Forum Discussion

Talas7's avatar
Talas7
Copper Contributor
Jan 24, 2024

Enable windows defender policy exceptions

Hello,

We work with windows defender and are very satisfied, The system extracts a lot of information and scans a lot. There are reliable signed software in our company that I noticed since the installation of the defender slows down the work in them and throws up a lot of errors.. Is there an option to exclude those applications? That the guarding will be less tight? Or another easier option.. I need your help, thank you very much.

3 Replies

  • rahuljindal's avatar
    rahuljindal
    Bronze Contributor
    In relation to slowness, have you tried running MDE performance analyzer to gather more information? You can exclude the apps depending on which policies are causing issues. It is usually the AV and\or ASR.
    • Talas7's avatar
      Talas7
      Copper Contributor

      Hello,

      First, thank you for the responde!

      Second, do your have guides about what your write here?

      rahuljindal 

      • TomasCinko's avatar
        TomasCinko
        Copper Contributor
        Hi,
        I would recommend MDE Performanace analyzer. It is very easy a handfull: https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/tune-performance-defender-antivirus?view=o365-worldwide#using-performance-analyzer

        You can record data during issue with "New-MpPerformanceRecording" and then retreive from etl what was Defender doing.

        There are several articles about MDE exception. Less is better in short.

        I've never seen application throwing an error because of MDE. It is slow most of time or some exe files are "eaten" by MDE.

Resources