Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm currently reviewing our AV configuration for our environment, and reviewing how the real-time scanner is configured. The options that I have for the real-time configuration is as follows.

On Read On Write On Read and Write

I could not find any specific recommendations from the vendor (TrendMicro OfficeScan) for configuring the real-time scan engine.

I would just like to get some other individuals ideas and thoughts on how they determine the real-time AV config for their environments. Do you use different methodologies for desktops and server systems? Any particular server roles (IIS, DC, SQL) where you would configure one realtime method over another?

share|improve this question
up vote 0 down vote accepted

I would think that you would want real time scanning active for both Read and Write operations. Make sure to configure the appropriate exclusions for the server roles that you have (DC, IIS, SQL, etc).

share|improve this answer
That is what I am currently configuring, however I have read some articles discussing real time scanning and how scanning on write does not offer any additional protection. I'm currently reviewing all of the exclusions are set correctly for the apps on the system. – danorth May 2 '11 at 2:14

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.