SCEP antivirus exclusions when multiple policies applied to collection. Merge or Replace?

Hi,
I'm seeking clarification specifically on exclusions that are applied via
multiple antivirus policies to a device collection. I am finding that the antivirus policy with the highest priority 'wins' and I only see exclusions for this policy. I do not see a 'merge' of the exclusions occurring which I thought was the case according
to the following documentation:
What’s New in System Center 2012 Configuration Manager SP1
Specifically, the section below underlined:
Multiple antimalware policies that are deployed to the same client computer are merged on the client. When two settings are in conflict, the highest priority option is used.
Some settings are also merged, such as exclusion lists from separate antimalware policies. Client-side merge also honors the priority that you configured for each antimalware policy.
As an example, say I have a server with SQL and IIS running. I create PolicyA which contain exclusions for SQL, and PolicyB which contains exclusions for IIS. If I deploy both of these policies to my collection, I am expecting to see
both exclusion lists (i.e. merge) but I only see one exclusion list (the one with the higher priority).
I am aware that I can create a new policy by merging two or more other policies - I was hoping to not do this as I'll end up with many policies for exclusions. I thought I could, for example, target an SQL exception policy to SQL servers,
and if there is an SQL server that needs IIS/other exclusions, I can deploy another AV policy to that collection - saving myself from deploying the custom exceptions to servers that do not need it.
If there is a 'smarter' way of doing this, or if I have got anything mixed up please let me know.
Many thanks for your help.
zxx

What version of ConfigMgr are you running? Check both the site and the client.
If you are running at least SP1, the example you gave should work as you thought. Is it possible that the client is running pre-SP1?
Nash Pherson, Senior Systems Consultant
Now Micro -
My Blog Posts
If you found a bug or want the product to work differently,
share your feedback.
<-- If this post was helpful, please click the up arrow or propose as answer.

Similar Messages

Can we have multiple policies for the same gateway?

Hi all,
Is there a way in which we can have multiple policies for the default gateway?
When I try adding a new gateway (which is not mentioned in the installer.properties file) and have policies, there is a 404 error.
When I add another service to the same gateway, I get an error - that the service could not be added to default policy.
Help me please...
My need is as follows
Want to have multiple policies, so that each of the web-service can be attached to same. The relation needs to be one-to-many. One policy can have multiple web-services.
Thanks in advance...

Its not possible for the same development object. Only 1 person can access an object at a time and if mutiple users modify an object new TASKs are created under the same TRANSPORT.
Only after releasing the tr you can create a new tr on the same object.
Message was edited by:
Abhishek Jolly

File corruption on SDCard when multiple files are being written from WinCE 6.0R3

We currently have file corruption problems which we have been able to reproduce on our system which uses WinCE 6.0R3. We have an SDCard in our system which is mounted as the root FS. When multiple files are being written to the file system we occasionally
see file corruption with data destined from one file, ending up in another file, or in another location in the same file. We have already written test SW that we have been able to use to reproduce the problem, and have worked with the SDCard vendor to
check that the memory controller on the card is not the source of the problems.
We know that the data we send to WriteFile() is correct, and that the data which eventually gets sent through the SDCard driver to the SD card is already corrupted.
We believe that the problem is somewhere in the microsoft private sources between the high level filesystem API calls and the low level device calls that get the data onto the HW.
We have confirmed that the cards that get corrupted are all good and this is not a case ofpoor quality flash memory in the cards. The same cards that fail under WinCE 6.0R3 never fail under the same types of testing on Windows, Mac OX, or linux. We
can hammer the cards with single files writes over and over, but as soon as multiple threads are writing multiple files it is only a matter of time before a corruption occurs.
One of the big problems is that we are using the sqlcompact DB for storing some data and this DB uses a cache which get's flushed on it's own schedule. Often the DB gets corrupted because other files are being written when the DB decides to flush.
So we can reproduce the error (with enough time), and we know that data into the windows CE stack of code is good, but it comes out to the SDcard driver corrupted. We have tried to minimize writes to the file system, but so far we have not found a
way to make sure only one file can be written at once. Is there a setting or an API call that we can make to force the OS into only allowing one file write at a time, or a way of seeing how the multiple files are managed in the private sources?
Thanks
Peter

All QFE's have been applied we are building the image so we have some control.
I have build an image which used the debug DLL's of the FATFS and I have enabled all of the DebugZones. The problem is still happening. From the timings in the debug logs and the timestamps in the data which corrupts the test file I have been able
to see that the file is corrupted AFTER the write is complete. Or at least that's how it seems.
We finished writing the file and closed the handle. Then more data is written to other files. When we get around to verifying the file it now contains data from the files that were subsequently written.
What I think I need to do is figure out in detail how the two files were "laid down" onto the SDCard. If the system used the same cluster to write the 2 files then that would explain the issue.

I want to create a mail merge for address labels into a table, but when I fill a table with merge fields, it ends up creating multiple entries for the same address, rather than one table full of each address.

...but when I fill a table with merge fields, it ends up creating multiple entries for the same address, rather than one table full of each address. Please help.
Thanks!

That is a quirk of Pagesthat it applies only one record per page.
There is a way around this:
http://www.freeforum101.com/iworktipsntrick/viewtopic.php?t=245&highlight=labels &mforum=iworktipsntrick
Peter

When trying to apply a Policy, Get Error: An error occurred while performing this operation. contact an administor if this problem continues

I have just installed ES4 LC with only the Rights Management Module. I have everything setup and can access the Policy server from Acrobat pro XI and can see and create policies.
however when trying to apply any policy to my PDF I get the Error in the Subject line.
for all intents and purposes, the setup and configuration looks fine but I seem to be unable to get past the very last step and actually use the policies.
please can anyone help?

Try this:
Fix for Software Update
See Troubleshooting Automatic Software Update in Mac OS X.
Delete the following files:
/Library/Preferences/com.apple.SoftwareUpdate.plist
/Home/Library/Preferences/ByHost/com.apple.SoftwareUpdate.xxx.plist where "xxx" is a number.
/Home/Library/Caches/com.apple.SoftwareUpdate/ (delete entire folder)

NPS, wifi, multiple SSIDs - multiple policies?

We are setting up a new wireless network with multiple SSID's. We plan on having an internal network, a guest network, and a personal devices network. The questions is how do authenticate against multiple policies on the same NPS server? Our current NPS server authenticates against AD group AND AD user account for the internal network. If I want to authenticate the personal devices SSID against the NPS, can I set up a different policy for it only?
My understanding is that when a user/device queaeries the NPS, it goes down the policy until it finds a match and then allows access. Is this true? Thanks

Thanks,
Basically we want to use NPS to authenticate our wireless users and we also want to use NPS to regulate access into our switches/network devices. If I create a policy for example wireless that says If user is part of domain users, then grant access, how do I Create another policy that regulates who can log into my switches? Since the policy matches, it allows the user to log into the switch. Does this make any sense? Do I need a separate NPS/AAA server to authenticate my cisco switches/routers? THanks

VS Workflow - Erroring out when multiple records are created by same user

Hi,
I am using SP 2013. I have a visual webpart and custom sequential workflow. The webpart saves the data to a custom list and the workflow is associated to the custom list on Item creation only. In the workflow, I am breaking the role inheritance and setting
permission to specific set of users, and then the normal approval workflow happens. The whole workflow condition works fine, but if the user is raising multiple requests one after another, the workflow seems to break either in the Break inheritance or granting
permission. If the user raises only one or two requests then everything works fine.
Below are the errors which I am getting in the workflow:
Error 1:
Error: Save Conflict. Your changes conflict with those made concurrently
by another user. If you want your changes to be applied, click Back in your Web
browser, refresh the page, and resubmit your changes.
I have already checked this :
http://social.msdn.microsoft.com/Forums/sharepoint/en-US/60ab04fd-9650-427d-a48f-784bc22fae05/workflow-and-save-conflict-your-changes-conflict-with-those-made-concurrently-by-another-user?forum=sharepointdevelopmentprevious_
http://adrianhenke.wordpress.com/2010/08/20/sharepoint-error-save-conflict-your-changes-conflict-with-those-made-concurrently-by-another-user/
I have also implemented the "Reload" thing posted in the above URL. This error only happens when multiple new requests are getting raised by same user. This error does not happen if I terminate the workflow and re-start the workflow.
How to fix this?
Thanks

Hi,
Based on my understanding, you have a Visual Web Part for adding new item into a list. A workflow will be triggered when item creation in this list. Everything works
fine except when an user adds multiple items in a short period.
If this is the case, plus with the error message, a possible cause is that the SharePoint Server and the workflow engine are not functioning effectively enough to
handle the multiple request in a short time, therefore a scenario is that when there is new item being added into the database, the workflow modifies the “RoleAssignments” property of this item at the same time, this may cause a “Save Conflict” error.
As you said, “If the user raises only one or two requests then everything works fine”, a workaround is that you can disable the adding item function in Visual Web
Part forcibly in a specific period after a new item is being added by current user, it can leave some time for handling the item creation and item modification.
Or if there is a need to submit multiple items concurrently, we can organize the requests into one request, then handle this item with other custom logic in your workflow.
Thanks
Patrick Liang
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support,
contact [email protected]
Patrick Liang
TechNet Community Support

Rights Management - Multiple policies on SharePoint 2010.

Hello folks,
Is that possible to have multiple LC policies at Sharepoint?
On the Sharepoint side I go to the Site Configuration and define there the policy that I want to use. What I'd like to know is if it's possible to define multiple policies, so the user can choose which policy he/she wants to apply.
Thanks!

No, this is currently not possible. You will have to update the names of Policy and PolicySet in the site settings if you want to apply a different policy.

What happens on iCloud (ex. contacts) when multiple family members use the same Apple ID?

What happens on iCloud when multiple family members use the same Apple ID? For example if we all choose to use iCloud for contacts, are they all merged together? We use the same Apple ID so we can use find my iPhone to keep track of the whole family.

Of course if you are both connected to the same iCloud account you have the same contacts - what did you expect?. The contacts live on the server and are read from there by the devices; so as you've both managed to sync your contacts up to iCloud they are now inextricably mixed. You can only delete your contacts by deleting individual ones, and doing that will delete them from your phone as well.
You can only unravel this by
1. In the iCloud contacts page at http://icloud.com, select all the contacts, click on the cogwheel icon at bottom left and choose 'Export vCard'.
2. Sign out of System Preferences>iCloud
3. Create a new Apple ID and open a new iCloud account with it for your own use.
4. Import the vCard back into the iCloud contacts page.
5. Go to http://icloud.com and sign in with the original ID. This is now his ID. Work through the contacts individually deleting the ones you don't want him to have. When done sign out and advise him to change his password.
6. Go to the new iCloud account and delete his contacts individually.
Of course if you have also been syncing calendars and using the same email address there are problems with doing this.

Office Web Apps Server Antivirus Exclusions

Hello,
Are there any guidelines for Antivirus exclusions with respect to Office Web Apps server like we have for Exchange, Lync and SharePoint servers. I would highly appreciate if any help in this regard.
We have office web apps server that we are using with Lync 2013 and SharePoint 2013.
Thanks

Hi,
There is no Official documentation about it.
For servers running antivirus software, include all servers running Lync Server 2013 in the exception list in order to provide optimal performance and audio quality.
You may refer to the link below:
http://www.nicolasbroisin.fr/articles/Lync_2013_:_Exclusions_Antivirus
Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there.
Please make sure that you completely understand the risk before retrieving any suggestions from the above link.
Best Regards,
Eason Huang
Eason Huang
TechNet Community Support

Safari warning before quitting when multiple tabs are open?

I'm a rather clumsy typist who often uses Apple+Tab to toggle through my open programs. This works great 99% of the time, but that other 1% is rather frustrating considering that the Q key is right next to Tab.
Apple guys, please implement a pop up/drop down warning when attempting to quit Safari when multiple tabs are open (or at least the option to enable or disable it). I use this browser for work and often have many tabs open, so accidentally quitting the browser only impedes on my workday. I know I should be more accurate, but isn't that what part of progress is? The empowerment of laziness? =)
Thanks for your time, and hopefully we see this included in soon-to-come upgrades!
Oh, and if this feature is already available, feel free to show me the way.
G4 Mac OS X (10.4.7)

jefftovar,
I created and modified the Safari Keyboard Shortcut
Quit (⌘+Q) command to (⌘ControlQ) by using System
Preferences...>Keyboard Shortcuts.
;~)
Great suggestion! But, the default Quit (⌘+Q) command is still in effect. I've looked about in trying to deactivate it, but can't seem to find it. How did you get rid of yours?
G5 Mac OS X (10.4)

A lot of memory is used when multiple tabs are open

Is there anything that can be done about the insane memory usage in Firefox when multiple tabs are open? I often have 20+ tabs open and the amount of RAM that Firefox uses when I have it open with this many tabs is just ridiculous. As an example of this, I just restarted Firefox after checking the Windows Task Manager. The Task manager said that Firefox was using 1.2 GB of RAM. I did have 32 tabs open, but this seems excessive even for this many tabs. Some of the tabs were image heavy, but none of them had any video in them. I'd think 10 MB per tab of RAM would be plenty to cover these kinds of pages, maybe 20 MB at most. The upper end of that range would be 640 MB of RAM. Instead, it appears to be using an average of 40 MB of RAM per page when this many tabs are open.
Is there anything that can be done to reduce amount of memory being used when multiple tabs are open? It really shouldn't need this much RAM to serve this many pages.

Start Firefox in <u>[[Safe Mode|Safe Mode]]</u> to check if one of the extensions (Firefox/Tools > Add-ons > Extensions) or if hardware acceleration is causing the problem.
*Switch to the DEFAULT theme: Firefox/Tools > Add-ons > Appearance
*Do NOT click the Reset button on the Safe Mode start window
*https://support.mozilla.org/kb/Safe+Mode
*https://support.mozilla.org/kb/Troubleshooting+extensions+and+themes

Error: Show Details cannot be executed when multiple items are selected in a report filter field or in a slicer

I have connected TABULAR Model to Excel, and in the pivot the filter is on multiple dimensions. When doing the drillthrough action it gives error - Error: Show Details cannot be executed when multiple items are selected in a report filter field or in a slicer
Is there any workaround to this error? so that drillthrough can be done even with multiple selection.

Hi Vikas,
The reason behind the error message requires the knowledge on what happens at the backend. When you perform a drill-through action, a query is sent to Analysis Services. This query is expressed in a query language called Multi-Dimensional Expression (MDX).
Since the MDX language doesnot support drill-through command against a set (collection of tuples) an error is persisted.
For now, there is no workaround as it is a limitation of the underlying language that is generating the query.
When multiple items are selected you lose the ability to drill-down on individual metrics. To resolve you must either:
1. Select a single Item.
2. Select all items.
Hope this helps!
Please mark as Answer if this helps! Thanks, Rajasekhar.

Dynamic sql reurns no data when multiple values are passed.

(Dynamic sql returns no data when multiple values are passed.)
Hi,
While executing the below dynamic sql in the procedure no data is returned when it has multiple input values.
When the input is EMPID := '1'; the procedure works fine and returns data.Any suggestion why the procedure doen't works when input as EMPID := '1'',''2'; is passed as parameter?
=======================================================
create or replace PROCEDURE TEST(EMPID IN VARCHAR2, rc OUT sys_refcursor)
IS
stmt VARCHAR2(9272);
V_EMPID VARCHAR2(100);
BEGIN
V_EMPID :=EMPID;
stmt := 'select * from TEST123 where Empid is NOT NULL';
IF V_EMPID <> '-1' THEN
stmt := stmt || ' and Empid in (:1)';
ELSE
stmt := stmt || ' and -1 = :1';
END IF;
OPEN rc FOR stmt USING V_EMPID;
END Z_TEST;
============================================================
Script for create table
==================================================================
CREATE TABLE TEST123 (
EMPID VARCHAR2(10 BYTE),
DEPT NUMBER(3,0)
===========================================
Insert into PDEVUSER.TEST123 (EMPID,DEPT) values ('1',20);
Insert into PDEVUSER.TEST123 (EMPID,DEPT) values ('2',10);
Insert into PDEVUSER.TEST123 (EMPID,DEPT) values ('3',30);
Insert into PDEVUSER.TEST123 (EMPID,DEPT) values ('3',30);
Insert into PDEVUSER.TEST123 (EMPID,DEPT) values ('2',10);
=============================================
Select * from TEST123 where Empid in (1,2,3)
EMPID DEPT
1     20
2     10
3     30
3     30
2     10
===================================================================
Any suggestion why the procedure doen't works when input EMPID := '1'',''2';?
Thank you,

The whole scenario is a little strange. When I tried to compile your procedure it couldn't compile, but I added the missing info and was able to get it compiled.
create or replace PROCEDURE TEST (EMPID IN VARCHAR2, rc OUT sys_refcursor)
IS
stmt        VARCHAR2 (9272);
V_EMPID     VARCHAR2 (100);
BEGIN
V_EMPID := EMPID;
stmt := 'select * from TEST123 where Empid is NOT NULL';
IF V_EMPID = '-1' THEN
    stmt := stmt || ' and Empid in (:1)';
ELSE
    stmt := stmt || ' and -1 = :1';
END IF;
OPEN rc FOR stmt USING V_EMPID;
END;If you pass in 1 as a parameter, it is going to execute because the statement that it is building is:
select * from TEST123 where Empid is NOT NULL and -1 = 1Although the syntax is valid -1 will never equal 1 so you will never get any data.
If you pass in 1,2 as a parameter then it is basically building the following:
select * from TEST123 where Empid is NOT NULL and -1 = 1,2This will cause an invalid number because it is trying to check where -1 = 1,2
You could always change your code to:
PROCEDURE TEST (EMPID IN VARCHAR2, rc OUT sys_refcursor)
IS
stmt        VARCHAR2 (9272);
V_EMPID     VARCHAR2 (100);
BEGIN
V_EMPID := EMPID;
stmt := 'select * from TEST123 where Empid is NOT NULL';
stmt := stmt || ' and Empid in (:1)';
OPEN rc FOR stmt USING V_EMPID;
END;and forget the if v_empid = '-1' check. If you pass in a 1 it will work, if you pass in 1,2 is will work, but don't pass them in with any tick marks.

Data in the table changes when multiple users try to submit data

I have a dynamic table. The table is created in the wdDoModifyView. The user can load data into the table from an excel file. So I have a "Load" button that loads the data from the selected excel file to the table. I also have a "Submit" button. This "Submit" button converts the data to an xml file and make a call to an oracle stored procedure for validation check. If there's an error it will be returned and displayed to the user. If none, a summary of data for posting will be displayed to the user. If the data is correct and the user hit the ok button, the same data will be return to oracle sp for loading in the table.
The problem we encountered is when multiple users are loading and submitting at the same time, the data displayed in the dynamic tables changes after clicking the ok button. It is as if, the table displays the data being loaded by other user.
This is an error that is difficult to recreate. This doesn't happen all the time. I hope you somebody could enlighten me why this is happening. I'm not sure if it has something to do with multithreading or session.
Edited by: Marlyn Agco on Apr 14, 2009 3:57 PM

Hi Armin,
Did you mean storing view instances in static references and accessing them outside the wdDoModifyView is not a good idea? In wdDoInit the nodes are dynamically created according to the xml file being returned by the database. This node is stored in a static variable which is also used in wdDoModifyView to create the dynamic table.
What do you suggest? We're still encountering same issue when multiple users are uploading data.

SCEP antivirus exclusions when multiple policies applied to collection. Merge or Replace?

Similar Messages

Maybe you are looking for