Title: Message
Say, Joe, what do you do to protect against the share-burrowing Worms/Virii?
 
 
Sincerely,

D�j� Ak�m�l�f�, MCSE MCSA MCP+I
www.akomolafe.com
www.iyaburo.com
Do you now realize that Today is the Tomorrow you were worried about Yesterday?  -anon


From: Joe
Sent: Tue 9/2/2003 4:02 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Anti-Virus Software and AD

Good info Todd. Actually I avoid AV on DC's but then we don't do file and print from them. If we did it would be a different story.
 
  joe
 
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd (NIH/CIT)
Sent: Tuesday, September 02, 2003 2:47 PM
To: '[EMAIL PROTECTED]'
Subject: [ActiveDir] Anti-Virus Software and AD

A few months back I started a thread about installing AV software on Domain Controllers.  There were a lot of good comments generated as part of the discussion with the recommendation to avoid software that triggered FRS replication, and recommendations to also exclude certain file types.  Another trend that was reported was that some people were getting recommendations from Microsoft that they don't run AV software on DC's because their Firewalls and such protect them. 
 
Recently I have discovered two new KB's that seem to offer some definitive recommendations from Microsoft.
 
 
Virus Scanning Recommendations on a Windows 2000 Domain Controller 
 
Antivirus, Backup, and Disk Optimization Programs That Are Compatible with the File Replication Service
 
 
Below is a summary of the MS recommendations

Programs That Do Not Trigger FRS Replication

The following programs do not modify files in a way that triggers FRS replication.

Antivirus

  • eTrust Antivirus build 96 or later with the "NTFS incremental scan" feature disabled
  • McAfee/NAI NetShield 4.50 with the NetShield Hotfix Rollup
  • Norton AntiVirus 7.6 or later

File and System State Backup

  • Legato Octopus/Replistor 5.2.1

Disk Optimization

  • None currently reported  
Toddler 

Reply via email to