How do I excude a specific folder from Endpoint Protection scans on *ANY* drive?

Question

I see this question come up over and over again, and I still have not managed to find a straight answer. Sure hope someone here can help. I am in a situation where I have the same exact folder name on multiple random drives that I need to exclude from Endpoint
Protection client scans. So for example here is what I need to exclude:
C:\MyFolder
D:\MyFolder
E:\MyFolder
F:\MyFolder
G:\MyFolder
H:\MyFolder
J:\MyFolder
Z:\MyFolder
I have tried the following with no success:
*\MyFolder
*:\MyFolder
How to I tell Endpoint Protection to exclude "MyFolder" across the board on every drive letter? Can it be done with wildcards?

Answer 1

Sorry, but it can't be done. Real-time protection doesn't honor wildcards used for drives or folders (though it will honor a wildcard for a file name if it is part of a full path. C:\Example\*.log for example) The documentation is sparse for SCEP, but it's
mentioned in this old blog post for FCS and still applies:
http://blogs.technet.com/b/clientsecurity/archive/2012/12/03/3317660.aspx
The reason is that it's inherently less secure to be able to add such broad exclusions, so they don't make it easy. The best you can do is one exclusion per drive letter as you have above.
Well thats at least an answer! Heh, I can live with that. So I just need to try and collect a list of drive letters where those folders are present and add them one at a time then? To excluse everythign underneaht that folder can I just add the folder path
like so:
C:\MyFolder
Or do I need to do somethign like this instead:
C:\MyFolder\*.*
What's the "right" way to do this?