Recommended ZCM Antivirus Exclusions
Source: Novell
http://www.novell.com/support/viewContent.do?externalId=7007545&sliceId=1
Recommended ZCM Anti-Virus Exclusions
This document (7007545) is provided subject to the disclaimer at the end of this document.
Environment
Novell ZENworks 10 Configuration Management
Novell ZENworks 11 Configuration Management
Situation
The ZCM logon process can involve significant HDD I/O.
Anti-Virus scanning of all of this activity can sometimes significantly slow down computers during the logon process.
Resolution
Please Exclude Activity of the Following ZENworks EXEs:
%ZENWORKS_HOME%\bin\analyze.exe
%ZENWORKS_HOME%\bin\cabarc32.exe
%ZENWORKS_HOME%\bin\colw32.exe
%ZENWORKS_HOME%\bin\cabarc32.exe
%ZENWORKS_HOME%\bin\colw32.exe
%ZENWORKS_HOME%\bin\mcescan.exe
%ZENWORKS_HOME%\bin\nalwin.exe
%ZENWORKS_HOME%\bin\nalwin.exe
%ZENWORKS_HOME%\bin\remediate.exe
%ZENWORKS_HOME%\bin\zenNotifyIcon.exe
%ZENWORKS_HOME%\bin\zenUserDaemon.exe
%ZENWORKS_HOME%\bin\zenWindowsDaemon.exe
%ZENWORKS_HOME%\bin\zenWorksWindowsService.exe
%ZENWORKS_HOME%\bin\Handlers\RMENF.exe
%ZENWORKS_HOME%\bin\zenUserDaemon.exe
%ZENWORKS_HOME%\bin\zenWindowsDaemon.exe
%ZENWORKS_HOME%\bin\zenWorksWindowsService.exe
%ZENWORKS_HOME%\bin\Handlers\RMENF.exe
%ZENWORKS_HOME%\esm\zesservice.exe
%ZENWORKS_HOME%\esm\zesuser.exe
%ZENWORKS_HOME%\zpm\analyze.exe (This file does exist in two folders.)
%ZENWORKS_HOME%\zpm\cabarc.exe (This file does exist in two folders.)
%ZENWORKS_HOME%\zpm\mcescan.exe (This file does exist in two folders.)
%ZENWORKS_HOME%\zpm\mcescan.exe (This file does exist in two folders.)
%ZENWORKS_HOME%\zpm\remediate.exe (This file does exist in two folders.)
%SystemRoot%\system32\secedit.exe (Used for GPO Processing)
%SystemRoot%\system32\winlogon.exe (Used for GPO Processing)
%SystemRoot%\system32\wuauclt.exe
Please exclude the following files from being scanned:
%ZENWORKS_HOME%\cache\zmd\*.appstate
%ZENWORKS_HOME%\cache\zmd\zencache\metadata\objinfo.db
%ZENWORKS_HOME%\cache\zmd\zencache\metadata\fileinfo.db
%ZENWORKS_HOME%\cache\zmd\*.appstate
%ZENWORKS_HOME%\cache\zmd\zencache\metadata\objinfo.db
%ZENWORKS_HOME%\cache\zmd\zencache\metadata\fileinfo.db
%ZENWORKS_HOME%\esm\*.*
%ZENWORKS_HOME%\work\status\mdstatus.db
%ZENWORKS_HOME%\logs\*.logs (Include SubDirectories)
%SystemRoot%\system32\grouppolicies\adm\*.adm
%ZENWORKS_HOME%\work\status\mdstatus.db
%ZENWORKS_HOME%\logs\*.logs (Include SubDirectories)
%SystemRoot%\system32\grouppolicies\adm\*.adm
%SystemRoot%\system32\grouppolicies\machine\*.pol
%SystemRoot%\system32\grouppolicies\user\*.pol
Note: Each Anti-Virus package has different options that can be configured and different syntax used for exclusions.
Please be sure to review the documentation for the Anti-Virus package in use for the proper method and syntax.
Additional Information
In addition to AV Scanning Exclusions, Anti-Virus activity scheduled to occur at startup can also considerably slow down a device's initial logon.
These include but are not limited to the following:
Scheduling a HDD Scan during PC Boot.
Scheduling a HDD Scan on during PC Boot if a previously Scheduled scan is missed.
Scheduling Anti-Virus Software and Signature updates during Boot.
Scheduling Anti-Virus Software and Signature updates during Boot if a previously scheduled update is missed.
If these scheduled events are causing an issue consider the following options:
Delay missed updates until shortly after the device boots.
Schedule WOL events for devices for 30-60 minutes prior to normal device usage.
Performance issues have also been seen when Multiple Anti-Virus packages are installed on a device.
This has most often been seen when Microsoft Security Essentials is installed with another 3rd party Anti-Virus solution.
Document
| Document ID: | 7007545 |
| Creation Date: | 01-11-2011 |
| Modified Date: | 06-14-2011 |
| Novell Product: | ZENworks Configuration Management |
Disclaimer
The Origin of this information may be internal or external to Novell. Novell makes all reasonable efforts to verify this information. However, the information provided in this document is for your information only. Novell makes no explicit or implied claims to the validity of this information.
Any trademarks referenced in this document are the property of their respective owners. Consult your product manuals for complete trademark information.
