wiki:windows:powershell:defender []

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.

====== Defender Exclusions ======
Used this one to easily add Windows Defender exclusions to all of our Windows 10 PC's at work as we are not running Server 2016 which can do it via GPO.

===== Prep =====
Need to run PowerShell as **Administrator** and run the following command to allow custom scripts:

<code>Set-ExecutionPolicy RemoteSigned</code>

Answer 'y' to the prompt. Now you can run custom scripts.

===== Script =====
Create a script and name it "defender.ps1".
In an elevated PowerShell run it with: <code>.\defender.ps1</code>

Here is a sanitized version of the script I built for work to keep Defender from interfering with out accounting software. You can see how you can customize it for your uses easily. There are a bunch of other commandlets for Defender you can jump off to from here. 
<code>
# File Share Exclusions
Add-MpPreference -ExclusionPath ('I:\AccountingSoftware','H:','\\server1\Applications')

# Process Exclusions
Add-MpPreference -ExclusionProcess ('AccSw.exe','AccDB.exe')

# File Type Exclusions
Add-MpPreference -ExclusionExtension ('.txt','.lib','.lab')
</code>

===== Sources =====
  * https://4sysops.com/archives/using-the-windows-defender-powershell-cmdlets/
  * https://technet.microsoft.com/en-us/library/dn433280(v=wps.630).aspx