IT Core Blog

Wouldn’t it be handy to have one place on the web where you could find an updated list of ALL the AV exclusions you might want to configure? This wiki stub topic is meant to be that list. Feel free to add to the list, it is the wiki way!  

  

Windows:
KB822158 Virus scanning recommendations for Enterprise computers that are running currently supported versions of Windows

Windows / Active Directory: 
http://support.microsoft.com/kb/822158
http://support.microsoft.com/kb/837932
http://support.microsoft.com/kb/943556

Cluster:
http://support.microsoft.com/kb/250355

Forefront: Considerations when using antivirus software on FF Edge
Products
http://support.microsoft.com/kb/943620
http://technet.microsoft.com/en-us/library/cc707727.aspx

FRS:
http://support.microsoft.com/kb/815263

SQL:
http://support.microsoft.com/kb/309422

IIS:
http://support.microsoft.com/kb/821749
http://support.microsoft.com/kb/817442

DHCP:
http://support.microsoft.com/kb/927059

SCOM / MOM:
http://support.microsoft.com/kb/975931

Hyper-V:
http://support.microsoft.com/default.aspx/kb/961804

Exchange:
Exchange 2010: http://technet.microsoft.com/en-us/library/bb332342.aspx
Exchange 2007: http://technet.microsoft.com/en-us/library/bb332342(EXCHG.80).aspx
http://support.microsoft.com/kb/328841
http://support.microsoft.com/kb/823166
http://support.microsoft.com/kb/245822
http://technet.microsoft.com/en-us/library/bb332342(EXCHG.80).aspx
http://technet.microsoft.com/en-us/library/bb332342.aspx

SharePoint:
http://support.microsoft.com/kb/952167
http://support.microsoft.com/kb/320111
http://support.microsoft.com/kb/322941

SMS:
http://support.microsoft.com/kb/327453

ISA:
http://support.microsoft.com/kb/887311

WSUS:
http://support.microsoft.com/kb/900638

SBS:
http://support.microsoft.com/kb/885685

 Med-V
Recommended Anti-Virus exclusions for MED-V client and workspace installations

System Center:
Recommendations for antivirus exclusions in MOM 2005 and Operations Manager 2007

Error:
Virtual Machine Manager failed to connect to the virtual machine because of a socket connection error. Check the firewall and network settings, and then try to connect again.

Cause:
This issue may occur because the SCVMM 2008 Administrator Console tries to establish a Remote Desktop connection by not using a VMConnect connection to the Hyper-V host on the 2179 TCP port. Instead, the SCVMM 2008 Administrator Console tries to establish a Remote Desktop connection directly with the operating system of the VM on the 3389 TCP port.

Note: The SCVMM 2008 Administrator Console works as expected on a computer that is running a supported version of Windows XP, of Windows Vista, or of Windows Server 2008.

Resolution:
To resolve this issue on a computer that is running Windows 7 or Windows Server 2008 R2, you must use Microsoft System Center Virtual Machine Manager (SCVMM) 2008 R2. Additionally, you must use SCVMM 2008 R2 to manage Windows Server 2008 R2 Hyper-V hosts.

Taken from:
KB983253-SCVMM 2008 Administrator Console cannot connect to a Windows Server 2008 Hyper-V-hosted VM in Windows 7 or in Windows Server 2008 R2

Many “Recommended” updates are available for SCVMM and the technologies it manages, staying up to date can be hard, fortunately there is a tool called VMMCA that will check the configuration and updates installed on the SCVMM Server and any Hosts specified and produce a simple report.

What about all updates that have been released since the VMMCA was last released?
Here’s a list of all of the updates the VMMCA checks and another one that you will have to verify on your own.

Updates the VMMCA verifies
Install on the SCVMM Server
961983
971244
Install on SCVMM Hosts
950050
956589
956774
958124
954563
955805
Hyper-V updates for SCVMM Hosts
952247
956697
957967
958184
959978
971677
Failover Cluster Management updates for SCVMM Hosts
951308
958065

New updates, not verified by the VMMCA
WinRM-Win2003
936059 An update is available for the Windows Remote Management feature in Windows Server 2003 and in Windows XP
WMI – Win2008, SP2
968936 Memory corruption may occur with the Windows Management Instrumentation (WMI) service on a computer that is running Windows Server 2008 or Windows Vista Service Pack 1
WMI – Win2008, SP2
971403 A rollup hotfix package for Windows Server 2008 Failover Clustering WMI provider
WMI – Win2008, SP2
970520 The Wmiprvse.exe process creates a memory leak on a computer that is running Windows Server 2008 if you remotely monitor this process by using the WMI interface on a computer that is running Windows Server 2003 or Windows XP
WMI – Win2008R2
974930 An application or service that queries information about a failover cluster by using the WMI provider may experience low performance or a time-out exception
WMI – Win2008R2
981314 The “Win32_Service” WMI class leaks memory in Windows Server 2008 R2 and in Windows 7
Hyper-V – Win2008R2
981618 The computer stops responding or restarts during the Hyper-V Live Migration process in Windows Server 2008 R2
P2V – Win2000
834010 A deadlock occurs when a program that uses WMI calls the LoadLibrary() or the FreeLibrary() function in Windows 2000
P2V – Win2000, 2003
892294 A WMI event notification query does not detect a user permissions change on Windows 2000 or Windows Server 2003
P2V – Win2000
843527 The Win32_SCSIController WMI class cannot obtain SCSI controller information after you install the MS04-011 security update
P2V – SCVMM2008
959596 Description of the System Center Virtual Machine Manager 2008 update to address physical to virtual (P2V) issues
P2V – SCVMM2008
971816 Using P2V together with System Center Virtual Machine Manager 2008 may fail with error 3154 (0x8099319E) or error 13252 (0x809933C4)
VMM Rollup – SCVMM 2008R2
976244 Description of the System Center Virtual Machine Manager 2008 R2 hotfix rollup package: November 10, 2009
VMM Rollup – SCVMM 2008R2
978560 Description of the System Center Virtual Machine Manager 2008 R2 hotfix rollup package: February 9, 2010
Other – SCVMM2008R2
976246 When you remove a virtual hard disk from a virtual machine in System Center Virtual Machine Manager 2008 R2, the .vhd file on the Hyper-V server is deleted without warning