Is there a list of exclusions for file extension that symantec allows by default?  I know I can check in registry but I want to know if there is somewhere where there is a list depending on the role of the server, such as Active Directory or SQL? 

More specifically I am being asked what extensions exceptions are set up by default from Symantec for Active Directory Domain Controllers?  I do not have access to log on to domain controllers to check the registry.

SEP will exclude AD by default, see here:

About the automatic exclusion of Active Directory files and folders

About the files and folders that Symantec Endpoint Protection excludes from virus and spyware scans

Excluding Microsoft SQL Server files and folders using Centralized Exceptions

Also a very detailed list compiled by Microsoft is here:

http://support.microsoft.com/kb/975931

https://www-secure.symantec.com/connect/forums/sep-exchange-and-sql#comment-3929691

SEP is smart enough to exclude AD by default once installed on an AD server. It will automatically detect that it's running AD. For SQL, you will need to manually add the exclusions.

Automatic exclude list

About the automatic exclusion of files and folders for Microsoft Exchange server and Symantec products

These are the exclusion about sql

http://support.microsoft.com/kb/309422

Excluding Microsoft SQL Server files and folders using Centralized Exceptions

Automatic exclusions are not created for SQL. Automatic exclusion are created if SEP is installed on Microsoft Exchange and Active Directory Domain Controllers

Check chetan comment

https://www-secure.symantec.com/connect/forums/exclusion-sql-server#comment-9103221 

so there is no list / table that shows what automatic exclusions (folders and extenstions) are applied based on the server role such as IIS, AD, SQL?

Nope, you need to check the registry for this:

You can view the exclusions that the client automatically creates.

Thank you Brian,

The problem with the registry is that in large organizations, there could be thousands of servers with multiple roles and each server types registry will be different, and a SEP admin doesn't necessarily have access to those servers to log on or remotely check the registry to figure out what default SEP exclusions are.  What would be helpful is a table provided and maintained by Symantec such as the one below:

Agreed :)