Endpoint Protection Antimalware Policy SQL 2008

Question

We use SCCM 2012 to manage our antimalware solution (SCEP). We created policies for different servers for example SQL server 2008 R2. We created Endpoint Protection Antimalware policy SQL 2008:
To prevent performance issues MS reccomends to exclude some processes from virus scanning:
%ProgramFiles%\Microsoft SQL Server\MSSQL10_50.<Instance Name>\MSSQL\Binn\SQLServr.exe
%ProgramFiles%\Microsoft SQL Server\MSSQL10_50.<Instance Name>\Reporting Services\ReportServer\Bin\ReportingServicesService.exe
%ProgramFiles%\Microsoft SQL Server\MSSQL10_50.<Instance Name>\OLAP\Bin\MSMDSrv.exe
As you can see we currently use MSSQLSERVER as instance name.
Because we use many different SQL instances we need to restrict the ammount of policies to one and don't want to create seperate policies for different SQL instances. Is it possible to use some kind of wildcard, like: %ProgramFiles%\Microsoft SQL Server\MSSQL10_50.*\MSSQL\Binn\SQLServr.exe,
where instance name is * ?
Is it also possible to monitor the scan status real time? I would like to see which files are being scanned when starting a quick/full scan. From within the SCEP client it isn't possible.
Hope you could help me out.
Sacha

Answer 1

Hey
Thanks for the post ,
As i comprehension Your request  - I suggest You to exclude the Parent SQL folder : 
%ProgramFiles%\Microsoft SQL Server
It will exclude the all instances under the parent folder .
For file process You have to provide full path name .
"to see which files are being scanned when starting a quick/full scan"
You have to create reporting on the sccm for that :
http://technet.microsoft.com/en-us/library/gg712698.aspx
I'd be glad to answer any question