戻る
-
タイトル
Antivirus/AV/Endpoint Security Exclusions for Migration Manager -
説明
Customer requires a list of process names and locations for antivirus exclusion; some endpoint security tools, anti virus, anti malware solutions can be overzealous and detect Migration process as malware or unwanted program behavior. This is ideally done during implementation but in some cases new servers/instances/machines are spun up or brought into the mix and proper AV exclusions are not made.
More heuristically-oriented systems such as crowdstrike will trigger unnecessary errors because these exceptions are not being made.
-
原因
AV/Antivirus/Endpoint Security solutions have not been properly configured to exclude the necessary processes or new resources have been added and there is a need to verify that antimalware solutions are properly implemented. -
対策
Antivirus Exclusions for Migration Manager for Active Directory * Console
- %ProgramFiles(x86)%\Quest Software\Migration Manager * DSA
- %ProgramFiles(x86)%\Quest Software\Migration Manager\DSA * DCs
Password
- C:\Windows\Aelita
SidHistory
- C:\Windows\System32\AelAgentMS.cnt
- C:\Windows\System32\AelAgentMS64.exe
Antivirus Exclusions for Resource Updating Manager * RUM Console
- %ProgramFiles(x86)%\Common Files\Aelita Shared\Migration Tools\Resource Updating * RUM Agents on workstations
- C:\Windows\Quest Resource Updating Agent
Antivirus Exclusions for Migration Manager for Active Directory for 365 * Console
- %ProgramFiles(x86)%\Quest Software\Migration Manager * Directory Migration Agent
- %ProgramData%\Quest Software\Migration Manager for Active Directory
Antivirus Exclusions for Migration Manager for Exchange * MAGE
- %ProgramData%\Quest Software\Migration Manager for Exchange * Public Folder Legacy Agents
- C:\Windows\SysWOW64\Aelita Exchange Migration Wizard- C:\Windows\System32\Aelita Exchange Migration Wizard Please note that Public Folder Legacy Agents can be installed anywhere, however, the path above is the default location if another location is not specified.CCUFor CCU, vmover.cmd and vmover.exe should also be excluded.Also C:\Program Files (x86)\Quest Software\Cached Credentials Utility