Solved

Anti-virus exclusions clarification

Posted on 2013-11-07
6
864 Views
Last Modified: 2013-12-02
Hello,

In MS kb article http://support.microsoft.com/kb/822158 it says:

"•      Turn off scanning of files in the FRS Preinstall folder that is in the following location:
Replica_root\DO_NOT_REMOVE_NtFrs_PreInstall_Directory
The Preinstall folder is always open when FRS is running. "

Does anyone know where this file is located in Windows 2008 Server?  I cannot seem to find it.

It also says:

"The same resources that are excluded for a SYSVOL replica set must also be excluded when FRS or DFSR is used to replicate shares that are mapped to the DFS root and link targets on Windows Server 2008 R2-based, Windows Server 2008-based, Windows Server 2003-based, or Windows 2000-based member computers or domain controllers. "

It doesn't say where these will be.  Any ideas?  I have Sophos endpoint security 10.3 that I want to install, but the KB article has a lot of exclusions I have to input and is for multiple versions of Server 200x.
0
Comment
Question by:soadmin
  • 3
  • 3
6 Comments
 
LVL 53

Expert Comment

by:Will Szymkowski
ID: 39630988
This is a hidden folder. It location is below...

Show Hidden Folders
- Open Windows Explorer
- Press the Alt button
- Click Tools, Folder Options
- Click the View Tab
- Show hidden files and folders is checked
*Make sure that the following entries are unchecked...
- Hide Extensions for known file types
- Hide Protected Operating system files

Path Location below
\\computername\c$\sysvol\sysvol\domain.com\

Will.
0
 

Author Comment

by:soadmin
ID: 39631016
Hello,

Is this for the "Replica_root\DO_NOT_REMOVE_NtFrs_PreInstall_Directory" ?  Or the DFS Location?

sysvol\somain\ contents
0
 
LVL 53

Expert Comment

by:Will Szymkowski
ID: 39631071
That is correct. I am assuing you are using 2008 domain. You can exclude this folder. Typically you would exclude the entire sysvol folder.

Will.
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 

Author Comment

by:soadmin
ID: 39631104
So will excluding this folder take care of both my questions?  I'm still unsure of what question your comment answers.  I just want to make sure the dfsr replication between my two servers is not messed up from AV scans.
0
 

Author Comment

by:soadmin
ID: 39631105
Yes, 2008 domain.
0
 
LVL 53

Accepted Solution

by:
Will Szymkowski earned 500 total points
ID: 39631113
If you exclude the entire sysvol folder will answer both questions.

Will.
0

Featured Post

Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

OfficeMate Freezes on login or does not load after login credentials are input.
In-place Upgrading Dirsync to Azure AD Connect
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question