Article ID: 952167 - Last Review: September 22, 2011 - Revision: 15.0

Certain folders may have to be excluded from antivirus scanning when you use a file-level antivirus program in SharePoint

System TipThis article applies to a different operating system than the one you are using. Article content that may not be relevant to you is disabled.

On This Page

Expand all | Collapse all

INTRODUCTION

This article includes information about folders that may have to be excluded from antivirus scanning in SharePoint. These folders may have to be excluded from antivirus scanning when you use a file-level antivirus program in SharePoint. If these folders are not excluded, you may see unexpected behavior. For example, you may receive "access denied" error messages when files are uploaded.

MORE INFORMATION

Folders that may have to be excluded from antivirus scanning for Microsoft SharePoint Foundation 2010

You may have to configure the antivirus software to exclude the following folders and subfolders from antivirus scanning.

Note The Drive placeholder represents the drive letter in which you have installed Microsoft SharePoint Foundation 2010 or SharePoint Server 2010. Typically, this drive letter is C.
  • Drive:\Program Files\Common Files\Microsoft Shared\Web Server Extensions

    If you do not want to exclude the whole "Web Server Extensions" folder from antivirus scanning, you can exclude only the following two folders:
    • Drive:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\Logs
    • Drive:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\Data\Applications

      Note The Applications folder must be excluded only if the computer is running the SharePoint Foundation Search service. If the folder that contains the index file is located in some other location, you must also exclude that folder. 
  • Drive:\Windows\Microsoft.NET\Framework64\v2.0.50727\Temporary ASP.NET Files
  • Drive: \Users\service account\AppData\Local\Temp\WebTempDir

    Note The WebTempDir folder is a replacement for the FrontPageTempDir folder.
  • Drive\ProgramData\Microsoft\SharePoint\
  • Drive\Users\the account that the search service is running as\AppData\Local\Temp

    Note The search account creates a folder in the "gthrsvc_spsearch4 Temp" folder to which it periodically needs to write.
  • Drive:\WINDOWS\system32\LogFiles
  • On 64 Bit Windows 2008 Server with 64 Bit Product, the location is Drive:\Windows\Syswow64\LogFiles

    Note If you use a specific account for SharePoint services or application pools identities, you may also have to exclude the following folders:
    • Drive:\Users\ServiceAccount\AppData\Local\Temp
    • Drive:\Users\Default\AppData\Local\Temp

Folders that may have to be excluded from antivirus scanning for SharePoint Server 2010

You may have to configure the antivirus software to exclude the "Drive:\Program Files\Microsoft Office Servers" folder from antivirus scanning for SharePoint Server 2010. If you do not want to exclude the whole "Microsoft Office Servers" folder from antivirus scanning, you can exclude only the following folders:
  • Drive:\Program Files\Microsoft Office Servers\14.0\Data.

    (This folder is used for the indexing process. If the Index files are configured to reside in a different folder, you also have to exclude that location.)
  • Drive:\Program Files\Microsoft Office Servers\14.0\Logs
  • Drive:\Program Files\Microsoft Office Servers\14.0\Bin
  • Drive:\Program Files\Microsoft Office Servers\14.0\Synchronization Service
  • Any location you chose to store Disk-based BLOB cache. For example: C:\blobcache For more information on BLOB cache, see: http://technet.microsoft.com/en-us/library/ee424404.aspx#Section1 (http://technet.microsoft.com/en-us/library/ee424404.aspx#Section1)
Note If you have SharePoint Server 2010, these folders should be excluded in addition to the folders listed in the above SharePoint Foundation 2010 section.

Folders that may have to be excluded from antivirus scanning for Windows SharePoint Services 3.0

You may have to configure the antivirus software to exclude the following folders and subfolders from antivirus scanning.

Note The Drive placeholder represents the drive letter in which you have installed Windows SharePoint Services 3.0 or SharePoint Server 2007. Typically, this drive letter is C.
  • Drive:\Program Files\Common Files\Microsoft Shared\Web Server Extensions

    If you do not want to exclude the whole "Web Server Extensions" folder from antivirus scanning, you can exclude only the following two folders:
    • Drive:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\12\Logs
    • Drive:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\12\Data\Applications

      Note The Applications folder must be excluded only if the computer is running the Windows SharePoint Services Search service. If the folder that contains the index file is located in some other location, you must also exclude that folder.
  • Drive:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files

    Note If you are running a 64-bit version of Windows, you should also include the following directory:
    • Drive:\Windows\Microsoft.NET\Framework64\v2.0.50727\Temporary ASP.NET Files
  • Drive:\Documents and Settings\All Users\Application Data\Microsoft\SharePoint\Config
  • Drive:\Windows\Temp\WebTempDir

    Note The WebTempDir folder is a replacement for the FrontPageTempDir folder.
  • Drive\Documents and Settings\the account that the search service is running as\Local Settings\Temp\
  • With 64Bit 2008 Server and Product Version this will be Drive\Users\the account the search service is running as\Local\Temp\

    Note The search account creates a folder in the "gthrsvc Temp" folder to which it periodically needs to write.
  • Drive:\WINDOWS\system32\LogFiles
  • With 64 Bit 2008 Server and Product Version this will be Drive:\Windows\Syswow64\LogFiles

    Note If you use a specific account for SharePoint services or application pools identities, you may also have to exclude the following folders:
    • Drive:\Documents and Settings\ServiceAccount\Local Settings\Application Data
    • With 64 Bit 2008 Server and Product Version this will be Drive:\Users\ServiceAccount\Local
    • Drive:\Documents and Settings\ServiceAccount\Local Settings\Temp
    • With 64 Bit 2008 Server and Product Version this will be Drive:\Users\ServiceAccount\Local\Temp
  • Drive:\Documents and Settings\Default User\Local Settings\Temp
  • With 64 Bit 2008 Server and Product Version this will be Drive:\Users\Default\AppData\Local\Temp


Folders that may have to be excluded from antivirus scanning for SharePoint Server 2007

You may have to configure the antivirus software to exclude the "Drive:\Program Files\Microsoft Office Servers" folder from antivirus scanning for SharePoint Server 2007. If you do not want to exclude the whole "Microsoft Office Servers" folder from antivirus scanning, you can exclude only the following folders:
  • Drive:\Program Files\Microsoft Office Servers\12.0\Data. (This folder is used for the indexing process. If the Index files are configured to reside in a different folder, you also have to exclude that location.)
  • Drive:\Program Files\Microsoft Office Servers\12.0\Logs
  • Drive:\Program Files\Microsoft Office Servers\12.0\Bin
  • Any location you choose to store Disk-based BLOB cache. For example: C:\blobcache. For more information on BLOB cache, see: http://office.microsoft.com/en-us/sharepoint-server-help/configure-disk-based-cache-settings-HA010176284.aspx (http://office.microsoft.com/en-us/sharepoint-server-help/configure-disk-based-cache-settings-HA010176284.aspx)
Note If you have Microsoft Office SharePoint Server 2007, these folders should be excluded in addition to the folders listed in the above WSS 3.0 section.

Note When you install SharePoint Server 2007 or when you apply a hotfix to an existing installation of SharePoint Server 2007, you may have to disable the real-time option of the antivirus program. Or, you may have to exclude the Drive:\Windows\Temp folder from antivirus scanning if it is required.

For more information about error messages that may occur when antivirus software scans occur in SharePoint Portal Server 2001 and in SharePoint Portal Server 2003, click the following article number to view the article in the Microsoft Knowledge Base:
320111  (http://support.microsoft.com/kb/320111/ ) Random errors may occur when antivirus software scans Microsoft Web Storage System in SharePoint Portal Server 2001 and in SharePoint Portal Server 2003
For more information, click the following article numbers to view the articles in the Microsoft Knowledge Base:
910449  (http://support.microsoft.com/kb/910449/ ) Troubleshooting common permissions and security-related issues in ASP.NET
813833  (http://support.microsoft.com/kb/813833/ ) PRB: "Access Denied" error messages when you do not put strong-named assemblies in the global assembly cache

APPLIES TO
  • Microsoft Office SharePoint Server 2007
  • Microsoft Windows SharePoint Services 3.0
  • Microsoft SharePoint Server 2010
  • Microsoft SharePoint Foundation 2010
Keywords: 
kbexpertiseinter kbhowto kbinfo KB952167