Prevent Administrators from adding Exclusions in Windows Defender

Carlo Du Plessis 0 Reputation points

Prevent Administrators from adding Exclusions in Windows Defender. This will need to be implemented across all Windows Server Operating Systems (different versions.) Even an administrator should not be able to update the Windows Defender exclusions.

Windows 10 Security
Windows 10 Security
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
2,745 questions
0 comments No comments
{count} votes

3 answers

Sort by: Most helpful
  1. Olaf Helper 40,576 Reputation points

    You can not limit the permissions of a administrator in any way.

  2. Wesley Li 4,200 Reputation points


    How about configuring the following gpo to hide the UI?

    1. On your Group Policy management machine, open the Group Policy Management Console, right-click the Group Policy Object you want to configure and select Edit.
    2. Using the Group Policy Management Editor go to Computer configuration.
    3. Select Administrative templates.
    4. Expand the tree to Windows components > Microsoft Defender Antivirus > Client interface.
    5. Double-click the Enable headless UI mode setting and set the option to Enabled. Select OK.

  3. Deleted

    This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

    Comments have been turned off. Learn more