Return
-
Title
Anti-virus exclusion list for Active Roles -
Description
What is the recommended anti-virus exclusion list for Active Roles?
-
Resolution
There are no definitive exclusions but these are some recommended options:- Disable File Checking in IIS, which is known to cause false positives with some antivirus software. Run the following commands from an elevated command prompt on your Web Interface server (Run as Administrator):
reg add HKLM\SOFTWARE\Microsoft\ASP.NET /v FCNMode /t REG_DWORD /d 1 /f
iisreset - Consider to exclude the following directories:
- Active Roles 7.4+:
<DRIVE>:\Program Files\One Identity\Active Roles
C:\ProgramData\One Identity\Active Roles
- System files
C:\Windows\System32\inetsrv\w3wp.exe
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\arwebadmin\
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\arwebhelpdesk\ C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\arwebselfservice\
Note: The paths to be defined for exclusion should be adjusted to the website name if the default URL is not used. - Disable File Checking in IIS, which is known to cause false positives with some antivirus software. Run the following commands from an elevated command prompt on your Web Interface server (Run as Administrator):