How to exclude a bunch of DFS(R) folders?!

[Migration User]

Hello,

I would like to exclude the DFS folders on our Domain Controllers and File-Servers.

On the DCs it's just a small amount of locations which are needed to exclude, but on our file servers are many many more.

Is it possible to use a wildcard in the newest version of SEP?

Or how do you proceed with this topic?

As far as I know SEP create exclusions automatically if installed on DCs - will it also exclude DFS folders for SYSVOL replication?

 

Many thanks and have a nice weekend!

 

[Rafeeq]

You need to add those manually, as of now only ? can be used as a wildcard that too for extensions only

This should help

https://www-secure.symantec.com/connect/articles/guide-dfs-and-dfsr-concerns-when-deploying-symantec-endpoint-protection-110

 

[ℬrίαη]

WIldcards are not supported. You need to add them individually using predefined prefix variables in SEPM.

Which variables and wildcards does Endpoint Protection allow in Centralized Exception Policies?

[Migration User]

OK, but what I know see is that if SEP detect that DFS-R is running on the system (just a file server, no domain controller), it added the exception
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Symantec\Symantec Endpoint Protection\AV\Exclusions\Domain Controller\NoScanDir]

with all the important DFS-R folder like

DfsrPrivate

DfsrPrivate\ConflictAndDeleted

DfsrPrivate\Staging

So am I right, that I have nothing to do in this case? It's not a domain controller, but SEP think that because of DFS-R.

But nevertheless, the exceptions will work right?

[ℬrίαη]

SEP will add exclusions for certain MS technologies. It looks like it did it in this case so you have no further action to take.

[Migration User]

Perfect, thanks for your help!

[ℬrίαη]

You're welcome.