Solved

Anti-virus exclusions clarification

Posted on 2013-11-07
6
854 Views
Last Modified: 2013-12-02
Hello,

In MS kb article http://support.microsoft.com/kb/822158 it says:

"•      Turn off scanning of files in the FRS Preinstall folder that is in the following location:
Replica_root\DO_NOT_REMOVE_NtFrs_PreInstall_Directory
The Preinstall folder is always open when FRS is running. "

Does anyone know where this file is located in Windows 2008 Server?  I cannot seem to find it.

It also says:

"The same resources that are excluded for a SYSVOL replica set must also be excluded when FRS or DFSR is used to replicate shares that are mapped to the DFS root and link targets on Windows Server 2008 R2-based, Windows Server 2008-based, Windows Server 2003-based, or Windows 2000-based member computers or domain controllers. "

It doesn't say where these will be.  Any ideas?  I have Sophos endpoint security 10.3 that I want to install, but the KB article has a lot of exclusions I have to input and is for multiple versions of Server 200x.
0
Comment
Question by:soadmin
  • 3
  • 3
6 Comments
 
LVL 53

Expert Comment

by:Will Szymkowski
ID: 39630988
This is a hidden folder. It location is below...

Show Hidden Folders
- Open Windows Explorer
- Press the Alt button
- Click Tools, Folder Options
- Click the View Tab
- Show hidden files and folders is checked
*Make sure that the following entries are unchecked...
- Hide Extensions for known file types
- Hide Protected Operating system files

Path Location below
\\computername\c$\sysvol\sysvol\domain.com\

Will.
0
 

Author Comment

by:soadmin
ID: 39631016
Hello,

Is this for the "Replica_root\DO_NOT_REMOVE_NtFrs_PreInstall_Directory" ?  Or the DFS Location?

sysvol\somain\ contents
0
 
LVL 53

Expert Comment

by:Will Szymkowski
ID: 39631071
That is correct. I am assuing you are using 2008 domain. You can exclude this folder. Typically you would exclude the entire sysvol folder.

Will.
0
Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

 

Author Comment

by:soadmin
ID: 39631104
So will excluding this folder take care of both my questions?  I'm still unsure of what question your comment answers.  I just want to make sure the dfsr replication between my two servers is not messed up from AV scans.
0
 

Author Comment

by:soadmin
ID: 39631105
Yes, 2008 domain.
0
 
LVL 53

Accepted Solution

by:
Will Szymkowski earned 500 total points
ID: 39631113
If you exclude the entire sysvol folder will answer both questions.

Will.
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A safe way to clean winsxs folder from your windows server 2008 R2 editions
This script can help you clean up your user profile database by comparing profiles to Active Directory users in a particular OU, and removing the profiles that don't match.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

831 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question