Endpoint Protection Small Business Edition

hi all,

           I want to know if there are any logs created when an exception is created in SEP Client 12.1.2015.2015. If yes, where can I find the settings to enable or disable this logs in SEPM and under which category these logs are maintained.

Thanks

There is no logs created when an exception is created. You can only see these by looking at the Exceptions policy.

So that means that there is no way to find that which user has added how many files/folders in exceptions.?

Not using the SEPM. It would be a manual process to check the client or you can write a script to check the registry key locations which show the exceptions

Hi Brain81,

   Thanks ...  I found the registry key on my windows 8 machine where I found the exceptions I added. here it is :

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Symantec\Symantec Endpoint Protection\AV\Exclusions

Thanks

This KB article should help:

How to Verify if an Endpoint Client has Automatically Excluded an Application or Directory