SCEP antimalware policies

[Kevin79]

Does it hurt anything to have exclusions in the antimalware policies for directories and/or processes that don't exist on the server? I have DC, DNS, DHCP, Sharepoint, Exchange, SQL, SCCM and other servers that all need different directories excluded in the real time scans. I don't really want to have a different collection for each type of machine just for excluded directories so I want to combine all the policies in to one. The only thing different with all of these is the directory exclusion. Will it cause an issue?

[jeaostro]

Hi

There are no issues having a Master FEP policy for all servers. Works just fine, but do not exclude to much. Having a dedicated policy for hyperv and Citrix is a good ting.

[Peter van der Woude]

Also I'm not totally sure about the RTM possibilities of the policies SCEP, but I know that with SP1 (which is still in pre-beta) policies can also merge.