Apex One supports the use of Windows system variables in the definition of scan exclusions. For a full list of recognized system variables in Windows, please refer to the Microsoft article: Recognized Environment Variables.
The following limitations apply to the use of system variables in the definition of scan exclusions:
- The use of system variables is only supported for excluding folders from being scanned, not for excluding particular files. In other words, it is possible to use %WINDIR%\test to exlude the C:\Windows\test folder from being scanned. However, using %WINDIR%\test\file.exe to exclude file.exe in this folder is not supported.
- Excluding the users' Appdata folder from being scanned with the variables %APPDATA% or %ALLUSERSAPPDATA% is not supported.
- Please note that this does not apply to exceptions for behavior monitoring.
Below are all the supported/unsupported variables in Apex One:
Variable | Supported? | Description |
---|---|---|
ALLUSERSAPPDATA | No | Same as CSIDL_COMMON_APPDATA |
ALLUSERSPROFILE | Yes | Refers to %PROFILESFOLDER%\Public or %PROFILESFOLDER%\all users |
COMMONPROGRAMFILES | Yes | Same as CSIDL_PROGRAM_FILES_COMMON. |
COMMONPROGRAMFILES(X86) | Yes | Refers to the C:\Program Files (x86)\Common Files folder on 64-bit systems. |
CSIDL_COMMON_ADMINTOOLS | No | Version 5.0. The file system directory containing administrative tools for all users of the computer. |
CSIDL_COMMON_ALTSTARTUP | No | The file system directory that corresponds to the nonlocalized Startup program group for all users. |
CSIDL_COMMON_APPDATA | No | Version 5.0. The file system directory containing application data for all users. A typical path is C:\Documents and Settings\All Users\Application Data. |
CSIDL_COMMON_DESKTOPDIRECTORY | No | The file system directory that contains files and folders that appear on the desktop for all users. A typical path is C:\Documents and Settings\All Users\Desktop. |
CSIDL_COMMON_DOCUMENTS | No | The file system directory that contains documents that are common to all users. A typical path is C:\Documents and Settings\All Users\Documents. |
CSIDL_COMMON_FAVORITES | No | The file system directory that serves as a common repository for favorite items common to all users. |
CSIDL_COMMON_MUSIC | No | Version 6.0. The file system directory that serves as a repository for music files common to all users. A typical path is C:\Documents and Settings\All Users\Documents\My Music. |
CSIDL_COMMON_PICTURES | No | Version 6.0. The file system directory that serves as a repository for image files common to all users. A typical path is C:\Documents and Settings\All Users\Documents\My Pictures. |
CSIDL_COMMON_PROGRAMS | No | The file system directory that contains the directories for the common program groups that appear on the Start menu for all users. A typical path is C:\Documents and Settings\All Users\Start Menu\Programs. |
CSIDL_COMMON_STARTMENU | No | The file system directory that contains the programs and folders that appear on the Start menu for all users. A typical path is C:\Documents and Settings\All Users\Start Menu. |
CSIDL_COMMON_STARTUP | No | The file system directory that contains the programs that appear in the Startup folder for all users. A typical path is C:\Documents and Settings\All Users\Start Menu\Programs\Startup. |
CSIDL_COMMON_TEMPLATES | No | The file system directory that contains the templates that are available to all users. A typical path is C:\Documents and Settings\All Users\Templates. |
CSIDL_COMMON_VIDEO | No | Version 6.0. The file system directory that serves as a repository for video files common to all users. A typical path is C:\Documents and Settings\All Users\Documents\My Videos. |
CSIDL_DEFAULT_APPDATA | No | Refers to the Appdata folder inside %DEFAULTUSERPROFILE%. |
CSIDL_DEFAULT_LOCAL_APPDATA | No | Refers to the local Appdata folder inside %DEFAULTUSERPROFILE%. |
CSIDL_DEFAULT_COOKIES | No | Refers to the Cookies folder inside %DEFAULTUSERPROFILE%. |
CSIDL_DEFAULT_CONTACTS | No | Refers to the Contacts folder inside %DEFAULTUSERPROFILE%. |
CSIDL_DEFAULT_DESKTOP | No | Refers to the Desktop folder inside %DEFAULTUSERPROFILE%. |
CSIDL_DEFAULT_DOWNLOADS | No | Refers to the Downloads folder inside %DEFAULTUSERPROFILE%. |
CSIDL_DEFAULT_FAVORITES | No | Refers to the Favorites folder inside %DEFAULTUSERPROFILE%. |
CSIDL_DEFAULT_HISTORY | No | Refers to the History folder inside %DEFAULTUSERPROFILE%. |
CSIDL_DEFAULT_INTERNET_CACHE | No | Refers to the Internet Cache folder inside %DEFAULTUSERPROFILE%. |
CSIDL_DEFAULT_PERSONAL | No | Refers to the Personal folder inside %DEFAULTUSERPROFILE%. |
CSIDL_DEFAULT_MYDOCUMENTS | No | Refers to the My Documents folder inside %DEFAULTUSERPROFILE%. |
CSIDL_DEFAULT_MYPICTURES | No | Refers to the My Pictures folder inside %DEFAULTUSERPROFILE%. |
CSIDL_DEFAULT_MYMUSIC | No | Refers to the My Music folder inside %DEFAULTUSERPROFILE%. |
CSIDL_DEFAULT_MYVIDEO | No | Refers to the My Videos folder inside %DEFAULTUSERPROFILE%. |
CSIDL_DEFAULT_RECENT | No | Refers to the Recent folder inside %DEFAULTUSERPROFILE%. |
CSIDL_DEFAULT_SENDTO | No | Refers to the Send To folder inside %DEFAULTUSERPROFILE%. |
CSIDL_DEFAULT_STARTMENU | No | Refers to the Start Menu folder inside %DEFAULTUSERPROFILE%. |
CSIDL_DEFAULT_PROGRAMS | No | Refers to the Programs folder inside %DEFAULTUSERPROFILE%. |
CSIDL_DEFAULT_STARTUP | No | Refers to the Startup folder inside %DEFAULTUSERPROFILE%. |
CSIDL_DEFAULT_TEMPLATES | No | Refers to the Templates folder inside %DEFAULTUSERPROFILE%. |
CSIDL_DEFAULT_QUICKLAUNCH | No | Refers to the Quick Launch folder inside %DEFAULTUSERPROFILE%. |
CSIDL_FONTS | No | A virtual folder containing fonts. A typical path is C:\Windows\Fonts. |
CSIDL_PROGRAM_FILESX86 | No | The Program Files folder on 64-bit systems. A typical path is C:\Program Files(86). |
CSIDL_PROGRAM_FILES_COMMONX86 | No | A folder for components that are shared across applications on 64-bit systems. A typical path is C:\Program Files(86)\Common. |
CSIDL_PROGRAM_FILES | No | Version 5.0. The Program Files folder. A typical path is C:\Program Files. |
CSIDL_PROGRAM_FILES_COMMON | No | Version 5.0. A folder for components that are shared across applications. A typical path is C:\Program Files\Common. Valid only for computers running Windows NT, Windows 2000, and Windows XP. Not valid for Windows Millennium Edition. |
CSIDL_RESOURCES | No | For computers running Windows Vista, the file system directory that contains resource data. A typical path is C:\Windows\Resources. |
CSIDL_SYSTEM | No | Version 5.0. The Windows System folder. A typical path is C:\Windows\System32. |
CSIDL_WINDOWS | No | Version 5.0. The Windows directory or SYSROOT. This corresponds to the %WINDIR% or %SYSTEMROOT% environment variables. A typical path is C:\Windows. |
DEFAULTUSERPROFILE | No | Refers to the value in HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList [DefaultUserProfile]. |
PROFILESFOLDER | No | Refers to the value in HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList [ProfilesDirectory]. |
PROGRAMFILES | Yes | Same as CSIDL_PROGRAM_FILES. |
PROGRAMFILES(X86) | Yes | Refers to the C:\Program Files (x86) folder on 64-bit systems. |
SYSTEM | No | Refers to %WINDIR%\system32. |
SYSTEM16 | No | Refers to %WINDIR%\system. |
SYSTEM32 | No | Refers to %WINDIR%\system32. |
SYSTEMPROFILE | No | Refers to the value in HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\S-1-5-18 [ProfileImagePath]. |
SYSTEMROOT | Yes | Refers to the root of the system drive. |
WINDIR | Yes | Refers to the Windows folder located on the system drive. |
Variable | Supported? | Description |
---|---|---|
APPDATA | No | Same as CSIDL_APPDATA. |
CSIDL_ADMINTOOLS | No | The file system directory that is used to store administrative tools for an individual user. The Microsoft Management Console (MMC) will save customized consoles to this directory, and it will roam with the user. |
CSIDL_ALTSTARTUP | No | The file system directory that corresponds to the user's nonlocalized Startup program group. |
CSIDL_APPDATA | No | The file system directory that serves as a common repository for application-specific data. A typical path is C:\Documents and Settings\username\Application Data. This CSIDL is supported by the redistributable Shfolder.dll for systems that do not have the Microsoft Internet Explorer 4.0 integrated shell installed. |
CSIDL_BITBUCKET | No | The virtual folder containing the objects in the user's Recycle Bin. |
CSIDL_CDBURN_AREA | No | The file system directory acting as a staging area for files waiting to be written to CD. A typical path is C:\Documents and Settings\username\Local Settings\Application Data\Microsoft\CD Burning. |
CSIDL_CONNECTIONS | No | The virtual folder representing Network Connections, containing network and dial-up connections. |
CSIDL_CONTACTS | No | On computers running Windows Vista, this refers to the Contacts folder in %CSIDL_PROFILE%. |
CSIDL_CONTROLS | No | The virtual folder containing icons for the Control Panel applications. |
CSIDL_COOKIES | No | The file system directory that serves as a common repository for Internet cookies. A typical path is C:\Documents and Settings\username\Cookies. |
CSIDL_DESKTOP | No | The virtual folder representing the Windows desktop, the root of the namespace. |
CSIDL_DESKTOPDIRECTORY | No | The file system directory used to physically store file objects on the desktop (which should not be confused with the desktop folder itself). A typical path is C:\Documents and Settings\username\Desktop. |
CSIDL_DRIVES | No | The virtual folder representing My Computer, containing everything on the local computer: storage devices, printers, and Control Panel. The folder may also contain mapped network drives. |
CSIDL_FAVORITES | No | The file system directory that serves as a common repository for the user's favorite items. A typical path is C:\Documents and Settings\username\Favorites. |
CSIDL_HISTORY | No | The file system directory that serves as a common repository for Internet history items. |
CSIDL_INTERNET | No | A virtual folder for Internet Explorer (icon on desktop). |
CSIDL_INTERNET_CACHE | No | The file system directory that serves as a common repository for temporary Internet files. A typical path is C:\Documents and Settings\username\Local Settings\Temporary Internet Files. |
CSIDL_LOCAL_APPDATA | No | The file system directory that serves as a data repository for local (nonroaming) applications. A typical path is C:\Documents and Settings\username\Local Settings\Application Data. |
CSIDL_MYDOCUMENTS | No | The virtual folder representing the My Documents desktop item. |
CSIDL_MYMUSIC | No | The file system directory that serves as a common repository for music files. A typical path is C:\Documents and Settings\User\My Documents\My Music. |
CSIDL_MYPICTURES | No | The file system directory that serves as a common repository for image files. A typical path is C:\Documents and Settings\username\My Documents\My Pictures. |
CSIDL_MYVIDEO | No | The file system directory that serves as a common repository for video files. A typical path is C:\Documents and Settings\username\My Documents\My Videos. |
CSIDL_NETHOOD | No | A file system directory containing the link objects that may exist in the My Network Places virtual folder. It is not the same as CSIDL_NETWORK, which represents the network namespace root. A typical path is C:\Documents and Settings\username\NetHood. |
CSIDL_NETWORK | No | A virtual folder representing My Network Places, the root of the network namespace hierarchy. |
CSIDL_PERSONAL | No | Version 6.0. The virtual folder representing the My Documents desktop item. This is equivalent to CSIDL_MYDOCUMENTS. Previous to Version 6.0. The file system directory used to physically store a user's common repository of documents. A typical path is C:\Documents and Settings\username\My Documents. This should be distinguished from the virtual My Documents folder in the namespace. To access that virtual folder, use SHGetFolderLocation, which returns the ITEMIDLIST for the virtual location, or refer to the technique described in Managing the File System. |
CSIDL_PLAYLISTS | No | For computers running Windows Vista, the virtual folder used to store play albums, typically username\My Music\Playlists. |
CSIDL_PRINTERS | No | The virtual folder containing installed printers. |
CSIDL_PRINTHOOD | No | The file system directory that contains the link objects that can exist in the Printers virtual folder. A typical path is C:\Documents and Settings\username\PrintHood. |
CSIDL_PROFILE | No | The user's profile folder. A typical path is C:\Documents and Settings\username. Applications should not create files or folders at this level; they should put their data under the locations referred to by CSIDL_APPDATA or CSIDL_LOCAL_APPDATA. |
CSIDL_PROGRAMS | No | The file system directory that contains the user's program groups (which are themselves file system directories). A typical path is C:\Documents and Settings\username\Start Menu\Programs. |
CSIDL_RECENT | No | The file system directory that contains shortcuts to the user's most recently used documents. A typical path is C:\Documents and Settings\username\My Recent Documents. To create a shortcut in this folder, use SHAddToRecentDocs. In addition to creating the shortcut, this function updates the shell's list of recent documents and adds the shortcut to the My Recent Documents submenu of the Start menu. |
CSIDL_SENDTO | No | The file system directory that contains Send To menu items. A typical path is C:\Documents and Settings\username\SendTo. |
CSIDL_STARTMENU | No | The file system directory containing Start menu items. A typical path is C:\Documents and Settings\username\Start Menu. |
CSIDL_STARTUP | No | The file system directory that corresponds to the user's Startup program group. A typical path is C:\Documents and Settings\username\Start Menu\Programs\Startup. |
CSIDL_TEMPLATES | No | The file system directory that serves as a common repository for document templates. A typical path is C:\Documents and Settings\username\Templates. |
HOMEPATH | No | Same as %USERPROFILE%. |
TEMP | No | The temporary folder on the computer. For Windows XP, a typical path is %USERPROFILE%\Local Settings\Temp. For Windows Vista, a typical path is %USERPROFILE%\AppData\Local\Temp. |
TMP | No | The temporary folder on the computer. For Windows XP, a typical path is %USERPROFILE%\Local Settings\Temp. For Windows Vista,, a typical path is %USERPROFILE%\AppData\Local\Temp. |
USERPROFILE | No | Same as CSIDL_PROFILE. |
USERSID | No | Represents the current user account security identifier (SID). For example, S-1-5-21-1714567821-1326601894-715345443-1026. |
For more information about setting scan exclusions and the use of wildcards, please refer to the Online Help.