Hello all, this is a two part question.
Background info:
We have 1000 or so thin clients running various Windows OSes. Most of those clients are running SEP 11 RU5 or RU6. The problem we are facing is trying to improve performance and disk IO on those machines. When my weekly SEP Scan of ALL files kicks in, the clients (and the server) get hammered and often crash. As a way to ease the pain on the server, we have moved the Thin Clients into different groups and set each group to full scan on different days. That has helped a bunch on the server, but we need other ideas for the clients. The hardware is mostly Dell FX160 machines with between 512 and 1 GB of RAM. Not a whole lot once SEP is in the mix.
Questions:
1) Is there any way to tell the weekly "FULL" scan to ignore files that haven't been modified/accessed since the last full scan? I found the "Enable File Cache" in the AV/AS policy...but unless the default setting of 10K files is way too low, it doesn't seem to be helping.
2) Other than uninstalling the PTP, and NTP modules, what else can I do to improve the performance of the weekly full scan and SEP in general without crippling my security?
Thanks for any suggestions,
-Mike