Skype for Business Server 2015 Antivirus Exclusions

Following an In-Place upgrade to Skype for Business we wanted to update the antivirus exceptions. Microsoft were quite late to post the Lync 2013 Servers below and im unsure on the timescales for the Skype for Business exclusions list.

Lync 2013 Antivirus Exclusions List from TechNet

https://technet.microsoft.com/en-us/library/dn440138(v=ocs.15).aspx

So im taking a guess following the new directories created etc and updating the existing Lync 2013 exclusions, feel to let me know any more you find and need.

Skype for Business Antivirus Exclusions

I’ve highlighted any new changes to the Lync 2013 exclusions below

As with Lync server 2013 exclusions Folder and file locations listed below are the default locations for Skype for Business. For any locations for which you did not use the default, exclude the locations you specified for your organization instead of the default locations specified in this topic.

  • Skype for Business processes: (One additional for sfb HealthAgent.exe)

    • ABServer.exe

    • AcpMcuSvc.exe

    • ASMCUSvc.exe

    • AVMCUSvc.exe

    • ChannelService.exe

    • ClsAgent.exe

    • ComplianceService.exe

    • DataMCUSvc.exe

    • DataProxy.exe

    • FileTransferAgent.exe

    • HealthAgent,exe ( Skype for Business Server 2015 Health Agent)

    • IMMCUSvc.exe

    • LysSvc.exe

    • MasterReplicatorAgent.exe

    • MediaRelaySvc.exe

    • MediationServerSvc.exe

    • MRASSvc.exe

    • OcsAppServerHost.exe

    • ReplicaReplicatorAgent.exe

    • ReplicationApp.exe

    • RtcHost.exe

    • RTCSrv.exe

    • XmppProxy.exe

    • XmppTGW.exe

  • Windows Fabric Host Service processes: (Believe all the same for Skype for Business so valid)

    • Fabric.exe

    • FabricDCA.exe

    • FabricHost.exe

  • IIS processes: (Believe all the same for Skype for Business so valid as its IIS)

    • %systemroot%\system32\inetsrv\w3wp.exe

    • %systemroot%\SysWOW64\inetsrv\w3wp.exe

  • SQL Server Back-End processes: (Depends on SQL Versions and Instances names so be careful here to add them correctly)

    • %ProgramFiles%\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\SQLServr.exe

    • %ProgramFiles%\Microsoft SQL Server\MSRS11.MSSQLSERVER\Reporting Services\ReportServer\Bin\ReportingServicesService.exe

    • %ProgramFiles%\Microsoft SQL Server\MSAS11.MSSQLSERVER\OLAP\Bin\MSMDSrv.exe

  • SQL Server Front-End processes: (Requires updating as SQL 2014 is installed now) MSSQL11 need to be MSSQL12

    • %ProgramFiles%\Microsoft SQL Server\MSSQL12.LYNCLOCAL\MSSQL\Binn\SQLServr.exe

    • %ProgramFiles%\Microsoft SQL Server\MSSQL12.RTCLOCAL\MSSQL\Binn\SQLServr.exe

    • Standard Edition Install don’t forget RTC Instance as well

    • %ProgramFiles%\Microsoft SQL Server\MSSQL12.RTC\MSSQL\Binn\SQLServr.exe

  • Directories and files: (New Directories to be added for Sfb)

    • %systemroot%\System32\LogFiles

    • %systemroot%\SysWow64\LogFiles

    • %systemroot%\Microsoft.NET\assembly\GAC_MSIL

    • %programfiles%\Skype for Business Server 2015

    • %programfiles%\Common Files\Skype for Business Server 2015Watcher Node

    • %programfiles%\Common Files\Skype for Business Server 2015

    • %programfiles%\Common Files\Skype for Business Online

    • %SystemDrive%\RtcReplicaRoot

    • File share store (specified in Topology Builder). File stores are specified in Topology Builder. (Still valid for sfb)

    • SQL Server data and log files, including those for the back-end database, user store, archiving store, monitoring store, and application store. Database and log files can be specified in Topology Builder. For details about the data and log files for each database, including default names, see SQL Server data and log file placement for Lync Server 2013 in the Deployment documentation. (Still valid for sfb as database names are the same)

    • SQL Server data and log files, including those for the Front-end database, Lync store, and RtcDatabase store. They are normally under %localdrive%\CSData. (Still Valid for sfb)

  • Advertisement

    Leave a Reply

    Fill in your details below or click an icon to log in:

    WordPress.com Logo

    You are commenting using your WordPress.com account. Log Out /  Change )

    Facebook photo

    You are commenting using your Facebook account. Log Out /  Change )

    Connecting to %s

    This site uses Akismet to reduce spam. Learn how your comment data is processed.