http://msmvps.com/blogs/briandesmond/archive/2009/06/06/upgrading-anti-virus-rules-for-windows-server-2008-domain-controllers.aspxKB article 822158 does a good job covering all of the antivirus exclusions for Windows machines as well as for domain controllers in particular. If you're upgrading domain controllers to Windows Server 2008 or better, be sure to update your anti-virusenCommunityServer 2008.5 SP2 (Build: 40407.4157)