Group Policy - English (United States)
Hi all. Our organization has Win10 clients, SCCM CB, and a Windows domain environment. I have a GPO configured for Windows Defender as we have a few extra locations/processes we want excluded. These correctly show up on the client PCs that have the GPO applied. However, when you go to Windows Security > Virus & Threat Protection > Virus & Threat Protection Settings > Exclusions > Add or remove exclusions, the "Add an exclusion" button is greyed out with the message "Changing exclusions has been disabled by your administrator."
For testing purposes, I'd like the ability to manually add an exclusion, while keeping our existing GPO-supplied list of files/folders and processes. Is this possible, and if so, where is the correct setting? Ideally, I just want the users who get this GPO the ability to add an exclusion, but leave all the other settings unchanged.
Thanks in advance,
Sir_Timbit
Hi all. Our organization has Win10 clients, SCCM CB, and a Windows domain environment. I have a GPO configured for Windows Defender as we have a few extra locations/processes we want excluded. These correctly show up on the client PCs that have the GPO applied. However, when you go to Windows Security > Virus & Threat Protection > Virus & Threat Protection Settings > Exclusions > Add or remove exclusions, the "Add an exclusion" button is greyed out with the message "Changing exclusions has been disabled by your administrator."
For testing purposes, I'd like the ability to manually add an exclusion, while keeping our existing GPO-supplied list of files/folders and processes. Is this possible, and if so, where is the correct setting? Ideally, I just want the users who get this GPO the ability to add an exclusion, but leave all the other settings unchanged.
Thanks in advance,
Sir_Timbit