Microsoft Technical Takeoff: Windows and Microsoft Intune
Oct 24 2022 07:00 AM - Oct 27 2022 12:00 PM (PDT)

Windows Defender: Although folder excluded files are scanned

Senior Member



Having Windows Defender running on a server 2016.

Excluded a folder: s:\database\application\data

Verified in the logfile C:\ProgramData\Microsoft\Windows Defender\Support

the exclusion:

2021-07-22T00:22:08.983Z [Exclusion] s:\database\application\data -> \Device\HarddiskVolume6\database\application\data


So far so good.

But found afterwards log-entries like:

2021-07-28T05:14:04.851Z [Mini-filter] Unsuccessful scan status: \Device\HarddiskVolume6\database\application\data\subfolder\00000001000001A300000026. Process: (unknown), Status: 0xc000004b, State: 0, ScanRequest #382525762, FileId: 

0x27bb0000000079e4, Reason: OnClose, IoStatusBlockForNewFile: 0xffffffff, DesiredAccess:0x0, FileAttributes:0x20, ScanAttributes:0x10, AccessStateFlags:0x801, BackingFileInfo: 0x0, 0x0, 0x0:0\0x0:0


Does Windows Defender scans the file although the parent folder is excluded?

If yes what can I do to avoid scanning of the files in the folder s:\database\application\data and it's subfolders?

Thanks for info



Is my interpretation of the logfile correct:
Window Defender scans the file?


0 Replies