Registry Edit or Policy File to Exclude Path from Scanning

[JC Creque]

I would like to edit the Registry for Windows Defender to enable the
exclusion of a path from scanning. I tried editing the following registry
key:

HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS DEFENDER\SCAN\EXCLUDEPATHS

The system does not allow editing of this key. I looked at the current
group policy file for windows defender and there are not options for folder
exclusions. Please assist.
Thanks.

 

[Engel]

Have you try at excluding it from the scan, in Tools, Options, scroll down to
Advanced options, and fill the box, by adding the full path and file name to
the Tools/Options/ do not scan box, hit the add button, and Save.
- -- ---


KNOWLEDGE
First-hand knowledge does not become second-hand when used.

 

[JC Creque]

I am looking for an network solution.

Have you try at excluding it from the scan, in Tools, Options, scroll down to
Advanced options, and fill the box, by adding the full path and file name to
the Tools/Options/ do not scan box, hit the add button, and Save.
- -- ---


KNOWLEDGE
First-hand knowledge does not become second-hand when used.

 

[Bill Sanderson]

Are you running the released version of Windows Defender?

As I recall it, the permissions on some keys changed over the course of the
beta.

If you are unable to edit this key, the solution will be to change the
permissions, edit the key, and then change the permissions back.

I believe all of this is scriptable, but I'll reiterate: Windows Defender
is not designed for the usage you are proposing, Microsoft Forefront Client
Security is.

(It is possible to change permissions to allow the change and then leave
them that way, but I presume that permissions are set with a security
purpose in mind, so I wouldn't recommend that. I'm also unsure what
mechanisms might reset them--a repair install of Defender?)