ADMX Viewer
Microsoft.Policies.WindowsDefender• Machine

Apply a list of exclusions to specific attack surface reduction (ASR) rules

This policy allows an administrator to specify a list of exclusions for specific ASR rules. Each entry is a name-value pair. The key indicates the rule GUID, and the value is a set of full paths separated by the > character, indicating the exclusions for that particular ASR rule. NOTE: The GUID is a KEY, not a value. Example: KEY: "{75668C1F-73B5-4CF0-BB93-3ECF5DB7C484}" VALUE: "C:\Notepad.exe>c:\regedit.exe>C:\SomeFolder\test.exe"

Policy Details

Policy Name
ExploitGuard_ASR_ASROnlyPerRuleExclusions
Registry Key
Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR
Value Name
ExploitGuard_ASR_ASROnlyPerRuleExclusions
Supported On
At least Windows Server 2016, Windows 10 Version 1709
Available Languages
en-us

Configuration Elements

Exclusions for each ASR rules:

Type: list

Explicit values: true
Additive: true