Forum Discussion

Copper Contributor

Aug 22, 2019

MsSenseS.exe Scanning Files/Folders. How to exclude from scanning?

Need to exclude file/folders from MsSenseS.exe scanning. Due to this sometimes MS patches getting failed when the patch size is around 1.4 GB and resulting in "Access Denied" in CBS log. Not sure whe...

Iron Contributor

Aug 22, 2019

Hello NotNirmal,

You can refer to the documentation below on how to configure exclusions for the Windows Defender / Microsoft Defender Advanced Threat Protection:

https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-antivirus/configure-exclusions-windows-defender-antivirus

https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-antivirus/configure-server-exclusions-windows-defender-antivirus

Best regards,
Leon

NotNirmal
Copper Contributor
Aug 23, 2019
Leon Laude

Have tried excluding the MsSenses.exe from scanning.. but that didn't worked and i believe that will not work. This is specific with Microsoft Security Center where we did implemented WDATP in MMA Agent of configuring Azure Workspace ID and Proxy. After which the mentioned MsSenseS.exe is getting popped up in process and from proc mon i could see this is frequently been logged (Attached the snippnet). After removing the Azure workspace key, i could able to install the patch successfully with no access denied in CBS logs.
- Leon Laude
  Iron Contributor
  Aug 23, 2019
  Might want to reach out to the experts in the Microsoft Defender Advanced Threat Protection community.
  - johnzabroski_wam
    Copper Contributor
    Jun 15, 2021
    Leon Laude It looks like NotNirmal posted a question where you suggested, https://techcommunity.microsoft.com/t5/microsoft-defender-for-endpoint/mssenses-exe-is-scanning-files-folders-how-to-exclude-from/m-p/819627 , and no expert replied.
    
    I also found this question Proper way to exclude applications from ATP protection

Resources