mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-05-29 13:47:23 +00:00
ms.custom: nextgen
This commit is contained in:
parent
61c752b258
commit
48d2a8a60b
@ -9,8 +9,9 @@ ms.mktglfcycl: manage
|
|||||||
ms.sitesec: library
|
ms.sitesec: library
|
||||||
ms.pagetype: security
|
ms.pagetype: security
|
||||||
ms.localizationpriority: medium
|
ms.localizationpriority: medium
|
||||||
author: dansimp
|
author: denisebmsft
|
||||||
ms.author: dansimp
|
ms.author: deniseb
|
||||||
|
ms.custom: nextgen
|
||||||
ms.reviewer:
|
ms.reviewer:
|
||||||
manager: dansimp
|
manager: dansimp
|
||||||
---
|
---
|
||||||
|
@ -9,8 +9,9 @@ ms.mktglfcycl: manage
|
|||||||
ms.sitesec: library
|
ms.sitesec: library
|
||||||
ms.pagetype: security
|
ms.pagetype: security
|
||||||
ms.localizationpriority: medium
|
ms.localizationpriority: medium
|
||||||
author: dansimp
|
author: denisebmsft
|
||||||
ms.author: dansimp
|
ms.author: deniseb
|
||||||
|
ms.custom: nextgen
|
||||||
ms.date: 09/03/2018
|
ms.date: 09/03/2018
|
||||||
ms.reviewer:
|
ms.reviewer:
|
||||||
manager: dansimp
|
manager: dansimp
|
||||||
|
@ -9,8 +9,9 @@ ms.mktglfcycl: manage
|
|||||||
ms.sitesec: library
|
ms.sitesec: library
|
||||||
ms.pagetype: security
|
ms.pagetype: security
|
||||||
ms.localizationpriority: medium
|
ms.localizationpriority: medium
|
||||||
author: dansimp
|
author: denisebmsft
|
||||||
ms.author: dansimp
|
ms.author: deniseb
|
||||||
|
ms.custom: nextgen
|
||||||
ms.date: 10/25/2018
|
ms.date: 10/25/2018
|
||||||
ms.reviewer:
|
ms.reviewer:
|
||||||
manager: dansimp
|
manager: dansimp
|
||||||
|
@ -11,6 +11,7 @@ ms.pagetype: security
|
|||||||
ms.localizationpriority: medium
|
ms.localizationpriority: medium
|
||||||
author: denisebmsft
|
author: denisebmsft
|
||||||
ms.author: deniseb
|
ms.author: deniseb
|
||||||
|
ms.custom: nextgen
|
||||||
ms.date: 09/03/2018
|
ms.date: 09/03/2018
|
||||||
ms.reviewer:
|
ms.reviewer:
|
||||||
manager: dansimp
|
manager: dansimp
|
||||||
|
@ -9,8 +9,9 @@ ms.mktglfcycl: manage
|
|||||||
ms.sitesec: library
|
ms.sitesec: library
|
||||||
ms.pagetype: security
|
ms.pagetype: security
|
||||||
ms.localizationpriority: medium
|
ms.localizationpriority: medium
|
||||||
author: dansimp
|
author: denisebmsft
|
||||||
ms.author: dansimp
|
ms.author: deniseb
|
||||||
|
ms.custom: nextgen
|
||||||
ms.date: 09/03/2018
|
ms.date: 09/03/2018
|
||||||
ms.reviewer:
|
ms.reviewer:
|
||||||
manager: dansimp
|
manager: dansimp
|
||||||
|
@ -9,8 +9,9 @@ ms.mktglfcycl: manage
|
|||||||
ms.sitesec: library
|
ms.sitesec: library
|
||||||
ms.pagetype: security
|
ms.pagetype: security
|
||||||
ms.localizationpriority: medium
|
ms.localizationpriority: medium
|
||||||
author: dansimp
|
author: denisebmsft
|
||||||
ms.author: dansimp
|
ms.author: deniseb
|
||||||
|
ms.custom: nextgen
|
||||||
ms.date: 09/03/2018
|
ms.date: 09/03/2018
|
||||||
ms.reviewer:
|
ms.reviewer:
|
||||||
manager: dansimp
|
manager: dansimp
|
||||||
|
@ -9,8 +9,9 @@ ms.mktglfcycl: manage
|
|||||||
ms.sitesec: library
|
ms.sitesec: library
|
||||||
ms.pagetype: security
|
ms.pagetype: security
|
||||||
ms.localizationpriority: medium
|
ms.localizationpriority: medium
|
||||||
author: dansimp
|
author: denisebmsft
|
||||||
ms.author: dansimp
|
ms.author: deniseb
|
||||||
|
ms.custom: nextgen
|
||||||
ms.date: 12/10/2018
|
ms.date: 12/10/2018
|
||||||
ms.reviewer:
|
ms.reviewer:
|
||||||
manager: dansimp
|
manager: dansimp
|
||||||
|
@ -9,8 +9,9 @@ ms.mktglfcycl: manage
|
|||||||
ms.sitesec: library
|
ms.sitesec: library
|
||||||
ms.pagetype: security
|
ms.pagetype: security
|
||||||
ms.localizationpriority: medium
|
ms.localizationpriority: medium
|
||||||
author: dansimp
|
author: denisebmsft
|
||||||
ms.author: dansimp
|
ms.author: deniseb
|
||||||
|
ms.custom: nextgen
|
||||||
ms.date: 09/03/2018
|
ms.date: 09/03/2018
|
||||||
ms.reviewer:
|
ms.reviewer:
|
||||||
manager: dansimp
|
manager: dansimp
|
||||||
|
@ -9,8 +9,9 @@ ms.mktglfcycl: manage
|
|||||||
ms.sitesec: library
|
ms.sitesec: library
|
||||||
ms.pagetype: security
|
ms.pagetype: security
|
||||||
ms.localizationpriority: medium
|
ms.localizationpriority: medium
|
||||||
author: dansimp
|
author: denisebmsft
|
||||||
ms.author: dansimp
|
ms.author: deniseb
|
||||||
|
ms.custom: nextgen
|
||||||
ms.date: 09/03/2018
|
ms.date: 09/03/2018
|
||||||
ms.reviewer:
|
ms.reviewer:
|
||||||
manager: dansimp
|
manager: dansimp
|
||||||
|
@ -9,8 +9,9 @@ ms.mktglfcycl: manage
|
|||||||
ms.sitesec: library
|
ms.sitesec: library
|
||||||
ms.pagetype: security
|
ms.pagetype: security
|
||||||
ms.localizationpriority: medium
|
ms.localizationpriority: medium
|
||||||
author: dansimp
|
author: denisebmsft
|
||||||
ms.author: dansimp
|
ms.author: deniseb
|
||||||
|
ms.custom: nextgen
|
||||||
ms.date: 09/03/2018
|
ms.date: 09/03/2018
|
||||||
ms.reviewer:
|
ms.reviewer:
|
||||||
manager: dansimp
|
manager: dansimp
|
||||||
|
@ -60,7 +60,7 @@ Root | Allow antimalware service to remain running always | If protection update
|
|||||||
|
|
||||||
The main real-time protection capability is enabled by default, but you can disable it with Group Policy:
|
The main real-time protection capability is enabled by default, but you can disable it with Group Policy:
|
||||||
|
|
||||||
**Use Group Policy to disable real-time protection:**
|
### Use Group Policy to disable real-time protection
|
||||||
|
|
||||||
1. On your Group Policy management computer, open the [Group Policy Management Console](https://technet.microsoft.com/library/cc731212.aspx), right-click the Group Policy Object you want to configure and click **Edit**.
|
1. On your Group Policy management computer, open the [Group Policy Management Console](https://technet.microsoft.com/library/cc731212.aspx), right-click the Group Policy Object you want to configure and click **Edit**.
|
||||||
|
|
||||||
|
@ -9,8 +9,9 @@ ms.mktglfcycl: manage
|
|||||||
ms.sitesec: library
|
ms.sitesec: library
|
||||||
ms.pagetype: security
|
ms.pagetype: security
|
||||||
ms.localizationpriority: medium
|
ms.localizationpriority: medium
|
||||||
author: dansimp
|
author: denisebmsft
|
||||||
ms.author: dansimp
|
ms.author: deniseb
|
||||||
|
ms.custom: nextgen
|
||||||
ms.date: 09/03/2018
|
ms.date: 09/03/2018
|
||||||
ms.reviewer:
|
ms.reviewer:
|
||||||
manager: dansimp
|
manager: dansimp
|
||||||
|
@ -11,8 +11,9 @@ ms.mktglfcycl: manage
|
|||||||
ms.sitesec: library
|
ms.sitesec: library
|
||||||
ms.pagetype: security
|
ms.pagetype: security
|
||||||
ms.localizationpriority: medium
|
ms.localizationpriority: medium
|
||||||
author: dansimp
|
author: denisebmsft
|
||||||
ms.author: dansimp
|
ms.author: deniseb
|
||||||
|
ms.custom: nextgen
|
||||||
---
|
---
|
||||||
|
|
||||||
# Configure Windows Defender Antivirus exclusions on Windows Server
|
# Configure Windows Defender Antivirus exclusions on Windows Server
|
||||||
@ -35,8 +36,6 @@ Custom exclusions take precedence over automatic exclusions.
|
|||||||
> [!TIP]
|
> [!TIP]
|
||||||
> Custom and duplicate exclusions do not conflict with automatic exclusions.
|
> Custom and duplicate exclusions do not conflict with automatic exclusions.
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
Windows Defender Antivirus uses the Deployment Image Servicing and Management (DISM) tools to determine which roles are installed on your computer.
|
Windows Defender Antivirus uses the Deployment Image Servicing and Management (DISM) tools to determine which roles are installed on your computer.
|
||||||
|
|
||||||
## Opt out of automatic exclusions
|
## Opt out of automatic exclusions
|
||||||
@ -54,7 +53,7 @@ In Windows Server 2016, the predefined exclusions delivered by Security intellig
|
|||||||
|
|
||||||
You can disable the automatic exclusion lists with Group Policy, PowerShell cmdlets, and WMI.
|
You can disable the automatic exclusion lists with Group Policy, PowerShell cmdlets, and WMI.
|
||||||
|
|
||||||
**Use Group Policy to disable the auto-exclusions list on Windows Server 2016:**
|
### Use Group Policy to disable the auto-exclusions list on Windows Server 2016
|
||||||
|
|
||||||
1. On your Group Policy management computer, open the [Group Policy Management Console](https://technet.microsoft.com/library/cc731212.aspx), right-click the Group Policy Object you want to configure and click **Edit**.
|
1. On your Group Policy management computer, open the [Group Policy Management Console](https://technet.microsoft.com/library/cc731212.aspx), right-click the Group Policy Object you want to configure and click **Edit**.
|
||||||
|
|
||||||
@ -74,7 +73,7 @@ Set-MpPreference -DisableAutoExclusions $true
|
|||||||
|
|
||||||
See [Use PowerShell cmdlets to configure and run Windows Defender Antivirus](use-powershell-cmdlets-windows-defender-antivirus.md) and [Defender cmdlets](https://technet.microsoft.com/itpro/powershell/windows/defender/index) for more information on how to use PowerShell with Windows Defender Antivirus.
|
See [Use PowerShell cmdlets to configure and run Windows Defender Antivirus](use-powershell-cmdlets-windows-defender-antivirus.md) and [Defender cmdlets](https://technet.microsoft.com/itpro/powershell/windows/defender/index) for more information on how to use PowerShell with Windows Defender Antivirus.
|
||||||
|
|
||||||
**Use Windows Management Instruction (WMI) to disable the auto-exclusions list on Windows Server 2016:**
|
### Use Windows Management Instruction (WMI) to disable the auto-exclusions list on Windows Server 2016
|
||||||
|
|
||||||
Use the [**Set** method of the **MSFT_MpPreference**](https://msdn.microsoft.com/library/dn455323(v=vs.85).aspx) class for the following properties:
|
Use the [**Set** method of the **MSFT_MpPreference**](https://msdn.microsoft.com/library/dn455323(v=vs.85).aspx) class for the following properties:
|
||||||
|
|
||||||
@ -294,6 +293,7 @@ This section lists the exclusions that are delivered automatically when you inst
|
|||||||
- %systemroot%\System32\lsass.exe
|
- %systemroot%\System32\lsass.exe
|
||||||
|
|
||||||
### DHCP Server exclusions
|
### DHCP Server exclusions
|
||||||
|
|
||||||
This section lists the exclusions that are delivered automatically when you install the DHCP Server role. The DHCP Server file locations are specified by the *DatabasePath*, *DhcpLogFilePath*, and *BackupDatabasePath* parameters in the registry key `HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DHCPServer\Parameters`
|
This section lists the exclusions that are delivered automatically when you install the DHCP Server role. The DHCP Server file locations are specified by the *DatabasePath*, *DhcpLogFilePath*, and *BackupDatabasePath* parameters in the registry key `HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DHCPServer\Parameters`
|
||||||
|
|
||||||
- *%systemroot%*\System32\DHCP\\*\\\*.mdb
|
- *%systemroot%*\System32\DHCP\\*\\\*.mdb
|
||||||
@ -307,6 +307,7 @@ This section lists the exclusions that are delivered automatically when you inst
|
|||||||
- *%systemroot%*\System32\DHCP\\*\\\*.edb
|
- *%systemroot%*\System32\DHCP\\*\\\*.edb
|
||||||
|
|
||||||
### DNS Server exclusions
|
### DNS Server exclusions
|
||||||
|
|
||||||
This section lists the file and folder exclusions and the process exclusions that are delivered automatically when you install the DNS Server role.
|
This section lists the file and folder exclusions and the process exclusions that are delivered automatically when you install the DNS Server role.
|
||||||
|
|
||||||
- File and folder exclusions for the DNS Server role:
|
- File and folder exclusions for the DNS Server role:
|
||||||
@ -324,6 +325,7 @@ This section lists the file and folder exclusions and the process exclusions tha
|
|||||||
- *%systemroot%*\System32\dns.exe
|
- *%systemroot%*\System32\dns.exe
|
||||||
|
|
||||||
### File and Storage Services exclusions
|
### File and Storage Services exclusions
|
||||||
|
|
||||||
This section lists the file and folder exclusions that are delivered automatically when you install the File and Storage Services role. The exclusions listed below do not include exclusions for the Clustering role.
|
This section lists the file and folder exclusions that are delivered automatically when you install the File and Storage Services role. The exclusions listed below do not include exclusions for the Clustering role.
|
||||||
|
|
||||||
- *%SystemDrive%*\ClusterStorage
|
- *%SystemDrive%*\ClusterStorage
|
||||||
@ -333,6 +335,7 @@ This section lists the file and folder exclusions that are delivered automatical
|
|||||||
- *%SystemDrive%*\mscs
|
- *%SystemDrive%*\mscs
|
||||||
|
|
||||||
### Print Server exclusions
|
### Print Server exclusions
|
||||||
|
|
||||||
This section lists the file type exclusions, folder exclusions, and the process exclusions that are delivered automatically when you install the Print Server role.
|
This section lists the file type exclusions, folder exclusions, and the process exclusions that are delivered automatically when you install the Print Server role.
|
||||||
|
|
||||||
- File type exclusions:
|
- File type exclusions:
|
||||||
@ -350,6 +353,7 @@ This section lists the file type exclusions, folder exclusions, and the process
|
|||||||
- spoolsv.exe
|
- spoolsv.exe
|
||||||
|
|
||||||
### Web Server exclusions
|
### Web Server exclusions
|
||||||
|
|
||||||
This section lists the folder exclusions and the process exclusions that are delivered automatically when you install the Web Server role.
|
This section lists the folder exclusions and the process exclusions that are delivered automatically when you install the Web Server role.
|
||||||
|
|
||||||
- Folder exclusions:
|
- Folder exclusions:
|
||||||
@ -373,6 +377,7 @@ This section lists the folder exclusions and the process exclusions that are del
|
|||||||
- *%SystemDrive%*\PHP5433\php-cgi.exe
|
- *%SystemDrive%*\PHP5433\php-cgi.exe
|
||||||
|
|
||||||
### Windows Server Update Services exclusions
|
### Windows Server Update Services exclusions
|
||||||
|
|
||||||
This section lists the folder exclusions that are delivered automatically when you install the Windows Server Update Services (WSUS) role. The WSUS folder is specified in the registry key `HKEY_LOCAL_MACHINE\Software\Microsoft\Update Services\Server\Setup`
|
This section lists the folder exclusions that are delivered automatically when you install the Windows Server Update Services (WSUS) role. The WSUS folder is specified in the registry key `HKEY_LOCAL_MACHINE\Software\Microsoft\Update Services\Server\Setup`
|
||||||
|
|
||||||
- *%systemroot%*\WSUS\WSUSContent
|
- *%systemroot%*\WSUS\WSUSContent
|
||||||
@ -383,7 +388,7 @@ This section lists the folder exclusions that are delivered automatically when y
|
|||||||
|
|
||||||
- *%systemroot%*\SoftwareDistribution\Download
|
- *%systemroot%*\SoftwareDistribution\Download
|
||||||
|
|
||||||
## Related topics
|
## Related articles
|
||||||
|
|
||||||
- [Configure and validate exclusions for Windows Defender Antivirus scans](configure-exclusions-windows-defender-antivirus.md)
|
- [Configure and validate exclusions for Windows Defender Antivirus scans](configure-exclusions-windows-defender-antivirus.md)
|
||||||
- [Configure and validate exclusions based on file name, extension, and folder location](configure-extension-file-exclusions-windows-defender-antivirus.md)
|
- [Configure and validate exclusions based on file name, extension, and folder location](configure-extension-file-exclusions-windows-defender-antivirus.md)
|
||||||
|
Loading…
x
Reference in New Issue
Block a user