SCEP Exclusions lists limit
Hi all is there a limit to System Center Endpoint Protection with SCCM 2012 R2 exclusions for files, extensions and paths?
I'm looking into creating a global server policy and a global workstation policy which will be aimed to be deployed to 5000 workstations and 600 servers. I'd like to have the policies as minimal as possible so to avoid having to create multiple collections
to target to.
Based on based on our current Symantec environment we have over 150 file extension exclusions 100 folder paths and and under 50 processes that we want to add to exclusions.
Would it be wise to have limited policies? Is there any performance impact if there are soo many exclusions listed under 1 policy?
It depends on how you setup these policies. One good practice could be setup exclusion base on target users. For example you might have several exclusions for PCs targeted to trusted developers while you won't exclude anything when it is target public PC
or security-critical systems.
Before deploy them try run a small testing environment and try apply your policies and monitor their impacts on the system (e.g. performance, scan duration, etc.)
Similar Messages
-
IPhone 5s Recent Call List Limit
What is the Recent Call List Limit for an iPhone 5s?
Can you view the entire Recent Call List Limit from the screen?
Today, as I would delete a call from the list, an older call would appear at the bottom of the list.
Thanks!The Recent call list will display the last 100 calls.
You can scroll through the list to see from the beginning to end. -
HT1175 Apple Time capsule to backup my external hard drive - on exclusion list???
I want to set apple capsule to backup my external hard drive, but it is currently in the exclusion list.
I can't remove it from the exclusion list, because I can't select it and the - option is greyed out.
It is a WD Passport, used for document files only.
With thanks.
D.Time Machine can't back up drives in some formats, such as FAT32.
(75713) -
Need help removing hard drive from Time Machine exclusion list
I have a 1TB Western Digital Essential hard drive with about 500Gb of music, movies and other assorted data tethered directly to my iMac. I also have a 1TB Time Capsule that serves as my wireless router and connects to my iMac over the wireless network. I'm trying to use the Time Capsule as the ultimate backup device, to backup the data on my iMac and the tethered 1TB Western Digital hard drive via Time Machine. It already backs up all the data on my iMac, but unfortunately, Time Machine places the 1TB Western Digital hard drive in the exclusion list (which I understand is normal), but will not let me click the minus sign to remove the drive from the exclusion list (which is where I'm at a loss). Someone please help me find a way around this as I've been unable to find a way to remove the Western Digital drive from the exclusion list and have Time Capsule access its data. Many thanks in advance for any help with this.
gotham,
Forgive me, but are you highlighting the drive in the list before you click the "-" button?
Also, were is the external drive? Connected to your Mac or the TC. If the TC, then Time Machine won't backup the external drive. It needs to be connected to the Mac directly.
Otherwise, you can delete the TM .plist.
*Delete The Time Machine Preference .plist*
Go to --> Macintosh HD / Library / Preferences (Note: NOT Home / Library / Preferences).
Drag the .plist file labeled,
com.apple.TimeMachine.plist
to the root level of your Macs’ hard drive.
Reboot your computer.
This .plist file is automatically recreated at startup if it is missing.
You will need to reselect your Time Capsule in the TM Prefs for backup.
Now try 'removing' the other drive form the exclusion list.
Let us know if this helped resolve your issue.
Cheers! -
Time machine automatically added my external hd to exclusion list
Has this happened to anyone?
Today I happened to open Time Machine and look at the exclusion list to find that my portable external hard drive, which I carry with my macbook everywhere and is where I store most of my files, and which I have always included in the backups, was now listed as being excluded. Entering Time Machine, I see that the last backup was in February of this year so it must have been excluded immediately after that. But I can't think of why the drive would have been added onto the exclusion list. I haven't changed the settings for at least a year. I have two drives that I backup to: one USB and one NAS, alternating. I've had this set up for about a year. I did move recently though, and I think maybe it was around February that I set up my NAS at this new place and resumed backing up to it along with my USB drive. I know TM excludes external drives by default. Is it possible that TM somehow reset itself when it reconnected with the NAS, which is why the external was re-excluded?
Of course I took it off the list again, but I'm just trying to understand why this happened, so I can avoid anything similar happening again in the future. It was pretty scary to discover, because I have very important documents on that drive that need to stay backed up.
Thanks!Or do I just need to get a 2nd external HD with less memory and dedicate it to Time Machine?
Well, OP is considering this option, and it one way to go TM-dedicated TM external. Really their options depend on how much free space is present on their Mac internal and current external. Disk Utility erase/ partition options will reformat, quite obviously, but even if they have just one external available it is usually possible to backup video and other stored files to say DVD media while they reorganize/ reformat their backup drive.
Another choice is to turn TM off.
Due to the magic of shareware there are now third-party utilities that allow you to alter the frequency of Time Machine Back up.
http://www.klieme.com/TimeMachineScheduler.html -
Hi,
I've recently posted a question about this but right now, I'm to understand the concept. I'm going to give a bit of background in order to make it more understandable.
We have an application in which an object (A) contains a list of objects (B). Each of these objects in turn may contain objects (C). Each of these is a different type of object
Currently, we have designed a very simplistic pattern that follows:
- Load all Objects A according to user criteria
- Build a list of comma-separated IDs of Object A and retrieve Objects B using SELECT * FROM B WHERE ID IN (1, 2, 3, etc...)
- Use the B objects returned to build a comma-separated list of IDs of Object B and retrieve Objects C using this list as: SELECT * FROM C WHERE ID IN (4, 5, 6, etc...)
Now, this works, but only in very simple conditions.
Obviously my main concern is that it just won't work if you return more than 1000 Objects A or B at any point in time. The main problem I am facing now is regarding the way to make this work better, in terms of coding pattern and SQL optimization. IN is not that great with large sets as I understand it since it will use conditions such as 1 OR 2 OR 3 etc...
I've checked out Tom Kyte's website and the table type solution (http://asktom.oracle.com/pls/ask/f?p=4950:8:::::F4950_P8_DISPLAYID:110612348061). It works, but my string parameter passed in could be more than 4,000 bytes for large reports... Soooo, I kept on reading and saw the BULK INSERT idea.
My question is the following: In an application where many users may run reports at the same time, is it even valid to consider doing this?
- LOAD --> BULK INSERT --> LOAD USING BULK INSERTED VALUES --> CLEAN UP CUSTOM TABLE
Hereby preventing other users from running their reports until this one is finished (unless I have one custom table per type of object)?
Or is the simple: LOAD OBJECTS A --> LOAD OBJECTS B USING SUBQUERY TO LOAD OBJECTS A better from the beginning? My main thing against it is that we run a query again after we just ran it so we already have the data we need but we have no choice but to re-write it.
I don't have anything against the BULK INSERT method etc... but for index usage and maintenance, the other solution just seems more complex for a performance that just would not be that great.
What do you think about it? And if you have the same problem as I do right now, how do you go around it?
GregHi,
No no it's my bad, I actually did not realize that I mixing up some programming and Oracle concepts without being specific.
I'm assuming the problem with the 1000 list limit for an IN operator is understood though.
We perform several SELECT statements to retrieve records from our database. These records are used to instantiate java objects (this is in a J2EE application server, not in the Oracle JVM or java pool at all).
As an example (I apologize if it's a bad one), on the java side, we have a motherboard. It can contain one or more RAM slots. Each ram slot may contain a RAM module in it (for the sake of the example, I'll say it can contain one or more modules, just like old sockets...). On the database side, we have a MOTHERBOARD table, a RAMSLOT table, and a RAMMODULE table.
My question was the following: a user may run a report saying that he/she wants to get all motherboards' information in the database. Right now, the way it's been made is that we select all motherboards, get their unique identifier and build a comma-separated list of these ids (in the java code), and then do a
SELECT * FROM RAMSLOT WHERE MOTHERBOARD_ID IN (1, 2, 3 etc...).
And the same is done between RAMSLOT and RAMMODULE. The problem is that if more than 1000 motherboards exist, it just won't work.
Now, when I was looking at the ways to overcome this problem, I went to the Tom Kyte article mentioned. One solution is to create a function that will return a custom table type when passed in the string '1, 2, 3, etc...'. While this works with a small number of motherboards, well, if we loaded a lot of them and went over 4,000 bytes, we get a 'String Literal too long' error. This was mentioned on the AskTom article, to which the followup was: 'use BULK INSERT'. This is why I mention it. I guess what was meant is to load all the data in the custom type table and then perform as before.
This is why I was wondering how this could possibly be better than just re-writing the query as a subquery later (as undesirable as it might be).
Thanks for the help and please answer if anything isn't clear.
Greg -
Offline folders exclusion list for specific folders
Hello
First at all i apologize for my english.
we are trying around with the offline folders with windows 7 enterprise (x64) and server 2008R2 standard.
The synchronisation was set by GPO and it works.
Today we got the task that the user should only be able to synchronize files and not whole folders (with subfolders and all files in it).
Is it possbile to set an option (like the exclusion list for specific file types) to exclude folders from synchronizing?
Kind Regards
Luca> Is it possbile to set an option (like the exclusion list for specific
> file types) to exclude folders from synchronizing?
Short answer: No.
(ok, you can exclude shares from being avail offline, but that was not
your question :))
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :)) -
Material Exclusion/Listing Concept
Hello SAP folks,
I have a request regarding Function module for mapping Material Exclusion/Listing concept. I had looked around the SAP system and found out a FM called "PRODUCT_LIST_EXCLUSION". But this FM is not matching the current set of requirement.
The basic Client requirement is produce all possible values Material which are basically permitted by the Customer in sort with these list of materials, the Customer can do business. I guess for this requirement these are no standard FM, if so is the case then please suggest what should be the approach for mapping this requirement ?
Initially i have thought is to consider the Access Sequence which is confined to Condition type A001 and from the Accesses i can trace out the list of Tables. Only those Accesses are considered which have Customer affiliation i.e. Customer/Material or Sales Organisation/Customer/Material.
From the table i can pick up all the possible values of Material for Condition type A001.
Is the approach what i am currently thinking right ? If no then please suggest the feasible approach for this functionality.
Regards,
SarthakHello Murtuza,
Yes this was the solution which was proposed and implemented with respect to this functionality by me but Alas, Client Came down very heavily on me and there was a escalation :--( !!
So i wanted to check is there any better approach to tackle this requirement...
Regards,
Sarthak -
Business Partner Function Exclusion List
Does anybody know what is the business partner function exclusion list? How to maintain it?
Hi
Can you please elaborate your problem?
as per my understanding if you are replicating or creating BP in crm system the partner functions tab should automatically exclede selected partner functions.
is it correct?
Regards
Srinivas Maddineni -
Ignoring assoc request due to mobile in exclusion list
Hi,
I currently have an issue with a client who has 4 wireless scanners that will not register to the same SSID as 10 identical scanners at the same site
I have debugged the client and received the following output : -
*apfMsConnTask_0: Jun 18 11:59:56:720: 00:15:70:f2:bf:be Ignoring assoc request due to mobile exclusion list
The client can take the sanner(s) to another site and they will register without any issue ( to an AP controlled by a different WLC )
I have compared the setup and can see no differences
The WLCs are Cisco 4400 running v7.0.235.3
The SSID concerned is running WPA2 with Auth PSK
I have checked and can see no excldued clients on the 'problem' WLC
I also checked from CLi just in case there was a mismatch ( show clientexclusion ) and again, this showed no excldued clients
What exactly does the debug message mean and is there anywhere I can view the underlying cause of this issueAnd here's the same from the WLC without any issue :-
WLAN Identifier.................................. 11
Profile Name..................................... WIFI1 for WH
Network Name (SSID).............................. SCAN1
Status........................................... Enabled
MAC Filtering.................................... Disabled
Broadcast SSID................................... Disabled
AAA Policy Override.............................. Disabled
Network Admission Control
Radius-NAC State............................... Disabled
SNMP-NAC State................................. Disabled
Quarantine VLAN................................ 0
Maximum number of Associated Clients............. 0
Number of Active Clients......................... 161
Exclusionlist.................................... Disabled
Session Timeout.................................. 1800 seconds
CHD per WLAN..................................... Enabled
Webauth DHCP exclusion........................... Disabled
Interface........................................ scanners
Multicast Interface.............................. Not Configured
--More-- or (q)uit
WLAN ACL......................................... unconfigured
DHCP Server...................................... Default
DHCP Address Assignment Required................. Disabled
Static IP client tunneling....................... Disabled
Quality of Service............................... Silver (best effort)
Scan Defer Priority.............................. 5,6
Scan Defer Time.................................. 100 milliseconds
WMM.............................................. Allowed
WMM UAPSD Compliant Client Support............... Disabled
Media Stream Multicast-direct.................... Disabled
CCX - AironetIe Support.......................... Enabled
CCX - Gratuitous ProbeResponse (GPR)............. Disabled
CCX - Diagnostics Channel Capability............. Disabled
Dot11-Phone Mode (7920).......................... Disabled
Wired Protocol................................... None
IPv6 Support..................................... Disabled
Peer-to-Peer Blocking Action..................... Drop
Radio Policy..................................... All
DTIM period for 802.11a radio.................... 1
DTIM period for 802.11b radio.................... 1
Radius Servers
Authentication................................ 23.180.4.33 1812
Authentication................................ 23.180.11.104 1813
--More-- or (q)uit
Accounting.................................... Global Servers
Dynamic Interface............................. Disabled
Local EAP Authentication......................... Disabled
Security
802.11 Authentication:........................ Open System
Static WEP Keys............................... Disabled
802.1X........................................ Disabled
Wi-Fi Protected Access (WPA/WPA2)............. Enabled
WPA (SSN IE)............................... Disabled
WPA2 (RSN IE).............................. Enabled
TKIP Cipher............................. Disabled
AES Cipher.............................. Enabled
Auth Key Management
802.1x.................................. Disabled
PSK..................................... Enabled
CCKM.................................... Disabled
FT(802.11r)............................. Disabled
FT-PSK(802.11r)......................... Disabled
FT Reassociation Timeout......................... 20
FT Over-The-Air mode............................. Enabled
FT Over-The-Ds mode.............................. Enabled
CCKM tsf Tolerance............................... 1000
--More-- or (q)uit
CKIP ......................................... Disabled
IP Security................................... Disabled
IP Security Passthru.......................... Disabled
Web Based Authentication...................... Disabled
Web-Passthrough............................... Disabled
Conditional Web Redirect...................... Disabled
Splash-Page Web Redirect...................... Disabled
Auto Anchor................................... Disabled
H-REAP Local Switching........................ Disabled
H-REAP Local Authentication................... Disabled
H-REAP Learn IP Address....................... Enabled
Client MFP.................................... Optional
Tkip MIC Countermeasure Hold-down Timer....... 60
Call Snooping.................................... Disabled
Roamed Call Re-Anchor Policy..................... Disabled
SIP CAC Fail Send-486-Busy Policy................ Enabled
SIP CAC Fail Send Dis-Association Policy......... Disabled
Band Select...................................... Disabled
Load Balancing................................... Disabled
Mobility Anchor List
WLAN ID IP Address Status -
In SCEP exclusions there is an exclusion pointing to %systemroot%\system32\GroupPolicy\registry.pol
This is written in every SCCM SCEP template.
Should it not point to both registry.pol files where they exists?
Eg. %systemroot%\system32\GroupPolicy\*\registry.pol ?Hi,
Thank you for your patience and support.
I am trying to involve someone familiar with this topic to further look at this issue. There might be some time delay. Appreciate your patience.
Thank you for your understanding and support.
Best Regards
Quan Gu -
Time machine doesn't honor exclusion list for initial backup
Hi all,
Have a MacBook Pro with Max OS X v 10.6.7 and 1 TB Time Capsule, where around 500 GB are already used for some files. For the initial Time Machine Backup I want to exclude my home directory, because it is quite large (around another 500 GB). Time Machine estimates around 32 GB for the Backup. I click on Backup Now and a couple of hours later I see still activity and has already backuped some 100s of Data including my home until it reaches the full space of the Time Capsule and crashes.
So my question is why does Time Machine does not honor my exclusion list, especially for the inital backup ?
kind regards, thomasHi, downloaded also the Combo, which seems not be entitled for my MacBook Pro, which is a brandnew one with thunderbolt.
as this german description will tell not that much, these are the both files I tried
iTomMacBookPro:Downloads turbotiga$ ls -al M*.dmg
-rw-r--r--@ 1 turbotiga staff 386096795 21 Mär 17:14 MacOSXUpd10.6.7MBPEarly2011.dmg
-rw-r--r--@ 1 turbotiga staff 1056039272 21 Mär 17:14 MacOSXUpdCombo10.6.7.dmg
still no success ... Anyway as I have installed the OS from scratch with the 2 CDs two weeks ago without any issues I still wonder, what could cause the problem ... I mean, if in the property files the exception would not be there, I would think there is an issue ... but that's not the case.
As you see in the log everything looks good
iTomMacBookPro:2011-06-19-222425.inProgress root# cat .Backup.330207865.713754.log
2011-06-19-22:24:25 - Starting backup
Previous snapshot:
None
Will traverse "Macintosh HD" (mount: '/' fsUUID: 7AD08EB2-BA93-3999-B150-6E5758282CE7 eventDBUUID: F0A21238-5A2E-4FA5-93D9-7B2CA7DCD599)
=== Starting backup loop #1 ===
Will use FirstBackupCopier
Running preflight for "Macintosh HD" (mount: '/' fsUUID: 7AD08EB2-BA93-3999-B150-6E5758282CE7 eventDBUUID: F0A21238-5A2E-4FA5-93D9-7B2CA7DCD599)
Excluding /.Spotlight-V100: 477.4 MB (86 items)
Excluding /.Trashes: 0 bytes (0 items)
Excluding /.fseventsd: 3.3 MB (358 items)
Excluding /.hotfiles.btree: 64 KB (0 items)
Excluding /Users/Shared/SC Info: 208 KB (0 items)
Excluding /private/var/db/efw_cache: 4 KB (1 items)
Excluding /private/var/db/Spotlight: 0 bytes (1 items)
Excluding /Volumes: 4 KB (2 items)
Excluding /Network: 0 bytes (0 items)
Excluding /.vol: 0 bytes (0 items)
Excluding /cores: 0 bytes (0 items)
Excluding /private/tmp: 4 KB (5 items)
Excluding /private/tftpboot: 0 bytes (0 items)
Excluding /private/var/folders: 233.5 MB (173 items)
Excluding /private/var/run: 60 KB (18 items)
Excluding /private/var/tmp: 20 KB (4 items)
Excluding /private/var/vm: 4.1 GB (2 items)
Excluding /private/var/db/dhcpclient: 8 KB (3 items)
Excluding /Library/Caches: 424 KB (14 items)
Excluding /Library/Logs: 14.0 MB (40 items)
Excluding /System/Library/Caches: 20.6 MB (22 items)
Excluding /private/var/log: 9.6 MB (101 items)
Excluding /private/var/spool/cups: 8.2 MB (14 items)
Excluding /private/var/spool/fax: 0 bytes (0 items)
Excluding /private/var/spool/uucp: 0 bytes (0 items)
Excluding /private/var/db/dyld: 406.9 MB (11 items)
Excluding /Users/turbotiga/Library/Calendars/Calendar Cache: 112 KB (1 items)
Excluding /Users/turbotiga/Library/Mail/Envelope Index: 3.9 MB (1 items)
Excluding /Users/turbotiga/Pictures/Bibliothek iPhoto/AlbumData.xml: 8 KB (1 items)
Excluding /Users/turbotiga/Pictures/Bibliothek iPhoto/iPod Photo Cache: 0 bytes (0 items)
Excluding /Users/turbotiga/Pictures: 13.1 GB (10357 items)
Excluding /Users/turbotiga/Documents: 84.0 GB (44150 items)
Should copy 713920 items (32.2 GB) representing 8446828 blocks of size 4096. 113138003 blocks available.
Preflight complete for "Macintosh HD" (mount: '/' fsUUID: 7AD08EB2-BA93-3999-B150-6E5758282CE7 eventDBUUID: F0A21238-5A2E-4FA5-93D9-7B2CA7DCD599)
Time elapsed: 26.969 seconds
Processing preflight info
Space needed for this backup: 38.7 GB (10136193 blocks of size 4096)
Finished processing preflight info
Copying items from "Macintosh HD" (mount: '/' fsUUID: 7AD08EB2-BA93-3999-B150-6E5758282CE7 eventDBUUID: F0A21238-5A2E-4FA5-93D9-7B2CA7DCD599)
iTomMacBookPro:2011-06-19-222425.inProgress root#
and then something goes wrong in paradise ... -
Is there a limit on the number of members in an Address Book group used as a distribution list for email?
How many did you have? I've heard of 1500...
http://kb.mozillazine.org/Limits_%28Thunderbird%29#E-mail_addresses -
Parameters, dropdown list limit
i am using a dropdown list of companies.
as part of my parameters to run my report.
i think the limit of the dropdown list is 150.
how do i make it bigger? i think i have 210 companies... or something like that
thanks, JonHi Jon,
Well, the limit is not 150 but 1000.
Crystal Reports only shows 1000 list of values by default. This is, however, controlled by a registry key and you can increase it like this:
Go to regedit (start > run > regedit) Browse to the location:
HKEY_CURRENT_USER\Software\Business Objects\Suite 12.0\Crystal Reports\DatabaseOptions
Create a new key called 'LOV' here and then on the right-hand side create a new string value called 'MaxRowsetRecords' with a value higher than 1000, perhaps around 10000.
Now, this will increase the total values in the list, however it will still show 200 in one page/batch. To increase the batch size and make sure all the values appear a single list there is another registry key:
Browse to:
HKEY_CURRENT_USER\Software\Business Objects\Suite 12.0\Crystal Reports\ReportView and look for a key called 'PromptingLOVBatchSize'. Double-click the key and select 'Decimal' and set the value to 5000. Then, make sure you select 'Hexadecimal' and click OK. (We've noticed sometimes that the value is not saved unless we keep Hexadecimal selected).
Restart Crystal Reports designer and you should have all the values in one batch.
Let me know how this goes!
-Abhilash -
Multiselect (or just select) list limit
Hi There,
Does anyone know if there is a limit to the number of items than can be submitted when using a multiselect (or a shuttle).
I have a query that returns hundreds of values (all valid). The user is going to need to select 1,2,5... all the way to ALL of these items to be used in another query.
When I select ALL returned items, I get a browser error (Web page cannot be found - Error 400). This is in IE 8 (I know, I know, not my choice!!).
Thoughts?
My shuttle is based on a dynamic LOV which seems to be operating correctly.
PeteThe problem is in the URL limitation. all the values of the list will be passed in the URL and in this case will exceed the URL length limit... I am trying somethin that may help
Sam
Maybe you are looking for
-
Hi, I am a Volkswagen employee using a computer supplied by the US. I am living and working here in Germany and stationed at VW headquarters. My computer is connected to the VW US network via the VW Germany network. Normally, I can get all my emails
-
Hi Experts, I maintained IT 0009 for mode of payment (cheque).How to do the postings and release the cheque. Thanks in Adavance.
-
Can't send Form content as PDF
Hello there! I'm just starting with LiveCycle Designer (and LC as a whole) and am feeling really lost with the lack of information for absolute beginners. Right now I'm trying to build a form to be distributed among clients and then sent back with fi
-
Ford & Bluetooth connection - Australia
I have a ford falcon which is a common car in australia. I had a tech-pac installed which is a ford product for connection to mobile phones via bluetooth. This allows handfree calls to be made and recieved via the audio systems. I have had a few issu
-
Query on Config for a tax exempt customer
Hi, In OVK3 (change View customer taxes) MWSI is defined in tax category. Tax category in customer master sales area data is MWSI. In FTXP, condition type MWSI is not defined. Should i add MWSI in FTXP? If yes, how will i configure it. If i have add