How to Exclude Files for AD, Exchange.

This post have some helpful information
www-secure.symantec.com/connect/forums/built-and-recommended-centralized-exceptions

Hi,

SEP is not able to distinguish your servers... you have to distiguish them by putting them in different groups.
You can split your machines in different groups (for single machines as well), go in Policies panel, create as many centralized exceptions as you want and assign each of them to the proper group. As a suggestion to simplify your scenario, if server A needs the exeception X and the server B needs exception Y, and Y is not an issue for A and X is not issue for B, then you can put A and B in the same group under the exceptions X+Y.
Another solution is to put all servers in one only group but allow the users to create the exception locally in the SEP clients.

Step-by-step procedures are in the guides (but I am sure someone will copy them for you here).

Regards,

Dear Partner,

How does the system  know which server  e.g DC01,  EXCH01 to exclude on the centralized exception?

Thanks

About the automatic exclusion of files and folders for Microsoft Exchange
server
If Microsoft Exchange servers are installed on the computer where you installed
the Symantec Endpoint Protection client, the client software automatically detects
the presence of Microsoft Exchange. When the client software detects a Microsoft
Exchange server, it creates the appropriate file and folder exclusions for File
System Auto-Protect and all other scans. Microsoft Exchange servers can include
clustered servers. The client software checks for changes in the location of the
appropriate Microsoft Exchange files and folders at regular intervals. If you install
Microsoft Exchange on a computer where the client software is already installed,
the exclusions are created when the client checks for changes. The client excludes
both files and folders; if a single file is moved from an excluded folder, the file
remains excluded.
The client software creates file and folder scan exclusions for the following
Microsoft Exchange server versions:
■ Exchange 5.5
■ Exchange 6.0
■ Exchange 2000
■ Exchange 2003
■ Exchange 2007
■ Exchange 2007 SP1

HI Christopher,

Once the policy is create you need to assign the policy to the group which contain the server e.g DC01, EXCHO1.
It would apply to all the servers in the group as policy is group specific and not server/Endpoint client specific.

Regards,
Nirav Mistry

SEP client creates automatic exclusion for :
1. Exchange server
2. Active Directory domain controller database
3. Database
This is by design.
This is documented in the documentation provided in CD1

Automatic exclusion of Active Directory files and folders

The client monitors the applications that are installed on the client computer. If the software detects
Active Directory on the client computer, the software automatically creates the
exclusions.
The client software creates file and folder exclusions for the Active Directory domain controller database, logs, and working files.

This link may be helpful for you also:

http://myitforum.com/cs2/blogs/scassells/archive/2007/05/14/what-anti-virus-scanning-exclusions-should-be-considered-for-system-and-servers.aspx

Dear Partner,

Thanks.

How about File Server and SQL? Does it have automatic exclusion? 

I could not find in the admin guide that SQL has automatica exclusion?

Please advise.

Assuming if I need to create a centralized exclusion in a group of file server   e.g     c:\temp\software distribution\datastore, how do I do it in the centralized view. Should I type in the c:\temp\software distribution\datastore,  a greate screen shot to show me how this can be configure in this case will provide very useful guidance.

Thanks

How to exclude SQL files and folders using Centralized Exceptions

http://service1.symantec.com/SUPPORT/ent-security....

Dear Partner,

Thanks

If Prexfix variable is none I can specify the location. I assume  all server in the group will be excluded.

How about if a prefix is selected say [SYSTEM], how does this apply to the folder path? Do I need to specify anything?

Another screen should would be nice.

By the way, based on my reseach, i cannot find that file server is auto exclusion. Can you confirmed is this auto exclusion?

In addition, if the symatenc endpoint manager also have a client, is it by default also exclude exclusion automatically.

Pls advise.

Thanks

There is no automatic exclusion for a file server.

Ye s we need to install SEP client on the machine where SEPM is installed. This client is just a normal client. All auto exclusion that work on other client also work on the SEPM client

Dear Partner,

If I create a group that contain AD, Exchange and File server, with the above setting applies to the group, am I right to say that it will auto detect and exclude any of this server?

Thanks

Yes , it will 

SEP client creates automatic exclusion for :
1. Exchange server
2. Active Directory domain controller database
3. Database

Automatic exclusion of Active Directory files and folders
The client monitors the applications that are installed on the client computer. If the software detects Active Directory on the client computer, the software automatically creates the exclusions.
The client software creates file and folder exclusions for the Active Directory domain controller database, logs, and working files.

Exclusion for 3. Database.  Which databases are excluded? And is Windows 2008 Domain Controllers auto excluded?

Yes  Windows 2008 Domain Controllers is  auto excluded

Database used by other symantec products

Need some firm documentation on automatic exclusions. KB anyone?

Does this included SQL?

No it doesnot include SQL

Please refer to the admin  guide page no 373 for more info on this

I'm looking at page 373 of the admin guide for RU5. No info..

Update: I found it on page 380. Thanks.