Policy
Path Exclusions
Windows 11 25H2
Policy overview
Key metadata and intent for this policy.
Supported OS tags: Windows10, Windows10RT, Windows11, Windows8, Windows81, WindowsRT, WindowsRT81, WindowsServer2012, WindowsServer2012R2, WindowsServer2016
This policy setting allows you to disable scheduled and real-time scanning for files under the paths specified or for the fully qualified resources specified. Paths should be added under the Options for this setting. Each entry must be listed as a name value pair, where the name should be a string representation of a path or a fully qualified resource name. As an example, a path might be defined as: "c:\Windows" to exclude all files in this directory. A fully qualified resource name might be defined as: "C:\Windows\App.exe". The value is not used and it is recommended that this be set to 0.
Registry values
How enabled and disabled states update the registry.
No explicit registry values are set for enabled or disabled states.
Policy elements
Inputs and configuration options exposed by this policy.
| Element | Type | Registry mapping | Constraints & behavior |
|---|---|---|---|
Path Exclusions ID Exclusions_PathsList | list | HKLM\Software\Policies\Microsoft\Windows Defender\Exclusions\Paths\Exclusions_Paths Type REG_MULTI_SZ | List: additive, explicit value |
Other policies in this category
Explore related policies at the same level.
- ComputerExtension ExclusionsAt least Windows Server 2012, Windows 8 or Windows RT
- ComputerIp Address ExclusionsAt least Windows Server 2016, Windows 10 Version 1709
- ComputerProcess ExclusionsAt least Windows Server 2012, Windows 8 or Windows RT
- ComputerTurn off Auto ExclusionsAt least Windows Server 2016