With System Center Endpoint Protection now having been updated to Service Pack 1 along with the rest of the System Center products, there are a few more exclusions that you should consider adding for your ConfigMgr servers.
If you are using Operating System Deployment (OSD) then you should add these:
C:WindowsTEMPBootImages <X:>ConfigMgr_OfflineImageServicing*.*
This should help with offline servicing of images and the updating of boot images when using the temp location.
