Symptoms
When System Center 2012 Endpoint Protection for Mac runs a scheduled weekly scan, it unexpectedly scans all network mounted drives, such as Server Message Block (SMB) share folders and Andrew File System (AFS) share folders. This may cause System Center 2012 to scan the files on hundreds of servers.
Cause
This issue occurs because on Mac computers, all drives are mounted to the "/Volumes" path. The root path is mounted to the "/" path and has a symbolic link under the "/Volumes" path. Therefore, System Center 2012 Endpoint Protection for Mac cannot include or exclude drives from scanning.
Resolution
To resolve this issue, you can manually exclude the "/Volume" path from scanning. To do this, follow these steps:
-
Enable the Advanced mode by toggling the + or - button that is located in the lower-left corner of the System Center Endpoint Protection main program window.
-
Click Tools, click Scheduler, click Weekly scan, click Edit task…, and then click Next.
-
In the Scan Targets list, expand your local hard disk drive, and then clear the Volumes folder selection.
-
Click Next three times, and then click Finish.
