今天给客户部署lync 时候需要给用户提示哪些文件需要在防病毒软件中排除，类似exchange 一样，客户使用mcafee ，

 

这里有微软相关给出建议。

 http://technet.microsoft.com/en-us/library/gg195736.aspx

  • Lync Server 2010 进程：
    • ASMCUSvc.exe
    • AVMCUSvc.exe
    • DataMCUSvc.exe
    • DataProxy.exe
    • FileTransferAgent.exe
    • IMMCUSvc.exe
    • MasterReplicatorAgent.exe
    • MediaRelaySvc.exe
    • MediationServerSvc.exe
    • MeetingMCUSvc.exe
    • MRASSvc.exe
    • OcsAppServerHost.exe
    • QmsSvc.exe
    • ReplicaReplicatorAgent.exe
    • RTCArch.exe
    • RtcCdr.exe
    • RTCSrv.exe
  • IIS 进程：
    • %systemroot%\system32\inetsrv\w3wp.exe
    • %systemroot%\SysWOW64\inetsrv\w3wp.exe
  • SQL Server 进程：
    • %ProgramFiles%\Microsoft SQL Server\MSSQL10.MSSQLSERVER\MSSQL\Binn\SQLServr.exe
    • %ProgramFiles%\Microsoft SQL Server\MSRS10.MSSQLSERVER\Reporting Services\ReportServer\Bin\ReportingServicesService.exe
    • %ProgramFiles%\Microsoft SQL Server\MSAS10.MSSQLSERVER\OLAP\Bin\MSMDSrv.exe
  • 目录和文件：
    • %systemroot%\System32\LogFiles
    • %systemroot%\SysWow64\LogFiles
    • %systemroot%\Windows\Assembly\GAC_MSIL
    • %programfiles%\Microsoft Lync Server 2010
    • %programfiles%\commonfiles\Microsoft Lync Server 2010
    • %SystemDrive%\RtcReplicaRoot
    • 文件共享存储（在拓扑生成器中指定）。文件存储在拓扑生成器中指定。
    • SQL Server 数据和日志文件，包括后端数据库、用户存储、存档存储、监控存储和应用程序存储的这些文件。可以在拓扑生成器中指定数据库和日志文件。

 

同时mcafee 也给出一些建议

https://kc.mcafee.com/corporate/index?page=content&id=KB67211

Environment

McAfee VirusScan Enterprise 8.*
Microsoft Windows 2008 SQL Server
Microsoft Windows 2005 SQL server
Microsoft Windows 2003 SQL server
Microsoft Windows 2000 SQL server
For details of all supported operating systems, see KB51109.

Summary

Recommended exclusions for running VirusScan Enterprise on a Microsoft SQL Server

Solution

File Type Exclusions:

.MDF SQL Server data files
.LDF SQL Server data files
.NDF SQL Server data files
.BAK SQL Server backup files
.TRN SQL Server backup files

 

 
Directory Exclusions:
\Program Files\Microsoft SQL Server\MSSQL$instancename\DATA\ Data files
\Program Files\Microsoft SQL Server\MSSQL$instancename\BACKUP\ Backup files
\Program Files\Microsoft SQL Server\MSSQL$instancename\FTDATA\ Full-text catalog files
\Program Files\Microsoft SQL Server\MSSQL.X\OLAP\Data\ Folder that holds Analysis Services data
  Folder holding Analysis Services temporary files used during Analysis Services processing

\Program Files\Microsoft SQL Server\MSSQL.X\OLAP\Backup\

 Analysis Services backup files
\Program Files\Microsoft SQL Server\MSSQL.X\OLAP\Log\ Folder holding Analysis Services log files

NOTE: Some of the these locations are configurable and you should exclude those directories as well.
 

Considerations when clustering:

"Q:\" (Quorum drive)

"%SystemRoot%\Cluster\" folder

The temp folder for the Cluster Service account. Exclude the folder "%SystemDrive%\ClusterServicAaccount\Local Settings\Temp\" from scanning for example.


IMPORTANT: When adding directories to be excluded in VirusScan Enterprise, all directory names are required to end on a backslash to distinguish them from file names. See KB50998

 

组合起来，就可以交给安全team 来完成即可。