With System Center Endpoint Protection now having been updated to Service Pack 1 along with the rest of the System Center products, there are a few more exclusions that you should consider adding for your ConfigMgr servers.
If you are using Operating System Deployment (OSD) then you should add these:
C:\Windows\TEMP\Boot\Images <X:>ConfigMgr_Offline\Image\Servicing*.*This should help with offline servicing of images and the updating of boot images when using the temp location.
