[ActiveDir] Sysvol and AV exclusions

[Tony Murray]

Hi all

 

For a while now, I've been including/excluding Sysvol from AV scans based on the recommendations in these articles.

 

Antivirus programs may modify security descriptors and cause excessive replication of FRS data in SYSVOL and DFS

 

http://support.microsoft.com/?kbid=284947

Antivirus, backup, and disk optimization programs that are compatible with the File Replication Service

http://support.microsoft.com/kb/815263/

In other words, if the AV software is not FRS-compliant then I exlude Sysvol from scans.

 

However, I recently came across the following article:

 

Virus scanning recommendations on a Windows 2000 or on a Windows Server 2003 domain controller

 

http://support.microsoft.com/kb/822158

 

This includes a recommendation to exclude Sysvol, but doesn't really say why.  The article doesn't make any reference to the KB284947 and KB815263 articles, so I don't know whether the recommendations are based on that information or new information.

 

Can anyone clarify the situation for me?

 

Tony