Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have a small server running a couple of internal classic asp and .net websites. SQL 2008 is also installed on this box.

How should Endpoint Protection be configured to not screw with the normal functioning of the apps?

share|improve this question
is "not at all" an option? ;-) – Chris_K Jan 11 '10 at 21:08
Unfortunately no. The sys admin insists on it being installed. I had a helluva time just getting MS's platform installer to work.. until I temporarily disabled the whole thing. – NotMe Jan 11 '10 at 21:22
up vote 2 down vote accepted

That's strange. It sounds like the sysadmin has a sense of ownership of the server if he's insisting that it be installed. It also sounds like he is the AV administrator, but it doesn't sound like he knows what AV exclusions to configure on a web and SQL server. Is that the case?

Have a look here:

And here:

share|improve this answer
Yes that is the case. He's the network admin in a mid size company. Their IT resources are, shall we say, lacking in the knowledge department. I had a heck of a time just getting SQL 2008 to install. Symantec kept modifying the msi file. When I turned it off, it would turn itself back on 45 seconds later. – NotMe Jan 15 '10 at 1:14

Assuming you have access to the Management console, Create Exclusions / Centralized Exceptions for files with the following extentions -

*.MDF ; *.NDF and *.LDF

Additionally, create an exception for the folder where your database data files (*.MDF ; *.NDF and *.LDF) are going to be stored

Not sure waht the imapct on IIS will be. Not aware of any specific exceptions needed.

Is any part of the SEPP arcitecture on the box other than the client?

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.