How to Add Exclusions to Windows Defender Safely

Windows Defender exclusions tell Microsoft Defender Antivirus to skip scanning a specific file, folder, file type or process. To add one, open Windows Security → Virus & threat protection → Manage settings → Add or remove exclusions, select Add an exclusion and choose what to exclude. Anything you exclude is no longer checked for malware, so keep exclusions narrow and only for items you trust.

Exclusions are a legitimate fix for false positives and for slow scans of large development or media folders. Used carelessly, they create a blind spot that malware can sit in. This guide shows the safe way to add, check and remove them.

What Are Windows Defender Exclusions?

An exclusion is an instruction to Microsoft Defender Antivirus, the antivirus built into Windows Security, not to scan or block a particular item. Defender stops alerting you about excluded items and will not quarantine them, even if they later turn out to be harmful.

There are four types, and each has a different reach:

Microsoft's documentation notes one subtlety: a process exclusion skips the files the program opens, not the program file itself. To stop Defender scanning the program's own .exe, add a file exclusion for it as well.

How Do You Add an Exclusion to Windows Defender?

You add exclusions from the Windows Security app, and you need an administrator account to do it. The steps below are for Windows 11; Windows 10 uses the same screens.

1. Open Start, type Windows Security and open the app.
2. Select Virus & threat protection.
3. Under Virus & threat protection settings, select Manage settings.
4. Scroll to Exclusions and select Add or remove exclusions.
5. Approve the User Account Control prompt.
6. Select Add an exclusion and choose File, Folder, File type or Process.
7. Browse to the item, or type the extension or process name, and confirm.

The exclusion appears in the list straight away. Microsoft's guide to adding an exclusion to Windows Security warns that excluding an unsafe program could expose your system and data to increased risk, which is the right mindset for every exclusion you add.

How to Exclude a Folder from Windows Defender

To exclude a folder, follow the steps above, choose Folder and select the exact folder you want Defender to skip. The exclusion covers every file and subfolder inside it, so choose the deepest folder that solves the problem.

• Good: D:\Projects\MyApp\build, a folder your own software writes temporary files to.
• Risky: C:\Users\YourName, your whole profile, which includes Downloads, Desktop and browser data.
• Avoid: whole drives, Downloads, Temp or Program Files. These are where malware usually lands or tries to hide.

For most people, a narrow folder exclusion on a trusted project folder is enough to stop scans slowing builds, renders or exports, without opening a gap anywhere else.

How Do You Whitelist an App in Windows Defender?

"Whitelisting" an app can mean three different things in Windows Security, and the right one depends on what is blocking it.

1. The app was quarantined as a threat. Open Windows Security → Protection history, select the alert and use Actions → Allow on device if it is a "Threat found – action needed" card. For a "Threat quarantined" card, choose Restore; if Defender flags it again, allow it from the new card. Only do this if you are confident the file is safe.
2. The app is blocked from saving files. This is Controlled folder access, part of ransomware protection. Go to Virus & threat protection → Manage ransomware protection → Allow an app through Controlled folder access and add the program.
3. Scans make the app slow. Use a file, folder or process exclusion as described above.

Microsoft's ransomware protection guide explains that any allowed app can read and change files in your protected folders, so the same caution applies there.

Is It Safe to Add Exclusions to Windows Defender?

It is safe only when you know exactly what you are excluding and why. Every exclusion is a place Defender will not look, and malware that lands in an excluded folder or uses an excluded extension will run without a warning.

Follow these rules before adding one:

• Confirm the detection is a false positive. Check that the file came from the developer's official site and is the current version. A second opinion from another reputable scanner helps.
• Exclude the smallest thing possible. One file beats one folder; one folder beats a file type.
• Never exclude to make cracks or keygens work. Defender flags activation cracks and key generators for good reason; many carry backdoors or password stealers. Our article on why activation bypass tools are a bad idea explains the risks.
• Review the list regularly and remove exclusions you no longer need.
• Keep Defender switched on. An exclusion is a targeted exception, not a reason to turn real-time protection off. If you are trimming Windows, our guide to debloating Windows 11 safely explains why Windows Security should stay.

What About FanControl and Other Hardware Tools Flagged by Defender?

Some fan control, RGB and hardware monitoring tools have been flagged because they used an old driver called WinRing0, which Defender detects as HackTool:Win32/Winring0. The driver itself is not malware, but it has a known vulnerability (CVE-2020-14979) that can let a local attacker read and write system memory.

This is a case where an exclusion is the wrong first move. Update the app instead: check whether the developer has released a version that no longer uses the vulnerable driver. If no fixed version exists, weigh whether you need the tool at all before allowing a driver Defender has flagged as exploitable.

How Do You Check or Remove Defender Exclusions?

You can view and remove exclusions from the same screen where you added them. Go to Windows Security → Virus & threat protection → Manage settings → Add or remove exclusions, select an entry and choose Remove.

Administrators can also use PowerShell in an elevated Terminal window:

1. List current exclusions: Get-MpPreference | Select-Object ExclusionPath, ExclusionExtension, ExclusionProcess
2. Add a path: Add-MpPreference -ExclusionPath "D:\Projects\MyApp\build"
3. Remove a path: Remove-MpPreference -ExclusionPath "D:\Projects\MyApp\build"

Use Add-MpPreference rather than Set-MpPreference, because Microsoft's exclusions documentation notes that Set overwrites every existing exclusion of that type. On Windows 11 Pro, exclusions can also be managed centrally through Group Policy; Home users can read our note on Group Policy Editor in Windows 11 Home for the official options.

A Common Mistake We See

The pattern we see most often is an exclusion added in a hurry and forgotten. A game mod, a developer tool or a downloaded utility gets flagged, someone excludes the entire Downloads folder to make the warning go away, and that exclusion stays in place for years. Every later download then lands in a folder Defender never scans.

If you inherit a PC or buy a second-hand one, open the exclusions list before anything else. Unexpected entries, especially whole drives or system folders, are worth removing and following with a full scan.

Frequently Asked Questions

How do I exclude a folder from Windows Defender?

Open Windows Security, select Virus & threat protection, then Manage settings, and choose Add or remove exclusions under Exclusions. Select Add an exclusion, choose Folder and pick the folder. Defender will skip that folder and all its subfolders, so choose the narrowest folder that fixes the problem.

Do Windows Defender exclusions apply to all scans?

File, folder and file type exclusions apply to real-time protection and to quick, full and custom scans. Process exclusions work differently: they apply only to real-time protection, skipping the files that program opens. The excluded program's own executable is still scanned unless you exclude it separately.

Why can't I add an exclusion in Windows Security?

You need an administrator account to change exclusions. On work or school PCs, an IT administrator may manage Defender through Intune or Group Policy, which can block or overwrite local changes. If a third-party antivirus is installed, Defender may hand over real-time protection to it, and you manage exclusions in that product instead.

Is whitelisting an app the same as an exclusion?

Not quite. Allowing a detected threat from Protection history permits that specific detection. Allowing an app through Controlled folder access lets it write to protected folders. An exclusion stops Defender scanning a file, folder, file type or process altogether, which is the broadest of the three.

Should I exclude my game folder from Windows Defender?

Usually not. Defender is designed to run alongside games, and modern versions scan efficiently. Exclude a game folder only if you have confirmed scanning causes a real problem, and only the specific game folder, not your whole drive or launcher library. Mods and trainers deserve extra caution.

Do I need third-party antivirus if I use exclusions?

No. Exclusions are a normal part of Microsoft Defender, and using a few narrow ones does not mean Defender is inadequate. Whether you want extra protection is a separate question, which our comparison of the best antivirus for Windows 11 covers.

Conclusion

Windows Defender exclusions are a useful tool for false positives and slow scans, provided you exclude the smallest possible item, confirm it is safe first and review the list from time to time. Keep real-time protection on, and never use exclusions to make cracked software run. For a properly licensed, fully updated PC, see our Windows 11 licences, and read our guide to the best antivirus for Windows 11 if you want to compare Defender with other options.

Useful Links