VSE 8.8 Exclusions config file location

[SypsG]

I need to know the location in a Windows file system that VSE 8.8 stores the On-Access exclusions.

For example, my automation team needs to scan Windows machines to make sure that the On-Access Exclusions include the directory C:\deadbeef\. What file would they check for "deadbeef" to make sure the Exclusions are properly applied?

This check needs to be done not from within ePO, and not from locally on the VirusScan console (because we have tens of thousands of Windows devices that need checking).

Thanks,

George

[mpatel127]

Hi @syspsG,

Thank you for posting on McAfee Community.

The information you are requesting needs to be checked with McAfee Engineering team hence please reach out to McAfee Technical support by creating service request for help.

How to create service request >>https://support.mcafee.com/webcenter/portal/supportportal/pages_home/login 

FAQ on Service Portal >>https://www.mcafee.com/enterprise/en-in/support/support-help.html 

[SypsG]

No it does not. The location of the configs that are pushed from ePO should be in the manuals somewhere, but I cannot find them there. Besides, I do not want to wait 2 weeks for support to respond to the request with a generic MER request, when the Community is more more engaged with each other than support is with their customers.

I just want to know the location of the file where Windows machines store the Exclusions.

TO MCAFEE EMPLOYEES - Please do not comment on a post merely to state that we should open a ticket. If we thought doing so would help, we would start with that. If you do NOT have anything technically helpful to say, please stay off our posts. Thanks.

[Former Member]

How to use wildcards with exclusions in McAfee VirusScan Enterprise 8.x. RESOLUTION ... C:Documents and Settings*Favorites; Exclude any ... Exclude any file with a .tmp extension in a folder named Temp anywhere on the system: **Temp*.survey.walmart.ca

[SypsG]

Hi @Former Member.

I believe you commented on a different post than you intended to.

[SypsG · Accepted solution]

SOLUTION:

My team found the location. It is in the registry here (not a config file):

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default\

Identified as REG_SZ items named "ExcludedItem_##" .

So to answer my original question, automation would check that registry location for those keys for Data in them in accordance to what they are looking to verify is excluded.

Thanks,
George

[Former Member]

On your Group Policy management computer, open the Group Policy Management Console, right-click the Group Policy Object you want to configure and click

tmpnb Survey