Microsoft.Policies.WindowsDefender• Machine
Apply a list of exclusions to specific attack surface reduction (ASR) rules
This policy allows an administrator to specify a list of exclusions for specific ASR rules. Each entry is a name-value pair. The key indicates the rule GUID, and the value is a set of full paths separated by the > character, indicating the exclusions for that particular ASR rule. NOTE: The GUID is a KEY, not a value. Example: KEY: "{75668C1F-73B5-4CF0-BB93-3ECF5DB7C484}" VALUE: "C:\Notepad.exe>c:\regedit.exe>C:\SomeFolder\test.exe"
Policy Details
- Policy Name
- ExploitGuard_ASR_ASROnlyPerRuleExclusions
- Registry Key
- Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR
- Value Name
- ExploitGuard_ASR_ASROnlyPerRuleExclusions
- Supported On
- At least Windows Server 2016, Windows 10 Version 1709
- Available Languages
- en-us
Configuration Elements
Exclusions for each ASR rules:
Type: list
Explicit values: true
Additive: true