Defender Skype AV Exclusions

Windows Defender Skype Antivirus Exclusion

Add-MpPreference -ExclusionProcess ABServer.exe
Add-MpPreference -ExclusionProcess ASMCUSvc.exe
Add-MpPreference -ExclusionProcess AVMCUSvc.exe
Add-MpPreference -ExclusionProcess ChannelService.exe
Add-MpPreference -ExclusionProcess ClsAgent.exe
Add-MpPreference -ExclusionProcess ComplianceService.exe
Add-MpPreference -ExclusionProcess DataMCUSvc.exe
Add-MpPreference -ExclusionProcess DataProxy.exe
Add-MpPreference -ExclusionProcess FileTransferAgent.exe
Add-MpPreference -ExclusionProcess HealthAgent.exe
Add-MpPreference -ExclusionProcess IMMCUSvc.exe
Add-MpPreference -ExclusionProcess LyncBackupService.exe
Add-MpPreference -ExclusionProcess LysSvc.exe
Add-MpPreference -ExclusionProcess MasterReplicatorAgent.exe
Add-MpPreference -ExclusionProcess MediaRelaySvc.exe
Add-MpPreference -ExclusionProcess MediationServerSvc.exe
Add-MpPreference -ExclusionProcess MRASSvc.exe
Add-MpPreference -ExclusionProcess OcsAppServerHost.exe
Add-MpPreference -ExclusionProcess ReplicaReplicatorAgent.exe
Add-MpPreference -ExclusionProcess ReplicationApp.exe
Add-MpPreference -ExclusionProcess RtcHost.exe
Add-MpPreference -ExclusionProcess RTCSrv.exe
Add-MpPreference -ExclusionProcess XmppProxy.exe
Add-MpPreference -ExclusionProcess XmppTGW.exe
Add-MpPreference -ExclusionProcess Fabric.exe
Add-MpPreference -ExclusionProcess FabricDCA.exe
Add-MpPreference -ExclusionProcess FabricHost.exe


Add-MpPreference -ExclusionProcess "%systemroot%\system32\inetsrv\w3wp.exe"
Add-MpPreference -ExclusionProcess "%systemroot%\SysWOW64\inetsrv\w3wp.exe"

Installation and version specific - needs to be checked for each installation

Back End processes

Add-MpPreference -ExclusionProcess "%ProgramFiles%\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\SQLServr.exe"

Add-MpPreference -ExclusionProcess "%ProgramFiles%\Microsoft SQL Server\MSRS11.MSSQLSERVER\Reporting Services\ReportServer\Bin\ReportingServicesService.exe"

Add-MpPreference -ExclusionProcess "%ProgramFiles%\Microsoft SQL Server\MSAS11.MSSQLSERVER\OLAP\Bin\MSMDSrv.exe"

SQL Server Front-End processes

Add-MpPreference -ExclusionProcess "%ProgramFiles%\Microsoft SQL Server\MSSQL12.LYNCLOCAL\MSSQL\Binn\SQLServr.exe"

Add-MpPreference -ExclusionProcess "%ProgramFiles%\Microsoft SQL Server\MSSQL12.RTCLOCAL\MSSQL\Binn\SQLServr.exe"

Standard Edition Installation RTC Instance

Add-MpPreference -ExclusionProcess "%ProgramFiles%\Microsoft SQL Server\MSSQL12.RTC\MSSQL\Binn\SQLServr.exe"

Directories and files

Add-MpPreference -ExclusionPath "%systemroot%\System32\LogFiles"
Add-MpPreference -ExclusionPath "%systemroot%\SysWow64\LogFiles"
Add-MpPreference -ExclusionPath "%systemroot%\Microsoft.NET\assembly\GAC_MSIL"

Installation and version specific - needs to be checked for each installation

Add-MpPreference -ExclusionPath "%programfiles%\Skype for Business Server 2015"
Add-MpPreference -ExclusionPath "%programfiles%\Common Files\Skype for Business Server 2015\Watcher Node"
Add-MpPreference -ExclusionPath "%programfiles%\Common Files\Skype for Business Server 2015"
Add-MpPreference -ExclusionPath "%programfiles%\Common Files\Skype for Business Online"
Add-MpPreference -ExclusionPath "%SystemDrive%\RtcReplicaRoot"

File share store (specified in Topology Builder). File stores are specified in Topology Builder.

SQL Server data and log files, including those for the back-end database, user store, archiving store, monitoring store, and application store. Database and log files can be specified in Topology Builder. For details about the data and log files for each database, including default names, see SQL Server Data and Log File Placement in the Deployment documentation.

SQL Server data and log files, including those for the Front-end database, Skype for Business store, and RtcDatabase store. They are normally under %localdrive%\CSData.