List of exclusions needed for a Windows Domain Controller with Active Directory or File Replication Service / Distributed File System Replication:
For compatibility with a Windows Domain Controller with Active Directory or File Replication Service (FRS) / Distributed File System Replication (DFSR):
- Exclude the locations that Microsoft recommends for file-level scanners in the on-access scanner for ENS.
- For the most accurate list of file exclusions, see the following Microsoft TechNet article. In the TechNet article, go to the "Windows / Active Directory" section. Click the article link for the version of Windows Server that you use in your environment.
How to configure exclusions in ENS:
When you configure exclusions, always apply the principle that the more precise the exclusion, the smaller the potential security risk. For instructions to configure exclusions, see the "Preventing Threat Prevention from blocking trusted programs, networks, and services" section of the
Endpoint Security 10.7 Product Guide.