Exceptions for Domain Controllers

[Migration User]

Hi everyone,

I read the KB bellow, and say about scan the SEP in Domain Controlers is automatically created.

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2009090907562348

So... not necessary create rules of exclusion in SEPM, it isn´t??

[Migration User]

Not necessary.But it is better to check once.Use this KB
How to Verify if an Endpoint Client has Automatically Excluded an Application or Directory

[Migration User]

But if the my company have many Domain controlers... is better create Centralized Exceptions policy in SEPM??

[Rafeeq]

not needed, it will automatically detect the presence of DC and create excusions, once installed you can verify the registry

Does the upgrade of a Server to a Domain Controller Automatically create the necessary exception for the Active Directory ?
http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/e24515901bf70e8b65257623005bbec4?OpenDocument

[Migration User]

About the automatic exclusion of files and folders
The client software automatically detects the presence of certain third-party applications and Symantec products. After it detects them, it creates exclusions for these files and folders. The client excludes these files and folders from all antivirus and antispyware scans.
 
The client software automatically creates exclusions for the following items:
■ Microsoft Exchange
■ Active Directory domain controller
■ Certain Symantec products
 
Note: To see the exclusions that the client creates on 32-bit computers, you can
examine the contents of the
 
HKEY_LOCAL_MACHINE\Software\Symantec\Symantec Endpoint Protection\AV\Exclusions registry. You must not edit this registry directly. On
 
64-bit computers, look in
 
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Symantec\SymantecEndpoint Protection\AV\Exclusion

[Migration User]

OK, but in my case... I don´t have permission to saw the  registry of the all domain controlers.
So... I need create the rules in SEPM to ensure the exclusion

[Migration User]

They the craeted automtically , The registry was just a hint for you to confrim that they are there. It was for you to see the exclusions

[Rafeeq]

its not needed ; however even in our environment we create the exception and then deploy it.
thats because we used to create the same in SAV...:)