Endpoint Protection

We are upgrading our domain controllers to windows 2012 R2 and i want to make sure if compatible with SEP 12.1.5

Yes SEP 12.1.5 compatibility with Active Directory 2012R2

Operating system

• Windows XP (32-bit, SP2 or later; 64-bit, all SPs; all editions except Home)
• Windows 7 (32-bit, 64-bit, RTM and SP1; all editions except Starter and Home)
• Windows 8 (32-bit, 64-bit)
• Windows 8.1 (32-bit, 64-bit)
• Windows 8.1 update for April 2014 (32-bit, 64-bit)
• Windows 8.1 update for August 2014 (32-bit, 64-bit)
• Windows Server 2003 (32-bit, 64-bit, R2, SP1 or later)
• Windows Server 2008 (32-bit, 64-bit, R2, RTM, SP1, and SP2)
• Windows Server 2012
• Windows Server 2012 R2
• Windows Server 2012 R2 update for April 2014
• Windows Server 2012 R2 update for August 2014
• Windows Small Business Server 2003 (32-bit)
• Windows Small Business Server 2008 (64-bit)
• Windows Small Business Server 2011 (64-bit)
• Windows Essential Business Server 2008 (64-bit)

System Requirements for Symantec Endpoint Protection 12.1.5

https://support.symantec.com/en_US/article.TECH224712.html

When i install SEP on a domain controller do i need to apply any scanning exclusions or SEP does that automatically?

Sorry but it is mentioned windows server 2012 R2 and nothing mentioned about DC

anywhere not mention regrading DC and other application

The Symantec Endpoint Protection client software automatically detects the presence of certain third-party applications: Active Directory Domain Controller is one such application. After the SEP client detects that it is running on a Domain Controller (DC), it automatically creates the necessary exclusions for sensitive files and folders. These files and folders are excluded from all antivirus and antispyware scans.

Other wise you can exclude manually.

Virus scanning recommendations for Enterprise computers that are running currently supported versions of Windows

https://support.microsoft.com/en-us/kb/822158

Installation best practices for Endpoint Protection on Windows servers

https://support.symantec.com/en_US/article.TECH92440.html

If you install SEP on DC, it automatically creates exclusion,

If you install SEP then make it DC, you need to manually Add the exclusions

The exclusions should automatically be setup by SEP when installed.

Check the reg keys to verify

 32bit

• HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\AV\Exclusions\Domain Controller

 64bit

• HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Symantec\Symantec Endpoint Protection\AV\Exclusions\Domain Controller