Forefront Endpoint Protection 2010 - Exclude files and locations == Exclude processes??

Hi,
I have a server with Forefront Endpoint Protection 2010 installed.
This server is running Backup Exec. I have created an files and folder exclusion pointing to:
C:\Program Files\Symantec
There are various references online like this one
http://www.symantec.com/business/support/index?page=content&id=TECH74529
Which highlight excluding the processes rather than what I have done...
If the process is inside the Symantec folder is there any technical difference between using the files and folder exclusion as opposed to the process exclusion?

Yes, the difference is that excluding the folder location will only exclude the folder and the child items of that specific location from scanning activity whereas excluding a process will exclude any activity by the process regardless of location. So,
with a process exclusion, if that process under C:\Program Files\Symantec produces activity in C:\Windows, the activity will be excluded from scanning, but if you just have the C:\Program Files\Symantec folder excluded, the activity in C:\Windows will not
be excluded.

Similar Messages

  • Forefront Endpoint Protection 2010 Antimalware Activity and Antimalware Protection Summary Reports aren't rendering properly.

    The Antimalware Activity and Antimalware Protection Summary Reports aren't rendering properly.  When I export them to PDF, they look normal but when I run either one of these reports through they don't display properly.  In the Antimalware
    Protection Summary report, the Latest Antimalware Protection Summary title bar has been extended and the Status legend is coved by white space and Latest Antimalware Definitions Summary title bar has been extended and Period legend
    are covered by white space.  On the same page the Antimalware Protection History-Week has been flushed to the right to where it only dispays Antimalw and the Antimalware Definitions History-Week has been flushed to the right to where it only dispays
    Antimalw.  On the Antimalware Activity the Actions legend has been flushed to the left.

    This is an old question but you may try it using the latest version of Forefront Endpoint Protection or System Center Endpoint Protection and let us know if you are able to reproduce the problem. There are many improvements in latest release of SCEP and
    FEP.

  • Endpoint Protection on System Center 2012 Configuration Manager Unhandled exception occurred in your application after changing the excluded files and locations

    I added a number of folders and files in the excluded files and locations and after that I am unable to access the Antimalware Policies it gives the following error( I am new at sccm):
    Unhandled exception occurred in your application. If you click continue the application will ignore this error and attempt to continue. I you click quit the application will close immediately
    Object reference not set to an instance of an oblect
    With the following details:
    See the end of this message for details on invoking
    just-in-time (JIT) debugging instead of this dialog box.
    ************** Exception Text **************
    System.NullReferenceException: Object reference not set to an instance of an object.
       at Microsoft.ConfigurationManagement.ManagementProvider.WqlQueryEngine.WqlQueryPropertySingleItem.get_BooleanValue()
       at Microsoft.ConfigurationManagement.AdminConsole.ClientAgentSettings.Utilities.CreateSCIResultObject(IResultObject antimalwareResultObject)
       at Microsoft.ConfigurationManagement.AdminConsole.ClientAgentSettings.Utilities.LoadDefaultSettingObjects(ConnectionManagerBase connectionManager, Dictionary`2& defaultSettingObjects, DialogType dialogType)
       at Microsoft.ConfigurationManagement.AdminConsole.ClientAgentSettings.HomePageControl.InitializePageControl()
       at Microsoft.ConfigurationManagement.AdminConsole.SccmPageControlDialog.OnLoad(EventArgs e)
       at System.Windows.Forms.Form.OnCreateControl()
       at System.Windows.Forms.Control.CreateControl(Boolean fIgnoreVisible)
       at System.Windows.Forms.Control.CreateControl()
       at System.Windows.Forms.Control.WmShowWindow(Message& m)
       at System.Windows.Forms.Control.WndProc(Message& m)
       at System.Windows.Forms.ScrollableControl.WndProc(Message& m)
       at System.Windows.Forms.ContainerControl.WndProc(Message& m)
       at System.Windows.Forms.Form.WmShowWindow(Message& m)
       at System.Windows.Forms.Form.WndProc(Message& m)
       at System.Windows.Forms.Control.ControlNativeWindow.OnMessage(Message& m)
       at System.Windows.Forms.Control.ControlNativeWindow.WndProc(Message& m)
       at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam)
    ************** Loaded Assemblies **************
    mscorlib
        Assembly Version: 4.0.0.0
        Win32 Version: 4.0.30319.18051 built by: FX45RTMGDR
        CodeBase: file:///C:/Windows/Microsoft.NET/Framework/v4.0.30319/mscorlib.dll
    Microsoft.ConfigurationManagement
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/Microsoft.ConfigurationManagement.exe
    System.Drawing
        Assembly Version: 4.0.0.0
        Win32 Version: 4.0.30319.18022 built by: FX45RTMGDR
        CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Drawing/v4.0_4.0.0.0__b03f5f7f11d50a3a/System.Drawing.dll
    System
        Assembly Version: 4.0.0.0
        Win32 Version: 4.0.30319.18045 built by: FX45RTMGDR
        CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System/v4.0_4.0.0.0__b77a5c561934e089/System.dll
    System.Windows.Forms
        Assembly Version: 4.0.0.0
        Win32 Version: 4.0.30319.18046 built by: FX45RTMGDR
        CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Windows.Forms/v4.0_4.0.0.0__b77a5c561934e089/System.Windows.Forms.dll
    Microsoft.EnterpriseManagement.UI.ConsoleFramework
        Assembly Version: 7.1.1000.0
        Win32 Version: 7.1.3825.0
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/Microsoft.EnterpriseManagement.UI.ConsoleFramework.DLL
    Microsoft.ConfigurationManagement.ManagementProvider
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/Microsoft.ConfigurationManagement.ManagementProvider.DLL
    System.Xml
        Assembly Version: 4.0.0.0
        Win32 Version: 4.0.30319.18058 built by: FX45RTMGDR
        CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Xml/v4.0_4.0.0.0__b77a5c561934e089/System.Xml.dll
    Microsoft.EnterpriseManagement.UI.Foundation
        Assembly Version: 7.1.1000.0
        Win32 Version: 7.1.3825.0
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/Microsoft.EnterpriseManagement.UI.Foundation.DLL
    System.Core
        Assembly Version: 4.0.0.0
        Win32 Version: 4.0.30319.17929 built by: FX45RTMREL
        CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Core/v4.0_4.0.0.0__b77a5c561934e089/System.Core.dll
    System.ServiceModel.Web
        Assembly Version: 4.0.0.0
        Win32 Version: 4.0.30319.18045 built by: FX45RTMGDR
        CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.ServiceModel.Web/v4.0_4.0.0.0__31bf3856ad364e35/System.ServiceModel.Web.dll
    System.ServiceModel
        Assembly Version: 4.0.0.0
        Win32 Version: 4.0.30319.18056 built by: FX45RTMGDR
        CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.ServiceModel/v4.0_4.0.0.0__b77a5c561934e089/System.ServiceModel.dll
    SMDiagnostics
        Assembly Version: 4.0.0.0
        Win32 Version: 4.0.30319.17929 built by: FX45RTMREL
        CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/SMDiagnostics/v4.0_4.0.0.0__b77a5c561934e089/SMDiagnostics.dll
    System.ServiceModel.Internals
        Assembly Version: 4.0.0.0
        Win32 Version: 4.0.30319.17929 built by: FX45RTMREL
        CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.ServiceModel.Internals/v4.0_4.0.0.0__31bf3856ad364e35/System.ServiceModel.Internals.dll
    PresentationFramework
        Assembly Version: 4.0.0.0
        Win32 Version: 4.0.30319.18058
        CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/PresentationFramework/v4.0_4.0.0.0__31bf3856ad364e35/PresentationFramework.dll
    WindowsBase
        Assembly Version: 4.0.0.0
        Win32 Version: 4.0.30319.18058 built by: FX45RTMGDR
        CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/WindowsBase/v4.0_4.0.0.0__31bf3856ad364e35/WindowsBase.dll
    PresentationCore
        Assembly Version: 4.0.0.0
        Win32 Version: 4.0.30319.18058 built by: FX45RTMGDR
        CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_32/PresentationCore/v4.0_4.0.0.0__31bf3856ad364e35/PresentationCore.dll
    System.Xaml
        Assembly Version: 4.0.0.0
        Win32 Version: 4.0.30319.18016 built by: FX45RTMGDR
        CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Xaml/v4.0_4.0.0.0__b77a5c561934e089/System.Xaml.dll
    System.Configuration
        Assembly Version: 4.0.0.0
        Win32 Version: 4.0.30319.18058 built by: FX45RTMGDR
        CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Configuration/v4.0_4.0.0.0__b03f5f7f11d50a3a/System.Configuration.dll
    AdminUI.SmsTraceListener
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.SmsTraceListener.DLL
    Microsoft.GeneratedCode
        Assembly Version: 1.0.0.0
        Win32 Version: 4.0.30319.18058 built by: FX45RTMGDR
        CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Xml/v4.0_4.0.0.0__b77a5c561934e089/System.Xml.dll
    Microsoft.EnterpriseManagement.UI.ConsoleFramework.resources
        Assembly Version: 7.1.1000.0
        Win32 Version: 7.1.3825.0
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/en/Microsoft.EnterpriseManagement.UI.ConsoleFramework.resources.DLL
    Microsoft.EnterpriseManagement.UI.RibbonConsole
        Assembly Version: 1.0.523.0
        Win32 Version: 3.0.2085.0
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/Microsoft.EnterpriseManagement.UI.RibbonConsole.DLL
    RibbonControlsLibrary
        Assembly Version: 3.5.41019.1
        Win32 Version: 3.5.41019.1
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/RibbonControlsLibrary.DLL
    PresentationFramework.AeroLite
        Assembly Version: 4.0.0.0
        Win32 Version: 4.0.30319.18046 built by: FX45RTMGDR
        CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/PresentationFramework.AeroLite/v4.0_4.0.0.0__31bf3856ad364e35/PresentationFramework.AeroLite.dll
    Microsoft.EnterpriseManagement.UI.RibbonLayout
        Assembly Version: 1.0.523.0
        Win32 Version: 3.0.2085.0
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/Microsoft.EnterpriseManagement.UI.RibbonLayout.DLL
    Microsoft.Windows.Shell
        Assembly Version: 3.5.41019.1
        Win32 Version: 3.5.41019.1
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/Microsoft.Windows.Shell.DLL
    Microsoft.VirtualManager.UI.ViewModel.Core
        Assembly Version: 1.0.523.0
        Win32 Version: 3.0.2085.0
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/Microsoft.VirtualManager.UI.ViewModel.Core.DLL
    Microsoft.EnterpriseManagement.UI.Controls
        Assembly Version: 7.1.1000.0
        Win32 Version: 7.1.3825.0
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/Microsoft.EnterpriseManagement.UI.Controls.DLL
    Microsoft.EnterpriseManagement.UI.RibbonData
        Assembly Version: 1.0.523.0
        Win32 Version: 3.0.2085.0
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/Microsoft.EnterpriseManagement.UI.RibbonData.DLL
    AdminUI.HelpSystem
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.HelpSystem.DLL
    AdminUI.UIResources
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.UIResources.DLL
    AdminUI.PersonalFolders
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.PersonalFolders.DLL
    AdminUI.ConsoleGlobalSearchView
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.ConsoleGlobalSearchView.DLL
    PresentationFramework.Classic
        Assembly Version: 4.0.0.0
        Win32 Version: 4.0.30319.17929 built by: FX45RTMREL
        CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/PresentationFramework.Classic/v4.0_4.0.0.0__31bf3856ad364e35/PresentationFramework.Classic.dll
    Microsoft.EnterpriseManagement.UI.Controls.resources
        Assembly Version: 7.1.1000.0
        Win32 Version: 7.1.3825.0
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/en/Microsoft.EnterpriseManagement.UI.Controls.resources.DLL
    WindowsFormsIntegration
        Assembly Version: 4.0.0.0
        Win32 Version: 4.0.30319.18058 built by: FX45RTMGDR
        CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/WindowsFormsIntegration/v4.0_4.0.0.0__31bf3856ad364e35/WindowsFormsIntegration.dll
    PresentationFramework-SystemXml
        Assembly Version: 4.0.0.0
        Win32 Version: 4.0.30319.17929
        CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/PresentationFramework-SystemXml/v4.0_4.0.0.0__b77a5c561934e089/PresentationFramework-SystemXml.dll
    PresentationFramework.Aero
        Assembly Version: 4.0.0.0
        Win32 Version: 4.0.30319.17929 built by: FX45RTMREL
        CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/PresentationFramework.Aero/v4.0_4.0.0.0__31bf3856ad364e35/PresentationFramework.Aero.dll
    PresentationFramework-SystemCore
        Assembly Version: 4.0.0.0
        Win32 Version: 4.0.30319.17929
        CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/PresentationFramework-SystemCore/v4.0_4.0.0.0__b77a5c561934e089/PresentationFramework-SystemCore.dll
    UIAutomationProvider
        Assembly Version: 4.0.0.0
        Win32 Version: 4.0.30319.17929 built by: FX45RTMREL
        CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/UIAutomationProvider/v4.0_4.0.0.0__31bf3856ad364e35/UIAutomationProvider.dll
    UIAutomationTypes
        Assembly Version: 4.0.0.0
        Win32 Version: 4.0.30319.17929 built by: FX45RTMREL
        CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/UIAutomationTypes/v4.0_4.0.0.0__31bf3856ad364e35/UIAutomationTypes.dll
    AdminUI.Controls
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.Controls.DLL
    AdminUI.Common
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.Common.DLL
    Microsoft.EnterpriseManagement.UI.WpfViews
        Assembly Version: 7.1.1000.0
        Win32 Version: 7.1.3825.0
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/Microsoft.EnterpriseManagement.UI.WpfViews.DLL
    Microsoft.EnterpriseManagement.UI.ViewFramework
        Assembly Version: 7.1.1000.0
        Win32 Version: 7.1.3825.0
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/Microsoft.EnterpriseManagement.UI.ViewFramework.DLL
    Microsoft.GeneratedCode
        Assembly Version: 1.0.0.0
        Win32 Version: 4.0.30319.18058 built by: FX45RTMGDR
        CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Xml/v4.0_4.0.0.0__b77a5c561934e089/System.Xml.dll
    System.Management
        Assembly Version: 4.0.0.0
        Win32 Version: 4.0.30319.17929 built by: FX45RTMREL
        CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Management/v4.0_4.0.0.0__b03f5f7f11d50a3a/System.Management.dll
    AdminUI.WqlQueryEngine
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.WqlQueryEngine.DLL
    AdminUI.WqlInitializer
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.WqlInitializer.DLL
    Microsoft.GeneratedCode
        Assembly Version: 1.0.0.0
        Win32 Version: 4.0.30319.18058 built by: FX45RTMGDR
        CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Xml/v4.0_4.0.0.0__b77a5c561934e089/System.Xml.dll
    Microsoft.GeneratedCode
        Assembly Version: 1.0.0.0
        Win32 Version: 4.0.30319.18058 built by: FX45RTMGDR
        CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Xml/v4.0_4.0.0.0__b77a5c561934e089/System.Xml.dll
    AdminUI.CollectionMenuActions
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.CollectionMenuActions.DLL
    Microsoft.GeneratedCode
        Assembly Version: 1.0.0.0
        Win32 Version: 4.0.30319.18058 built by: FX45RTMGDR
        CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Xml/v4.0_4.0.0.0__b77a5c561934e089/System.Xml.dll
    AdminUI.OSImage
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.OSImage.DLL
    AdminUI.AssetIntelligence
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.AssetIntelligence.DLL
    AdminUI.SoftwareMeteringRule
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.SoftwareMeteringRule.DLL
    AdminUI.DcmProperties
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.DcmProperties.DLL
    AdminUI.UsmPolicy
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.UsmPolicy.DLL
    AdminUI.ClientAgentSettings
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.ClientAgentSettings.DLL
    AdminUI.FirewallPolicy
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.FirewallPolicy.DLL
    AdminUI.LegacySWD
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.LegacySWD.DLL
    AdminUI.ConditionalDeliveryRule
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.ConditionalDeliveryRule.DLL
    AdminUI.VirtualEnvironment
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.VirtualEnvironment.DLL
    AdminUI.SideloadKeys
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.SideloadKeys.DLL
    AdminUI.SoftwareUpdateProperties
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.SoftwareUpdateProperties.DLL
    AdminUI.Driver
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.Driver.DLL
    AdminUI.DriverPackage
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.DriverPackage.DLL
    AdminUI.Subscriptions
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.Subscriptions.DLL
    AdminUI.Queries
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.Queries.DLL
    AdminUI.SrsReporting
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.SrsReporting.DLL
    AdminUI.SiteHierarchyVisualization
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.SiteHierarchyVisualization.DLL
    AdminUI.SystemStatus
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.SystemStatus.DLL
    AdminUI.ClientOperation
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.ClientOperation.DLL
    AdminUI.ClientHealth
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.ClientHealth.DLL
    AdminUI.ContentMonitoring
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.ContentMonitoring.DLL
    AdminUI.AntiMalware
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.AntiMalware.DLL
    AdminUI.CloudServiceRoles
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.CloudServiceRoles.DLL
    AdminUI.SiteHierarchy
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.SiteHierarchy.DLL
    AdminUI.SiteBoundaries
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.SiteBoundaries.DLL
    AdminUI.ExchangeConnector
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.ExchangeConnector.DLL
    AdminUI.Addresses
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.Addresses.DLL
    AdminUI.ActiveDirectory
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.ActiveDirectory.DLL
    AdminUI.AzureServices
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.AzureServices.DLL
    AdminUI.RbacUser
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.RbacUser.DLL
    AdminUI.RbacRole
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.RbacRole.DLL
    AdminUI.RbacCategory
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.RbacCategory.DLL
    AdminUI.Package
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.Package.DLL
    AdminUI.Certificate
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.Certificate.DLL
    AdminUI.SiteSystems
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.SiteSystems.DLL
    AdminUI.HomePageView
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.HomePageView.DLL
    Microsoft.EnterpriseManagement.UI.WpfViews.resources
        Assembly Version: 7.1.1000.0
        Win32 Version: 7.1.3825.0
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/en/Microsoft.EnterpriseManagement.UI.WpfViews.resources.DLL
    Microsoft.GeneratedCode
        Assembly Version: 1.0.0.0
        Win32 Version: 4.0.30319.18058 built by: FX45RTMGDR
        CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Xml/v4.0_4.0.0.0__b77a5c561934e089/System.Xml.dll
    AdminUI.ViewCommon
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.ViewCommon.DLL
    Microsoft.GeneratedCode
        Assembly Version: 1.0.0.0
        Win32 Version: 4.0.30319.18058 built by: FX45RTMGDR
        CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Xml/v4.0_4.0.0.0__b77a5c561934e089/System.Xml.dll
    Microsoft.GeneratedCode
        Assembly Version: 1.0.0.0
        Win32 Version: 4.0.30319.18058 built by: FX45RTMGDR
        CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Xml/v4.0_4.0.0.0__b77a5c561934e089/System.Xml.dll
    AdminUI.AICustomizeCatalog
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.AICustomizeCatalog.DLL
    AdminUI.AISoftwareProducts
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.AISoftwareProducts.DLL
    AdminUI.ConsoleView
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.ConsoleView.DLL
    AdminUI.External.Controls
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.External.Controls.DLL
    Microsoft.GeneratedCode
        Assembly Version: 1.0.0.0
        Win32 Version: 4.0.30319.18058 built by: FX45RTMGDR
        CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Xml/v4.0_4.0.0.0__b77a5c561934e089/System.Xml.dll
    System.Data
        Assembly Version: 4.0.0.0
        Win32 Version: 4.0.30319.18046 built by: FX45RTMGDR
        CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_32/System.Data/v4.0_4.0.0.0__b77a5c561934e089/System.Data.dll
    System.Numerics
        Assembly Version: 4.0.0.0
        Win32 Version: 4.0.30319.17929 built by: FX45RTMREL
        CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Numerics/v4.0_4.0.0.0__b77a5c561934e089/System.Numerics.dll
    PresentationFramework-SystemData
        Assembly Version: 4.0.0.0
        Win32 Version: 4.0.30319.17929
        CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/PresentationFramework-SystemData/v4.0_4.0.0.0__b77a5c561934e089/PresentationFramework-SystemData.dll
    Microsoft.ConfigurationManagement.DialogFramework
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/Microsoft.ConfigurationManagement.DialogFramework.DLL
    Microsoft.GeneratedCode
        Assembly Version: 1.0.0.0
        Win32 Version: 4.0.30319.18058 built by: FX45RTMGDR
        CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Xml/v4.0_4.0.0.0__b77a5c561934e089/System.Xml.dll
    AdminUI.DialogFoundation
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.DialogFoundation.DLL
    Accessibility
        Assembly Version: 4.0.0.0
        Win32 Version: 4.0.30319.17929 built by: FX45RTMREL
        CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/Accessibility/v4.0_4.0.0.0__b03f5f7f11d50a3a/Accessibility.dll
    AdminUI.DetailPanel
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.DetailPanel.DLL
    AdminUI.FeaturesUtilities
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.FeaturesUtilities.DLL
    Microsoft.GeneratedCode
        Assembly Version: 1.0.0.0
        Win32 Version: 4.0.30319.18058 built by: FX45RTMGDR
        CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Xml/v4.0_4.0.0.0__b77a5c561934e089/System.Xml.dll
    AdminUI.ConnectionAccount
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.ConnectionAccount.DLL
    System.Runtime.Caching
        Assembly Version: 4.0.0.0
        Win32 Version: 4.0.30319.17929
        CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Runtime.Caching/v4.0_4.0.0.0__b03f5f7f11d50a3a/System.Runtime.Caching.dll
    AdminUI.ConsoleRootActions
        Assembly Version: 5.0.0.0
        Win32 Version: 5.0.7804.1000
        CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.ConsoleRootActions.DLL
    ************** JIT Debugging **************
    To enable just-in-time (JIT) debugging, the .config file for this
    application or computer (machine.config) must have the
    jitDebugging value set in the system.windows.forms section.
    The application must also be compiled with debugging
    enabled.
    For example:
    <configuration>
        <system.windows.forms jitDebugging="true" />
    </configuration>
    When JIT debugging is enabled, any unhandled exception
    will be sent to the JIT debugger registered on the computer
    rather than be handled by this dialog box.
    When I go and check the Endpoint Protection properties it gives me the following Error:
    The SMS Provider reported and error
    With the following Details:
    ConfigMgr Error Object:
    instance of SMS_ExtendedStatus
     Description = "ERROR ON Property Convert";
     ErrorCode = 0;
     File = "e:\\nts_sccm_release\\sms\\siteserver\\sdk_provider\\smsprov\\sspsitesettingitem.h";
     Line = 377;
     Operation = "ExecQuery";
     ParameterInfo = "SELECT * FROM SMS_SCI_ClientComp WHERE FileType=2 AND SiteCode='CCM' AND ItemName='Antimalware Agent' AND ItemType='Client Component'";
     ProviderName = "WinMgmt";
     StatusCode = 2147749917;
    Microsoft.ConfigurationManagement.ManagementProvider.WqlQueryEngine.WqlQueryException
    The SMS Provider reported an error.
    Stack Trace:
       at Microsoft.ConfigurationManagement.ManagementProvider.WqlQueryEngine.WqlQueryResultsObject.<GetEnumerator>d__0.MoveNext()
       at Microsoft.ConfigurationManagement.AdminConsole.SiteSystems.EndpointProtectionSpynetControl.InitializePageControl()
       at Microsoft.ConfigurationManagement.AdminConsole.SmsPropertyPage.OnInitialize()
    System.Management.ManagementException
    Unexpected error
    Stack Trace:
       at Microsoft.ConfigurationManagement.ManagementProvider.WqlQueryEngine.WqlQueryResultsObject.<GetEnumerator>d__0.MoveNext()
       at Microsoft.ConfigurationManagement.AdminConsole.SiteSystems.EndpointProtectionSpynetControl.InitializePageControl()
       at Microsoft.ConfigurationManagement.AdminConsole.SmsPropertyPage.OnInitialize()

    Hi,
    If you only add one file into the excluded files and locations, does this error still appear?
    Could you reproduce this error on another system?
    Best Regards,
    Joyce Li
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • Is Forefront Endpoint Protection 2010 detecting and removing CryptoLocker?

    Is Forefront Endpoint Protection 2010 detecting and removing CryptoLocker?

    Hi,
    For antimalware and antispyware, the latest definitions are
    1.187.361.0. You can install the latest updates:
    Updating your Microsoft antimalware and antispyware software
    If that threat cannot be detected or removed, you can feedback or submit a malware file in the Malware Protection Center.
    Best regards,
    Susie

  • Steps to install Forefront Endpoint Protection 2010?

    I've been searching on how to install Forefront Endpoint Protection 2010 on a Windows Server 2012 R2 Server.  I can't seem to find anything about this.  Can someone tell me the steps I need to take.  I installed SQL 2012, then SCCM
    2012, but when I launch the Forefront 2010 installer its saying it can't find SCCM 2007.  I take it its not supported in Forefront 2010? Anyways, if there are instructions on how to install the Endpoint Protection and Exchange Online protection I'd appreciate
    it.  
    Fernando

    Hi,
    In SCCM 2012 Endpoint Protection 2012 is integrated so you cannot install FEP 2010 in it. Add the Site System role called "Endpoint Protection" on your Primary site server, CAS if you use a CAS and then you are good to go.
    the steps are described here:
    http://blogs.technet.com/b/anilm/archive/2012/02/19/how-to-enable-configuration-manager-2012-endpoint-protection.aspx
    Regards,
    Jörgen
    -- My System Center blog ccmexec.com -- Twitter
    @ccmexec

  • Hotfix 2919357 on Forefront Endpoint Protection 2010 for Exchange 11.0.727.0

    I currently have FF for Exhange 2010 version 11.0.727.0, but I have event ID errors 5314, 7009 and 7011. the question is, the version of files content in zip file  of hotfix have the same versions of files on my productive environment on my exchange
    servers,  Do I must install this hotfix in same versions of files to try to solve these errors?
    Donato

    Hi,
    The article KB2919357 indicated that this fix is ONLY viable on the latest FPE build which is 11.0.0727.0.
    If you want to fix the issue and have the exactly same errors in the article, you need to install this hotfix.
    Best Regards,
    Joyce
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

  • Does Forefront Endpoint Protection 2010 block powershell scripts from running?

    Hi all,
    I have a task that runs a Powershell script on a set schedule on a particular machine.  It has failed to run and I thought 1 of the potential reasons would be that FEP 2010 blocks the Powershell script from being run.  Does FEP 2010 do that?  If so, where can I find the setting to allow Powershell scripts (or VB scripts or Java scripts) to be run by my task?
    Thanks for your help in advance.
    Howard Lee - Microsoft

    If the script detect as malicious , FEP will block it, otherwise it won't block normal and safe PowerShell scripts. You may take a look at event viewer and see whether it being blocked or detect as malicious code by FEP or not.

  • Forefront Endpoint Protection 2010 updates are not listed as expired

    Hello, so I am working on getting the right update groups setup within SCCM2012.
    I ran into a bunch of updates for FEP2010 that should be expired, but they are not, how do I expire them?
    To be more specific, these are listed as good updates but should be expired in my opinion -
    KB2461484 (Definition 1.123.832)
    KB2461484 (Definition 1.145.1695)
    KB2461484 (Definition 1.155.997)
    KB2461484 (Definition 1.175.1328)
    The latest definitions update as of today is KB2461484 (Definition 1.191.3456) which is in green which is normal.

    Perhaps, somehow, I have no idea how, they were missed is your catalog update process.
    See the answer from Lawrence Garvin in this thread:
    Windows 8
    Defender Showing Hundreds of Needed Definitions After Most Recent Definition Installed
    "This is a known issue. It's caused by the limited number of *superseded* updates that can be listed
    on the newest update."
    Rolf Lidvall, Swedish Radio (Ltd)

  • SCCM and ForeFront Endpoint Protection point site system role

    Thanks for looking at this......I am working with SCCM 2012, and ForeFront Endpoint Protection has been set up as an Endpoint Protection point site system role.  Up to now we just haven't had to mess with it much, it just has worked.  I
    have been busy packaging applications for the eager public. I have one pc that has had the Endpoint client self destruct.  Had to remove it via the control panel.  I next did a machine policy retrieval and evaluation cycle (among others) and sccm
    shows that it is aware that this particular machine needs FEP. It lists it as "To Be Installed".  How long will this take?  I have things set for "as soon as possible".   Am I at the mercy of Sccm?  Also, is there
    a way to force the install?  Thanks for any light you can shed on this!

    This will depend on your SCCM client policy settings to allow SCEP installation outside of maintenance windows (if you have any).
    It will also depend if you are using 2 hour deployment "randomizer" option in your SCCM client policy.
    Lastly, you can install it with BITS that have already been downloaded with SCCM client install.
    c:\windows\ccmsetup\scepintall.exe

  • Forefront Endpoint Protection Monitoring Service

    Hello,
    I just saw that the Forefront Endpoint Protection Monitoring Service is stoppable. I had a virus a few weeks ago on my machine at home that has security essential installed. The virus continually disabled the service. Does it make sense to control the service
    via gpo to not make it stoppable even by the system and admin user?
    Cheers
    Sebastian
    Sebastian Bammer

    This is old discussion, but let me explain some improvements in Microsoft Anti-Malware Engine. When a program tried to disable any service, process or anything related to Windows Security or Microsoft Anti-Malware Engine , Firewall, etc. It will be detected
    as a suspicious behavior and it will be blocked (no matter whether it is known malware or unknown program). In case of unknown program, you might be asked to send more details or submit it to Microsoft Malware Protection Center.
    In addition, in Windows Vista and later version of Windows such as Windows 7, Windows 8.x when you have User Account Control (UAC), all programs run as an standard user unless you grand them permission as administrator. So by default, if a program tried
    to disable any Security related service in Windows is unable to that because it won't run as administrator and is unable to perform something which runs as administer unless, if you are in administrator account and UAC is off or you grand administrator privilege
    to the program (e.g. right click and run as administrator).
    However, if you still face any programs which might try to disable services and it won't block by FEP , Microsoft Security Essentials or other Microsoft Anti-Malware products, you could submit it sample to Microsoft Malware Protection Center for more analysis.

  • SCOM 2007 R2 Forefront Endpoint Protection Management Pack

    Hi All,
    Question about Forefront Endpoint Protection Management Pack Alert configuration.
    We are receiving “Malware Outbreak” Monitor alert with below Alert Description:
    Protected Endpoints Watcher Forefront Endpoint Protection has detected active malware on more than 5% of your computers.
    Our customer is asking, How to find out the name of the 5% of computers with affected malware information. Kindly assist me on this. I could find only Watcher node.
    Thanks & Regards,
    Mohamed Sybulla

    Malware outbreak alert show Number of computers with the same malware detected
    To Generate report of computer names and version, see
    Viewing and printing reports.
    To resolve this alert, you can refer below links
    http://technet.microsoft.com/en-us/library/bb418869.aspx
    http://technet.microsoft.com/en-us/library/ff823761.aspx
    Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"
    Mai Ali | My blog: Technical | Twitter:
    Mai Ali

  • SCCM 2012 R2: Forefront Endpoint protection via automatic updates only work when manually triggering automatic updat rule

    Hi,
    I followed this manual to configure forefront endpoint protection on clients: http://www.windows-noob.com/forums/index.php?/topic/6106-using-system-center-2012-configuration-manager-part-6-adding-the-endpoint-protection-role-configure-alerts-and-custom-antimalware-policies/
    Now in short: everything works fine ... as long as I trigger the audomatic deployment rules.
    Current situation:
    1. ADR ran fine (3:30 this night)
    2.Software update group is NOT ok
    3.I run ADR manually (right click on ADR, run)
    4.software update group is ok (green icon)
    Then virusupdates are succesfull. This means that clients only update their virus definitions when I manually run the ADR-rule.
    I'm missing something here.
    Please advise.
    J.
    Jan Hoedt

    Probably this issue: http://social.technet.microsoft.com/Forums/en-US/c6109678-785b-4c6d-9cb4-c9dfc1e34b2e/sccm-2012-automatic-deployment-rule-not-executing-updates-for-scep?forum=configmanagerapps
    Iow: wsus updates were scheduled at 3, automatic update rules at 3:15, probably sync wasn't done yet so it doesn't find updates. "The day after" updates are marked as expired.
    Jan Hoedt

  • How do I locate non picture files and location? I'm getting low memory and can't find word,PDF etc

    how do I locate non picture files and location? I'm getting low memory and can't find word,PDF etc

    iPads don't have a filesystem like a computer, Files of that nature must be associated with an App and reside inside that particular App's file space.  So the way to find them is to open the App that opens that file type and look in its file or document list for them.

  • Forefront Endpoint Protection Client filling OS drive with scan and definition files.

    I have installed FEP on our client servers, one of server filling C: drive space with scan files (.bin.xx) and with definitions. Why its not clearing like other servers? Please suggest!
    We haven't using it through SCCM, we have only FEP client which download updates directly from Internet. 
    Thanks in advance. 

    Hi,
    Please check the logs below to see if there is any error.
    %allusersprofile%\Microsoft\Microsoft Antimalware\Support—Log files specific for the antimalware service
    %allusersprofile%\Microsoft\Microsoft Security Client\Support—Log files specific for the SCEP client software
    %windir%\WindowsUpdate.log—Windows Update log files, which include information about definition updates
    %windir%\CCM\Logs\EndpointProtectionagent.log – Shows Endpoint version and policies applied
    %windir%\temp\MpCmdRun.log – Activity when performing scans and signature updates
    %windir%\temp\MpSigStub.log – Update progress for signature and Engine updates
    Reference:http://kickthatcomputer.wordpress.com/2014/03/04/endpoint-protection-log-locations/
    Note: Microsoft provides third-party contact
    information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.
    Best Regards,
    Joyce

  • Forefront Protection 2010 for Exchange and CorruptedCompressedFile issue

    Hi
    I have an issue where a third-party vendor is using Cisco Prime management software to email zipped reports to various recipients on our system. However, when it hits our system, Forefront is tagging this as a "CorruptedCompressedFile"
    and stripping it from the emails.
    I've had the email sent to a personal email account and the attachment looks ok - it opens normally and there is no password. If I use Windows 7 to extract the single file and then create a new zip file, this new zip file is delivered fine to users in our
    system.
    We are running Exchange 2010 (14.03.0174.001) and Forefront Protection for Exchange (11.0.727.0).
    The file is a csv, and one example is only 2.5MB compressed, and 15MB uncompressed.
    Does anyone know what could be causing the issue here?
    Thanks
    Paul

    HI,
    In general, the files that FPE is unable to parse will be scanned as a corrupted compressed file and it can be due to multiple reasons.
    Please check the FSEAgentLog under %Program Files (x86)%\Microsoft Forefront Protection for Exchange Server\Data
    to see if any detailed information exists.
    Firstly, I recommend you to check the maximum compressed file size to make sure that it is larger than that file. You can clickPolicy
    Management in the FPE Administrator Console, and under
    Global Settings, click Advanced Options, then in the
    Global Settings - Advanced Options pane, under the Threshold Levels section.
    In addition,
    files identified as corrupted are quarantined by default. You can override quarantining for these file types by clearing the
    Quarantine corrupted compressed files
    check box under the
    Deletion Criteria
    section in the Global Settings - Advanced Options pane,,
    and then clicking
    Save. However, it is not recommended to do this as it may cause all the files identified as corrupted are not quarantined.
    Best regards,
    Susie

Maybe you are looking for