ludolf 6 Posted January 10, 2018 Share Posted January 10, 2018 (edited) hello We are using EFS 6.5.0.12010 and Skype for Business 2015 Server. We have installed EFS on several servers (Server 2016). it seems that if SQL server components installed on the server and "Microsoft Lync/Skype for Business Server file share"* is enabled, the ekrn.exe tries to connect to the "xds" database on the lync server, and this error message will be recorded in the lync\sql errorlog: 2018-01-10 12:10:05.49 Logon Login failed for user 'NAME-OF-THE-SERVER-WITH-EFS$"'. Reason: Failed to open the explicitly specified database 'xds'. [CLIENT: IP-OF-THE-SERVER-WITH-EFS] Is this normal? thanks, Vilmos edit: * "Automatic exclusions to generate->Microsoft Lync/Skype for Business Server file share" Edited January 10, 2018 by ludolf Link to comment Share on other sites More sharing options...
Administrators Marcos 5,259 Posted January 10, 2018 Administrators Share Posted January 10, 2018 EFSW does not filter network communication since it has no firewall. Does temporarily disabling real-time protection make a difference? Ekrn definitely does not connect to any databases. Link to comment Share on other sites More sharing options...
ludolf 6 Posted January 10, 2018 Author Share Posted January 10, 2018 Found it: It makes an ldap query for msRTCSIP-Backendserver in the configuration partition. This stores the sql instance for xds database Then tries to connect to this sql instance. xds database contains the information about the Lync topology. Probably ekrn tries to get the path of Lync file share from xds, in order to exclude the path from scanning. Link to comment Share on other sites More sharing options...
Recommended Posts