Microsoft Anti-Virus Exclusion List

One place on the web where you can find an updated list of ALL the AV exclusions you might want to configure for Windows Server. Feel free to add to the list, it is the Wiki way!

HINT: Subscribe to the RSS feed for this wiki page to get auto-notification when it is updated!

Enterprise

Enterprise Configuration Recommendations:

• http://support.microsoft.com/kb/822158

Technical Platforms

The list of platforms below is sorted alphabetically.

A

App-V

• http://support.microsoft.com/kb/2576031

B

BizTalk Server

See recommendations in BizTalk performance optimization guides:

• http://msdn.microsoft.com/en-us/library/cc558617(BTS.10).aspx
• http://msdn.microsoft.com/en-us/library/ee377064(BTS.70).aspx

Mentioned executables used by BizTalk includes EntSSO.exe, MSDTC.exe, BTSNTSvc.exe, BTSNTSvc64.exe, SQLServr.exe, but also others as IIS, Customer WCF services, MSMQ, Rule Engine, SQL Agent, SSIS, SSNS and other applications used in integration scenarios.

C

Cluster:

• http://support.microsoft.com/kb/250355

D

Defender for Endpoint Linux

• MDE for Linux (MDATP for Linux): List of antimalware (aka antivirus (AV)) exclusion list for 3rd party applications. – Yong Rhee’s blog (wordpress.com)

DHCP:

• http://support.microsoft.com/kb/927059

Dynamics CRM:  

• http://msdynamicswiki.com/2012/03/26/antivirus-exclusion-considerations-for-microsoft-dynamics-crm/

Dynamics AX 2009

For versions up to AX 2009 exclude:

• All the AOD, AOI, ADD, ADI, KHD & KHI files, or
• alternatively, the whole application folder

See for instance: http://blogs.msdn.com/b/czdaxsup/archive/2010/05/13/ax-application-files-locked-by-another-process.aspx

 

Note

Doing this helps make sure that the files are not locked when the AOS must use them. However, if these files become infected, your antivirus software will not be able to detect the infection.

Dynamics AX 2012

During AOS startup XPPIL (CIL) files are generated to by default: C:\Program Files\Microsoft Dynamics AX\60\Server\MicrosoftDynamicsAX\bin\XppIL>

• Exclude XppIL and all subfolders
• alternatively, you may want to exclude C:\Program Files\Microsoft Dynamics AX\60\Server\MicrosoftDynamicsAX\bin\Application\Appl>, which is the local AOS store of the label files.

E

Exchange:

• Exchange 2019: /en-us/Exchange/antispam-and-antimalware/windows-antivirus-software?view=exchserver-2019
• Exchange 2016: https://technet.microsoft.com/EN-US/library/bb332342(v=exchg.160).aspx
• Exchange 2013: http://technet.microsoft.com/en-us/library/bb332342%28v=exchg.150%29.aspx
• Exchange 2010: http://technet.microsoft.com/en-us/library/bb332342%28v=exchg.141%29.aspx
• Exchange 2007: http://technet.microsoft.com/en-us/library/bb332342%28EXCHG.80%29.aspx
• http://support.microsoft.com/kb/328841
• http://support.microsoft.com/kb/823166
• http://support.microsoft.com/kb/245822
• http://technet.microsoft.com/en-us/library/bb332342%28EXCHG.80%29.aspx
• http://technet.microsoft.com/en-us/library/bb332342.aspx
• Updated guidance 2/2023 Update on the Exchange Server Antivirus Exclusions - Microsoft Community Hub

F

Forefront: Considerations when using antivirus software on FF Edge Products

• http://support.microsoft.com/kb/943620
• http://technet.microsoft.com/en-us/library/cc707727.aspx

FRS:

• http://support.microsoft.com/kb/815263

H

Hyper-V, System Center Virtual Machine Manager (SCVMM):

• Hyper-V: Anti-Virus Exclusions for Hyper-V Hosts (Wiki)
• http://support.microsoft.com/kb/961804 
• http://support.microsoft.com/kb/2628135 
• Hardening the Hyper-V host (2012 / 2012 R2) (TechNet)
• Recommended antivirus exclusions for Hyper-V hosts 

I

IIS:

• http://support.microsoft.com/kb/821749
• http://support.microsoft.com/kb/817442

ISA:

• http://support.microsoft.com/kb/887311

L

Lync 2010

• http://technet.microsoft.com/en-us/library/gg195736.aspx

Lync 2013

• http://technet.microsoft.com/en-us/library/dn440138.aspx 

M

MED-V

• Recommended Anti-Virus exclusions for MED-V client and workspace installations

O

Office Online

• /en-us/sharepoint/troubleshoot/administration/antivirus-and-intermittent-issues

Orchestrator:

• http://social.technet.microsoft.com/wiki/contents/articles/26665.system-center-orchestrator-antivirus-exclusions.aspx

S

SBS:

• http://support.microsoft.com/kb/885685

SCCM 2012:

• http://www.systemcenterblog.nl/2012/05/09/anti-virus-scan-exclusions-for-configuration-manager-2012/
• Updated System Center 2012 Configuration Manager Antivirus Exclusions with more details on OSD and Boot Images, etc... - Microsoft Tech Community

SCCM Current Branch (CB):

• Recommended antivirus exclusions for Configuration Manager - Configuration Manager | Microsoft Docs

SCOM / MOM:

• Recommendations for antivirus exclusions that relate to Operations Manager
• Recommendations for antivirus exclusions in MOM 2005 and Operations Manager 2007
• System Center 2012 R2 Operations Manager - Anti-Virus Exclusions
• Recommendations for antivirus exclusions for SCOM 2016/

SCDPM:

• Running Antivirus Software on the DPM Server
• Running Antivirus Software on the DPM Server 2012

SharePoint:

• http://support.microsoft.com/kb/952167
• http://support.microsoft.com/kb/320111
• http://support.microsoft.com/kb/322941
• FAST Search Server 2010 for SharePoint
• Certain folders may have to be excluded from antivirus scanning when you use file-level antivirus software in SharePoint

Skype for Business 2015

• Antivirus scanning exclusions for Skype for Business Server 2015

SMS

• http://support.microsoft.com/kb/327453

SQL:

• http://support.microsoft.com/kb/309422

T

Team Foundation Server 2010/2012/2013:

• http://support.microsoft.com/kb/2636507  

Terminal Services

• https://social.technet.microsoft.com/wiki/contents/articles/18439.terminal-server-antivirus-exclusions.aspx 

V

Virtual PC / Virtual Server:

• http://blogs.msdn.com/b/virtual_pc_guy/archive/2005/09/14/466291.aspx
• http://support.microsoft.com/kb/840193

W

Windows: 

• KB822158 Virus scanning recommendations for Enterprise computers that are running currently supported versions of Windows

Windows / Active Directory: 

• http://support.microsoft.com/kb/822158
• http://support.microsoft.com/kb/837932
• http://support.microsoft.com/kb/943556

Windows Update:

• http://support.microsoft.com/kb/900638

WSUS (Windows Server Update Services):

• http://technet.microsoft.com/en-us/library/dd939908(WS.10).aspx#av    

Other great compilations

• http://blogs.technet.com/jeff_stokes/archive/2010/05/19/anti-virus-exclusions-and-you.aspx
• http://support.microsoft.com/search/default.aspx?mode=r&query=antivirus+exclusions&spid=global&catalog=LCID%3D1033&1033comm=1&ast=25&ast=28&res=20
• If your antivirus is Microsoft Forefront Endpoint Protection (FEP) you may use the Preconfigured Policy Templates for different server roles and Microsoft applications.
• Comprehensive AV Exclusion document - https://1drv.ms/w/s!Ag_-ZyoUI1bPkEGyogTulWNHL52X