://support.microsoft.com/kb/245822

http://technet.microsoft.com/en-us/library/bb332342(EXCHG.80).aspx

http://technet.microsoft.com/en-us/library/bb332342.aspx

Cluster:

http://support.microsoft.com/kb/250355

SharePoint:

http://support.microsoft.com/kb/320111
http://support.microsoft.com/kb/322941

SMS:

http://support.microsoft.com/kb/327453

ISA:

http://support.microsoft.com/kb/887311

WSUS:

http://support.microsoft.com/kb/900638

SBS:

http://support.microsoft.com/kb/885685

DPM:

technet.microsoft.com/…/bb808691.aspx

Dynamics CRM:

http://community.dynamics.com/product/crm/crmtechnical/b/crminthefield/archive/2011/01/24/anti-virus-exclusions-for-microsoft-dynamics-crm.aspx

Hope this helps with your configurations!

 

Cheers,
Jeff

Comments (7)

  1. Anonymous says:

    @Brian – Treat this like a DC in terms of exclusions I am told, as the Certificate Service is another ESE engine.  Specifically you might want to exclude the transaction logs located at "C:windowssystem32certlog" by default.  Shout out to Sean Ivey for this tidbit by the way!

  2. Brian says:

    Are there any antivirus exclusions for Microsoft Certificate Services, specifically on an Enterprise CA?

  3. Exclusions for Windows Storage Server 2008 says:

    Anyone have any recommendations for Windows Storage Server 2008?

  4. Saul says:

    How about the Microsoft Dynamics line of Enterprise Software? I found a link for Dynamics CRM:

    community.dynamics.com/…/anti-virus-exclusions-for-microsoft-dynamics-crm.aspx

    Anyone have any info for Dynamics AX? (AX 2009)

  5. Benny Lakunishok says:

    Great stuff Jeff!

  6. Chris Hill says:

    Another one for Hyper-V / SCVMM:

    support.microsoft.com/…/2628135

    Includes one entry not included in the existing Hyper-V article