Control whether or not exclusions are visible to Local Admins

Policy ID
HideExclusionsFromLocalAdmins
Scope
Computer Configuration
Supported on
At least Windows Server 2016, Windows 10 Version 1607
Source
Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
Category
Windows Components › Microsoft Defender Antivirus

Description


This policy setting controls whether or not exclusions are visible to Local Admins. For end users (that are not Local Admins) exclusions are not visible, whether or not this setting is enabled.
Disabled(Default):
If you disable or do not configure this setting, Local Admins will be able to see exclusions in the Windows Security App or via PowerShell.

Enabled:
If you enable this setting, Local Admins will no longer be able to see the exclusion list in Windows Security App or via PowerShell.
Note: Applying this setting will not remove exclusions, it will only prevent them from being visible to Local Admins. This is reflected in Get-MpPreference.

Registry

ComputerHKEY_LOCAL_MACHINE
  • HideExclusionsFromLocalAdminsREG_DWORD

Other policies in the same category

View all policies in this category (18)