Windows Defender ASR blocking msedgewebview2.exe for an EXCEL plugin

Zach 106 Reputation points
2023-01-27T21:06:30.47+00:00

We have an issue where an ASR rule "Block all Office applications from creating child processes" keeps blocking this S&P CapIQ plugin that Excel uses and prevents the user from being able to leverage the app properly.

here are some screenshots of the timeline section in the defender portal:

User's image

User's image

we have tried to add it as an exclusion as below, but no matter what type of exclusion even if we do the directory, it still fails.... and blocks the plugin.

User's image

any suggestions on how we can get this to work? why does ASR so sensitive and not as friendly when it comes to the excludes, it doesn't really seem to make much sense.

Microsoft 365 and Office | Excel | For business | Windows
Windows for business | Windows Client for IT Pros | User experience | Other
{count} vote

1 answer

Sort by: Most helpful
  1. Rahul Jindal [MVP] 10,911 Reputation points MVP
    2023-01-28T08:10:47.0933333+00:00

    Does the actiontype actually say block? Where are you configuring the exclusions in ASR? Per rule or all?

    1 person found this answer helpful.

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.