On Windows Server 2016 or later, you should not need to define the following exclusions:

Provides links to how-to information for defining custom exclusions Includes important considerations and procedures describing how to opt out of automatic exclusions This article includes the following sections: SectionĪutomatic exclusions on Windows Server 2016 or laterĭescribes the two main types of automatic exclusions and includes a detailed list of automatic exclusions You can also opt out of automatic exclusions if necessary. However, you can define custom exclusions. This article provides an overview of exclusions for Microsoft Defender Antivirus on Windows Server 2016 or later.īecause Microsoft Defender Antivirus is built into Windows Server 2016 and later, exclusions for operating system files and server roles happen automatically. To learn more, see Onboard Windows servers to the Microsoft Defender for Endpoint service. However, exclusions for server roles (as specified below) don't apply automatically, and you should configure these exclusions as appropriate. When you onboard those servers to Defender for Endpoint, you will install Microsoft Defender Antivirus, and default exclusions for operating system files are applied. Windows Server 2012 R2 does not have Microsoft Defender Antivirus as an installable feature.Appropriate exclusions must be set for software that isn't included with the operating system.Microsoft Defender Antivirus uses the Deployment Image Servicing and Management (DISM) tools to determine which roles are installed on your computer.Custom and duplicate exclusions do not conflict with automatic exclusions.Automatic exclusions are not honored during a full, quick, or on-demand scan.Automatic exclusions only apply to real-time protection (RTP) scanning.

Custom exclusions take precedence over automatic exclusions.

Configure and validate exclusions for files opened by processes.Configure and validate exclusions based on file name, extension, and folder location.In addition to server role-defined automatic exclusions, you can add or remove custom exclusions. These exclusions do not appear in the standard exclusion lists that are shown in the Windows Security app. Microsoft Defender Antivirus on Windows Server 2016 and Windows Server 2019 automatically enrolls you in certain exclusions, as defined by your specified server role.

Windows server antimalware