How to audit registry keys related to Windows Defender's exclusions

Elnur Abbasov 0 Reputation points
2023-03-07T23:18:12.3+00:00

image

I want to audit changes made to "Exclusions" and its subkeys.
In order to do so, I right click and select Permissions > Advanced > Auditing > Add > Select Principal as 'Everyone' > Set permissions as Full Control > OK > Apply

As a result:
image

I get an access denied message.

I am local admin on the computer. The computer is not domain-joined one.

Any help is highly appreciated!

Windows for business | Windows Client for IT Pros | User experience | Other
0 comments No comments
{count} votes

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.