Title: Message
Any particular reason, Joe?
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Joe
Sent: Tuesday, September 02, 2003
7:02 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir]
Anti-Virus Software and AD
Good info Todd. Actually I avoid AV
on DC's but then we don't do file and print from them. If we did it would be a
different story.
-----Original Message-----
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd (NIH/CIT)
Sent: Tuesday, September 02, 2003
2:47 PM
To: '[EMAIL PROTECTED]'
Subject: [ActiveDir] Anti-Virus
Software and AD
A few months back I started a thread about installing AV
software on Domain Controllers. There were a lot of good comments
generated as part of the discussion with the recommendation to avoid software
that triggered FRS replication, and recommendations to also exclude certain
file types. Another trend that was reported was that some people were getting
recommendations from Microsoft that they don't run AV software on DC's because
their Firewalls and such protect them.
Recently I have discovered two new KB's that seem to offer
some definitive recommendations from Microsoft.
Virus Scanning Recommendations on a
Windows 2000 Domain Controller
Antivirus, Backup, and Disk Optimization Programs That Are Compatible
with the File Replication Service
Below is a summary of the MS
recommendations
Programs That Do Not Trigger FRS Replication
The following programs do not modify
files in a way that triggers FRS replication.
Antivirus
- eTrust Antivirus build 96 or later with the "NTFS
incremental scan" feature disabled
- McAfee/NAI NetShield 4.50 with the NetShield Hotfix Rollup
- Norton AntiVirus 7.6 or later
File and System State Backup
- Legato Octopus/Replistor 5.2.1
Disk Optimization
|
