List of exclusions needed for a Windows Domain Controller with Active Directory or File Replication Service / Distributed File System Replication:
To ensure compatibility with a Windows Domain Controller with Active Directory or File Replication Service (FRS) / Distributed File System Replication (DFSR), exclude the locations recommended by Microsoft for File Level scanners in the On-Access Scanner for ENS/VSE. For the most accurate list of file exclusions, refer to the following Microsoft Technet article:
https://social.technet.microsoft.com/wiki/contents/articles/953.microsoft-anti-virus-exclusion-list.aspx. Within the Technet article, go to the "Windows / Active Directory" section and click the article link for the version of Windows Server in use in your environment.
How to configure exclusions in ENS/VSE:
When configuring exclusions, always apply the principle that the more precise the exclusion, the smaller the potential security risk. For instructions to configure exclusions, refer to the following documentation:
- ENS: "Configuring exclusions" section of the Endpoint Security 10.5 Product Guide (PD26799)
- VSE:
- KB66909 - Consolidated list of Endpoint Security/VirusScan Enterprise exclusion articles
- KB55898 - Understanding VirusScan Enterprise Exclusions
- KB67544 - How to create low-risk and high-risk process exclusions for VirusScan Enterprise 8.x in ePolicy Orchestrator
- KB50998 - How to manage file and folder exclusions in VirusScan Enterprise 8.x using wildcards
- KB61000 - VirusScan Enterprise exclusions and hardware paths (physical address versus logical address)
