Recommended exclusions for Endpoint Security and VirusScan Enterprise on a Windows Domain Controller with Active Directory or File Replication Service / Distributed File System Replication

Technical Articles ID: KB57308
Last Modified: 5/29/2020

Environment

McAfee Endpoint Security (ENS) Threat Prevention 10.x
McAfee VirusScan Enterprise (VSE) 8.x

Microsoft Windows Server - all supported versions

For details of VirusScan Enterprise supported platforms, see KB51111.

Summary

List of exclusions needed for a Windows Domain Controller with Active Directory or File Replication Service / Distributed File System Replication:
To ensure compatibility with a Windows Domain Controller with Active Directory or File Replication Service (FRS) / Distributed File System Replication (DFSR), exclude the locations recommended by Microsoft for File Level scanners in the on-access scanner for ENS or VSE. For the most accurate list of file exclusions, refer to the following Microsoft TechNet article: https://social.technet.microsoft.com/wiki/contents/articles/953.microsoft-anti-virus-exclusion-list.aspx. Within the TechNet article, go to the "Windows / Active Directory" section and click the article link for the version of Windows Server in use in your environment.

How to configure exclusions in ENS or VSE:
When you configure exclusions, always apply the principle that the more precise the exclusion, the smaller the potential security risk. For instructions to configure exclusions, refer to the following documentation:

For ENS, see the "Configuring exclusions" section of the Endpoint Security 10.5 Product Guide.
For VSE, see the following:
- KB66909 – Consolidated list of Endpoint Security/VirusScan Enterprise exclusion articles
- KB55898 – Understanding VirusScan Enterprise Exclusions
- KB67544 – How to create low-risk and high-risk process exclusions for VirusScan Enterprise 8.x in ePolicy Orchestrator
- KB50998 – How to manage file and folder exclusions in VirusScan Enterprise 8.x using wildcards
- KB61000 – VirusScan Enterprise exclusions and hardware paths (physical address versus logical address)

Affected Products

Configuration
Endpoint Security Threat Prevention 10.5.x
VirusScan Enterprise 8.8

Languages:

This article is available in the following languages:

German
English United States
Spanish Spain
French
Italian
Japanese
Korean
Dutch
Portuguese Brasileiro
Chinese Simplified
Chinese Traditional

Glossary of Technical Terms

Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.

Recommended exclusions for Endpoint Security and VirusScan Enterprise on a Windows Domain Controller with Active Directory or File Replication Service / Distributed File System Replication

Environment

Summary

Affected Products

Languages:

Glossary of Technical Terms

Title

Title

Featured Solutions:Draft for New Nav

Explore Our Portfolio

Security Outcomes

Industries

Products

Featured Solutions

Explore Our Portfolio

MVISION Products

Services & Training

Threat Research

Our Researchers

Threat Landscape Dashboard

Tools

Contact Us

Resources

Downloads

Product Help

Connect with Us

Explore

Our Company

Our Efforts

Other Resources

Careers

Partnerships

Recommended exclusions for Endpoint Security and VirusScan Enterprise on a Windows Domain Controller with Active Directory or File Replication Service / Distributed File System Replication

Environment

Summary

Affected Products

Languages:

Glossary of Technical Terms

Choose your region

Title

Title