{"id":10621,"date":"2010-05-26T17:29:00","date_gmt":"2010-05-26T17:29:00","guid":{"rendered":"https:\/\/aidanfinn.com\/?p=10621"},"modified":"2010-05-26T17:29:00","modified_gmt":"2010-05-26T17:29:00","slug":"microsoft-guidance-anti-virus-exclusion-lists","status":"publish","type":"post","link":"https:\/\/aidanfinn.com\/?p=10621","title":{"rendered":"Microsoft Guidance: Anti-Virus Exclusion Lists"},"content":{"rendered":"<p>This one comes on foot of a thread on the Minasi forum related to how AV screwed up a VM on a Hyper-V host.&#160; <\/p>\n<p>My recommendation is to <em>not<\/em> put antivirus on a Hyper-V host.&#160; Unfortunately there are times when the techies get overruled on that one.&#160; If you have to install AV on a Hyper-V host then you <em>must<\/em> read every word of this <a href=\"http:\/\/support.microsoft.com\/kb\/961804\" target=\"_blank\">page<\/a>.&#160; It deals with how to avoid the dreaded 0x800704C8, 0x80070037 or 0x800703E3 errors when you start up virtual machines.&#160; Do not skim over the page, do not make any assumptions about knowing where VM files are, do not undervalue the \u201cshortcuts\u201d you might see, and be aware the hidden folder that is referred to.&#160; Long-time readers might remember my first W2008 RC Hyper-V lab host and how a bunch of VM\u2019s disappeared on me.&#160; This was caused by AV scanning the VM files (including those \u201cshortcuts\u201d) after a host reboot.&#160; The VM\u2019s disappeared from the Hyper-V console, even though all the files were still there.<\/p>\n<p>In a more general AV &amp; Windows conversion, you should also pay attention to Microsoft\u2019s <a href=\"http:\/\/support.microsoft.com\/kb\/822158\" target=\"_blank\">doctrine<\/a> on AV exclusions for enterprise deployments of Windows.&#160; A long time ago, I had a Sysvol issue on a few DC\u2019s in branch offices.&#160; We ended up believing that our AV caused the issue.&#160; Check out that site when you are putting in AV or configuring scan exclusions.<\/p>\n<div style=\"padding-bottom: 0px; margin: 0px; padding-left: 0px; padding-right: 0px; display: inline; float: none; padding-top: 0px\" id=\"scid:0767317B-992E-4b12-91E0-4F059A8CECA8:04685213-135a-47fa-930a-34c9ac80b094\" class=\"wlWriterEditableSmartContent\">Technorati Tags: <a href=\"http:\/\/technorati.com\/tags\/Hyper-V\" rel=\"tag\">Hyper-V<\/a>,<a href=\"http:\/\/technorati.com\/tags\/Virtualisation\" rel=\"tag\">Virtualisation<\/a>,<a href=\"http:\/\/technorati.com\/tags\/Security\" rel=\"tag\">Security<\/a><\/div>\n","protected":false},"excerpt":{"rendered":"<p>This one comes on foot of a thread on the Minasi forum related to how AV screwed up a VM on a Hyper-V host.&#160; My recommendation is to not put antivirus on a Hyper-V host.&#160; Unfortunately there are times when the techies get overruled on that one.&#160; If you have to install AV on a &hellip; <a href=\"https:\/\/aidanfinn.com\/?p=10621\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Microsoft Guidance: Anti-Virus Exclusion Lists&#8221;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"categories":[37],"tags":[181,190,195],"class_list":["post-10621","post","type-post","status-publish","format-standard","hentry","category-security","tag-hyper-v","tag-security","tag-virtualisation"],"aioseo_notices":[],"jetpack_featured_media_url":"","amp_enabled":true,"_links":{"self":[{"href":"https:\/\/aidanfinn.com\/index.php?rest_route=\/wp\/v2\/posts\/10621","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/aidanfinn.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/aidanfinn.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/aidanfinn.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/aidanfinn.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=10621"}],"version-history":[{"count":0,"href":"https:\/\/aidanfinn.com\/index.php?rest_route=\/wp\/v2\/posts\/10621\/revisions"}],"wp:attachment":[{"href":"https:\/\/aidanfinn.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=10621"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/aidanfinn.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=10621"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/aidanfinn.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=10621"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}