- Article
- 9 minutes to read
Applies to:
- Microsoft Defender for Endpoint Plan 2
- Microsoft Defender Antivirus
Platforms
- Windows
Microsoft Defender Antivirus on Windows Server 2016 and Windows Server 2019 automatically enrolls you in certain exclusions, as defined by your specified server role. These exclusions do not appear in the standard exclusion lists that are shown in the Windows Security app.
In addition to server role-defined automatic exclusions, you can add or remove custom exclusions. To do that, refer to these articles:
- Configure and validate exclusions based on file name, extension, and folder location
- Configure and validate exclusions for files opened by processes
A few points to keep in mind
- Custom exclusions take precedence over automatic exclusions.
- Automatic exclusions only apply to real-time protection (RTP) scanning.
- Automatic exclusions are not honored during a full, quick, or on-demand scan.
- Custom and duplicate exclusions do not conflict with automatic exclusions.
- Microsoft Defender Antivirus uses the Deployment Image Servicing and Management (DISM) tools to determine which roles are installed on your computer.
- Appropriate exclusions must be set for software that isn't included with the operating system.
- Windows Server 2012 R2 does not have Microsoft Defender Antivirus as an installable feature. When you onboard those servers to Defender for Endpoint, you will install Microsoft Defender Antivirus, and default exclusions for operating system files are applied. However, exclusions for server roles (as specified below) don't apply automatically, and you should configure these exclusions as appropriate. To learn more, see Onboard Windows servers to the Microsoft Defender for Endpoint service.
This article provides an overview of exclusions for Microsoft Defender Antivirus on Windows Server 2016 or later.
Because Microsoft Defender Antivirus is built into Windows Server 2016 and later, exclusions for operating system files and server roles happen automatically. However, you can define custom exclusions. You can also opt out of automatic exclusions if necessary.
This article includes the following sections:
| Section | Description |
|---|---|
| Automatic exclusions on Windows Server 2016 or later | Describes the two main types of automatic exclusions and includes a detailed list of automatic exclusions |
| Opting out of automatic exclusions | Includes important considerations and procedures describing how to opt out of automatic exclusions |
| Defining custom exclusions | Provides links to how-to information for defining custom exclusions |
Automatic exclusions on Windows Server 2016 or later
On Windows Server 2016 or later, you should not need to define the following exclusions:
- Operating system files
- Server roles and any files that are added through server roles
Because Microsoft Defender Antivirus is built in, it does not require exclusions for operating system files on Windows Server 2016 or later. In addition, when you run Windows Server 2016 or later and install a role, Microsoft Defender Antivirus includes automatic exclusions for the server role and any files that are added while installing the role.
Operating system exclusions and server role exclusions do not appear in the standard exclusion lists that are shown in the Windows Security app.
Note
Automatic exclusions for server roles and operating system files do not apply to Windows Server 2012. Automatic exclusions can apply if your servers running Windows Server 2012 R2 are onboarded to Defender for Endpoint. (See Onboard Windows servers to the Microsoft Defender for Endpoint service.)
The list of automatic exclusions
The following sections contain the exclusions that are delivered with automatic exclusions file paths and file types.
Default exclusions for all roles
This section lists the default exclusions for all roles in Windows Server 2016, Windows Server 2019, and Windows Server 2022.
Important
- Default locations could be different than the locations that are described in this article.
- To set exclusions for software that isn't included as a Windows feature or server role, refer to the software manufacturer's documentation.
Windows "temp.edb" files
%windir%\SoftwareDistribution\Datastore\*\tmp.edb%ProgramData%\Microsoft\Search\Data\Applications\Windows\windows.edb
Windows Update files or Automatic Update files
%windir%\SoftwareDistribution\Datastore\*\Datastore.edb%windir%\SoftwareDistribution\Datastore\*\edb.chk%windir%\SoftwareDistribution\Datastore\*\edb\*.log%windir%\SoftwareDistribution\Datastore\*\Edb\*.jrs%windir%\SoftwareDistribution\Datastore\*\Res\*.log
Windows Security files
%windir%\Security\database\*.chk%windir%\Security\database\*.edb%windir%\Security\database\*.jrs%windir%\Security\database\*.log%windir%\Security\database\*.sdb
Group Policy files
%allusersprofile%\NTUser.pol%SystemRoot%\System32\GroupPolicy\Machine\registry.pol%SystemRoot%\System32\GroupPolicy\User\registry.pol
WINS files
%systemroot%\System32\Wins\*\*.chk%systemroot%\System32\Wins\*\*.log%systemroot%\System32\Wins\*\*.mdb%systemroot%\System32\LogFiles\%systemroot%\SysWow64\LogFiles\
File Replication Service (FRS) exclusions
Files in the File Replication Service (FRS) working folder. The FRS working folder is specified in the registry key
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NtFrs\Parameters\Working Directory%windir%\Ntfrs\jet\sys\*\edb.chk%windir%\Ntfrs\jet\*\Ntfrs.jdb%windir%\Ntfrs\jet\log\*\*.log
FRS Database log files. The FRS Database log file folder is specified in the registry key
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Ntfrs\Parameters\DB Log File Directory%windir%\Ntfrs\*\Edb\*.log
The FRS staging folder. The staging folder is specified in the registry key
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NtFrs\Parameters\Replica Sets\GUID\Replica Set Stage%systemroot%\Sysvol\*\Ntfrs_cmp*\
The FRS preinstall folder. This folder is specified by the folder
Replica_root\DO_NOT_REMOVE_NtFrs_PreInstall_Directory%systemroot%\SYSVOL\domain\DO_NOT_REMOVE_NtFrs_PreInstall_Directory\*\Ntfrs*\
The Distributed File System Replication (DFSR) database and working folders. These folders are specified by the registry key
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DFSR\Parameters\Replication Groups\GUID\Replica Set Configuration FileNote
For custom locations, see Opting out of automatic exclusions.
(Video) How To Add Exclusions For Windows Defender In Windows 10%systemdrive%\System Volume Information\DFSR\$db_normal$%systemdrive%\System Volume Information\DFSR\FileIDTable_*%systemdrive%\System Volume Information\DFSR\SimilarityTable_*%systemdrive%\System Volume Information\DFSR\*.XML%systemdrive%\System Volume Information\DFSR\$db_dirty$%systemdrive%\System Volume Information\DFSR\$db_clean$%systemdrive%\System Volume Information\DFSR\$db_lostl$%systemdrive%\System Volume Information\DFSR\Dfsr.db%systemdrive%\System Volume Information\DFSR\*.frx%systemdrive%\System Volume Information\DFSR\*.log%systemdrive%\System Volume Information\DFSR\Fsr*.jrs%systemdrive%\System Volume Information\DFSR\Tmp.edb
Process exclusions
%systemroot%\System32\dfsr.exe%systemroot%\System32\dfsrs.exe
Hyper-V exclusions
The following table lists the file type exclusions, folder exclusions, and process exclusions that are delivered automatically when you install the Hyper-V role.
| Exclusion type | Specifics |
|---|---|
| File types | *.vhd *.vhdx *.avhd *.avhdx *.vsv *.iso *.rct *.vmcx *.vmrs |
| Folders | %ProgramData%\Microsoft\Windows\Hyper-V %ProgramFiles%\Hyper-V %SystemDrive%\ProgramData\Microsoft\Windows\Hyper-V\Snapshots %Public%\Documents\Hyper-V\Virtual Hard Disks |
| Processes | %systemroot%\System32\Vmms.exe %systemroot%\System32\Vmwp.exe |
SYSVOL files
%systemroot%\Sysvol\Domain\*.adm%systemroot%\Sysvol\Domain\*.admx%systemroot%\Sysvol\Domain\*.adml%systemroot%\Sysvol\Domain\Registry.pol%systemroot%\Sysvol\Domain\*.aas%systemroot%\Sysvol\Domain\*.inf%systemroot%\Sysvol\Domain\*Scripts.ini%systemroot%\Sysvol\Domain\*.ins%systemroot%\Sysvol\Domain\Oscfilter.ini
Active Directory exclusions
This section lists the exclusions that are delivered automatically when you install Active Directory Domain Services (AD DS).
NTDS database files
The database files are specified in the registry key HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NTDS\Parameters\DSA Database File
%windir%\Ntds\ntds.dit%windir%\Ntds\ntds.pat
The AD DS transaction log files
The transaction log files are specified in the registry key HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NTDS\Parameters\Database Log Files Path
%windir%\Ntds\EDB*.log%windir%\Ntds\Res*.log%windir%\Ntds\Edb*.jrs%windir%\Ntds\Ntds*.pat%windir%\Ntds\TEMP.edb
The NTDS working folder
This folder is specified in the registry key HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NTDS\Parameters\DSA Working Directory
%windir%\Ntds\Temp.edb%windir%\Ntds\Edb.chk
Process exclusions for AD DS and AD DS-related support files
%systemroot%\System32\ntfrs.exe%systemroot%\System32\lsass.exe
DHCP Server exclusions
This section lists the exclusions that are delivered automatically when you install the DHCP Server role. The DHCP Server file locations are specified by the DatabasePath, DhcpLogFilePath, and BackupDatabasePath parameters in the registry key HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DHCPServer\Parameters
%systemroot%\System32\DHCP\*\*.mdb%systemroot%\System32\DHCP\*\*.pat%systemroot%\System32\DHCP\*\*.log%systemroot%\System32\DHCP\*\*.chk%systemroot%\System32\DHCP\*\*.edb
DNS Server exclusions
This section lists the file and folder exclusions and the process exclusions that are delivered automatically when you install the DNS Server role.
File and folder exclusions for the DNS Server role
%systemroot%\System32\Dns\*\*.log%systemroot%\System32\Dns\*\*.dns%systemroot%\System32\Dns\*\*.scc%systemroot%\System32\Dns\*\BOOT
Process exclusions for the DNS Server role
%systemroot%\System32\dns.exe
File and Storage Services exclusions
This section lists the file and folder exclusions that are delivered automatically when you install the File and Storage Services role. The exclusions listed below do not include exclusions for the Clustering role.
%SystemDrive%\ClusterStorage%clusterserviceaccount%\Local Settings\Temp%SystemDrive%\mscs
Print Server exclusions
This section lists the file type exclusions, folder exclusions, and the process exclusions that are delivered automatically when you install the Print Server role.
File type exclusions
*.shd*.spl
Folder exclusions
This folder is specified in the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Printers\DefaultSpoolDirectory
%system32%\spool\printers\*
Process exclusions
spoolsv.exe
Web Server exclusions
This section lists the folder exclusions and the process exclusions that are delivered automatically when you install the Web Server role.
Folder exclusions
%SystemRoot%\IIS Temporary Compressed Files%SystemDrive%\inetpub\temp\IIS Temporary Compressed Files%SystemDrive%\inetpub\temp\ASP Compiled Templates%systemDrive%\inetpub\logs%systemDrive%\inetpub\wwwroot
Process exclusions
%SystemRoot%\system32\inetsrv\w3wp.exe%SystemRoot%\SysWOW64\inetsrv\w3wp.exe%SystemDrive%\PHP5433\php-cgi.exe
Turning off scanning of files in the Sysvol\Sysvol folder or the SYSVOL_DFSR\Sysvol folder
The current location of the Sysvol\Sysvol or SYSVOL_DFSR\Sysvol folder and all the subfolders is the file system reparse target of the replica set root. The Sysvol\Sysvol and SYSVOL_DFSR\Sysvol folders use the following locations by default:
%systemroot%\Sysvol\Domain%systemroot%\Sysvol_DFSR\Domain
The path to the currently active SYSVOL is referenced by the NETLOGON share and can be determined by the SysVol value name in the following subkey: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Netlogon\Parameters
Exclude the following files from this folder and all its subfolders:
*.adm*.admx*.admlRegistry.polRegistry.tmp*.aas*.infScripts.ini*.insOscfilter.ini
Windows Server Update Services exclusions
This section lists the folder exclusions that are delivered automatically when you install the Windows Server Update Services (WSUS) role. The WSUS folder is specified in the registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Update Services\Server\Setup
%systemroot%\WSUS\WSUSContent%systemroot%\WSUS\UpdateServicesDBFiles%systemroot%\SoftwareDistribution\Datastore%systemroot%\SoftwareDistribution\Download
Opting out of automatic exclusions
In Windows Server 2016 and later, the predefined exclusions delivered by Security intelligence updates only exclude the default paths for a role or feature. If you installed a role or feature in a custom path, or you want to manually control the set of exclusions, make sure to opt out of the automatic exclusions delivered in Security intelligence updates. But keep in mind that the exclusions that are delivered automatically are optimized for Windows Server 2016 and later. See Recommendations for defining exclusions before defining your exclusion lists.
Warning
Opting out of automatic exclusions may adversely impact performance, or result in data corruption. The exclusions that are delivered automatically are optimized for Windows Server 2016, Windows Server 2019, and Windows Server 2022 roles.
Because predefined exclusions only exclude default paths, if you move NTDS and SYSVOL folders to another drive or path that is different from the original path, you must add exclusions manually. See Configure the list of exclusions based on folder name or file extension.
You can disable the automatic exclusion lists with Group Policy, PowerShell cmdlets, and WMI.
Use Group Policy to disable the auto-exclusions list on Windows Server 2016, Windows Server 2019, and Windows Server 2022
On your Group Policy management computer, open the Group Policy Management Console. Right-click the Group Policy Object you want to configure, and then select Edit.
(Video) Microsoft Defender for Endpoint | Onboarding Windows Server 2016In the Group Policy Management Editor go to Computer configuration, and then select Administrative templates.
Expand the tree to Windows components > Microsoft Defender Antivirus > Exclusions.
Double-click Turn off Auto Exclusions, and set the option to Enabled. Then select OK.
Use PowerShell cmdlets to disable the auto-exclusions list on Windows Server
Use the following cmdlets:
Set-MpPreference -DisableAutoExclusions $trueTo learn more, see the following resources:
- Use PowerShell cmdlets to configure and run Microsoft Defender Antivirus.
- Use PowerShell with Microsoft Defender Antivirus.
Use Windows Management Instruction (WMI) to disable the auto-exclusions list on Windows Server
Use the Set method of the MSFT_MpPreference class for the following properties:
DisableAutoExclusionsSee the following for more information and allowed parameters:
- Windows Defender WMIv2 APIs
Defining custom exclusions
If necessary, you can add or remove custom exclusions. To do that, see the following articles:
- Configure and validate exclusions based on file name, extension, and folder location
- Configure and validate exclusions for files opened by processes
Tip
If you're looking for Antivirus related information for other platforms, see:
- Set preferences for Microsoft Defender for Endpoint on macOS
- Microsoft Defender for Endpoint on Mac
- macOS Antivirus policy settings for Microsoft Defender Antivirus for Intune
- Set preferences for Microsoft Defender for Endpoint on Linux
- Microsoft Defender for Endpoint on Linux
- Configure Defender for Endpoint on Android features
- Configure Microsoft Defender for Endpoint on iOS features
See also
- Configure and validate exclusions for Microsoft Defender Antivirus scans
- Configure and validate exclusions based on file name, extension, and folder location
- Configure and validate exclusions for files opened by processes
- Common mistakes to avoid when defining exclusions
- Customize, initiate, and review the results of Microsoft Defender Antivirus scans and remediation
- Microsoft Defender Antivirus in Windows 10
FAQs
How do I set up exclusions in Windows Defender? ›
Go to Start > Settings > Update & Security > Windows Security > Virus & threat protection. Under Virus & threat protection settings, select Manage settings, and then under Exclusions, select Add or remove exclusions. Select Add an exclusion, and then select from files, folders, file types, or process.
How do I add exclusions to endpoint in Microsoft Defender? ›In the Group Policy Management Editor go to Computer configuration, and select Administrative templates. Expand the tree to Windows components > Microsoft Defender Antivirus > Exclusions. Open the Path Exclusions setting for editing, and add your exclusions. Set the option to Enabled.
Does Microsoft Defender work on servers? ›Microsoft Defender Antivirus is available in the following editions/versions of Windows Server: Windows Server 2022. Windows Server 2019. Windows Server, version 1803 or later.
Should there be exclusions in Windows Defender? ›IMPORTANT] Add exclusions with caution. Exclusions for Microsoft Defender Antivirus scans reduce the level of protection for devices. You can define an exclusion list for items that you don't want Microsoft Defender Antivirus to scan. However, excluded items could contain threats that make your device vulnerable.
What are the two roles that allow you to create a resource exemption in Microsoft Defender for cloud? ›Exemptions can be created only for recommendations included in Defender for Cloud's default initiative, Microsoft Cloud Security Benchmark or any of the supplied regulatory standard initiatives. Recommendations that are generated from any custom initiatives assigned to your subscriptions cannot be exempted.
How do I whitelist a website in Windows Defender? ›- In the Microsoft 365 Defender portal, go to Settings > Endpoints > Indicators > URL/Domain > Add Item.
- Enter the domain of the site.
- Set the policy action to Allow.
Path Exclusion is a feature in SentinelOne that allows an administrator to suppress false positive events originating from specific files and processes. It also enables an administrator to exclude a path or file from monitoring where there are any interoperability issues.
How do I add a process exclusion for welcome SCR? ›Add a process exclusion for welcome. scr. a. From the Exclusions dialog, select Add an exclusion; then select Process.
How do I update Windows Defender definitions? ›Open the Settings app. Go to Update & security -> Windows Update. On the right, click Check for updates. Windows 10 will download and install definitions for Defender (if available).
Can I use defender for endpoint on servers? ›Defender for Endpoint extends support to also include the Windows Server operating system. This support provides advanced attack detection and investigation capabilities seamlessly through the Microsoft 365 Defender console.
How do I turn on Windows Defender on my server? ›
...
For Windows Server 2016 Systems:
- Open the Settings app.
- Choose Update & security.
- Select Windows Defender on the side bar.
Microsoft on Monday announced that its Microsoft Defender for Endpoint security solution now supports older Windows Server products, namely Windows Server 2012 R2 and Windows Server 2016.
How do I add exceptions to Windows Firewall? ›Click Start and select Control Panel. Double-click Windows Firewall to open the Windows Firewall window. Click the Exceptions tab. Click to check mark the box for the program you want.
How do I know if my antivirus is blocking a program? ›- Press the Windows key + R to open Run.
- Type control and press OK to open Control Panel.
- Click on System and Security.
- Click on Windows Defender Firewall.
- From the left pane Allow an app or feature through Windows Defender Firewall.
| Component | Old location | New location |
|---|---|---|
| Windows Defender Antivirus drivers | %Windir%\System32\drivers | %Windir%\System32\drivers\wd |
Microsoft Defender for Endpoint and Microsoft Defender for Cloud are entirely two different products, the former is dedicated to endpoint protection and the latter is for Cloud Security Posture Management (CSPM), and Cloud Workload Protection Platform (CWPP) scenarios, however, by integrating Security Center with ...
Which storage service can be protected by using Microsoft Defender for cloud? ›Defender for Storage provides: Azure-native security - With 1-click enablement, Defender for Storage protects data stored in Azure Blob, Azure Files, and Data Lakes.
Which security feature is available in the free mode of Microsoft Defender for cloud? ›The free offering from Microsoft Defender for Cloud offers the secure score and related tools. Enabling enhanced security turns on all of the Microsoft Defender plans to provide a range of security benefits for all your resources in Azure, hybrid, and multicloud environments.
How do I stop Windows Defender blocking websites? ›- Select Start , then open Settings . ...
- Select a network profile: Domain network, Private network, or Public network.
- Under Microsoft Defender Firewall, switch the setting to On. ...
- To turn it off, switch the setting to Off.
Step 1: Log into RDP (remote desktop). Step 2: Go to Start. Step 3: Select Administrative Tools. Step 4: Click on Windows Firewall With Advanced Security.
How do I stop firewall from blocking a website? ›
- Bypass Firewalls By Switching From Wi-Fi to Mobile Data. ...
- Open Blocked Sites By Visiting the IP Address Directly. ...
- Access Blocked Sites By Viewing a Cached Version. ...
- Unblock a Website By Restarting Your Modem. ...
- How to Open Blocked Websites Using a Proxy or VPN.
Exclusion ListIndicators added to the exclusion list are ignored by the system and are not considered indicators.
How do I turn on threats in Windows Defender? ›Open the Windows Security app by searching the start menu for Security, and then selecting Windows Security. Select the Virus & threat protection tile (or the shield icon on the left menu bar). Under Virus & threat protection settings, select Manage settings. Under Exclusions, select Add or remove exclusions.
Where is quarantine Windows Defender? ›Open Windows Security. Select Virus & threat protection and then click Protection history. In the list of all recent items, filter on Quarantined Items.
How do I exclude a folder from McAfee Antivirus? ›- Open your McAfee security software.
- Click the settings gear icon at the top right.
- Under PC Settings, click Real-Time Scanning. ...
- Under Excluded Files, click Add file .
- Browse to, and select, the file that you want to exclude from being scanned.
- Repeat the process as needed to exclude multiple files from being scanned.
Specifies the interval, in hours, at which to check for definition updates. The acceptable values for this parameter are: integers from 1 through 24. If you do not specify a value for this parameter, Windows Defender checks at the default interval, which is 24 (every 24 hours). That's it.
How do I update Windows Defender using PowerShell? ›To use PowerShell to update Microsoft Defender Antivirus with the latest definition, use these steps: Open Start. Search for PowerShell, right-click the top result, and select the Run as administrator option. Type the following command to check to update Microsoft Defender Antivirus and press Enter: Update-MpSignature.
How do I fix Windows Defender not updating? ›- Step 1: Open the Search menu to input Settings and search for it, then open it.
- Step 2: Click the Update & Security tab in the Settings interface.
- Step 3: Then you should click Windows Update in the left pane.
- Step 4: Click Check for updates in the right pane.
Click Start and select Control Panel. Double-click Windows Firewall to open the Windows Firewall window. Click the Exceptions tab. Click to check mark the box for the program you want.
What does Exclusion List mean? ›Exclusion List 101 an overview. In a nutshell, the OIG's LEIE (Exclusion List) is where individuals and entities currently excluded from participation in Medicare, Medicaid and all other Federal health care programs, can be found.
How do I add a process exclusion for welcome SCR? ›
Add a process exclusion for welcome. scr. a. From the Exclusions dialog, select Add an exclusion; then select Process.
How do I stop Windows Defender from deleting files? ›- Step 1: Go to settings and tap on the option Update & Security. ...
- Step 2: Go to “Virus and threat protection,” which is found in the protection areas. ...
- Step 3: Then, under Exclusions, tap on the option “add or remove exclusion”
Click the Start button, then type Windows Firewall in the Search box. Click Windows Firewall, and then click Allow a program or feature through Windows Firewall. Click the Change settings button. If a User Account Control window appears, click Yes, or enter your user name and password, then click OK.
How do I allow an app on Windows Server? ›Select Start > Settings > Privacy & security. Select an App permission (for example, Location) then choose which apps can access it.
How do I whitelist something on my firewall? ›- Open the “Start” menu.
- Click on “Settings.”
- In the “Find a Setting” search box, type in “Firewall.”
- Click on “Windows Firewall.”
- On the left, click on “Allow an app or feature through Windows Firewall.”
- Now, the “Allowed App” windows will pop up.
Failing to determine exclusion status can result in hefty civil monetary penalties for your organization. Exclusion screening offers this protection, enabling screening that establishes a provider's eligibility to treat patients and receive payments from federal and state health plans.
What is exclusion verification? ›Exclusion screening is the process of verifying that an employee or potential is not classified as an excluded individual who is prohibited from participation in any Federal health care program.
What is the Sam exclusion list? ›An exclusion record identifies parties excluded from receiving Federal contracts, certain subcontracts, and certain types of Federal financial and non Financial assistance and benefits. Exclusions are also referred to as suspensions and debarments.
How do you update protected definitions? ›- Open the Settings app.
- Go to Update & security -> Windows Update.
- On the right, click Check for updates.
- Windows 10 will download and install definitions for Defender (if available).
Open Windows Security. Select Virus & threat protection and then click Protection history. In the list of all recent items, filter on Quarantined Items.
How do I exclude a folder from McAfee Antivirus? ›
- Open your McAfee security software.
- Click the settings gear icon at the top right.
- Under PC Settings, click Real-Time Scanning. ...
- Under Excluded Files, click Add file .
- Browse to, and select, the file that you want to exclude from being scanned.
- Repeat the process as needed to exclude multiple files from being scanned.