Microsoft.Policies.WindowsDefender• Machine
Exclude files and paths from Attack Surface Reduction Rules
Exclude files and paths from Attack Surface Reduction (ASR) rules. Enabled: Specify the folders or files and resources that should be excluded from ASR rules in the Options section. Enter each rule on a new line as a name-value pair: - Name column: Enter a folder path or a fully qualified resource name. For example, ""C:\Windows"" will exclude all files in that directory. ""C:\Windows\App.exe"" will exclude only that specific file in that specific folder - Value column: Enter ""0"" for each item Disabled: No exclusions will be applied to the ASR rules. Not configured: Same as Disabled. You can configure ASR rules in the Configure Attack Surface Reduction rules GP setting.
Policy Details
- Policy Name
- ExploitGuard_ASR_ASROnlyExclusions
- Registry Key
- Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR
- Value Name
- ExploitGuard_ASR_ASROnlyExclusions
- Supported On
- At least Windows Server 2016, Windows 10 Version 1709
- OMA-URI (CSP)
- ADMX_MicrosoftDefenderAntivirus/ExploitGuard_ASR_ASROnlyExclusionsOS Build Version:10.0.22000, 10.0.19043.1202, 10.0.19042.1202, 10.0.19041.1202CSP Version:10.0Conflict Resolution:LastWriteAllowed Editions:EnterpriseEnterprise NProfessionalProfessional NEnterprise EvaluationEnterprise N EvaluationEducationEducation NEnterprise SEnterprise S NEnterprise S EvaluationEnterprise S N EvaluationHolographic BusinessPro Single LanguagePro ChinaPro WorkstationPro Workstation NPro For EducationPro For Education NEnterprisegEnterprisegnServerrdshIotenterpriseIotenterprisesCloudeditionnCloudeditionIotenterpriseskIotenterpriseseval
- Available Languages
- en-us
Configuration Elements
Exclusions from ASR rules:
Type: list
Explicit values: true
Additive: true