Control whether or not exclusions are visible to Local Admins
This `REG_DWORD` value controls whether local administrators can view the exclusion list enforced by Microsoft Defender Antivirus.
since 0.9.8.11
Purpose
Show registry keys (1)
HKLM\Software\Policies\Microsoft\Windows Defender\HideExclusionsFromLocalAdmins
This REG_DWORD value controls whether local administrators can view the exclusion list enforced by Microsoft Defender Antivirus.
A value of 1 hides exclusions in the Windows Security app, from PowerShell queries such as Get-MpPreference, and in Registry Editor. With a value of 0, or when the value is absent, exclusions remain visible to local administrators.
The setting does not change the exclusions themselves. Existing exclusions remain stored on the device and continue to be enforced. It neither creates exclusions nor disables their effects.
Notes
Additional effects
Hiding exclusions from local administrators implicitly applies HideExclusionsFromLocalUsers as well. The exclusion list is therefore also hidden from local users.
Security
Hiding the list makes it more difficult for local users and administrators to identify files, folders, file types, or processes that are exempt from particular scans. Knowledge of those exclusions could reveal protection gaps that an attacker might target to evade malware scanning.
This setting does not protect the exclusion configuration against modification. It is not a replacement for Microsoft Defender Antivirus tamper protection or for policies that prevent locally defined exclusions from being merged with centrally managed lists. Its direct effect is limited to visibility.
Possible side effects
Local administrators can no longer inspect the complete effective exclusion list through the usual local management interfaces. This can make it harder to diagnose unexpected scanning behavior or investigate compatibility and performance issues related to exclusions.
Notes
Microsoft documents this setting for Windows 10, version 1809 and later.
Microsoft documentation
Microsoft Learn: Defender CSP – HideExclusionsFromLocalAdmins
Microsoft Learn: Configure custom exclusions for Microsoft Defender Antivirus