SE の雑記

SQL Server の情報をメインに Microsoft 製品の勉強内容を日々投稿

SCCM 2012 の SCEP の除外設定について

leave a comment

SCCM 2012 には SCEP の除外設定のテンプレートが [C:Program Files (x86)Microsoft Configuration ManagerAdminConsoleXmlStorageEPTemplates] に含まれています。
この除外設定は SCEP 以外のウイルスキャン設定でも共通の設定使用できるものになりますので設定を抜き出してみました。

KB 上の情報は Microsoft 製品のウイルススキャンの除外対象について で。

製品 種別 場所
Active Directory パス [NTDS databases]
%systemroot%ntdsntds.dit

[NTD logs]
%systemroot%ntdsEDB*.log
%systemroot%ntdsEdbres*.jrs

[NTDS working files]
%systemroot%ntdsEDB.chk
%systemroot%ntdsTEMP.edb
%systemroot%ntds*.pat

[SYSVOL]
%systemroot%SYSVOLdomainDO_NOT_REMOVE_NtFrs_PreInstall_Directory
%systemroot%SYSVOLstaging
%systemroot%SYSVOLstaging areas
%systemroot%SYSVOLsysvol

  プロセス [FRS]
%systemroot%System32ntfrs.exe

[DFS]
%systemroot%System32dfsr.exe
%systemroot%System32dfsrs.exe

DHCP パス [DHCP Server database and logs]

%windir%System32DHCP*.mdb
%windir%System32DHCP*.edb
%windir%System32DHCP*.pat
%windir%System32DHCP*.log
%windir%System32DHCP*.jrs
%windir%System32DHCP*.chk

[DHCP Server database backup]

%windir%System32DHCPbackup*.mdb
%windir%System32DHCPbackup*.log
%windir%System32DHCPbackup*.chk

DNS パス [DNS Server working files]
%windir%System32DNS*.dns
%windir%System32DNS*.scc
  プロセス [DNS]
%systemroot%System32dns.exe
Exchange 2007 / 2010 パス

[Exchange]
%ExchangeInstallPath%Mailbox
%ExchangeInstallPath%GroupMetrics
%ExchangeInstallPath%TransportRolesLogs
%ExchangeInstallPath%Logging
%ExchangeInstallPath%ExchangeOAB
%ExchangeInstallPath%MailboxMDBTEMP
%SystemDrive%DAGFileShareWitnesses*

  プロセス [Exchange]

EdgeTransport.exe
Microsoft.Exchange.AddressBook.Service.exe
Microsoft.Exchange.Cluster.ReplayService.exe
Microsoft.Exchange.Monitoring.exe
Microsoft.Exchange.RpcClientAccess.Service.exe
Microsoft.Exchange.Search.ExSearch.exe
MSExchangeMailboxReplication.exe
MSExchangeMailSubmission.exe
MSExchangeRepl.exe
MSExchangeTransportLogSearch.exe
MSFTEFD.exe
msftesql.exe
Store.exe
MSExchangeFDS.exe

Exchange FPE 2010 パス [Exchange]

%ExchangeInstallPath%Mailbox
%ExchangeInstallPath%GroupMetrics
%ExchangeInstallPath%TransportRolesLogs
%ExchangeInstallPath%Logging
%ExchangeInstallPath%ExchangeOAB
%ExchangeInstallPath%MailboxMDBTEMP
%SystemDrive%DAGFileShareWitnesses*

  プロセス [Exchange]

EdgeTransport.exe
Microsoft.Exchange.AddressBook.Service.exe
Microsoft.Exchange.Cluster.ReplayService.exe
Microsoft.Exchange.Monitoring.exe
Microsoft.Exchange.RpcClientAccess.Service.exe
Microsoft.Exchange.Search.ExSearch.exe
MSExchangeMailboxReplication.exe
MSExchangeMailSubmission.exe
MSExchangeRepl.exe
MSExchangeTransportLogSearch.exe
MSFTEFD.exe
msftesql.exe
Store.exe
MSExchangeFDS.exe

[FPE]
FSCConfigurationServer.exe
FSCEventing.exe
GetEngineFiles.exe
ScanEngineTest.exe
FSCManualScanner.exe
FSCScheduledScanner.exe
FSCRealtimeScanner.exe
MultiEngineScanner.exe
Kavehost.exe
FSEMailPickup.exe
FSCVSSWriter.exe

Hyper-V パス [Hyper-V Host Server]

%ProgramData%MicrosoftWindowsHyper-V
%Public%DocumentsHyper-VVirtual Hard Disks
%ProgramFiles%Hyper-V
%SystemDrive%ClusterStorage

  プロセス [Hyper-V Host Server]

%systemroot%System32vmms.exe
%systemroot%System32vmwp.exe

IIS パス [IIS]

%systemroot%System32LogFiles
%systemroot%SysWow64LogFiles

  プロセス [IIS]

%systemroot%system32inetsrvw3wp.exe
%systemroot%SysWOW64inetsrvw3wp.exe

Office Communications Server 2007 パス [IIS]

%systemroot%System32LogFiles
%systemroot%SysWow64LogFiles

  プロセス [SQL Server]

%ProgramFiles%Microsoft SQL ServerMSSQL10.MSSQLSERVERMSSQLBinnSQLServr.exe
%ProgramFiles%Microsoft SQL ServerMSRS10.MSSQLSERVERReporting ServicesReportServerBinReportingServicesService.exe
%ProgramFiles%Microsoft SQL ServerMSAS10.MSSQLSERVEROLAPBinMSMDSrv.exe

[IIS]

%systemroot%system32inetsrvw3wp.exe
%systemroot%SysWOW64inetsrvw3wp.exe

[OCS]

ASMCUSvc.exe
DataMCUSvc.exe
DataProxy.exe
FileTransferAgent.exe
IMMCUSvc.exe
MasterReplicatorAgent.exe
MediaRelaySvc.exe
MediationServerSvc.exe
MeetingMCUSvc.exe
MRASSvc.exe
OcsAppServerHost.exe
QmsSvc.exe
ReplicaReplicatorAgent.exe
RTCArch.exe
RtcCdr.exe
RTCSrv.exe
ABServer.exe
AVMCUSvc.exe
AcpMcuSvc.exe
LyncBackupService.exe
ReplicationApp.exe

Operations Manager 2007 パス [Operations Manager 2007]
%programfiles%System Center Operations Manager 2007Health Service State*
  プロセス [Operations Manager 2007]

%programfiles%System Center Operations Manager 2007HealthService.exe
%programfiles%System Center Operations Manager 2007Microsoft.Mom.ConfigServiceHost.exe
%programfiles%System Center Operations Manager 2007MonitoringHost.exe

SharePoint 2010 パス [IIS]
%systemroot%System32LogFiles
%systemroot%SysWow64LogFiles

[SharePoint]

%systemroot%TempWebTempDir
%programfiles%Common FilesMicrosoft SharedWeb Server Extensions14Logs
%programfiles%Common FilesMicrosoft SharedWeb Server Extensions12Logs
%programfiles%Microsoft Office Servers14.0Logs
%programfilesx86%Microsoft Office Servers14.0Logs
%programfiles%Microsoft Office Servers12.0Logs
%programfilesx86%Microsoft Office Servers12.0Logs
%programfiles%Microsoft Office Servers14.0Data
%programfilesx86%Microsoft Office Servers14.0Data
%programfiles%Microsoft Office Servers12.0Data
%programfilesx86%Microsoft Office Servers12.0Data
%systemroot%Microsoft.NETFrameworkv2.0.50727Temporary ASP.NET Files
%systemroot%Microsoft.NETFramework64v2.0.50727Temporary ASP.NET Files

  プロセス [IIS]
%systemroot%system32inetsrvw3wp.exe
%systemroot%SysWOW64inetsrvw3wp.exe
Forefront Protection for SharePoint (FPSP) パス [IIS]
%systemroot%System32LogFiles
%systemroot%SysWow64LogFiles

[SharePoint]

%systemroot%TempWebTempDir
%programfiles%Common FilesMicrosoft SharedWeb Server Extensions14Logs
%programfiles%Common FilesMicrosoft SharedWeb Server Extensions12Logs
%programfiles%Microsoft Office Servers14.0Logs
%programfilesx86%Microsoft Office Servers14.0Logs
%programfiles%Microsoft Office Servers12.0Logs
%programfilesx86%Microsoft Office Servers12.0Logs
%programfiles%Microsoft Office Servers14.0Data
%programfilesx86%Microsoft Office Servers14.0Data
%programfiles%Microsoft Office Servers12.0Data
%programfilesx86%Microsoft Office Servers12.0Data
%systemroot%Microsoft.NETFrameworkv2.0.50727Temporary ASP.NET Files
%systemroot%Microsoft.NETFramework64v2.0.50727Temporary ASP.NET Files

  プロセス [IIS]
%systemroot%system32inetsrvw3wp.exe
%systemroot%SysWOW64inetsrvw3wp.exe

[FPSP]

FSCConfigurationServer.exe
FSCEventing.exe
GetEngineFiles.exe
ScanEngineTest.exe
FSCManualScanner.exe
FSCScheduledScanner.exe
FSCRealtimeScanner.exe
MultiEngineScanner.exe
Kavehost.exe
FSEMailPickup.exe
FSCVSSWriter.exe
wsstracing.exe
owstimer.exe
mssearch.exe

SQL Server 2005 プロセス [SQL Server 2005]

%ProgramFiles%Microsoft SQL ServerMSSQL.1MSSQLBinnSQLServr.exe
%ProgramFiles%Microsoft SQL ServerMSSQL.3Reporting ServicesReportServerBinReportingServicesService.exe
%ProgramFiles%Microsoft SQL ServerMSSQL.2OLAPBinMSMDSrv.exe

SQL Server 2008 プロセス [SQL Server 2008]

%ProgramFiles%Microsoft SQL ServerMSSQL10.MSSQLSERVERMSSQLBinnSQLServr.exe
%ProgramFiles%Microsoft SQL ServerMSRS10.MSSQLSERVERReporting ServicesReportServerBinReportingServicesService.exe
%ProgramFiles%Microsoft SQL ServerMSAS10.MSSQLSERVEROLAPBinMSMDSrv.exe

Forefront Threat Management Gateway (TMG) プロセス [TMG Server]

DailySum.exe
IsaApplianceInit.exe
isaDLviewer.exe
IsaManagedCtrl.exe
IsaMgmt.exe
IsaRepGen.exe
isastg.exe
MsFpcSqmAgent.exe
mspadmin.exe
NicsRestorer.exe
NLBClear.exe
UpdateAgent.exe
VpnHelpr.exe
W3Prefch.exe
wspsrv.exe
tmgpolicysuite.exe
tmgbpacmd.exe
tmgbpa.exe
bpa2visio.exe
tmgbpapack.exe
tmgdatapackager.exe

Configuration Manager 2012 (SCCM) パス [Configuration Manager 2012]

%programfiles%Microsoft Configuration ManagerInboxesadsrv.box
%programfiles(x86)%Microsoft Configuration ManagerInboxesadsrv.box
%programfiles%Microsoft Configuration ManagerInboxesAIKbMgr.box
%programfiles(x86)%Microsoft Configuration ManagerInboxesAIKbMgr.box
%programfiles%Microsoft Configuration ManagerInboxesamtproxymgr.box
%programfiles(x86)%Microsoft Configuration ManagerInboxesamtproxymgr.box
%programfiles%Microsoft Configuration ManagerInboxesauth.box
%programfiles(x86)%Microsoft Configuration ManagerInboxesauth.box
%programfiles%Microsoft Configuration ManagerInboxesccr.box
%programfiles(x86)%Microsoft Configuration ManagerInboxesccr.box
%programfiles%Microsoft Configuration ManagerInboxesccrretry.box
%programfiles(x86)%Microsoft Configuration ManagerInboxesccrretry.box
%programfiles%Microsoft Configuration ManagerInboxescertmgr.box
%programfiles(x86)%Microsoft Configuration ManagerInboxescertmgr.box
%programfiles%Microsoft Configuration ManagerInboxesclifiles.src
%programfiles(x86)%Microsoft Configuration ManagerInboxesclifiles.src
%programfiles%Microsoft Configuration ManagerInboxescolfile.box
%programfiles(x86)%Microsoft Configuration ManagerInboxescolfile.box
%programfiles%Microsoft Configuration ManagerInboxescoll_out.box
%programfiles(x86)%Microsoft Configuration ManagerInboxescoll_out.box
%programfiles%Microsoft Configuration ManagerInboxesCOLLEVAL.box
%programfiles(x86)%Microsoft Configuration ManagerInboxesCOLLEVAL.box
%programfiles%Microsoft Configuration ManagerInboxesCompSumm.Box
%programfiles(x86)%Microsoft Configuration ManagerInboxesCompSumm.Box
%programfiles%Microsoft Configuration ManagerInboxesdataldr.box
%programfiles(x86)%Microsoft Configuration ManagerInboxesdataldr.box
%programfiles%Microsoft Configuration ManagerInboxesddm.box
%programfiles(x86)%Microsoft Configuration ManagerInboxesddm.box
%programfiles%Microsoft Configuration ManagerInboxesddmnotif.box
%programfiles(x86)%Microsoft Configuration ManagerInboxesddmnotif.box
%programfiles%Microsoft Configuration ManagerInboxesdespoolr.box
%programfiles(x86)%Microsoft Configuration ManagerInboxesdespoolr.box
%programfiles%Microsoft Configuration ManagerInboxesdistmgr.box
%programfiles(x86)%Microsoft Configuration ManagerInboxesdistmgr.box
%programfiles%Microsoft Configuration ManagerInboxesepmgr.box
%programfiles(x86)%Microsoft Configuration ManagerInboxesepmgr.box
%programfiles%Microsoft Configuration ManagerInboxeshman.box
%programfiles(x86)%Microsoft Configuration ManagerInboxeshman.box
%programfiles%Microsoft Configuration ManagerInboxesinventry.box
%programfiles(x86)%Microsoft Configuration ManagerInboxesinventry.box
%programfiles%Microsoft Configuration ManagerInboxesinvproc.box
%programfiles(x86)%Microsoft Configuration ManagerInboxesinvproc.box
%programfiles%Microsoft Configuration ManagerInboxesmmctrl.box
%programfiles(x86)%Microsoft Configuration ManagerInboxesmmctrl.box
%programfiles%Microsoft Configuration ManagerInboxesnotictrl.box
%programfiles(x86)%Microsoft Configuration ManagerInboxesnotictrl.box
%programfiles%Microsoft Configuration ManagerInboxesobjmgr.box
%programfiles(x86)%Microsoft Configuration ManagerInboxesobjmgr.box
%programfiles%Microsoft Configuration ManagerInboxesoffermgr.box
%programfiles(x86)%Microsoft Configuration ManagerInboxesoffermgr.box
%programfiles%Microsoft Configuration ManagerInboxesOfferSum.Box
%programfiles(x86)%Microsoft Configuration ManagerInboxesOfferSum.Box
%programfiles%Microsoft Configuration ManagerInboxespkginfo.box
%programfiles(x86)%Microsoft Configuration ManagerInboxespkginfo.box
%programfiles%Microsoft Configuration ManagerInboxesPkgTransferMgr.box
%programfiles(x86)%Microsoft Configuration ManagerInboxesPkgTransferMgr.box
%programfiles%Microsoft Configuration ManagerInboxespolicypv.box
%programfiles(x86)%Microsoft Configuration ManagerInboxespolicypv.box
%programfiles%Microsoft Configuration ManagerInboxespolreq.box
%programfiles(x86)%Microsoft Configuration ManagerInboxespolreq.box
%programfiles%Microsoft Configuration ManagerInboxesrcm.box
%programfiles(x86)%Microsoft Configuration ManagerInboxesrcm.box
%programfiles%Microsoft Configuration ManagerInboxesreplmgr.box
%programfiles(x86)%Microsoft Configuration ManagerInboxesreplmgr.box
%programfiles%Microsoft Configuration ManagerInboxesRuleEngine.box
%programfiles(x86)%Microsoft Configuration ManagerInboxesRuleEngine.box
%programfiles%Microsoft Configuration ManagerInboxesschedule.box
%programfiles(x86)%Microsoft Configuration ManagerInboxesschedule.box
%programfiles%Microsoft Configuration ManagerInboxessinv.box
%programfiles(x86)%Microsoft Configuration ManagerInboxessinv.box
%programfiles%Microsoft Configuration ManagerInboxessitecomp.box
%programfiles(x86)%Microsoft Configuration ManagerInboxessitecomp.box
%programfiles%Microsoft Configuration ManagerInboxessitectrl.box
%programfiles(x86)%Microsoft Configuration ManagerInboxessitectrl.box
%programfiles%Microsoft Configuration ManagerInboxesSiteStat.Box
%programfiles(x86)%Microsoft Configuration ManagerInboxesSiteStat.Box
%programfiles%Microsoft Configuration ManagerInboxessmsbkup.box
%programfiles(x86)%Microsoft Configuration ManagerInboxessmsbkup.box
%programfiles%Microsoft Configuration ManagerInboxesstatmgr.box
%programfiles(x86)%Microsoft Configuration ManagerInboxesstatmgr.box
%programfiles%Microsoft Configuration ManagerInboxesswmproc.box
%programfiles(x86)%Microsoft Configuration ManagerInboxesswmproc.box
%programfiles%Microsoft Configuration ManagerInboxesWSUSMgr.box
%programfiles(x86)%Microsoft Configuration ManagerInboxesWSUSMgr.box
%programfiles%Microsoft Configuration ManagerInboxeswsyncmgr.box
%programfiles(x86)%Microsoft Configuration ManagerInboxeswsyncmgr.box

Written by masayuki.ozawa

5月 14th, 2012 at 2:27 am

Posted in System Center

Tagged with ,

Leave a Reply

*