Following an In-Place upgrade to Skype for Business we wanted to update the antivirus exceptions. Microsoft were quite late to post the Lync 2013 Servers below and im unsure on the timescales for the Skype for Business exclusions list.
Lync 2013 Antivirus Exclusions List from TechNet
https://technet.microsoft.com/en-us/library/dn440138(v=ocs.15).aspx
So im taking a guess following the new directories created etc and updating the existing Lync 2013 exclusions, feel to let me know any more you find and need.
Skype for Business Antivirus Exclusions
I’ve highlighted any new changes to the Lync 2013 exclusions below
As with Lync server 2013 exclusions Folder and file locations listed below are the default locations for Skype for Business. For any locations for which you did not use the default, exclude the locations you specified for your organization instead of the default locations specified in this topic.
Skype for Business processes: (One additional for sfb HealthAgent.exe)
-
ABServer.exe
-
AcpMcuSvc.exe
-
ASMCUSvc.exe
-
AVMCUSvc.exe
-
ChannelService.exe
-
ClsAgent.exe
-
ComplianceService.exe
-
DataMCUSvc.exe
-
DataProxy.exe
-
FileTransferAgent.exe
-
HealthAgent,exe ( Skype for Business Server 2015 Health Agent)
-
IMMCUSvc.exe
-
LysSvc.exe
-
MasterReplicatorAgent.exe
-
MediaRelaySvc.exe
-
MediationServerSvc.exe
-
MRASSvc.exe
-
OcsAppServerHost.exe
-
ReplicaReplicatorAgent.exe
-
ReplicationApp.exe
-
RtcHost.exe
-
RTCSrv.exe
-
XmppProxy.exe
-
XmppTGW.exe
Windows Fabric Host Service processes: (Believe all the same for Skype for Business so valid)
-
Fabric.exe
-
FabricDCA.exe
-
FabricHost.exe
IIS processes: (Believe all the same for Skype for Business so valid as its IIS)
-
%systemroot%\system32\inetsrv\w3wp.exe
-
%systemroot%\SysWOW64\inetsrv\w3wp.exe
SQL Server Back-End processes: (Depends on SQL Versions and Instances names so be careful here to add them correctly)
-
%ProgramFiles%\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\SQLServr.exe
-
%ProgramFiles%\Microsoft SQL Server\MSRS11.MSSQLSERVER\Reporting Services\ReportServer\Bin\ReportingServicesService.exe
-
%ProgramFiles%\Microsoft SQL Server\MSAS11.MSSQLSERVER\OLAP\Bin\MSMDSrv.exe
SQL Server Front-End processes: (Requires updating as SQL 2014 is installed now) MSSQL11 need to be MSSQL12
-
%ProgramFiles%\Microsoft SQL Server\MSSQL12.LYNCLOCAL\MSSQL\Binn\SQLServr.exe
-
%ProgramFiles%\Microsoft SQL Server\MSSQL12.RTCLOCAL\MSSQL\Binn\SQLServr.exe
-
Standard Edition Install don’t forget RTC Instance as well
-
%ProgramFiles%\Microsoft SQL Server\MSSQL12.RTC\MSSQL\Binn\SQLServr.exe
Directories and files: (New Directories to be added for Sfb)
-
%systemroot%\System32\LogFiles
-
%systemroot%\SysWow64\LogFiles
-
%systemroot%\Microsoft.NET\assembly\GAC_MSIL
-
%programfiles%\Skype for Business Server 2015
-
%programfiles%\Common Files\Skype for Business Server 2015Watcher Node
-
%programfiles%\Common Files\Skype for Business Server 2015
-
%programfiles%\Common Files\Skype for Business Online
-
%SystemDrive%\RtcReplicaRoot
-
File share store (specified in Topology Builder). File stores are specified in Topology Builder. (Still valid for sfb)
-
SQL Server data and log files, including those for the back-end database, user store, archiving store, monitoring store, and application store. Database and log files can be specified in Topology Builder. For details about the data and log files for each database, including default names, see SQL Server data and log file placement for Lync Server 2013 in the Deployment documentation. (Still valid for sfb as database names are the same)
-
SQL Server data and log files, including those for the Front-end database, Lync store, and RtcDatabase store. They are normally under %localdrive%\CSData. (Still Valid for sfb)