Antivirus scanning exclusions for Skype for Business Server

Overview of antivirus scanner interoperation with Skype for Business Server.

To ensure that the antivirus scanner does not interfere with the operation of Skype for Business Server, you must exclude specific processes and directories for each Skype for Business Server server or server role on which you run an antivirus scanner. The following processes and directories should be excluded:

Note

Folder and file locations listed below are the default locations for Skype for Business Server. For any locations for which you did not use the default, exclude the locations you specified for your organization instead of the default locations specified in this topic.

Important

Please note that some antivirus programs may need absolute, not relative paths, for their exclusion list.

  • Skype for Business Server processes:

    • ABServer.exe

    • ASMCUSvc.exe

    • AVMCUSvc.exe

    • ChannelService.exe

    • ClsAgent.exe

    • ComplianceService.exe

    • DataMCUSvc.exe

    • DataProxy.exe

    • FileTransferAgent.exe

    • HealthAgent.exe

    • IMMCUSvc.exe

    • LyncBackupService.exe

    • LysSvc.exe

    • MasterReplicatorAgent.exe

    • MediaRelaySvc.exe

    • MediationServerSvc.exe

    • MRASSvc.exe

    • OcsAppServerHost.exe

    • ReplicaReplicatorAgent.exe

    • ReplicationApp.exe

    • RtcHost.exe

    • RTCSrv.exe

    • XmppProxy.exe

    • XmppTGW.exe

  • Windows Fabric Host Service processes:

    • Fabric.exe

    • FabricDCA.exe

    • FabricHost.exe

  • IIS processes:

    • %systemroot%\system32\inetsrv\w3wp.exe

    • %systemroot%\SysWOW64\inetsrv\w3wp.exe

  • SQL Server Back-End processes:

    Note

    Note that these paths are specific to SQL Server version.

    • %ProgramFiles%\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\SQLServr.exe

    • %ProgramFiles%\Microsoft SQL Server\MSRS11.MSSQLSERVER\Reporting Services\ReportServer\Bin\ReportingServicesService.exe

    • %ProgramFiles%\Microsoft SQL Server\MSAS11.MSSQLSERVER\OLAP\Bin\MSMDSrv.exe

  • SQL Server Front-End processes:

    • %ProgramFiles%\Microsoft SQL Server\MSSQL12.LYNCLOCAL\MSSQL\Binn\SQLServr.exe

    • %ProgramFiles%\Microsoft SQL Server\MSSQL12.RTCLOCAL\MSSQL\Binn\SQLServr.exe

    • Standard Edition Installation RTC Instance

    • %ProgramFiles%\Microsoft SQL Server\MSSQL12.RTC\MSSQL\Binn\SQLServr.exe

  • Directories and files:

    • %systemroot%\System32\LogFiles

    • %systemroot%\SysWow64\LogFiles

    • %systemroot%\Microsoft.NET\assembly\GAC_MSIL

      Note

      Note that these paths are specific to Skype for Business Server version.

    • %programfiles%\Skype for Business Server 2015

    • %programfiles%\Common Files\Skype for Business Server 2015\Watcher Node

    • %programfiles%\Common Files\Skype for Business Server 2015

    • %programfiles%\Common Files\Skype for Business Online

    • %SystemDrive%\RtcReplicaRoot

    • File share store (specified in Topology Builder). File stores are specified in Topology Builder.

    • SQL Server data and log files, including those for the back-end database, user store, archiving store, monitoring store, and application store. Database and log files can be specified in Topology Builder. For details about the data and log files for each database, including default names, see SQL Server Data and Log File Placement in the Deployment documentation.

    • SQL Server data and log files, including those for the Front-end database, Skype for Business store, and RtcDatabase store. They are normally under %localdrive%\CSData.