Title: Message
|
Good
info Todd. Actually I avoid AV on DC's but then we don't do file and print
from them. If we did it would be a different story.
joe
A few months back
I started a thread about installing AV software on Domain Controllers.
There were a lot of good comments generated as part of the discussion with the
recommendation to avoid software that triggered FRS replication, and
recommendations to also exclude certain file types. Another trend that
was reported was that some people were getting recommendations from Microsoft
that they don't run AV software on DC's because their Firewalls and such
protect them.
Recently I have
discovered two new KB's that seem to offer some definitive recommendations
from Microsoft.
Virus Scanning Recommendations on a Windows 2000 Domain
Controller
Antivirus, Backup,
and Disk Optimization Programs That Are Compatible with the File Replication
Service
Below is a summary of the MS
recommendations
Programs That Do Not Trigger FRS
Replication
The following programs do not modify files
in a way that triggers FRS replication.
Antivirus
- eTrust Antivirus build 96 or later with
the "NTFS incremental scan" feature disabled
- McAfee/NAI NetShield 4.50 with the
NetShield Hotfix Rollup
- Norton AntiVirus 7.6 or
later
File and System State Backup
- Legato Octopus/Replistor
5.2.1
Disk Optimization
Toddler
|
