Custom Deployment of Defender to include Allowed Items

[greatbarrier86]

Hi,

It is possible to deploy Defender with a pre-populated list of allowed
items? I can't seem to find out where to do that.

Thanks,
Jason

 

[Bill Sanderson]

Windows Defender is REALLY not suited to automated deployment in a domain.
If you've noticed, the available group policy settings are rather minimal.

I believe that the list of allowed items lives in the registry, and during
beta (long ago!) there was some talk about replicating these registry
settings--but it isn't easy--the registry settings have restricted
permissions which must be reset to add the new entry, and preferably then
set back......

Microsoft Forefront Client Security is the Microsoft ant-malware product
designed for your situation.