Sunday, April 27, 2008

FYI a handy list: What exclusions should I use for Antivirus software with SBS 2003?

 
Note: This is missing SQL exclusions.
 
 
Title:
What exclusions should I use for Antivirus software with SBS 2003?
FAQ Answer:
This question is asked regardless of the AV software that you use.  Below I've compiled the standard exclusions that you should use for SBS 2003.  These are the ones that we use on our clients.
 
Server Folder Exclusions
The exclusions listed here should be applied to your SBS server, and where applicable to other servers that host similar applications in your domain.
 
 
Exchange related Exclusions
First up you need to be aware, that the default installation of CSM for SMB v3.0 will exclude the Exchange database folders from file level scanning.  Therefore I am NOT recommending including these in your exclusions.  However there are some other Exchange related exclusions that you need to add to ensure that things operation smoothly.
 
Listed below are the items and their default locations - your installation may be different.
 
Exchange Server Database = C:\Program Files\Exchsrvr\Mdbdata  (see note above)
Exchange MTA files = C:\Program Files\Exchsrvr\Mtadata  
Exchange Message tracking log files = C:\Program Files\Exchsrvr\server_name.log  
Exchange SMTP Mailroot = C:\Program Files\Exchsrvr\Mailroot  
Exchange working files = C:\Program Files\Exchsrvr\Mdbdata  
Site Replication Service (not normally used in SBS but should be excluded anyway) = C:\Program Files\Exchsrvr\srsdata  
C:\Program Files\Exchsrvr\Conndata  
 
IIS related Exclusions
IIS System Files = C:\WINDOWS\system32\inetsrv
IIS Compression Folder = C:\WINDOWS\IIS Temporary Compressed Files
 
Domain Controller related exclusions
Active Directory database files = C:\WINDOWS\NTDS
SYSVOL C:\WINDOWS\SYSVOL
NTFRS Database Files = C:\WINDOWS\ntfrs
 
Windows SharePoint Services
Temporary SharePoint space = C:\windows\temp\Frontpagetempdir
 
Additional Exclusions
Removable Storage Database (used by SBS Backup) = C:\Windows\System32\ntmsdata
SBS POP3 connector Failed Mail = C:\Program Files\Microsoft Windows Small Business Server\Networking\POP3\Failed Mail
SBS POP3 connector Incoming Mail = C:\Program Files\Microsoft Windows Small Business Server\Networking\POP3\Incoming Mail
Windows Update Store = C:\WINDOWS\SoftwareDistribution\DataStore
DHCP Database Store = C:\WINDOWS\system32\dhcp
WINS Database Store = C:\WINDOWS\system32\wins
 
 
Desktop Folder Exclusions
These folders need to be excluded in the desktops and notebooks clients.
 
Windows Update Store = C:\WINDOWS\SoftwareDistribution\DataStore
 

______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email
______________________________________________________________________

No comments: