Endpoint Protection

Hello all,

I have a customer that installed SEPM and SEP, the version is SEP 11.0.7000. Normally Symantec claims that the system automatically create exclusion when the client is installed on an Exchange or Domain Controller server.

According the following document

http://www.symantec.com/business/support/index?page=content&id=TECH96048&actp=search&viewlocale=en_US&searchid=1347307779610

we can review if that this exclusions are ok. But in the customer, we see the image that I included. This is not the reality because the data is in another volume and the logs too.

Of course I added manually, but how the system really taken this information to made the exclusions or it is defined by default?

You mean they are on a different drive letter, such as D: or E:?

Yes, The Exchange are in E: the tracking logs are in G:

Manually I added in this:

E:\Exchange\*

G:\Inetpub\LogIIS\*

G:\Program Files\Microsoft\Exchange Server\V14\Transport...

All auto exclusions will be for C:

Anything else willl need to be added manually, as you've already done.

Just to expand on Brian81s answer.

Symantec clearly states in TECH article 55233 that the default exclusions created for systems such as Exchange and Active Directory only apply if Exchange / AD are installed in the default locations (Which always is on the C: drive).

Your installations on the E: & G: drive are not default locations, therefore you need to manually create exceptions.