Set exclusions from Remote Encryption Protection
- Policy ID
- Remediation_BNB_REP_RemoteEncryptionProtectionExclusions
- Scope
- Computer Configuration
- Supported on
- At least Windows Server 2016, Windows 10 Version 1607
- Source
- Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
- Category
- Windows Components › Microsoft Defender Antivirus › Remediation › Behavioral Network Blocks › Remote Encryption Protection
Description
Specify IP addresses, subnets, and domain names to exclude from Remote Encryption Protection. Note that attackers can spoof excluded addresses and names to bypass protection.
Enter each address or subnet on a new line as a name-value pair:
- Name column: Enter an IP address or subnet name. For example, ""1.1.127.0"" will exclude this IP address from getting blocked.
- Value column: Enter ""0"" for each item
Options
Registry
ComputerHKEY_LOCAL_MACHINE
HKLM\Software\Policies\Microsoft\Windows Defender\Remediation\Behavioral Network Blocks\Remote Encryption Protection View registry values
- RemoteEncryptionProtection_Exclusions-
HKLM\Software\Policies\Microsoft\Windows Defender\Remediation\Behavioral Network Blocks\Remote Encryption Protection\RemoteEncryptionProtectionExclusions View registry values
- (list values)REG_SZ