To ensure compatibility with SCOM, exclude the locations recommended by Microsoft in the on-access scanner for ENS and VSE. For the most accurate list of exclusions, see the following Microsoft TechNet article: https://social.technet.microsoft.com/wiki/contents/articles/953.microsoft-anti-virus-exclusion-list.aspx. Within the TechNet article, go to the "SCOM" section and click the article links for the version of SCOM in use in your environment.

How to configure exclusions in ENS or VSE:
When you configure exclusions, always apply the principle that the more precise the exclusion, the smaller the potential security risk. For instructions to configure exclusions, see the following documentation:

• ENS: "Preventing Threat Prevention from blocking trusted programs, networks, and services" section of the Endpoint Security Threat Prevention Product Guide.
• VSE:
  • KB66909 - Consolidated list of Endpoint Security/VirusScan Enterprise exclusion articles
  • KB55898 - Understanding VirusScan Enterprise Exclusions
  • KB67544 - How to create low-risk and high-risk process exclusions for VirusScan Enterprise 8.x in ePolicy Orchestrator
  • KB50998 - How to manage file and folder exclusions in VirusScan Enterprise 8.x using wildcards
  • KB61000 - VirusScan Enterprise exclusions and hardware paths (physical address versus logical address)