Recommendations for antivirus exclusions that relate to Operations Manager

Article translations Article translations
Article ID: 975931 - View products that this article applies to.
INTRODUCTION
This article introduces some recommendations for antivirus (AV) exclusions that relate to Microsoft System Center Operations Manager 2007, System Center 2012 Operations Manager, and System Center 2012 R2 Operations Manager.
Expand all | Collapse all

On This Page

More information

Exclusions by process executable

You must be very careful when you add exclusions that are based on executables as incorrect exclusions may prevent some potentially dangerous programs from being detected. Because of this we do not recommend that you rely on exclusions that are based on any process executables for Operations Manager servers. However, if you have to make exclusions that are based on the process executables, use the following processes:
  • Monitoringhost.exe (Operations Manager 2007)
  • Monitoringhost.exe (Operations Manager 2012)
  • Monitoringhost.exe (Operations Manager 2012 R2)

Exclusions by directories

The following directory-specific exclusions for Operations Manager include real-time scans, scheduled scans and local scans. The directories that are listed here are default application directories so you may have to modify these paths based on your specific environment. Only the following Operations Manager related directories should be excluded.

Important When a directory that is to be excluded has a directory name greater than 8 characters long, add both the short and long directory names of the directory to the exclusion list. These names are required by some AV programs to traverse the subdirectories.

SQL database servers

These exclusions include the SQL Server database files that are used by Operations Manager components and the system database files for the master database and for the tempdb database. To exclude these files by directory, exclude the directory for the .ldf and .mdf files.

For example:
  • C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Data
  • D:\MSSQL\DATA
  • E:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Log

Operations Manager (management servers, gateways, and agents)

These exclusions include the Health Service cache, together with its queue and log files that are used by Operations Manager. Examples follow.

For Operations Manager 2007 or Operations Manager 2007
R2 C:\Program Files\System Center Operations Manager <version>\Health Service State

Note The placeholder <version> represents "2007" for Operations Manager 2007 or Operations Manager 2007 R2.

For Operations Manager 2012
C:\Program Files\System Center Operations Manager\<component>\Health Service State\Health Service Store

Note The placeholder <component> represents "Agent" or "Server" for Operations Manager 2012.

For Operations Manager 2012 R2
For a management server:
C:\Program Files\Microsoft System Center 2012 R2\Server\Health Service State

For a gateway server: 
C:\Program Files\System Center Operations Manager\Gateway\Health Service State

For an agent: 
C:\Program Files\Microsoft Monitoring Agent\Agent\Health Service State

Exclusion of file type by extensions

The following file name extension-specific exclusions for Operations Manager includes real-time scans, scheduled scans, and local scans.

SQL database servers

These exclusions include the SQL Server database files that are used by Operations Manager components and the system database files for the master database and for the tempdb database.

For example:
  • MDF
  • LDF

Operations Manager (management servers, gateways, and agents)

These exclusions include the queue and log files that are used by Operations Manager.

For Example:
  • EDB
  • CHK
  • LOG
Note Page files should also be excluded from any real-time scans.

Properties

Article ID: 975931 - Last Review: December 3, 2013 - Revision: 2.0
Applies to
  • Microsoft System Center Operations Manager 2007
  • Microsoft System Center Operations Manager 2007 R2
  • Microsoft System Center Operations Manager 2007 Service Pack 1
  • Microsoft System Center 2012 Operations Manager
  • Microsoft System Center 2012 R2 Operations Manager
Keywords: 
kbinfo kbhowto kbsurveynew kbexpertiseinter KB975931

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com