Video Screencast Help

AV exceptions in Local Settings

Created: 05 Oct 2009 • Updated: 21 May 2010 | 7 comments
SV's picture
This issue has been solved. See solution.

Hello friends, can any one tell me how to add a folder in exceptions policy in Local Settings of users

example the bello folder from the user's

c:/Documents and Settings/290982/Application Data/IMP
c:/Documents and Settings/290985/Application Data/IMP
c:/Documents and Settings/320452/Application Data/IMP

i want to exclude the IMP folders from all the users from my Org. there are 6000 user's in my org.

Comments 7 CommentsJump to latest comment

Rafeeq's picture

User centralized exception and under security risks exception select folder , select none and
exclude
%Appdata%\IMP  folder
this should work fine.
more on centralized exception here.

http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/f7602d481cc0cb8e882574020062b021?OpenDocument&ExpandSection=2

SV's picture

hello,
does this work for Different user's??????????

Rafeeq's picture

Yes it would work,

Here we are excluding a folder under

C:\Documents and Settings\rafeeqm\Application Data

so if you go to start - run - %userprofie%
it would be currently logged in user, so every profie would have an app data folder
so we are excluding that folder, irrespective of users..

SV's picture

i added %Appdata%\IMP  folder in centralized exceptions list but AV is still it scanning this folder.

Rafeeq's picture

When ever you create a centralized exception.
AV will scan the folder but no actions will be taken on it..same as not scanning..

SV's picture

Hi Rafeeq,
it will not work,
i opened a case with symantec technical support they also say the same thing,
go through bellow mail got it from symantec,

Since the exclusion path is under the user profile, we do not have much option with adding only with the "Alluser" under C:\Documents and Settings\All Users\Application Data. The exclusion has to be made for each user account which looks very lenght job.
 
 
Also since you have tried with adding the %Applicaiton% and found not positive result, We have left with only the option of adding each user in the exception list.

SV

SOLUTION
Jonathan Brain's picture

Could you add the exception as follows and have SEP ignore IMP wherever its encountered?

sepexclusion.jpg