ADMX Viewer
Microsoft.Policies.WindowsDefender• Machine

Set exclusions from Remote Encryption Protection

Specify IP addresses, subnets, and domain names to exclude from Remote Encryption Protection. Note that attackers can spoof excluded addresses and names to bypass protection. Enter each address or subnet on a new line as a name-value pair: - Name column: Enter an IP address or subnet name. For example, ""1.1.127.0"" will exclude this IP address from getting blocked. - Value column: Enter ""0"" for each item

Policy Details

Policy Name
Remediation_BNB_REP_RemoteEncryptionProtectionExclusions
Registry Key
Software\Policies\Microsoft\Windows Defender\Remediation\Behavioral Network Blocks\Remote Encryption Protection
Value Name
RemoteEncryptionProtection_Exclusions
Supported On
At least Windows Server 2016, Windows 10 Version 1607
Available Languages
en-us

Configuration Elements

Remote Encryption Protection Exclusions

Type: list

Explicit values: true
Additive: true