Files and folders can be excluded based on file/folder local path, file type, process name, and username by using the Exclude Configuration setting.
- Log in to the ADAudit Plus web console.
- Go to the Server Audit tab > Configured Servers > File Integrity > Add Domain > Select Domain.
- Choose a domain from the drop-down. Choose to exclude by File/Folder local path, File Type, Process Name, or Users.
- Click on + and configure the necessary settings.
Example scenarios to exclude by File/Folder path:
| Objective |
To exclude a folder and all of its subfolders and files |
| Share configured |
Share path |
Local path |
| \\SERVERNAME\c$\fimfolder |
c:\fimfolder |
| Path of folder that is to be excluded |
c:\fimfolder\excludefolder |
| File/Folder or regex patterns |
File/Folder patterns |
| Syntax |
- c:\fimfolder\excludefolder
- c:\fimfolder\excludefolder\*
|
| What will be excluded |
- c:\fimfolder\excludefolder
- c:\fimfolder\excludefolder\folder
- c:\fimfolder\excludefolder\files.txt
- c:\fimfolder\excludefolder\folder\files.txt
|
| What won't be excluded |
- |
| Objective |
To exclude the "AppData" folder for every user profile |
| Share and folder path |
\\SERVER_NAME\c$\Users c:\Users |
| Path of folder that is to be excluded |
C:\Users\user1\AppData |
| File/Folder or regex patterns |
Regex Patterns |
| Syntax |
C:\\Users\\[^\\]*\\AppData |
| What will be excluded |
- C:\Users\user1\AppData
- C:\Users\user2\AppData
- C:\Users\user1\AppData\subfolder
- C:\Users\user2\AppData\subfolder
|
| What won't be excluded |
- C:\Users\user1\subfolder\AppData
- C:\Users\user2\subfolder\AppData
|
| Objective |
To exclude files from a specific folder but audit all subfolders and their contents |
| Share and folder path |
\\SERVERNAME\c$\fimfolder c:\fimfolder |
| Path of folder that is to be excluded |
c:\fimfolder\excludefolder |
| File/Folder or regex patterns |
Regex Patterns |
| Syntax |
^c:\\fimfolder\\excludefolder\\[^\\]*\.[^\\]*$ |
| What will be excluded |
- c:\fimfolder\excludefolder\file.txt
- c:\fimfolder\excludefolder\folder.withDot
|
| What won't be excluded |
- c:\fimfolder\excludefolder
- c:\fimfolder\excludefolder\folderWithoutDot
- c:\fimfolder\excludefolder\folderWithoutDot\subfolder
- c:\fimfolder\excludefolder\folderWithoutDot\testfile.txt
- c:\fimfolder\excludefolder\folder.withDot\subfolder
- c:\fimfolder\excludefolder\folder.withDot\testfile.txt
|
