HYPER-V 3.0 & OfficeScan 安裝時設定注意事項

我想應該不少人對於 windows server 沒有安裝防毒來防護總是會怕怕的。
我曾經在 HYPER-V 3.0 之前的版本安裝 SYMANTEC ENDPOINT 防毒軟體後發生慘狀
。系統重開機後 HYPER-V 的服務開不起來，出現許多錯誤。

經查微軟網站有關於 HYPER-V跟防毒系統有一篇文章，如下:

微軟文章 :

http://social.technet.microsoft.com/wiki/contents/articles/2179.hyper-v-anti-virus-exclusions-for-hyper-v-hosts.aspx

http://docs.trendmicro.com/all/ent/officescan/v11.0/en-us/osce_11.0_server_readme.htm

Scanning

1. A Microsoft Hyper-V virtual machine might not be able to start if the host endpoint has OfficeScan agent installed. This is because the OfficeScan agent and Hyper-V virtual machine access the same Hyper-V xml file, which causes file access violation. As a workaround:
• Set exclusion folder for the virtual machine xml file located in C:\ProgramData\Microsoft\Virtual Machine Manager\.
• Turn off file mapping scan by modifying the TmFilter/TmxpFilter registry value.
  To turn off file mapping:
  1. On the server computer, open ofcscan.ini under the \PCCSRV folder.
  2. Modify the following setting under [Global Setting]: UseMapping=0
  3. Save the file.
  4. On the web console, go to Agents > Global Agent Settings and click Save to deploy the setting to all agents.
  The following registry information is added after the deployment completes:
• Path: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSApiNt\Parameters
• Key: UseMapping
• Type: DWORD
• Value: 0

A :

這次防毒程式是使用 Office Scan 11的版本，修改 regedit 如下圖 :

B : 

修改 ofcscan.ini，路徑如下圖 :

修改 ofcscan.ini　裡面　UseMapping 的參數值為 0。

如下圖 :

然後再排開 VM 所在的目錄和 VHD，VHDX，XML的檔案類型排開不要掃描，這樣應該萬無一失。