Microsoft Anti-Virus Exclusion List

Microsoft Anti-Virus Exclusion List

One place on the web where you can find an updated list of ALL the AV exclusions you might want to configure for Windows Server. Feel free to add to the list, it is the wiki way!

HINT: Subscribe to the RSS feed for this wiki page to get auto-notification when it is updated!

Enterprise Configuration Recommendations:

Windows: 

  • KB822158 Virus scanning recommendations for Enterprise computers that are running currently supported versions of Windows

Windows / Active Directory: 

Cluster:

Hyper-V, System Center Virtual Machine Manager (SCVMM):

Virtual PC / Virtual Server:

Forefront: Considerations when using antivirus software on FF Edge Products

FRS:

SQL:

IIS:

DHCP:

SCOM / MOM:

Configuration Manager 2007:

Configuration Manager 2012:

Exchange:

SharePoint:

 

Team Foundation Server 2010/2012/2013:

Dynamics CRM:  

SMS

ISA:

Windows Update:

WSUS (Windows Server Update Services):

SBS:

 MED-V

System Center:

Data Protection Manager:

App-V

Lync 2010
Dynamics AX

        For versions up to AX 2009 exclude:
  1. All the AOD, AOI, ADD, ADI, KHD & KHI files, or
  2. alternatively, the whole application folder

       See for instance:        http://blogs.msdn.com/b/czdaxsup/archive/2010/05/13/ax-application-files-locked-by-another-process.aspx

Note: Doing this helps make sure that the files are not locked when the AOS must use them. However, if these files become infected, your antivirus software will not be able to detect the infection.
   
BizTalk Server
See recommendations in BizTalk performance optimization guides:

Mentioned executables used by BizTalk includes EntSSO.exe, MSDTC.exe, BTSNTSvc.exe, BTSNTSvc64.exe, SQLServr.exe, but also others as IIS, Customer WCF services, MSMQ, Rule Engine, SQL Agent, SSIS, SSNS and other applications used in integration scenarios.



Other great compilations

 

Leave a Comment
  • Please add 4 and 4 and type the answer here:
  • Post
Wiki - Revision Comment List(Revision Comment)
Sort by: Published Date | Most Recent | Most Useful
Comments
  • Travis Plunk [MSFT] edited Revision 27. Comment: Wsusscan.cab and Wsusscn2.cab  are related to windows update and not WSUS

  • Jeff Patterson - MSFT edited Revision 25. Comment: Added link to App-V AV KB.  

  • Ed Price - MSFT edited Revision 21. Comment: White space

  • Ed Price - MSFT edited Revision 19. Comment: I'm going to Format Town. I'll send you a postcard.

Page 3 of 3 (24 items) 123
Wikis - Comment List
Sort by: Published Date | Most Recent | Most Useful
Posting comments is temporarily disabled until 10:00am PST on Saturday, December 14th. Thank you for your patience.
Comments
  • GoonCommando edited Revision 61. Comment: List is not specific to "Windows" but to all Microsoft products so I renamed the list to accurately reflect that

  • Will this site be updated with the latest technologies soon (SharePoint 2013, Exchange 2013)?

  • What about exclusion for System Center 2012 Orchestrator?

  • Perfect!! Really helpful..!!

  • Excellent List!

  • Balaji M Kundalam edited Revision 66. Comment: Updated a link

  • Richard Mueller edited Revision 68. Comment: Changed tag "w2k8r2" to "Windows Server 2008 R2"

  • msbrian1 edited Revision 69. Comment: Added link to AV Exclusion document in "Other great compilations" section

Page 3 of 3 (38 items) 123