This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

howto exlude directories by using variables like %windir%

Hello,

is there a way/syntax in SEC 5.1 to exclude directories from scanning by using varaibles like %windir% or %allusersprofile%?

kind regards

Joerg

:37053


This thread was automatically locked due to age.
  • Hello Joerg,

    you can't specify variables - you can use % but it doesn't work as you expect. What do you want to exclude, for which type of scan and why?

    Christian

    :37061
  • I'm handling an bunch of servers with different languages (spanish, french, german, english, norwegen, ..) in all versions from Win 2000 to Win2012 and many different applications on. I'm not sure if those directories like %alluserprofile% and %windir% are allways named the same or located on drive C: on those machines, but I need to exclude of the subdirectories.

    kind regards

    Joerg

    :37107
  • Hello Joerg,

    guess you problem is not solved, it's just the answer. This forum is not only for giving "just the correct answer" but also to discuss possible workarounds (or even better use).

    Part of the problem is that the "variable-indicator" is a valid filename character thus % is not unambiguous. Admittedly % is rarely used but nevertheless its use as variable indicator in a policy could cause conflicts. Furthermore the variable expansion depends on the (user) environment (of which the filter driver might not be aware at all).

    Question is, why are all these exclusions in all these locations necessary? What problems do you encounter?

    Christian 

    :37109