SOLVED

Prohibit standard users from adding exclusions to Windows Defender (Windows Security)

%3CLINGO-SUB%20id%3D%22lingo-sub-1588342%22%20slang%3D%22en-US%22%3EProhibit%20standard%20users%20from%20adding%20exclusions%20to%20Windows%20Defender%20(Windows%20Security)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1588342%22%20slang%3D%22en-US%22%3E%3CP%3EHello%20there%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSTRONG%3EHow%20can%20I%20prohibit%20standard%20users%20from%20adding%20exclusions%20in%20Windows%20Defender%3F%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3EI%20would%20like%20to%20only%20control%20the%20Defender-exclusions%20from%20a%20central%20point%20and%20the%20standard%20users%20should%20not%20be%20able%20to%20add%20exclusions%20themselves.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI've%20searched%20through%20GPO's%20and%20settings%20in%20Intune%20but%20can't%20seem%20to%20find%20the%20correct%20setting.%20Does%20anyone%20know%20if%20this%20is%20possible%3F%20If%20it%20is%2C%20where%20is%20the%20setting%20then%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWindows%2010%20Enterprise%2C%201903%20and%202004.%26nbsp%3B%3C%2FP%3E%3CP%3EDevices%20are%20Hybrid%20Azure%20AD%20Joined%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22102833666_10157841084478025_2775693378921168896_n.jpg%22%20style%3D%22width%3A%20578px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F212351iA495D3614438817A%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22102833666_10157841084478025_2775693378921168896_n.jpg%22%20alt%3D%22102833666_10157841084478025_2775693378921168896_n.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1588342%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EDefender%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EDefender%20AV%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EExclusion%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESecurity%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EWindows%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1595322%22%20slang%3D%22en-US%22%3ERe%3A%20Prohibit%20standard%20users%20from%20adding%20exclusions%20to%20Windows%20Defender%20(Windows%20Security)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1595322%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F193767%22%20target%3D%22_blank%22%3E%40Simon%20H%C3%A5kansson%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EUse%20Tamper%20Protection%20would%20be%20my%20recommendation.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1595357%22%20slang%3D%22en-US%22%3ERe%3A%20Prohibit%20standard%20users%20from%20adding%20exclusions%20to%20Windows%20Defender%20(Windows%20Security)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1595357%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F78182%22%20target%3D%22_blank%22%3E%40Stefan%20Sch%C3%B6rling%3C%2FA%3E%26nbsp%3B%20Yes%2C%20solved%20my%20problem.%20%3A)%3C%2Fimg%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

Hello there,

 

How can I prohibit standard users from adding exclusions in Windows Defender?

I would like to only control the Defender-exclusions from a central point and the standard users should not be able to add exclusions themselves.

 

I've searched through GPO's and settings in Intune but can't seem to find the correct setting. Does anyone know if this is possible? If it is, where is the setting then?

 

Windows 10 Enterprise, 1903 and 2004. 

Devices are Hybrid Azure AD Joined

 

102833666_10157841084478025_2775693378921168896_n.jpg

2 Replies
best response confirmed by Simon Håkansson (Occasional Contributor)
Solution

@Simon Håkansson 

 

Use Tamper Protection would be my recommendation.

www.000webhost.com