cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted

Capturing Manual Exclusions

Have an ePO 3.6 environment with 1000+ servers which have manual exclusions set at the client console. Is there a way to centrally query and capture these exclusions so I can create a policy matrix for my ePO 4.0 policy design?
2 Replies

RE: Capturing Manual Exclusions

Your question made us start thinking about how to do this and we've come up with a query you can use to grab all local exclusions based on any criteria you set:

Select * from
(select
leafnode.nodename,
productsettings.settingname,
productsettings.sectionname,
productsettings.value
from
productsettings,
leafnode,
productproperties
where
sectionname like '%Local Exclusions'
and value <> ''
and productsettings.parentid=productproperties.autoid
and productproperties.parentid=leafnode.autoid
) as list
where
--value like '%Exceptiondirectory%' --look for a specific value
nodename like '%Machinename%' --look for machine(s) by name
order by nodename

Let me know if this helps.

Andrew

RE: Capturing Manual Exclusions

sample output from the query looks like this

nodename settingname sectionname value
MachineName ExcludedItem_0 On-Access Default Local Exclusions ITEM: **\Program Files\Program Name\, EXCLUDE SCANNING ON: Read/Write, EXCLUDE SUBFOLDERS: Yes
More McAfee Tools to Help You
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • Visit: Business Service Portal
  • More: Search Knowledge Articles
  • ePolicy Orchestrator Support

    • Download the new ePolicy Orchestrator (ePO) Support Center Extension which simplifies ePO management and provides support resources directly in the console. Learn more about ePO Support Center