Upload 3 files

HMGC DIrect FF.txt

@@ -0,0 +1,1030 @@
+HMGC DIrect FF
+
+//=========================================================================
+// FILE: DIRCTRL.DAT
+// APPLIES TO: Windows
+//
+// This file has three sections used for controlling various aspects
+// of DG with regards to directories.
+//
+// SECTION AFE
+// -----------
+// Each line consists of a directory specification, using DOS style
+// wildcards (*,?), that will be excluded from the encryption engine.
+//
+// SECTION SCAN
+// ------------
+// Each line consists of a directory or directory pattern, using DOS style
+// wildcards (*,?), that will be included or excluded from scanning.  
+// If no wildcard is used at the beginning of the directory then the directory
+// should start with a UNC "\\" specifier or a drive letter.
+//
+// SECTION ACI
+// -----------
+// Eache line consists of a directory to exclude from ACI.
+// (Currently no wildcards)
+//
+// All comments begin with '//', and blank lines and whitespace are
+// ignored.  Exception: whitespace within a directory name.
+//
+//(Version 7.7)
+//=========================================================================
+//
+
+
+//=========================================================================
+// AFE SECTION
+//
+// Changes by Naren::
+// PATTERN             EXPECTED PATH                                            
+//
+// V16
+// *PROGRA*               C:\Program files\*                                    
+// *DOCUME*\APPLIC*;      C:\Documents and Settings\ANY USER\APPLICATION DATA            
+// *DOCUME*\LOCAL*        C:\Documents and Settings\ANY USER\Local Settings            
+// *DOCUME*\USERD*        C:\Documents and Settings\ANY USER\USERDATA                 
+// *DOCUME*\WINDO*        C:\Documents and Settings\ANY USER\WINDOWS                  
+// *DOCUME*\COOKIE*       C:\Documents and Settings\ANY USER\COOKIES                  
+// *DOCUME*\TEMPLA*       C:\Documents and Settings\ANY USER\TEMPLATES                  
+// *DOCUME*\NETWO*        C:\Documents and Settings\NetworkService
+// *DOCUME*\SENDTO*       C:\Documents and Settings\ANY USER\SENDTO (avoid *.desklink, *.mapimail, *compressed folder*)
+// *SYSTEM*               C:\SYSTEM VOLUME INFORMATION\  (Used for SYSTEM RESTORE)         
+//                        C:\SYSTEM.SAV\ (HP Laptop)                              
+// *INETPUB\*             C:\INETPUB\   (used by IIS)                              
+// *CONFIG.MS*            C:\CONFIG.MSI (used by windows update) 
+
+// For specific customers
+
+// For specific machines
+// *DELL\*              C:\DELL (when dell machine is used)                        
+// *DRIVERS\*           C:\DRIVERS (IBM Thinkpad drivers)                       
+// *SWSHARE\*           C:\SWSHARE (IBM Thinkpad)                              
+// *SWSETUP\*           C:\SWSETUP (HP laptop)                                    
+// *SYSTEM*             C:\SYSTEM.SAV\ (HP Laptop)                             
+// *IBMTOOLS\*          C:\IBMTOOLS\
+
+// FOR Specific apps
+// *CL32V*              C:\CL32V (when Novell Ver X is used)                        
+// *DGAGENT*            Agent Directory (Agent may be outside Program files)             
+// *MSOCAC*          C:\MSOCACHE\                                           
+// *LOTUS\*             C:\LOTUS\                                          
+
+// Filed based should be added to registry through PENDING_UPDATE
+// *NTUSER.*  C:\Documents and Settings\ANY USER\NTUSER.* and C:\Documents and Settings\NTUSER.DAT (file)
+// *.??_     Files compressed using CAB
+//
+// *.EXE*;*.DLL*;*.SYS*;*.COM*;*.LNK*;*NTUSER*.*;*NTLDR*;*BOOT.INI*;*.??_
+// *.UTX*;*.XTU*;*.INI*;*.JAR*;*.LSL*;*.FON*;*.DAT*  All Lotus Notes file exclusions
+//
+// Full string: 
+// *.EXE*;*.DLL*;*.SYS*;*.COM*;*.LNK*;*.UTX*;*.XTU*;*.INI*;*.JAR*;*.LSL*;*.FON*;*.DAT*;*NTUSER*.*;*NTLDR*;*BOOT.INI*;*.??_
+//
+
+// Full string:
+// *PROGRA*;*DOCUME*\APPLIC*;*DOCUME*\LOCAL*;*DOCUME*\USERDA*;*DOCUME*\WINDO*;*DOCUME*\COOKIE*;*DOCUME*\TEMPL*;*DOCUME*\NETWO*;*DOCUME*\SENDTO*;*INETPUB\*;*SYSTEM*;*CONFIG.MS*;*DELL\*;*DRIVERS\*;*SWSHARE\*;*SWSETUP\*;*IBMTOOLS\*;*DGAGENT\*;*CL32V*;*MSOCAC*;*LOTUS\*
+//=========================================================================
+
+//=========================================================================
+// SECTION AFE IS USED ONLY BY PRE-5.2 AGENTS!
+//=========================================================================
+SECTION AFE:
+*PROGRA*\*;*DOCUME*\APPLIC*\*;*DOCUME*\LOCAL*\*;*DOCUME*\USERDA*\*;*DOCUME*\WINDO*\* 
+*DOCUME*\COOKIE*\*;*DOCUME*\TEMPL*\*;*DOCUME*\NETWO*\*;*DOCUME*\SENDTO*\*
+*INETPUB\*;*SYSTEM*\*;*CONFIG.MS*
+*DELL\*;*DRIVERS\*;*SWSHARE\*;*SWSETUP\*;*IBMTOOLS\*
+*DGAGENT\*;*CL32V*;*MSOCAC*\*;*LOTUS\*
+*DOCUME*\ALL*\NTUSER*\*
+<java home>
+SECTION END:
+
+//=========================================================================
+// SCANNER SECTION - directories to include or exclude from scanning
+//=========================================================================
+SECTION ADJUST SCAN:
+INCLUDE:
+END:
+EXCLUDE:
+*.PST
+*.PST.TMP
+*.OST
+END:
+SECTION END:
+
+//=========================================================================
+// AFE Directory Exclusions - These directories will be ignored by AFE in NON-FDE mode
+//=========================================================================
+AFE DIR EXCLUSIONS:
+
+// Entire System root is now excluded
+%SystemRoot%\*
+
+// Program files 
+?:\PROGRA*\*;
+
+<user profile>*\COOKIE*\*;
+<user profile>*\TEMPL*\*;
+<user profile>*\NETWO*\*;
+<user profile>*\SENDTO*\*
+<user profile>*\ALL*\NTUSER*\*
+
+?:\INETPUB\*;
+?:\*CONFIG.MS*
+?:\*DELL\*;
+?:\*SWSETUP\*;
+?:\*IBMTOOLS\*
+?:\*DGAGENT\*;
+?:\*CL32V*;
+?:\*MSOCAC*\*;
+?:\*LOTUS\*
+?:\SWSHARE\*
+
+// Java directory
+<java home>\*
+
+// OPTIONAL - System Restore and System Drive-State functions temp files. Removal could
+// cause performance issues. Highly recommend keeping.
+?:\System Volume Information\*
+?:\SYSTEM~1*\*
+
+// OPTIONAL - Symantec AV working locations
+?:\Progra*\Symant*\*
+?:\Progra*\Common*\Symant*\*
+%ALLUSERSPROFILE%\App*\Symant*\*
+
+SECTION END:
+
+//=========================================================================
+// AFE File Exclusions - these files will not be encrypted in NON-FDE mode
+//=========================================================================
+AFE FILE EXCLUSIONS:
+*.EXE;*.DLL;*.SYS;*.COM;*.LNK;*.UTX;*.XTU;*.INI;*.JAR;*.LSL;*.FON;*.DAT;
+
+// REQUIRED Windows Boot sequence & Registry
+%SystemDrive%\*NTUSER*.*;
+%SystemDrive%\IO.SYS
+%SystemDrive%\MSDOS.SYS
+%SystemDrive%\boot.ini
+%SystemDrive%\ntldr
+%SystemDrive%\autoexec.bat
+?:\pagefile.sys
+?:\hiberfil.sys
+?:\*.??_
+
+
+// REQUIRED Windows Recycle Bin
+?:\RECYCLE*\*\INFO2
+
+// REQUIRED DG Agent temp files during uninstall via Add/Remove Programs
+<user profile>\*\APPLIC*\*\DGAgen*.*
+<user profile>\*\APPLIC*\{*\instance.dat
+
+// REQUIRED - Windows New User Creation and Roaming Profile Temp Files
+?:\*\PRF*.tmp
+
+// OPTIONAL - example to avoid PerfectDisk conflict
+?:\Perfec*\Perfec*.adm
+?:\Perfec*\PDHelpEN.chm
+?:\Perfec*\Config.ini
+?:\Perfec*\Upd.ini
+?:\Perfec*\PDAgen*.mof
+
+// OPTIONAL - example to avoid IBM / Lenovo ThinkVantage and Biometric Fingerprint Scanner
+%SystemDrive%\SWSHARE\sfr.log
+%SystemDrive%\Progra*\*Fingerprint*\*.xml
+%SystemDrive%\Progra*\*Fingerprint*\rsc\sheetcc.css
+
+// OPTIONAL - PointSec Driver
+%SystemDrive%\prot_ins.sys
+
+SECTION END:
+
+//=========================================================================
+// AFE FDE DGCIPHER FOLDERS - where to copy dgcipher for cd burns if file is encrypted with password
+//=========================================================================
+AFE FDE DGCIPHER FOLDERS:
+<user profile>\Desktop\CdBurn
+%SystemDrive%\CdBurnTemp
+SECTION END:
+
+//=========================================================================
+// AFE FDE SYSTEM KEY - these files will be encryped by a random key, which 
+//                      in turn will be encrypted by the SYSTEM KEY
+// ALGORITHM:
+//   If a file/directory is not found in this ("SYSTEM KEY") section,
+// including its "exception" subsection, then or "SESSION KEY" section
+// is checked (exception entries are checked first then inlusion entries)
+// If a file or a directory could not be found there either
+// than "afe-DefaultKeyProtectionType" value of config.xml is used
+// 0 is for SYSTEM KEY, and 1 is for SESSION KEY. If there is no such 
+// configuration value than SYSTEM KEY is used by default for FDE installation
+// and SESSION KEY is used for AFE installation.
+//
+// For removable media, these path are not checked, SESSION KEY are always used
+//=========================================================================
+AFE FDE SYSTEM KEY:
+%SystemRoot%\*
+%ProgramFiles%\*
+?:\Progra~?\*
+%SystemDrive%\autoexec.bat
+
+//"c:\Documents and Settings\user\Application Data\Sun\Java\Deployment\deployment.properties"
+?:\DOCUME~?\*\deployment.properties
+
+?:\DOCUME~?\*\ntuser.ini
+?:\RRbackups\*
+?:\RRback~?\*
+?:\SWSHARE\*
+<java home>\*
+// everything in documents in settings except user data
+?:\DOCUME~?\*
+?:\Documents?and?Settings\*
+// except my documents and desktop, which are encrypted with session key
+-|<user profile>\My?Documents\*
+-|<user profile>\Desktop\*
+-|?:\DOCUME~?\*\MyDocu~?\*
+-|?:\DOCUME~?\*\Desktop\*
+SECTION END:
+
+//=========================================================================
+// AFE FDE SESSION KEY - these files will be encryped by a random key, which 
+//                      in turn will be encrypted by the SESSION KEY
+// 
+// If, previously, a file/directory is not found "SYSTEM KEY" section,
+// including its "exception" subsection, then or this ("SESSION KEY") section
+// is checked (exception entries are checked first then inlusion entries).
+// If a file or a directory could not be found here either
+// than "afe-DefaultKeyProtectionType" value of config.xml is used
+// 0 is for SYSTEM KEY, and 1 is for SESSION KEY. If there is no such 
+// configuration value than SYSTEM KEY is used by default for FDE installation
+// and SESSION KEY is used for AFE installation.
+//
+// For removable media, these path are not checked, SESSION KEY are always used
+//=========================================================================
+AFE FDE SESSION KEY:
+*.DOC;*.DOCX;*.RTF;*.XLS;*.XLSX;*.PPT;*.PPTX;*.OST;*.PST;*.PDF;
+<user profile>\*
+-|<user profile>\Local Settings\Temp\*
+?:\DOCUME~?\*
+-|?:\DOCUME~?\*\LOCALS~1\Temp\*
+?:\*
+-|%SystemRoot%\*
+SECTION END:
+
+//=========================================================================
+// FDE Directory Exclusions - FDE does not exclude any directories
+// except these SYMANTEC SEP related directories.
+//=========================================================================
+FDE DIR EXCLUSIONS:
+// REQUIRED registry avoidance vs. extensionless registry files
+%SystemRoot%\system32\config\*
+
+// OPTIONAL - System Restore and System Drive-State functions temp files. Removal could
+// cause performance issues. Highly recommend keeping.
+?:\System Volume Information\*
+?:\SYSTEM~1*\*
+
+// OPTIONAL - Symantec AV working locations
+?:\Progra*\Symant*\*
+?:\Progra*\Common*\Symant*\*
+%ALLUSERSPROFILE%\App*\Symant*\*
+SECTION END:
+
+//=========================================================================
+// FDE File Exclusions - these files will not be encrypted in FDE mode
+//=========================================================================
+FDE FILE EXCLUSIONS:
+// REQUIRED Windows Boot sequence & Registry
+%SystemDrive%\IO.SYS
+%SystemDrive%\MSDOS.SYS
+%SystemDrive%\boot.ini
+%SystemDrive%\ntldr
+?:\pagefile.sys
+?:\hiberfil.sys
+%SystemRoot%\system32\hal.dll
+%SystemRoot%\system32\ntoskrnl.exe
+%SystemRoot%\system32\atiicdxx.dat
+%SystemRoot%\security\logs\winlogon.log
+%SystemRoot%\Regist*\*.crmlog
+%SystemRoot%\inf\*.inf
+%SystemRoot%\inf\*.pnf
+%SystemRoot%\inf\*.adm
+%SystemRoot%\inf\*.iem
+%SystemRoot%\bootstat.dat
+
+// REQUIRED Windows Boot sequence - User Profiles
+%SystemRoot%\system32\Micros*\Protect\*\Prefer*
+%SystemRoot%\system32\Micros*\Protect\*\User\Prefer*
+
+// REQIURED Windows Product Activation
+%SystemRoot%\system32\wpa.dbl
+%SystemRoot%\system32\wpa.bak
+
+// REQUIRED Windows Recycle Bin
+?:\RECYCLE*\*\INFO2
+
+// REQUIRED DG Agent temp files during uninstall via Add/Remove Programs
+?:\DOCUME*\*\APPLIC*\*\DGAgen*.*
+?:\DOCUME*\*\APPLIC*\{*\instance.dat
+
+// REQUIRED - Windows New User Creation and Roaming Profile Temp Files
+?:\*\PRF*.tmp
+
+// OPTIONAL - example to permit Windows user-mode debugging
+%SystemRoot%\debug\UserMode\userenv.log
+
+// OPTIONAL - example to avoid PerfectDisk conflict
+?:\Perfec*\Perfec*.adm
+?:\Perfec*\PDHelpEN.chm
+?:\Perfec*\Config.ini
+?:\Perfec*\Upd.ini
+?:\Perfec*\PDAgen*.mof
+
+// OPTIONAL - example to avoid IBM / Lenovo ThinkVantage and Biometric Fingerprint Scanner
+%SystemDrive%\SWSHARE\sfr.log
+%SystemDrive%\Progra*\*Fingerprint*\*.xml
+%SystemDrive%\Progra*\*Fingerprint*\rsc\sheetcc.css
+
+// OPTIONAL - PointSec Driver
+%SystemDrive%\prot_ins.sys
+SECTION END:
+
+//=========================================================================
+// ACI SECTION - old style for old agents who don't understand the new format
+//             specify directories where files are not classified
+//=========================================================================
+SECTION ACI:
+c:\program files\common files\symantec shared
+c:\program files\symantec
+c:\program files\symantec client security
+c:\program files\norton internet security
+c:\windows
+c:\winnt
+C:\documents and settings\all users\application data\microsoft\crypto
+c:\system volume information
+c:\msocache
+c:\config.msi
+c:\inetpub
+
+//Customer specific requirements
+c:\drivers
+SECTION END:
+
+//=========================================================================
+// ACI2 SECTION - new and improved version (5.3.1+)
+//            specify directories where files are not classified
+//=========================================================================
+SECTION ACI2:
+%SystemDrive%\windows\*
+%SystemDrive%\progra*\common*\symant*\*
+%SystemDrive%\progra*\symant*\*
+%SystemDrive%\progra*\norton*\*
+%SystemDrive%\winnt\*
+%SystemDrive%\docume*\all*\applic*\micros*\crypto\*
+%SystemDrive%\system*\*
+%SystemDrive%\msocache\*
+%SystemDrive%\config.msi\*
+%SystemDrive%\inetpub\*
+%SystemDrive%\progra*\citrix\person*\logs\*
+%SystemDrive%\progra*\citrix\pvsage*\*
+%SystemDrive%\progra*\vmware\vmware*\*
+%SystemDrive%\progra*\dgagent\readops\*
+%SystemDrive%\progra*\malwarebytes endpoint agent\logs*
+
+//Customer specific requirements
+%SystemDrive%\drivers\*
+
+// more filtering for IE
+%SystemDrive%\users*\appdata\local\microsoft\windows\webcache\*.log
+%SystemDrive%\users*\appdata\roaming\microsoft\windows\recent\customdestinations\*.tmp
+%SystemDrive%\users*\appdata\roaming\microsoft\windows\recent\customdestinations\*-ms
+
+
+// Windows 8 Apps special directories
+<windows apps home>\*
+<windows apps repository>\*
+
+
+// Customer specific, filtering for AppSense desktop redirection with Office
+\\mmfiles\*\appsense\*\*tmp
+
+// Windows 10 Performance improvements
+%SystemDrive%\Program Files (x86)\adobe\acrobat reader dc\reader\webresources\resource0\*.html
+%SystemDrive%\Program Files (x86)\adobe\acrobat reader dc\reader\webresources\resource0\static\images\*.png
+%SystemDrive%\Program Files (x86)\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\aicuc\images\*.png
+%SystemDrive%\Program Files (x86)\apple software update\softwareupdate.resources\software update.tiff
+%SystemDrive%\Program Files (x86)\cisco systems\cisco jabber\*.xml
+%SystemDrive%\Program Files (x86)\cisco systems\cisco jabber\avatars\*.svg
+%SystemDrive%\Program Files (x86)\dropbox\update\*\dropboxcrashhandler.exe
+%SystemDrive%\Program Files (x86)\dropbox\update\*\dropboxupdate.exe
+%SystemDrive%\Program Files (x86)\dropbox\update\*\dropboxupdatebroker.exe
+%SystemDrive%\Program Files (x86)\dropbox\update\*\dropboxupdatehelper.msi
+%SystemDrive%\Program Files (x86)\dropbox\update\*\dropboxupdateondemand.exe
+%SystemDrive%\Program Files (x86)\dropbox\update\*\goopdate.dll
+%SystemDrive%\Program Files (x86)\dropbox\update\*\goopdateres_*.dll
+%SystemDrive%\Program Files (x86)\dropbox\update\*\npdropboxupdate*.dll
+%SystemDrive%\Program Files (x86)\dropbox\update\*\psmachine.dll
+%SystemDrive%\Program Files (x86)\dropbox\update\*\psuser.dll
+%SystemDrive%\Program Files (x86)\dropbox\update\install\{*}\dropboxupdatesetup_*.exe
+%SystemDrive%\Program Files (x86)\dyn\updater\*.txt
+%SystemDrive%\Program Files (x86)\dyn\updater\images\*.png
+%SystemDrive%\Program Files\itunes\itunes.resources\missingartworkloading.png
+%SystemDrive%\Program Files*\microsoft office\*.thmx
+%SystemDrive%\Program Files\microsoft office\appxmanifest.xml
+%SystemDrive%\Program Files\microsoft office\filesystemmetadata.xml
+%SystemDrive%\Program Files\microsoft office\root\office16\microsoft.lync.model.zip
+%SystemDrive%\Program Files\microsoft office\root\office16\microsoft.lync.utilities.controls.zip
+%SystemDrive%\Program Files\microsoft office\root\office16\microsoft.lync.utilities.zip
+%SystemDrive%\Program Files\microsoft office\root\office16\ocomprivate.zip
+%SystemDrive%\Program Files\microsoft office\root\office16\system.windows.controls.theming.toolkit.zip
+%SystemDrive%\Program Files\microsoft office\updates\detection\*\versiondescriptor.xml
+%SystemDrive%\Program Files\windowsapps\microsoft.skypeapp*\skypeapp\assets\images\*.png
+%SystemDrive%\ProgramData\{*}.zip
+%SystemDrive%\ProgramData\apple computer\itunes\sc info\sc info.txt
+%SystemDrive%\ProgramData\application data\dyn\updater\frontend.log
+%SystemDrive%\ProgramData\application data\dyn\updater\frontend.log.*
+%SystemDrive%\ProgramData\cisco\cisco anyconnect secure mobility client\*.xml
+%SystemDrive%\ProgramData\cisco\cisco anyconnect secure mobility client\logs\updatehistory_*_log.txt
+%SystemDrive%\programdata\dropbox\update\log\*
+%SystemDrive%\ProgramData\dropbox\update\log\dropboxupdate.log-*
+%SystemDrive%\ProgramData\dropbox\update\log\dropboxupdate.log-*-finished
+%SystemDrive%\ProgramData\microsoft\clicktorun\machinedata\catalog\packages\*\deploymentconfiguration.xml
+%SystemDrive%\ProgramData\microsoft\clicktorun\machinedata\catalog\packages\*\manifest.xml
+%SystemDrive%\ProgramData\microsoft\clicktorun\machinedata\catalog\packages\*\userdeploymentconfiguration.xml
+%SystemDrive%\ProgramData\microsoft\clicktorun\productreleases\*\en-us.16\masterdescriptor.en-us.xml
+%SystemDrive%\ProgramData\microsoft\clicktorun\productreleases\*\x-none.16\masterdescriptor.x-none.xml
+%SystemDrive%\ProgramData\microsoft\diagnosis\downloadedscenarios\windows.siuf.xml
+%SystemDrive%\ProgramData\microsoft\office\heartbeat\heartbeatcache.xml
+%SystemDrive%\ProgramData\microsoft\provisioning\*\masterdatastore.xml
+%SystemDrive%\ProgramData\microsoft\provisioning\*\prov\runtime.xml
+%SystemDrive%\ProgramData\microsoft\windows\power efficiency diagnostics\energy-report-*.xml
+%SystemDrive%\ProgramData\microsoft\windows\power efficiency diagnostics\energy-report-latest.xml
+%SystemDrive%\programdata\microsoft\windows\power efficiency diagnostics\energy-report*
+%SystemDrive%\ProgramData\microsoft\windows\wer\reportqueue\*.txt
+%SystemDrive%\ProgramData\microsoft\windows\wer\reportqueue\*.xml
+%SystemDrive%\programdata\microsoft\windows\wer\reportqueue\*\report.wer
+%SystemDrive%\programdata\microsoft\windows\wer\reportqueue\*\report.wer.tmp
+%SystemDrive%\ProgramData\microsoft\windows\wer\temp\*.xml
+%SystemDrive%\programdata\nvidia corporation\drs\update.bin
+%SystemDrive%\ProgramData\nvidia corporation\shadowplay\capturecore.log
+%SystemDrive%\ProgramData\nvidia corporation\shadowplay\capturecore.old
+%SystemDrive%\ProgramData\sccomm\Logs\sccomm.txt
+%SystemDrive%\ProgramData\sccomm\sccomm.txt
+%SystemDrive%\ProgramData\vmware\*.txt
+%SystemDrive%\Users\*\AppData\Local\{*}
+%SystemDrive%\Users\*\AppData\Local\cisco\cisco anyconnect secure mobility client\preferences.xml
+%SystemDrive%\Users\*\AppData\Local\cisco\unified communications\jabber\csf\history\*\_db.key
+%SystemDrive%\users\*\appdata\local\cisco\unified communications\jabber\csf\logs\jabber.log.*
+%SystemDrive%\Users\*\AppData\Local\cisco\unified communications\jabber\csf\photo cache\*.png
+%SystemDrive%\Users\*\AppData\Local\cisco\unified communications\jabber\csf\telemetry\*.txt
+%SystemDrive%\users\*\appdata\local\google\chrome\user data\*
+%SystemDrive%\Users\*\AppData\Local\microsoft\clr_v4.0\ngendisable.txt
+%SystemDrive%\Users\*\AppData\Local\microsoft\internet explorer\urlblock\urlblock_*.bin
+%SystemDrive%\Users\*\AppData\Local\microsoft\msoidentitycrl\production\fplist.xml
+%SystemDrive%\Users\*\AppData\Local\microsoft\office\*\lync.exe_rules.xml
+%SystemDrive%\users\*\appdata\local\microsoft\office\*\lync\tracing\*.etl
+%SystemDrive%\users\*\appdata\local\microsoft\office\*\lync\tracing\*.etl.bak
+%SystemDrive%\users\*\appdata\local\microsoft\office\*\lync\tracing\*.uccapilog
+%SystemDrive%\users\*\appdata\local\microsoft\office\*\msoia.exe_rules.xml
+%SystemDrive%\Users\*\AppData\Local\microsoft\office\*\outlook.exe_rules.xml
+%SystemDrive%\users\*\appdata\local\microsoft\onedrive\logs\*
+%SystemDrive%\users\*\appdata\local\microsoft\onedrive\settings\*
+%SystemDrive%\Users\*\AppData\Local\microsoft\onedrive\standaloneupdater\update.xml
+%SystemDrive%\Users\*\AppData\Local\microsoft\onedrive\update\update.xml
+%SystemDrive%\Users\*\AppData\Local\microsoft\outlook\*.com.nst.tmp
+%SystemDrive%\Users\*\AppData\Local\microsoft\outlook\*.com.ost
+%SystemDrive%\Users\*\AppData\Local\microsoft\outlook\*.com.ost.tmp
+%SystemDrive%\Users\*\AppData\Local\microsoft\outlook\*\autod.*.com.xml
+%SystemDrive%\Users\*\AppData\Local\microsoft\outlook\*autodiscover.xml
+%SystemDrive%\Users\*\AppData\Local\microsoft\outlook\inferences*.xml
+%SystemDrive%\Users\*\AppData\Local\microsoft\outlook\oab2.xml
+%SystemDrive%\Users\*\AppData\Local\microsoft\outlook\oab3.xml
+%SystemDrive%\Users\*\AppData\Local\microsoft\windows\actioncentercache\dropbox-desktop-client_*.png
+%SystemDrive%\Users\*\AppData\Local\microsoft\windows\actioncentercache\flipboard-flipboard_*.jpg
+%SystemDrive%\Users\*\AppData\Local\microsoft\windows\actioncentercache\microsoft-explorer-notification--*.png
+%SystemDrive%\users\*\appdata\local\microsoft\windows\actioncentercache\microsoft-explorer-notification*.png
+%SystemDrive%\Users\*\AppData\Local\microsoft\windows\actioncentercache\microsoft-office-outlook-exe-*.png
+%SystemDrive%\Users\*\AppData\Local\microsoft\windows\actioncentercache\microsoft-skypeapp_*-app_*.png
+%SystemDrive%\Users\*\AppData\Local\microsoft\windows\explorer\notifyicon\microsoft.explorer.notification.*.png
+%SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*.htm
+%SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*.jpg
+%SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\compare_1_5_6_uni_dll1.zip
+%SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\edgecompatviewlist[*].xml
+%SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\edgecompatviewlist*.xml
+%SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\edgecompatviewlist1.xml
+%SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\img_spacer1.png
+%SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\jabber_logo1.png
+%SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\pluginmanager_*.zip
+%SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\plugins*.zip
+%SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\low\ie\*.htm
+%SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\low\ie\*.png
+%SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\low\ie\*.txt
+%SystemDrive%\Users\*\AppData\Local\microsoft\windows\notifications\wpnidm\*.jpg
+%SystemDrive%\users\*\appdata\local\microsoft\windows\webcache\*
+%SystemDrive%\Users\*\AppData\Local\microsoft\windows\webcache\*.log
+%SystemDrive%\Users\*\AppData\Local\microsoftedge\sharedcachecontainers\microsoftedge_iecompat\iecompatdata.xml
+%SystemDrive%\Users\*\AppData\Local\nvidia corporation\shadowplay\capturecore.old
+%SystemDrive%\users\*\appdata\local\nvidia\nvbackend\*
+%SystemDrive%\Users\*\AppData\Local\nvidia\nvbackend\*.xml
+%SystemDrive%\Users\*\AppData\Local\packages\*.dropbox_*\localstate\dbxdata.dat
+%SystemDrive%\Users\*\AppData\Local\packages\*.dropbox_*\localstate\dbxdata.dat.bak
+%SystemDrive%\users\*\appdata\local\packages\*.netflix_*\localstate\offlineinfo*
+%SystemDrive%\users\*\appdata\local\packages\*.netflix_*\localstate\onlineinfo*
+%SystemDrive%\users\*\appdata\local\packages\*.netflix_*\localstate\resumeinfo*
+%SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\ac\inetcache\*\*.htm
+%SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\ac\inetcache\*\*.jpg
+%SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\ac\inetcache\*\*.png
+%SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\ac\inetcache\*\*.txt
+%SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\ac\microsoft\internet explorer\domstore\*\*.xml
+%SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\ac\temp\*.tmp
+%SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\localstate\*.xml
+%SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\localstate\*.xml.~tmp
+%SystemDrive%\Users\*\AppData\Local\packages\facebook.facebook_*\localstate\appdata\local\osmeta\_store_*\image_cache.v*\fbimagedownloader-*.jpg
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.aad.brokerplugin_*\ac\temp\*.tmp
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.aad.brokerplugin_*\localstate\*
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.aad.brokerplugin_*\localstate\*.tmp
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.bingweather_*\ac\inetcache\*.jpg
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.bingweather_*\ac\inetcache\*.png
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.bingweather_*\localstate\*.xml
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.bingweather_*\localstate\*.xml*.tmp
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.flv
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.htm
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.jpg
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.png
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.svg
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.svg
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.swf
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.txt
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.xml
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\microsoftedge\urlblock\urlblock_*.bin
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\temp\*.tmp
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.oneconnect_*\localstate\*
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.people_*\localstate\contactsonprimarytile.txt
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.people_*\localstate\contactsonprimarytile.txt.~tmp
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.people_*\localstate\diagoutputdir\peoplebackgroundtasklog.etl
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.people_*\localstate\diagoutputdir\peoplebackgroundtasklog.last.etl
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.people_*\localstate\tilethumbnails\primarytileimage_*.jpg
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.people_*\localstate\tilethumbnails\primarytileimage_*.jpgtemp
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.contentdeliverymanager_*\ac\temp\*.tmp
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.contentdeliverymanager_*\localstate\assets\*
+%SystemDrive%\users\*\appdata\local\packages\microsoft.windows.contentdeliverymanager_*\localstate\contentmanagementsdk\creatives\*
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.contentdeliverymanager_*\localstate\contentmanagementsdk\creatives\*
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.contentdeliverymanager_*\localstate\contentmanagementsdk\creatives\*.tmp
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.contentdeliverymanager_*\localstate\stagedassets\*
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.contentdeliverymanager_*\localstate\tips\*.xml
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.cortana_*\ac\appcache\*.htm
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.cortana_*\ac\nvidia corporation\shadowplay\capturecore.log
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.cortana_*\ac\temp\*.tmp
+%SystemDrive%\users\*\appdata\local\packages\microsoft.windows.cortana_*\localstate\*
+%SystemDrive%\users\*\appdata\local\packages\microsoft.windows.cortana_*\tempstate\*
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.photos_*\ac\nvidia corporation\shadowplay\capturecore.log
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.photos_*\ac\nvidia corporation\shadowplay\capturecore.old
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.photos_*\localstate\framenavigationservicestate.xml
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.photos_*\localstate\photosapptile\tile*.jpg
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.photos_*\localstate\timelineprefetchthumbnails.xml
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscalculator_*\ac\nvidia corporation\shadowplay\capturecore.log
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\ac\nvidia corporation\shadowplay\capturecore.log
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\ac\nvidia corporation\shadowplay\capturecore.old
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\ac\temp\*.tmp
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\*.jpg
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\files\*.jpg
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\files\*.pdf
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\files\*.png
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\files\s0\*\image00*.png
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\localfiles\*.jpg
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\localfiles\*.pdf
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\localfiles\*.png
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\tempstate\content.mso\*.tmp
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\tempstate\syncenginesnapshot.xml
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\tempstate\syncenginesnapshotold.xml
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowsstore_*\ac\inetcache\*.htm
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowsstore_*\ac\inetcache\*.jpg
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowsstore_*\ac\inetcache\*.png
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowsstore_*\ac\nvidia corporation\shadowplay\capturecore.log
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowsstore_*\ac\nvidia corporation\shadowplay\capturecore.old
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowsstore_*\ac\temp\*.tmp
+%SystemDrive%\Users\*\AppData\Local\publishers\*\fonts\fontcache\2\fontcachemetadata.xml
+%SystemDrive%\users\*\appdata\local\temp\*
+%SystemDrive%\Users\*\appdata\local\xo communications\worktime\*
+%SystemDrive%\Users\*\AppData\Locallow\lastpass\debug.txt
+%SystemDrive%\Users\*\AppData\Roaming\apple computer\itunes\cookies\cookies.binarycookies
+%SystemDrive%\Users\*\AppData\Roaming\apple computer\itunes\cookies\cookies.binarycookies_tmp_*.dat
+%SystemDrive%\Users\*\AppData\Roaming\apple computer\preferences\byhost\com.apple.itunes.{*}.plist
+%SystemDrive%\Users\*\AppData\Roaming\apple computer\preferences\byhost\com.apple.itunes.{*}.plist.*
+%SystemDrive%\Users\*\AppData\Roaming\apple computer\preferences\com.apple.itunes.plist
+%SystemDrive%\Users\*\AppData\Roaming\apple computer\preferences\com.apple.itunes.plist.*
+%SystemDrive%\users\*\appdata\roaming\cisco\unified communications\jabber\csf\config\*
+%SystemDrive%\Users\*\AppData\roaming\microsoft\templates\livecontent\*.thmx
+%SystemDrive%\users\*\appdata\roaming\microsoft\office\*\*\proofing\*.tmp
+%SystemDrive%\users\*\appdata\roaming\microsoft\office\*\*\proofing\roamingcustom.dic
+%SystemDrive%\Users\*\AppData\Roaming\microsoft\outlook\outlook.xml
+%SystemDrive%\Users\*\AppData\Roaming\microsoft\signatures\*.htm
+%SystemDrive%\Users\*\AppData\Roaming\microsoft\signatures\*\colorschememapping.xml
+%SystemDrive%\Users\*\AppData\Roaming\microsoft\signatures\*\themedata.thmx
+%SystemDrive%\Users\*\AppData\Roaming\microsoft\templates\~$rmalemail.dotm
+%SystemDrive%\Users\*\AppData\Roaming\microsoft\templates\~wrd*.tmp
+%SystemDrive%\Users\*\AppData\Roaming\microsoft\templates\normalemail.dotm
+%SystemDrive%\Users\*\AppData\Roaming\microsoft\windows\libraries\~ictures.tmp
+%SystemDrive%\Users\*\AppData\Roaming\microsoft\windows\libraries\~ocuments.tmp
+%SystemDrive%\Users\*\AppData\Roaming\microsoft\windows\libraries\documents.library-ms
+%SystemDrive%\Users\*\AppData\Roaming\microsoft\windows\libraries\documents.library-ms~*.tmp
+%SystemDrive%\Users\*\AppData\Roaming\microsoft\windows\libraries\pictures.library-ms
+%SystemDrive%\Users\*\AppData\Roaming\microsoft\windows\libraries\pictures.library-ms~*.tmp
+%SystemDrive%\users\*\appdata\roaming\microsoft\windows\recent\customdestinations\*
+%SystemDrive%\Users\*\AppData\Roaming\notepad++\config.xml
+%SystemDrive%\Users\*\AppData\Roaming\notepad++\contextmenu.xml
+%SystemDrive%\Users\*\AppData\Roaming\notepad++\langs.xml
+%SystemDrive%\Users\*\AppData\Roaming\notepad++\plugins\config\pluginmanagerplugins.zip
+%SystemDrive%\Users\*\AppData\Roaming\notepad++\session.xml
+%SystemDrive%\Users\*\AppData\Roaming\notepad++\shortcuts.xml
+%SystemDrive%\Users\*\AppData\Roaming\notepad++\stylers.xml
+%SystemDrive%\Users\*\evernote\logs\applog_*.txt
+%SystemDrive%\Users\*\music\itunes\*.tmp
+%SystemDrive%\Users\*\music\itunes\it.tmp
+%SystemDrive%\Users\*\music\itunes\itunes library.itl
+%SystemDrive%\Users\*\music\itunes\temp*.tmp
+%SystemDrive%\windows\inf\wmiaprpl\*
+%SystemDrive%\windows\system32\perfstringbackup.tmp
+%SystemDrive%\windows\system32\wbem\performance\*
+%SystemDrive%\windows\temp\*.exe
+
+
+SECTION END:
+
+//=========================================================================
+// DOCPROPS SECTION - specify directories where files are not docprops done
+//=========================================================================
+SECTION DOCPROPS:
+%SystemDrive%\windows\*
+%SystemDrive%\progra*\common*\symant*\*
+%SystemDrive%\progra*\symant*\*
+%SystemDrive%\progra*\norton*\*
+%SystemDrive%\winnt\*
+%SystemDrive%\docume*\all*\applic*\micros*\crypto\*
+%SystemDrive%\system*\*
+%SystemDrive%\msocache\*
+%SystemDrive%\config.msi\*
+%SystemDrive%\inetpub\*
+%SystemDrive%\progra*\citrix\person*\logs\*
+%SystemDrive%\progra*\citrix\pvsage*\*
+%SystemDrive%\progra*\vmware\vmware*\*
+%SystemDrive%\progra*\dgagent\readops\*
+
+//Customer specific requirements
+%SystemDrive%\drivers\*
+
+// Windows 8 Apps special directories
+<windows apps home>\*
+<windows apps repository>\*
+
+// Windows 10 Performance improvements
+%SystemDrive%\Program Files (x86)\adobe\acrobat reader dc\reader\webresources\resource0\*.html
+%SystemDrive%\Program Files (x86)\adobe\acrobat reader dc\reader\webresources\resource0\static\images\*.png
+%SystemDrive%\Program Files (x86)\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\aicuc\images\*.png
+%SystemDrive%\Program Files (x86)\apple software update\softwareupdate.resources\software update.tiff
+%SystemDrive%\Program Files (x86)\cisco systems\cisco jabber\*.xml
+%SystemDrive%\Program Files (x86)\cisco systems\cisco jabber\avatars\*.svg
+%SystemDrive%\Program Files (x86)\dropbox\update\*\dropboxcrashhandler.exe
+%SystemDrive%\Program Files (x86)\dropbox\update\*\dropboxupdate.exe
+%SystemDrive%\Program Files (x86)\dropbox\update\*\dropboxupdatebroker.exe
+%SystemDrive%\Program Files (x86)\dropbox\update\*\dropboxupdatehelper.msi
+%SystemDrive%\Program Files (x86)\dropbox\update\*\dropboxupdateondemand.exe
+%SystemDrive%\Program Files (x86)\dropbox\update\*\goopdate.dll
+%SystemDrive%\Program Files (x86)\dropbox\update\*\goopdateres_*.dll
+%SystemDrive%\Program Files (x86)\dropbox\update\*\npdropboxupdate*.dll
+%SystemDrive%\Program Files (x86)\dropbox\update\*\psmachine.dll
+%SystemDrive%\Program Files (x86)\dropbox\update\*\psuser.dll
+%SystemDrive%\Program Files (x86)\dropbox\update\install\{*}\dropboxupdatesetup_*.exe
+%SystemDrive%\Program Files (x86)\dyn\updater\*.txt
+%SystemDrive%\Program Files (x86)\dyn\updater\images\*.png
+%SystemDrive%\Program Files\itunes\itunes.resources\missingartworkloading.png
+%SystemDrive%\Program Files*\microsoft office\*.thmx
+%SystemDrive%\Program Files\microsoft office\appxmanifest.xml
+%SystemDrive%\Program Files\microsoft office\filesystemmetadata.xml
+%SystemDrive%\Program Files\microsoft office\root\office16\microsoft.lync.model.zip
+%SystemDrive%\Program Files\microsoft office\root\office16\microsoft.lync.utilities.controls.zip
+%SystemDrive%\Program Files\microsoft office\root\office16\microsoft.lync.utilities.zip
+%SystemDrive%\Program Files\microsoft office\root\office16\ocomprivate.zip
+%SystemDrive%\Program Files\microsoft office\root\office16\system.windows.controls.theming.toolkit.zip
+%SystemDrive%\Program Files\microsoft office\updates\detection\*\versiondescriptor.xml
+%SystemDrive%\Program Files\windowsapps\microsoft.skypeapp*\skypeapp\assets\images\*.png
+%SystemDrive%\ProgramData\{*}.zip
+%SystemDrive%\ProgramData\apple computer\itunes\sc info\sc info.txt
+%SystemDrive%\ProgramData\application data\dyn\updater\frontend.log
+%SystemDrive%\ProgramData\application data\dyn\updater\frontend.log.*
+%SystemDrive%\ProgramData\cisco\cisco anyconnect secure mobility client\*.xml
+%SystemDrive%\ProgramData\cisco\cisco anyconnect secure mobility client\logs\updatehistory_*_log.txt
+%SystemDrive%\programdata\dropbox\update\log\*
+%SystemDrive%\ProgramData\dropbox\update\log\dropboxupdate.log-*
+%SystemDrive%\ProgramData\dropbox\update\log\dropboxupdate.log-*-finished
+%SystemDrive%\ProgramData\microsoft\clicktorun\machinedata\catalog\packages\*\deploymentconfiguration.xml
+%SystemDrive%\ProgramData\microsoft\clicktorun\machinedata\catalog\packages\*\manifest.xml
+%SystemDrive%\ProgramData\microsoft\clicktorun\machinedata\catalog\packages\*\userdeploymentconfiguration.xml
+%SystemDrive%\ProgramData\microsoft\clicktorun\productreleases\*\en-us.16\masterdescriptor.en-us.xml
+%SystemDrive%\ProgramData\microsoft\clicktorun\productreleases\*\x-none.16\masterdescriptor.x-none.xml
+%SystemDrive%\ProgramData\microsoft\diagnosis\downloadedscenarios\windows.siuf.xml
+%SystemDrive%\ProgramData\microsoft\office\heartbeat\heartbeatcache.xml
+%SystemDrive%\ProgramData\microsoft\provisioning\*\masterdatastore.xml
+%SystemDrive%\ProgramData\microsoft\provisioning\*\prov\runtime.xml
+%SystemDrive%\ProgramData\microsoft\windows\power efficiency diagnostics\energy-report-*.xml
+%SystemDrive%\ProgramData\microsoft\windows\power efficiency diagnostics\energy-report-latest.xml
+%SystemDrive%\programdata\microsoft\windows\power efficiency diagnostics\energy-report*
+%SystemDrive%\ProgramData\microsoft\windows\wer\reportqueue\*.txt
+%SystemDrive%\ProgramData\microsoft\windows\wer\reportqueue\*.xml
+%SystemDrive%\programdata\microsoft\windows\wer\reportqueue\*\report.wer
+%SystemDrive%\programdata\microsoft\windows\wer\reportqueue\*\report.wer.tmp
+%SystemDrive%\ProgramData\microsoft\windows\wer\temp\*.xml
+%SystemDrive%\programdata\nvidia corporation\drs\update.bin
+%SystemDrive%\ProgramData\nvidia corporation\shadowplay\capturecore.log
+%SystemDrive%\ProgramData\nvidia corporation\shadowplay\capturecore.old
+%SystemDrive%\ProgramData\sccomm\Logs\sccomm.txt
+%SystemDrive%\ProgramData\sccomm\sccomm.txt
+%SystemDrive%\ProgramData\vmware\*.txt
+%SystemDrive%\Users\*\AppData\Local\{*}
+%SystemDrive%\Users\*\AppData\Local\cisco\cisco anyconnect secure mobility client\preferences.xml
+%SystemDrive%\Users\*\AppData\Local\cisco\unified communications\jabber\csf\history\*\_db.key
+%SystemDrive%\users\*\appdata\local\cisco\unified communications\jabber\csf\logs\jabber.log.*
+%SystemDrive%\Users\*\AppData\Local\cisco\unified communications\jabber\csf\photo cache\*.png
+%SystemDrive%\Users\*\AppData\Local\cisco\unified communications\jabber\csf\telemetry\*.txt
+%SystemDrive%\users\*\appdata\local\google\chrome\user data\*
+%SystemDrive%\Users\*\AppData\Local\microsoft\clr_v4.0\ngendisable.txt
+%SystemDrive%\Users\*\AppData\Local\microsoft\internet explorer\urlblock\urlblock_*.bin
+%SystemDrive%\Users\*\AppData\Local\microsoft\msoidentitycrl\production\fplist.xml
+%SystemDrive%\Users\*\AppData\Local\microsoft\office\*\lync.exe_rules.xml
+%SystemDrive%\users\*\appdata\local\microsoft\office\*\lync\tracing\*.etl
+%SystemDrive%\users\*\appdata\local\microsoft\office\*\lync\tracing\*.etl.bak
+%SystemDrive%\users\*\appdata\local\microsoft\office\*\lync\tracing\*.uccapilog
+%SystemDrive%\users\*\appdata\local\microsoft\office\*\msoia.exe_rules.xml
+%SystemDrive%\Users\*\AppData\Local\microsoft\office\*\outlook.exe_rules.xml
+%SystemDrive%\users\*\appdata\local\microsoft\onedrive\logs\*
+%SystemDrive%\users\*\appdata\local\microsoft\onedrive\settings\*
+%SystemDrive%\Users\*\AppData\Local\microsoft\onedrive\standaloneupdater\update.xml
+%SystemDrive%\Users\*\AppData\Local\microsoft\onedrive\update\update.xml
+%SystemDrive%\Users\*\AppData\Local\microsoft\outlook\*.com.nst.tmp
+%SystemDrive%\Users\*\AppData\Local\microsoft\outlook\*.com.ost
+%SystemDrive%\Users\*\AppData\Local\microsoft\outlook\*.com.ost.tmp
+%SystemDrive%\Users\*\AppData\Local\microsoft\outlook\*\autod.*.com.xml
+%SystemDrive%\Users\*\AppData\Local\microsoft\outlook\*autodiscover.xml
+%SystemDrive%\Users\*\AppData\Local\microsoft\outlook\inferences*.xml
+%SystemDrive%\Users\*\AppData\Local\microsoft\outlook\oab2.xml
+%SystemDrive%\Users\*\AppData\Local\microsoft\outlook\oab3.xml
+%SystemDrive%\Users\*\AppData\Local\microsoft\windows\actioncentercache\dropbox-desktop-client_*.png
+%SystemDrive%\Users\*\AppData\Local\microsoft\windows\actioncentercache\flipboard-flipboard_*.jpg
+%SystemDrive%\Users\*\AppData\Local\microsoft\windows\actioncentercache\microsoft-explorer-notification--*.png
+%SystemDrive%\users\*\appdata\local\microsoft\windows\actioncentercache\microsoft-explorer-notification*.png
+%SystemDrive%\Users\*\AppData\Local\microsoft\windows\actioncentercache\microsoft-office-outlook-exe-*.png
+%SystemDrive%\Users\*\AppData\Local\microsoft\windows\actioncentercache\microsoft-skypeapp_*-app_*.png
+%SystemDrive%\Users\*\AppData\Local\microsoft\windows\explorer\notifyicon\microsoft.explorer.notification.*.png
+%SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*.htm
+%SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*.jpg
+%SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\compare_1_5_6_uni_dll1.zip
+%SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\edgecompatviewlist[*].xml
+%SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\edgecompatviewlist*.xml
+%SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\edgecompatviewlist1.xml
+%SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\img_spacer1.png
+%SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\jabber_logo1.png
+%SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\pluginmanager_*.zip
+%SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\plugins*.zip
+%SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\low\ie\*.htm
+%SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\low\ie\*.png
+%SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\low\ie\*.txt
+%SystemDrive%\Users\*\AppData\Local\microsoft\windows\notifications\wpnidm\*.jpg
+%SystemDrive%\users\*\appdata\local\microsoft\windows\webcache\*
+%SystemDrive%\Users\*\AppData\Local\microsoft\windows\webcache\*.log
+%SystemDrive%\Users\*\AppData\Local\microsoftedge\sharedcachecontainers\microsoftedge_iecompat\iecompatdata.xml
+%SystemDrive%\Users\*\AppData\Local\nvidia corporation\shadowplay\capturecore.old
+%SystemDrive%\users\*\appdata\local\nvidia\nvbackend\*
+%SystemDrive%\Users\*\AppData\Local\nvidia\nvbackend\*.xml
+%SystemDrive%\Users\*\AppData\Local\packages\*.dropbox_*\localstate\dbxdata.dat
+%SystemDrive%\Users\*\AppData\Local\packages\*.dropbox_*\localstate\dbxdata.dat.bak
+%SystemDrive%\users\*\appdata\local\packages\*.netflix_*\localstate\offlineinfo*
+%SystemDrive%\users\*\appdata\local\packages\*.netflix_*\localstate\onlineinfo*
+%SystemDrive%\users\*\appdata\local\packages\*.netflix_*\localstate\resumeinfo*
+%SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\ac\inetcache\*\*.htm
+%SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\ac\inetcache\*\*.jpg
+%SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\ac\inetcache\*\*.png
+%SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\ac\inetcache\*\*.txt
+%SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\ac\microsoft\internet explorer\domstore\*\*.xml
+%SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\ac\temp\*.tmp
+%SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\localstate\*.xml
+%SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\localstate\*.xml.~tmp
+%SystemDrive%\Users\*\AppData\Local\packages\facebook.facebook_*\localstate\appdata\local\osmeta\_store_*\image_cache.v*\fbimagedownloader-*.jpg
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.aad.brokerplugin_*\ac\temp\*.tmp
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.aad.brokerplugin_*\localstate\*
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.aad.brokerplugin_*\localstate\*.tmp
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.bingweather_*\ac\inetcache\*.jpg
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.bingweather_*\ac\inetcache\*.png
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.bingweather_*\localstate\*.xml
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.bingweather_*\localstate\*.xml*.tmp
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.flv
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.htm
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.jpg
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.png
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.svg
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.svg
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.swf
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.txt
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.xml
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\microsoftedge\urlblock\urlblock_*.bin
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\temp\*.tmp
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.oneconnect_*\localstate\*
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.people_*\localstate\contactsonprimarytile.txt
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.people_*\localstate\contactsonprimarytile.txt.~tmp
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.people_*\localstate\diagoutputdir\peoplebackgroundtasklog.etl
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.people_*\localstate\diagoutputdir\peoplebackgroundtasklog.last.etl
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.people_*\localstate\tilethumbnails\primarytileimage_*.jpg
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.people_*\localstate\tilethumbnails\primarytileimage_*.jpgtemp
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.contentdeliverymanager_*\ac\temp\*.tmp
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.contentdeliverymanager_*\localstate\assets\*
+%SystemDrive%\users\*\appdata\local\packages\microsoft.windows.contentdeliverymanager_*\localstate\contentmanagementsdk\creatives\*
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.contentdeliverymanager_*\localstate\contentmanagementsdk\creatives\*
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.contentdeliverymanager_*\localstate\contentmanagementsdk\creatives\*.tmp
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.contentdeliverymanager_*\localstate\stagedassets\*
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.contentdeliverymanager_*\localstate\tips\*.xml
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.cortana_*\ac\appcache\*.htm
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.cortana_*\ac\nvidia corporation\shadowplay\capturecore.log
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.cortana_*\ac\temp\*.tmp
+%SystemDrive%\users\*\appdata\local\packages\microsoft.windows.cortana_*\localstate\*
+%SystemDrive%\users\*\appdata\local\packages\microsoft.windows.cortana_*\tempstate\*
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.photos_*\ac\nvidia corporation\shadowplay\capturecore.log
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.photos_*\ac\nvidia corporation\shadowplay\capturecore.old
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.photos_*\localstate\framenavigationservicestate.xml
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.photos_*\localstate\photosapptile\tile*.jpg
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.photos_*\localstate\timelineprefetchthumbnails.xml
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscalculator_*\ac\nvidia corporation\shadowplay\capturecore.log
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\ac\nvidia corporation\shadowplay\capturecore.log
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\ac\nvidia corporation\shadowplay\capturecore.old
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\ac\temp\*.tmp
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\*.jpg
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\files\*.jpg
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\files\*.pdf
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\files\*.png
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\files\s0\*\image00*.png
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\localfiles\*.jpg
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\localfiles\*.pdf
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\localfiles\*.png
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\tempstate\content.mso\*.tmp
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\tempstate\syncenginesnapshot.xml
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\tempstate\syncenginesnapshotold.xml
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowsstore_*\ac\inetcache\*.htm
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowsstore_*\ac\inetcache\*.jpg
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowsstore_*\ac\inetcache\*.png
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowsstore_*\ac\nvidia corporation\shadowplay\capturecore.log
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowsstore_*\ac\nvidia corporation\shadowplay\capturecore.old
+%SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowsstore_*\ac\temp\*.tmp
+%SystemDrive%\Users\*\AppData\Local\publishers\*\fonts\fontcache\2\fontcachemetadata.xml
+%SystemDrive%\users\*\appdata\local\temp\*
+%SystemDrive%\Users\*\AppData\Locallow\lastpass\debug.txt
+%SystemDrive%\Users\*\AppData\Roaming\apple computer\itunes\cookies\cookies.binarycookies
+%SystemDrive%\Users\*\AppData\Roaming\apple computer\itunes\cookies\cookies.binarycookies_tmp_*.dat
+%SystemDrive%\Users\*\AppData\Roaming\apple computer\preferences\byhost\com.apple.itunes.{*}.plist
+%SystemDrive%\Users\*\AppData\Roaming\apple computer\preferences\byhost\com.apple.itunes.{*}.plist.*
+%SystemDrive%\Users\*\AppData\Roaming\apple computer\preferences\com.apple.itunes.plist
+%SystemDrive%\Users\*\AppData\Roaming\apple computer\preferences\com.apple.itunes.plist.*
+%SystemDrive%\users\*\appdata\roaming\cisco\unified communications\jabber\csf\config\*
+%SystemDrive%\Users\*\AppData\roaming\microsoft\templates\livecontent\*.thmx
+%SystemDrive%\users\*\appdata\roaming\microsoft\office\*\*\proofing\*.tmp
+%SystemDrive%\users\*\appdata\roaming\microsoft\office\*\*\proofing\roamingcustom.dic
+%SystemDrive%\Users\*\AppData\Roaming\microsoft\outlook\outlook.xml
+%SystemDrive%\Users\*\AppData\Roaming\microsoft\signatures\*.htm
+%SystemDrive%\Users\*\AppData\Roaming\microsoft\signatures\*\colorschememapping.xml
+%SystemDrive%\Users\*\AppData\Roaming\microsoft\signatures\*\themedata.thmx
+%SystemDrive%\Users\*\AppData\Roaming\microsoft\templates\~$rmalemail.dotm
+%SystemDrive%\Users\*\AppData\Roaming\microsoft\templates\~wrd*.tmp
+%SystemDrive%\Users\*\AppData\Roaming\microsoft\templates\normalemail.dotm
+%SystemDrive%\Users\*\AppData\Roaming\microsoft\windows\libraries\~ictures.tmp
+%SystemDrive%\Users\*\AppData\Roaming\microsoft\windows\libraries\~ocuments.tmp
+%SystemDrive%\Users\*\AppData\Roaming\microsoft\windows\libraries\documents.library-ms
+%SystemDrive%\Users\*\AppData\Roaming\microsoft\windows\libraries\documents.library-ms~*.tmp
+%SystemDrive%\Users\*\AppData\Roaming\microsoft\windows\libraries\pictures.library-ms
+%SystemDrive%\Users\*\AppData\Roaming\microsoft\windows\libraries\pictures.library-ms~*.tmp
+%SystemDrive%\users\*\appdata\roaming\microsoft\windows\recent\customdestinations\*
+%SystemDrive%\Users\*\AppData\Roaming\notepad++\config.xml
+%SystemDrive%\Users\*\AppData\Roaming\notepad++\contextmenu.xml
+%SystemDrive%\Users\*\AppData\Roaming\notepad++\langs.xml
+%SystemDrive%\Users\*\AppData\Roaming\notepad++\plugins\config\pluginmanagerplugins.zip
+%SystemDrive%\Users\*\AppData\Roaming\notepad++\session.xml
+%SystemDrive%\Users\*\AppData\Roaming\notepad++\shortcuts.xml
+%SystemDrive%\Users\*\AppData\Roaming\notepad++\stylers.xml
+%SystemDrive%\Users\*\evernote\logs\applog_*.txt
+%SystemDrive%\Users\*\music\itunes\*.tmp
+%SystemDrive%\Users\*\music\itunes\it.tmp
+%SystemDrive%\Users\*\music\itunes\itunes library.itl
+%SystemDrive%\Users\*\music\itunes\temp*.tmp
+%SystemDrive%\windows\inf\wmiaprpl\*
+%SystemDrive%\windows\system32\perfstringbackup.tmp
+%SystemDrive%\windows\system32\wbem\performance\*
+%SystemDrive%\windows\temp\*.exe
+%SystemDrive%\users\*\appdata\local\microsoft\edge\user data\*
+SECTION END:
+
+//=========================================================================
+// AFE FDE NO REPARSE FILES - 
+// These are meant to suppress warning dialogs from firewalls
+//=========================================================================
+SECTION AFE FDE FILE NO REPARSE:
+
+//Transactional NTFS and registry
+// Legacy entries - not needed any more ...
+//*\USERS\*\NTUSER*
+//*\USERS\*\USRCLASS*
+*\TxR\*
+
+// OPTIONAL - Symantec AV
+// *\PROGRA*\SYMANT*\*\*.exe
+// *\PROGRA*\COMMON*\SYMANT*\*.exe
+// *\PROG*\*\SRTSP*\*
+
+// OPTIONAL - Symantec Tamper Protection
+*\NOMADIC\DBENG8.EXE
+*\SYSTEM32\SERVICES.EXE
+
+// OPTIONAL - McAfee AV
+*\PROGRA*\MCAFEE*\*
+
+// OPTIONAL - VMWare Workstation and VMWare Player
+*\VMWARE-AUTHD.exe
+
+// OPTIONAL - Siebel DB client
+*\sfadialer\SFADial.exe
+
+// AME DGFS: without this AFE will decrypt temporary files 
+// that AME encrypted when replacing attachment
+//*\09D849B6-32D3-4A40-85EE-6B84BA29E35B\msgs\*
+
+// This is a fix for DGAGENT-1448, HP systems running out of stack space.
+*\system32\atiok3*.dll
+
+// This is a fix for DGAGENT-1893 Cannot launch start menu when AFE is enabled on Win8
+// On start Explorer tries to open .lnk files in this directory with OpLocks
+*\USERS\*\APPDATA\LOCAL\MICRO*\WINDOWS\WINX\*
+
+// Fix For Universal Apps
+*\USERS\*\APPDATA\LOCAL\PACKAGE?\*
+*\WINDOWS\SYSTEM32\WWAHOST.EXE
+*\WINDOWS\SYSTEM32\BYTECODEGENERATOR.EXE
+*\WINDOWS\SYSTEM32\RUNTIMEBROKER.EXE
+*\WINDOWS\SYSTEM32\BACKGROUNDTASKHOST.EXE
+*\USERS\*\APPDATA\LOCAL\MICRO*\WINDOWS\APPLIC*\*
+*\WINDOWS\WINSTOR*
+*\PROG*\WINDOWSAPP*
+
+//SA-24054: Fixed RS3 AFE compatibility issue.
+*\WINDOWS\FONTS*
+
+// Fix for DGAGENT-2893 (Sep12 RU3) and DGAGENT-3507 (Sep12 RU4) and future versions of 
+// Symantec Endpoint Protection Client Installations
+*\SYMANT*12.1.*
+*\PROGRA*\SYMANT*\SYMANT*\CURRENT*
+
+// This is a fix for DGAGENT-5975, [Kraft Group] Latency accessing network shares with AFE enabled?
+*\SRVSVC*
+
+*WINDOWS\WINSX*
+*WINDOWS\SOFTWAREDISTRIBUTIO*
+*WINDOWS\SOFTWA~1*
+*WINDOWS\CBSTEM*
+*\CBSTEM*PACKAGE*KB*.CAT*
+*WINDOWS\SERVICIN*
+*WINDOWS\SERVIC*\PACK*
+*WINDOWS\REGISTRATIO*
+*WINDOWS\REGIST~1*
+*WINDOWS\GLOBALIZATION*
+*WINDOWS\GLOBAL~1*
+*TIWORKER.EX*
+*WINDOWS\LOGS*
+*WINDOWS\SYS*\SMI\STORE*
+*PROGRAMDATA\USOPRIVAT*
+*PROGRAMDATA\MICROSOFT*
+*WINDOWS\SYS*\CONFIG*
+*WINDOWS\APPPATC*
+*SYS*\CATROO*
+*\WINDOWS\INF*
+
+// Don't reparse any basic EXE types
+// Fix for DGAGENT-17152
+*.EXE*;*.DLL*;*.SYS*;*.COM;*.CPL
+
+SECTION END:
+
+//=========================================================================
+// AFE PROCESS NO REPARSE FILES - 
+// No reparse of the specified files.  Effeects processses marked with RP flag. 
+// e.g sfttray.exe,RP+PR - see prcsflgs.dat for example(s)
+//========================================================================	
+SECTION AFE PROCESS NO REPARSE FILES:
+// OPTIONAL - AppV Application (see sfttray.exe in prcsflgs.dat )
+sfttray.exe:*.DLL
+
+// OPTIONAL - Adobe Reader X 10.0.0 (see acrord32.exe in prcsflgs.dat)
+acrord32.exe:*\USERS\*\APPDATA\*\ADOBE\*
+acrord32.exe:*\DOC*\*\APP*\ADOBE\*
+
+// SEP12 has issues during install
+ccSvcHst.exe:*SYMANTEC*
+
+// SCEP 2015
+msmpeng.exe:*.CMD
+
+// Universal Apps :aka MetroApps - Excluded for AFE
+sihost.exe:*.JPG
+SECTION END: