< Blog

Configuration Manager 2012 and Anti-Virus Software Exclusions for Workstations

By Garth Jones

While I was doing some work for a client we discussed what anti-virus software exclusions are needed for workstations.

This may seem counter-intuitive, but in order for Configuration Manager to run efficiently, without causing too much overhead to Disk IO and CPU, there are a number of recommended anti-virus software exclusions that should be implemented.

You would think that this information could be easily found within Configuration Manager 2012’s documentation, but it isn’t. To help you out, below is a list of anti-virus software exclusions that I recommend that you implement for workstations.

Please note that if you are using McAfee anti-virus software also read my blog post about McAfee and SCCM!

Directories:

%allusersprofile%\NTUser.pol
%systemroot%\system32\GroupPolicy\registry.pol
%windir%\Security\database\*.chk
%windir%\Security\database\*.edb
%windir%\Security\database\*.jrs
%windir%\Security\database\*.log
%windir%\Security\database\*.sdb
%windir%\SoftwareDistribution\Datastore\Datastore.edb
%windir%\SoftwareDistribution\Datastore\Logs\edb.chk
%windir%\SoftwareDistribution\Datastore\Logs\edb*.log
%windir%\SoftwareDistribution\Datastore\Logs\Edbres00001.jrs
%windir%\SoftwareDistribution\Datastore\Logs\Edbres00002.jrs
%windir%\SoftwareDistribution\Datastore\Logs\Res1.log
%windir%\SoftwareDistribution\Datastore\Logs\Res2.log
%windir%\SoftwareDistribution\Datastore\Logs\tmp.edb
%systemroot%\system32\GroupPolicy\Machine\registry.pol”
%systemroot%\system32\GroupPolicy\User\registry.pol”
%windir%\CCM\Logs
%windir%\ccmcache

Processes to exclude:

Ccmexec.exe

In Thursday’s blog post, I will give you a list of anti-virus software exclusions that I recommend for site servers.

Configuration Manager 2012 and Anti-Virus Software Exclusions for Workstations