Certain folders may have to be excluded from antivirus scanning when you use file-level antivirus software in SharePoint

INTRODUCTION

This article includes information about folders that may have to be excluded from antivirus scanning in the following SharePoint applications:

• Microsoft SharePoint Foundation 2013
• Microsoft SharePoint Server 2013
• Microsoft SharePoint Foundation 2010
• Microsoft SharePoint Server 2010
• Windows SharePoint Services 3.0
• Microsoft Office SharePoint Server 2007

These folders may have to be excluded from antivirus scanning when you use file-level antivirus software in SharePoint. If these folders are not excluded, you may see unexpected behavior. For example, you may receive "access denied" error messages when files are uploaded.

Back to the top | Give Feedback

More information

Folders that may have to be excluded from antivirus scanning in SharePoint

Note In the following sections, the placeholder Drive represents the letter of the drive on which you have your SharePoint application installed. Typically, this drive letter is C.

SharePoint Foundation 2013

You may have to configure your antivirus software to exclude the following folders and subfolders from antivirus scanning:

• Drive:\Program Files\Common Files\Microsoft Shared\Web Server Extensions
  
  If you do not want to exclude the whole Web Server Extensions folder from antivirus scanning, you can exclude only the following two folders:
  • Drive:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\15\Logs
  • Drive:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\15\Data\Applications
    
    Note The Applications folder must be excluded only if the computer is running the SharePoint Foundation Search service. If the folder that contains the index file is located elsewhere, you must also exclude that folder.
• Drive:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files
• Drive: \Users\ServiceAccount\AppData\Local\Temp\WebTempDir
  
  Note The WebTempDir folder is a replacement for the FrontPageTempDir folder.
• Drive:\ProgramData\Microsoft\SharePoint
• Drive:\Users\account that the search service is running as\AppData\Local\Temp
  
  Note The search account creates a folder in the Gthrsvc_spsearch4 Temp folder to which it periodically has to write.
• Drive:\WINDOWS\System32\LogFiles
• Drive:\Windows\Syswow64\LogFiles
  
  Note If you use a specific account for SharePoint services or application pools identities, you may also have to exclude the following folders:
  • Drive:\Users\ServiceAccount\AppData\Local\Temp
  • Drive:\Users\Default\AppData\Local\Temp

SharePoint Server 2013

You may have to configure the antivirus software to exclude the Drive:\Program Files\Microsoft Office Servers folder from antivirus scanning for SharePoint Server 2013. If you do not want to exclude the whole Microsoft Office Servers folder from antivirus scanning, you can exclude only the following folders:

• Drive:\Program Files\Microsoft Office Servers\15.0\Data
  
  (This folder is used for the indexing process. If the index files are configured to be located in a different folder, you also have to exclude that location.)
• Drive:\Program Files\Microsoft Office Servers\15.0\Logs
• Drive:\Program Files\Microsoft Office Servers\15.0\Bin
• Drive:\Program Files\Microsoft Office Servers\15.0\Synchronization Service
• Any location in which you decided to store the disk-based binary large object (BLOB) cache (for example, C:\Blobcache).

Note If you have SharePoint Server 2013, these folders should be excluded in addition to the folders that are listed in the "SharePoint Foundation 2013" section.

SharePoint Foundation 2010

You may have to configure your antivirus software to exclude the following folders and subfolders from antivirus scanning:

• Drive:\Program Files\Common Files\Microsoft Shared\Web Server Extensions
  
  If you do not want to exclude the whole Web Server Extensions folder from antivirus scanning, you can exclude only the following two folders:
  • Drive:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\Logs
  • Drive:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\Data\Applications
    
    Note The Applications folder must be excluded only if the computer is running the SharePoint Foundation Search service. If the folder that contains the index file is located elsewhere, you must also exclude that folder.
• Drive:\Windows\Microsoft.NET\Framework64\v2.0.50727\Temporary ASP.NET Files
• Drive: \Users\ServiceAccount\AppData\Local\Temp\WebTempDir
  
  Note The WebTempDir folder is a replacement for the FrontPageTempDir folder.
• Drive:\ProgramData\Microsoft\SharePoint
• Drive:\Users\account that the search service is running as\AppData\Local\Temp
  
  Note The search account creates a folder in the Gthrsvc_spsearch4 Temp folder to which it periodically has to write.
• Drive:\WINDOWS\system32\LogFiles
• Drive:\Windows\Syswow64\LogFiles
  
  Note If you use a specific account for SharePoint services or application pools identities, you may also have to exclude the following folders:
  • Drive:\Users\ServiceAccount\AppData\Local\Temp
  • Drive:\Users\Default\AppData\Local\Temp

SharePoint Server 2010

You may have to configure your antivirus software to exclude the Drive:\Program Files\Microsoft Office Servers folder from antivirus scanning for SharePoint Server 2010. If you do not want to exclude the whole Microsoft Office Servers folder from antivirus scanning, you can exclude only the following folders:

• Drive:\Program Files\Microsoft Office Servers\14.0\Data
  
  (This folder is used for the indexing process. If the Index files are configured to be located in a different folder, you also have to exclude that location.)
• Drive:\Program Files\Microsoft Office Servers\14.0\Logs
• Drive:\Program Files\Microsoft Office Servers\14.0\Bin
• Drive:\Program Files\Microsoft Office Servers\14.0\Synchronization Service
• Any location in which you decided to store the disk-based binary large object (BLOB) cache (for example, C:\Blobcache)
  
  For more information about the binary large object cache, go to the following Microsoft website:
  Disk-based BLOB caching

Note If you have SharePoint Server 2010, these folders should be excluded in addition to the folders that are listed in the "SharePoint Foundation 2010" section.

Windows SharePoint Services 3.0

You may have to configure your antivirus software to exclude the following folders and subfolders from antivirus scanning:

• Drive:\Program Files\Common Files\Microsoft Shared\Web Server Extensions
  
  If you do not want to exclude the whole Web Server Extensions folder from antivirus scanning, you can exclude only the following two folders:
  • Drive:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\12\Logs
  • Drive:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\12\Data\Applications
    
    Note The Applications folder must be excluded only if the computer is running the Windows SharePoint Services Search service. If the folder that contains the index file is located elsewhere, you must also exclude that folder.
• Drive:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files
  
  Note If you are running a 64-bit version of Windows, you should also include the following directory:
  • Drive:\Windows\Microsoft.NET\Framework64\v2.0.50727\Temporary ASP.NET Files
• Windows Server 2003: Drive:\Documents and Settings\All Users\Application Data\Microsoft\SharePoint\Config
  Windows Server 2008 and later versions: Drive:\ProgramData\Microsoft\SharePoint\Config
• Drive:\Windows\Temp\WebTempDir
  
  Note The WebTempDir folder is a replacement for the FrontPageTempDir folder.
• Drive:\Documents and Settings\account that the search service is running as\Local Settings\Temp\
• Drive:\Users\the account the search service is running as\Local\Temp\
  
  Note The search account creates a folder in the "gthrsvc Temp" folder to which it periodically has to write.
• Drive:\WINDOWS\system32\LogFiles
• Drive:\Windows\Syswow64\LogFiles
  
  Note If you use a specific account for SharePoint services or application pools identities, you may also have to exclude the following folders:
  • Drive:\Documents and Settings\ServiceAccount\Local Settings\Application Data
  • Drive:\Users\ServiceAccount\Local
  • Drive:\Documents and Settings\ServiceAccount\Local Settings\Temp
  • Drive:\Users\ServiceAccount\Local\Temp
• Drive:\Documents and Settings\Default User\Local Settings\Temp
• Drive:\Users\Default\AppData\Local\Temp

SharePoint Server 2007

You may have to configure your antivirus software to exclude the Drive:\Program Files\Microsoft Office Servers folder from antivirus scanning for SharePoint Server 2007. If you do not want to exclude the whole Microsoft Office Servers folder from antivirus scanning, you can exclude only the following folders:

• Drive:\Program Files\Microsoft Office Servers\12.0\Data.
  
  (This folder is used for the indexing process. If the index files are configured to be located in a different folder, you also have to exclude that location.)
• Drive:\Program Files\Microsoft Office Servers\12.0\Logs
• Drive:\Program Files\Microsoft Office Servers\12.0\Bin
• Any location in which you decide to store the disk-based binary large object (BLOB) cache (for example, C:\Blobcache)
  
  For more information about the binary large object cache, go to the following Microsoft website:
  Configure disk-based cache settings

Note If you have SharePoint Server 2007, these folders should be excluded in addition to the folders that are listed in the "Windows SharePoint Services 3.0" section.

Note When you install SharePoint Server 2007 or apply a hotfix to an existing installation of SharePoint Server 2007, you may have to disable the real-time option of the antivirus software. Or, you may have to exclude the Drive:\Windows\Temp folder from antivirus scanning if this is required.

For more information about error messages that may occur when antivirus software scans occur in SharePoint Portal Server 2001 and in SharePoint Portal Server 2003, click the following article number to view the article in the Microsoft Knowledge Base:

320111 Random errors may occur when antivirus software scans Microsoft Web Storage System in SharePoint Portal Server 2001 and in SharePoint Portal Server 2003

For more information, click the following article numbers to view the articles in the Microsoft Knowledge Base:

910449 Troubleshooting common permissions and security-related issues in ASP.NET

813833 PRB: "Access Denied" error messages when you do not put strong-named assemblies in the global assembly cache

Event 10016: DCOM permissions not set

Issue

The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {61738644-F196-11D0-9953-00C04FD919C1} to the user DOMAIN\svcspdev SID (S-1-5-21-3914637029-2275272621-3670275343-1145) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.

 

Solution

To rectify this error, first you need to do this on the SharePoint server - Windows Server 2008 R2. You must first take ownership of the corresponding registry key and grant Administrators permissions to update the configuration. If you do not take the ownership and try to add the user, pop-up window will appear and will say “ACCESS IS DENIED”

To grant permission to the configuration of the IIS WAMREG Admin Service to be changed using the Component Services console:

1. Click the Start menu, type regedit, and then click regedit.exe.  If prompted by User Account Control to allow the program to make changes to this computer, click Yes.
2. In the Registry Editor window, search for the CLSID “61738644-F196-11D0-9953-00C04FD919C1″ to find HKEY_CLASSES_ROOT\AppID\{61738644-F196-11D0-9953-00C04FD919C1}.
3. Right-click on the HKEY_CLASSES_ROOT\AppID\{61738644-F196-11D0-9953-00C04FD919C1} key and then click Permissions.
4. In the Permissions for {61738644-F196-11D0-9953-00C04FD919C1} dialog box, click Advanced.
5. In the Advanced Security Settings for {61738644-F196-11D0-9953-00C04FD919C1} dialog box:
6. Click the Owner tab.
7. In the Change owner to list, click the Administrators group.
8. Click OK.
9. In the Permissions for {61738644-F196-11D0-9953-00C04FD919C1} dialog box, click the Administrators group, then click the checkbox to allow the group Full Control, and click OK.
10. Close the Registry Editor window.

Now you have granted the Administrators group sufficient permissions, now you need to change the IIS WAMREG Admin Service. If you don’t do the previous step and go directly to the component service, all the fields are disabled.

 

Next step is referred to in the Microsoft KB article KB920783 from Microsoft as follows:

1. Click Start, click Run, type dcomcnfg in the Open box, and then click OK. 
2. Expand Component Services, expand Computers, expand My Computer, and then click DCOM Config. 
3. Right-click IIS WAMREG admin Service, and then click Properties. 
4. Click the Security tab. 
5. Under Launch and Activation Permissions, click Edit. 
6. In the Launch Permission dialog box, click Add. 
7. In the Select Users, Computers, or Groups dialog box, change the location to the local server. Then, type the local security group WSS_WPG, click Check Names, and then click OK. 
8. In the Permissions for UserName list, click to select the Allow check box that is next to Local Activation, and then click OK two times.

Reference:

 http://social.technet.microsoft.com/wiki/contents/articles/6820.sharepoint-2010-resolving-event-id-10016.aspx 

Installing Language Packs in SharePoint 2010

Installing Language Packs in SharePoint 2010

Steps:

To install this download:

Install a language pack:
1. Download the file by clicking the Download button (above) and saving the file to your hard disk.
2. Run the setup program.
3. On the Read the Microsoft Software License Terms page, review the terms, select the I accept the terms of this agreement check box, and then click Continue.
4. The setup wizard runs and installs the language pack.
5. Rerun the SharePoint Products and Technologies Configuration Wizard, using the default settings.
Note: If you do not run the SharePoint Products and Technologies Configuration Wizard after you install a language pack, the language pack will not be installed properly.

Rerun the SharePoint Products and Technologies Configuration Wizard:
1. Click Start, point to All Programs, point to Microsoft SharePoint 2010 Products, and then click SharePoint Products and Technologies Configuration Wizard.
2. On the Welcome to SharePoint Products and Technologies page, click Next.
3. Click Yes in the dialog box that alerts you that some services might need to be restarted during configuration.
4. On the Modify Server Farm Settings page, click Do not disconnect from this server farm, and then click Next.
5. If the Modify SharePoint Central Administration Web Administration Settings page appears, do not modify any of the default settings, and then click Next.
6. On the Completing the SharePoint Products and Technologies Configuration Wizard page, click Next.
7. On the Configuration Successful page, click Finish.
Instructions for use:

For usage information, visit the Deploy SharePoint Server 2010 Language Packs site.

To remove this download:
1. On the Start menu, point to Settings and then click Control Panel.
2. Double-click Add/Remove Programs.
3. In the list of currently installed programs, select Version 2010 Server Software and Office Web Apps 2010 Language Pack – [Language] and then click Remove or Add/Remove. If a dialog box appears, follow the instructions to remove the program.
4. Click Yes or OK to confirm that you want to remove the program.

Reference:
http://www.microsoft.com/en-us/download/details.aspx?id=3411 

 

Access Denied for Service Account on the EnterPrise Search Center in SharePoint 2010

Access Denied for Service Account on the EnterPrise Search Center in SharePoint 2010


In my case it is happening due to PortalUserAccounts

Need to execute this .

$wa = Get-SPWebApplication -Identity " Search web App url"

$wa.Properties.Remove("portalsuperuseraccount")

$wa.Properties.Remove("portalsuperreaderaccount")

$wa.Update()

List out all the Service Application's ApplicationPool Names

List out all the Service Application's ApplicationPool Names

Get-SPServiceApplication | Select Name, @{Name="SPAppPoolName"; Expression={$_.ApplicationPool.Name}},  @{Name="IISAppPoolName"; Expression={$_.ApplicationPool.Id}}, @{Name="ProcessAccountName"; Expression={$_.ApplicationPool.ProcessAccountName}}

Name                SPAppPoolName       IISAppPoolName      ProcessAccountName
----                -------------       --------------      ------------------
Access Services     SharePoint Web S... 69d737cf-869a-4f... Domain\serviceAccount
Secure Store Ser... SharePoint Web S... 69d737cf-869a-4f... Domain\serviceAccount
State Service
PowerPoint Service  SecurityTokenSer... b6ab2b22-72d1-45... Domain\serviceAccount
Word Viewing Ser... SecurityTokenSer... b6ab2b22-72d1-45... Domain\serviceAccount
PerformancePoint... SharePoint Web S... 69d737cf-869a-4f... Domain\serviceAccount
Visio Graphics S... SharePoint Web S... 69d737cf-869a-4f... Domain\serviceAccount
PXLGlobalMamnage... SharePoint Web S... 69d737cf-869a-4f... Domain\serviceAccount
SharePointPublis... SecurityTokenSer... b6ab2b22-72d1-45... Domain\serviceAccount
Web Analytics Se... SharePoint Web S... 69d737cf-869a-4f... Domain\serviceAccount
Web Analytics Se... webanalytics_SIPP   611c83ea-03fc-48... Domain\serviceAccount
Excel Services A... SharePoint Web S... 69d737cf-869a-4f... Domain\serviceAccount
SecurityTokenSer... SecurityTokenSer... b6ab2b22-72d1-45... Domain\serviceAccount
Topology            SharePoint Web S... 1ebcd7ea-ec58-4e... Domain\serviceAccount
WSS Usage Applic...
d92f1c29-b695-4d... SharePoint Web S... 69d737cf-869a-4f... Domain\serviceAccount
Word Automation ... SharePoint Web S... 69d737cf-869a-4f... Domain\serviceAccount
Application Regi...
User Profile Ser... SharePoint Web S... 69d737cf-869a-4f... Domain\serviceAccount
Business Data Co... SharePoint Web S... 69d737cf-869a-4f... Domain\serviceAccount
Search Service A... SharePoint Web S... 69d737cf-869a-4f... Domain\serviceAccount


Reference:
http://sharepoint.stackexchange.com/questions/46947/how-to-programmatically-determine-which-application-pool-a-service-application-i

Changing the Taxonomy Hub url in Managed Meta Data Service

 Changing the Taxonomy Hub url in Managed Meta Data Service


Set-SPMetadataServiceApplication -Identity "GlobalMamnagedMetadata" -HubURI "http://server:1000/sites/TaxonomyHub/"

Renaming a Service Application in SharePoint 2010

Renaming a Service Application in SharePoint 2010

#------------------------------------------------------------------------------------------------------
# Name:            Rename-SPServiceApplication
# Descrption:     This script will rename a Service Application and its Proxy
# Usage:        Run the function with the Name and NewName Parameters
# By:             Ivan Josipovic, Softlanding.ca
#------------------------------------------------------------------------------------------------------
Function Rename-SPServiceApplication ($Name,$NewName){
$Service = Get-SPServiceApplication -Name $Name

if ($Service -eq $null){
    Write-host -Foreground red "Error: Cant find $Name"
    return 1
}

$proxies = Get-SPServiceApplicationProxy
foreach ($Proxy in $proxies){
    if ($Service.IsConnected($Proxy)){
        Write-host "Proxy Found"
        if ($Proxy.Status -ne "Online"){
            Write-host -Foreground red "Error: The Proxy is currently is Status: $($Proxy.Status)"
            Write-host -Foreground red "Error: You will have to enable the Proxy before it can be modified, re-run the script once completed"
            return 1
        } else {
            $Proxy.Name = $NewName
            $Proxy.Update()
        }
    }
}
$Service.Name = $NewName
$Service.Update()
Write-host "Completed with no Errors"
return 0
}

Rename-SPServiceApplication -Name "Managed Metadata Service" -NewName "GlobalMamnagedMetadata"

Reference:http://gallery.technet.microsoft.com/office/Rename-SharePoint-Service-f7f3ca41

Redirect "Top Visitors" Link to AccessDeniedPage

Redirect "Top Visitors" Link to AccessDeniedPage:

SharePoint 2013 - Site Settings and Central Admin Topics

Site Settings  

Users and Permissions People and groups Site permissions Site collection administrators Site app permissions Web Designer Galleries Site columns Site content types Web parts List templates Master pages Themes Solutions Composed looks Site Administration Regional settings Site libraries and lists User alerts RSS Sites and workspaces Workflow settings Site Closure and Deletion Popularity Trends Term store management Site Collection Administration Recycle bin Search Result Sources Search Result Types Search Query Rules Search Schema Search Settings Search Configuration Import Search Configuration Export Site collection features Site hierarchy Site collection audit settings Audit log reports Portal site connection Content Type Policy Templates Site collection app permissions Storage Metrics Site Policies Content type publishing Popularity and Search Reports HTML Field Security Help settings SharePoint Designer Settings Site collection health checks Site collection upgrade Community Administration Manage Discussions Manage Categories Manage Members Community Settings Reputation Settings

Look and Feel Title, description, and logo Quick launch Top link bar Tree view Change the look Site Actions Manage site features Save site as template Enable search configuration export Reset to site definition Delete this site Reporting Services Manage Shared Schedules Reporting Services Site Settings Manage Data Alerts Search Result Sources Result Types Query Rules Schema Search Settings Search and offline availability Configuration Import Configuration Export

Application Management:

	Web Applications Manage web applications | Configure alternate access mappings
	Site Collections Create site collections | Delete a site collection | Confirm site use and deletion | Specify quota templates | Configure quotas and locks | Change site collection administrators | View all site collections | Configure self-service site creation
	Service Applications Manage service applications | Configure service application associations | Manage services on server
	Databases Manage content databases | Specify the default database server | Configure the data retrieval service

 

System Settings:

	Servers Manage servers in this farm | Manage services on server
	E-Mail and Text Messages (SMS) Configure outgoing e-mail settings | Configure incoming e-mail settings | Configure mobile account
	Farm Management Configure alternate access mappings | Manage farm features | Manage farm solutions | Manage user solutions | Configure privacy options | Configure cross-firewall access zone

 

Monitoring:

	Health Analyzer Review problems and solutions | Review rule definitions
	Timer Jobs Review job definitions | Check job status
	Reporting View administrative reports | Configure diagnostic logging | Configure usage and health data collection | View health reports

Backup and Restore:

	Farm Backup and Restore Perform a backup | Restore from a backup | Configure backup settings | View backup and restore history | Check backup and restore job status
	Granular Backup Perform a site collection backup | Export a site or list | Recover data from an unattached content database | Check granular backup job status

 

Security:

	Users Manage the farm administrators group | Approve or reject distribution groups | Specify web application user policy
	General Security Configure managed accounts | Configure service accounts | Configure password change settings | Specify authentication providers | Manage trust | Manage antivirus settings | Define blocked file types | Manage web part security | Configure self-service site creation
	Information policy Configure information rights management | Configure Information Management Policy

Upgrade and Migration

Upgrade and Patch Management Convert farm license type | Enable Enterprise Features | Enable Features on Existing Sites | Check product and patch installation status | Review database status | Check upgrade status

 

General Application Settings:

	External Service Connections Configure send to connections | Configure document conversions
	InfoPath Forms Services Manage form templates | Configure InfoPath Forms Services | Upload form template | Manage data connection files | Configure InfoPath Forms Services Web Service Proxy
	SharePoint Designer Configure SharePoint Designer settings
	Search Farm Search Administration | Crawler Impact Rules
	SQL Server Reporting Services (2008 and 2008 R2) Reporting Services Integration | Add a Report Server to the Integration | Set server defaults
	Content Deployment Configure content deployment paths and jobs | Configure content deployment | Check deployment of specific content

 

APPS:

	SharePoint and Office Store Purchase Apps | Manage App Licenses | Configure Store Settings
	App Management Manage App Catalog | Monitor Apps | Configure App URLs | App Permissions

Configuration wizard:

Farm Configuration Launch the Farm Configuration Wizard