Video Screencast Help
Give us your opinion and win with Symantec! Please help us by taking this survey to tell us about your experience with Symantec Connect, so that we can continue to grow and improve.  Take the survey.

How to manage exceptions

Created: 16 Aug 2012 • Updated: 09 Nov 2012 | 10 comments
This issue has been solved. See solution.

Hi - i am running SEPM v12 AD driven.  I have a few exception rules set but they seem to only work on some PCs and not work on others.  Do you have any ideas on what to check to see why the exception works on some PCs and not on others?  Are there any instructions on creating exceptions?

thanks

Comments 10 CommentsJump to latest comment

Brɨan's picture

Are those PCs in the same group that you have the exceptions applied to?

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

rs_cert's picture

Get the help of below link for centralized exception
https://www-secure.symantec.com/connect/forums/centralize-exception-policy

If you need to check the policy are applied on client or not go through below attach

Entry of that extension will display in below registry path
HKEY_LOCAL_MACHINE\SOFTWARE\SYMANTEC\SYMANTEC ENDPOINT PROTECTION\AV\EXCLUSIONS
Note: On 64bit window machines the registry path is:
HKEY_LOCAL_MACHINE\Software\WOW6432Node\Symantec\Symantec Endpoint Protection\AV\Exclusions

Ashish-Sharma's picture

Please move all PCs where you want to apply exceptions.

Creating Centralized Exceptions Policies in the Symantec Endpoint Protection Manager 12.1

http://www.symantec.com/business/support/index?page=content&id=TECH183201

Thanks In Advance

Ashish Sharma

Ian_C.'s picture
  • Have the PC's got the same/lastest policy applied?
  • Are the exceptions distributed to the Registry? See point 9 in the Registry Tweak thread.
Please mark the post that best solves your problem as the answer to this thread.
Mithun Sanghavi's picture

Hello,

Check points - 

1) Check the Policies are assigned to the proper groups

SEPM >> Policies >> Exceptions >> Double click on the Policy created in the Right pane >> Under Overview, click on "Used by" TAB.

By checking the above, we would come to know if the exceptions are assigned to correct groups.

2) Verify at the client end, check these Articles below:

How to Create Scanning Exceptions for both Managed and Unmanaged Symantec Endpoint Protection Clients

How to Verify if an Endpoint Client has Automatically Excluded an Application or Directory

Verifying SEP Exceptions for Windows Server 2008 and Windows Server 2003 Domain Controllers

Creating exceptions for Symantec Endpoint Protection

http://www.symantec.com/docs/HOWTO55204

Hope that helps!!

Mithun Sanghavi
Associate Security Architect

MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Dushan Gomez's picture

ok, for this implementation, do I have to create different OU in the SEPM console for Active Directory and SQL Server ?

Dushan Gomez
IT Manager
VCP 4 and 5 | MCITP Exchange Server | MCTS SharePoint Server | MCP Windows XP

Mithun Sanghavi's picture

Hello,

No, you would not have to create different OU in the SEPM console for Active Directory and SQL Server.

Hope that helps!!

Mithun Sanghavi
Associate Security Architect

MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

SOLUTION
Dushan Gomez's picture

ok, thanks Mithun

so in this csae I can just implement the steps defined in this article on my Root Policy:

Symantec: http://www.symantec.com/business/support/index?page=content&id=TECH96048

Microsoft: http://support.microsoft.com/kb/822158

Dushan Gomez
IT Manager
VCP 4 and 5 | MCITP Exchange Server | MCTS SharePoint Server | MCP Windows XP

Mithun Sanghavi's picture

Hello,

Yes. That would be fine.

Hope that helps!!

Mithun Sanghavi
Associate Security Architect

MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Dushan Gomez's picture

Many thanks Mithun !

Dushan Gomez
IT Manager
VCP 4 and 5 | MCITP Exchange Server | MCTS SharePoint Server | MCP Windows XP