BMD: Recommended settings for antivirus software

Antivirus software is essential for protecting IT systems. However, antivirus programs should not hinder the users and are supposed to run in the background, if possible unnoticed. Many antivirus programs cause the system to slow down or can sometimes even completely overload it. For this reason, it is important to configure them correctly and set process and folder exceptions accordingly.

1.1. BMD NTCS

To improve performance, database directories should always be excluded from antivirus real-time protection. The BMD NTCS archive directory, however, should not be excluded from real-time protection, since it is where the documents of the users are saved.

BMD recommends the following settings:

1.1.1. Exclusions on the server

%Public%\Documents\BMDSOFTWARE\BMDNTCS\LOG or
\\<SERVERNAME>\BMDNTCS_PGMDATA\LOG
BMDDataBase
BMD NTCS installation directory

1.1.2. Exclusions on the client

As of version 24.02, the following files and directories:

C:\Program Files (x86)\BMDNTCSClients\“Servername“\BMDNTCS.exe
C:\Program Files (x86)\BMDNTCSClients\“Servername“\BMDNTCS.x64.exe
C:\Program Files (x86)\BMDNTCSClients\“Servername“\BMDNetclient.exe
C:\ProgramData\BMDNTCS\BMDNTCSClients\Temp\*.*
\\<SERVERNAME>\BMDNTCS_PGMDATA\LOG

Or alternatively the respective directories without restrictions:

C:\Program Files (x86)\BMDNTCSClients\"Servername"\*.*
C:\Program Files (x86)\BMDNTCSClients\"Servername"\x64\*.*
C:\ProgramData\BMDNTCS\BMDNTCSClients\Temp\*.*
\\<SERVERNAME>\BMDNTCS_PGMDATA\LOG

For version 24.01 or earlier versions, the following files and directories:

C:\ProgramData\BMDNTCS\BMDNTCSClients\“Servername“\BMDNTCS.exe
C:\ProgramData\BMDNTCS\\BMDNTCSClients\“Servername“\BMDNTCS.x64.exe C:\ProgramData\BMDNTCS\BMDNTCSClients\“Servername“\BMDNetclient.exe
\\<SERVERNAME>\BMDNTCS_PGMDATA\LOG

Or alternatively the respective directories without restrictions:

C:\ProgramData\BMDNTCS\BMDNTCSClients\"Servername"\*.*
C:\ProgramData\BMDNTCS\BMDNTCSClients\"Servername"\x64\*.*
\\<SERVERNAME>\BMDNTCS_PGMDATA\LOG

1.1.3. Exclusions on the web server

On the web server, the respective directory of the BMD Web/Com application (if in use) should also be excluded from antivirus real-time protection.

e.g. C:\Inetpub\bmdweb

If some sort of behaviour monitoring (ransomware protection, IPS, Windows Defender exploit protection settings) is active, it is often necessary to define an additional process exception for BMDNTCS.exe, BMDNTCS.x64.exe und BMDNetclient.exe.

1.2. BMD 5.5

1.2.1. Exclusions on the server

You have to exclude the BMD 5.5 program directory (“BMD”) and any existing BMD 5.5 data directory (“BMDDAT”, “BMD_DATA”, “BMDDaten”, etc.) from real-time protection. Not doing this may cause file locking or problems when accessing files. Furthermore, you should exclude the process bmdw.exe from real-time protection on the server.