Friday, 1 November 2013

ConfigMgr 2012 / SCCM 2012 Anti-Virus exclusions

Back to Endpoint Protection menu

Back to main menu

When you install any Anti-Virus product on one of your ConfigMgr servers you must apply AV exclusions to avoid performance and functionality issues.

Also, if you are using SCEP you need to apply exclusions to your SCEP clients.  
These two blogs contain all the information you need.

Clifton Hughes

Peter Daalmans


  1. Hi Gerry,

    Whenever I import single computer information to Device collection for OS deployment, it takes 12 Hrs to reflect in the selected collection, due to this the OS deployment doesn't start immediately.I can't start the deployment, till the machine reflected in the collection.

    Kindly help on this issue.

    Thanks & Regards,
    Kundan Patil

    1. Hi Kundan,

      This is a common enough problem and there are a lot of factors involved. See here

      1. What kind of environment do you have? If you have a CAS and several Primary Sites there can be a delay in SQL replication.
      2. There may be delays if you have an excessive number of collections have the "Use incremental updates for this collection enabled". Examine the colleval.log file.
      3. For your selected collection, what is the "limiting collection"? The device must exist in the limiting collection before it can be seen in the selected collection. Try updating the membership of limiting collection first and then update the selected collection.

      Hope this helps,

  2. Hi Gerry,

    I would like to know how to deploy Procedure of the Kasperskey 10 Client On SCCM 2012 sp1. Please provide me any link or guide for the same.
    (also i need to disable windows defender, MSE, windows Firewall etc)

    KP 10 Deploy on SCCM 2012

    on the some MS forums they Mention try to deploy as Application not Package.

    added as Manual Method type as Script file & Install programe: " setup.exe" / a/s


    "setup.exe/a/s" or "setup.exe /q". so i am not sure which method to adopt & try it.

    so there is no any more path or value mentioned for deploy kp 10

    if try to Load Manually kp 10 working fine . Also KP 10.2 update version update on the Existing KP 10 Manually working fine.

    But i am unable to do from the sccm 2012 sp1 kp 10 (setup.exe) or update kp 10.2 (setup.exe) deployment.

    Best Regards,


    1. Have a look at this. It tells you how to install Kaspersky 10 silently.