Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie
Hi there,
There is an issue with role permissions that is being worked on at the moment.
If you are having trouble with access or permissions on regional forums please post here to get access: https://www.boards.ie/discussion/2058365403/you-do-not-have-permission-for-that#latest

\Device\HarddiskVolume* - same as drive letters ?

  • 17-09-2009 10:20am
    #1
    zagmund
    Registered Users, Registered Users 2 Posts: 2,501 ✭✭✭


    Guys,

    I'm looking through some AV configurations for work and there's a list of exclusions along these lines -

    \Device\HarddiskVolume1*
    \Device\HarddiskVolume2*
    \Device\HarddiskVolume3*
    \Device\HarddiskVolume4*
    \Device\HarddiskVolume5*
    \Device\HarddiskVolume6*
    \Device\HarddiskVolume7*
    \Device\HarddiskVolume8*
    \Device\HarddiskVolume9*

    The purpose here is to exclude these drives from AV scanning. From what I can see though this excludes everything on the machine from scanning which kind of defeats the purpose of the overall task.

    It's been a while since I worked in any great detail on server stuff (go NT4 . . . wooh) so I may be missing something. What I'm hoping is that a file written to a drive letter such as C: which is presumably mapped to one or more of the volumes above will be scanned, but if a file is written directly to the volume it won't be scanned.

    Does that sound right, or do the exclusions above 'cut through' the drive letters and nothing will ever be scanned ?

    I'm going to check with McAfee (ack, pthpt) but wanted to see what the verdict was here also.

    Cheers,

    z


Comments

  • #2
    Capt'n Midnight
    Moderators, Recreation & Hobbies Moderators, Science, Health & Environment Moderators, Technology & Internet Moderators Posts: 93,591 Mod ✭✭✭✭Capt'n Midnight


    They sound like partition names alright and sound like the ones windows uses , but you would need to confirm with the AV people as they may do things their own way.



    C: usually refers to the partition windows is on.
    and is usually the first decent sized partition on the drive ( a small partition of under 100MB at the start of the drive is probably manufaccturers digaostics , and one of several gig at the end of the drive is probably a backup image. )


    but if you had managed to install windows on D: or something stupid like that C: could be re-mapped to a network drive or a software raid 5 or subst to another drive



    http://technet.microsoft.com/en-us/library/cc779385%28WS.10%29.aspx
    use dmdiag to see your mappings


Advertisement