Windows 10: Need exclusion for Defender Exploit Guard Network Protection

I have a configuration where the Defender Exploit Guard Network Protection needs to be enabled. Recently an MS update must have changed what triggers this protection and I now have 2 custom applications that no longer launch properly.

An acceptable solution is to add exclusions for the offending applications.

I have been trying to add an exclusion for these application but without any luck. The only way to get the applications to work is to disable the feature through gpedit. Here the option:

"Computer Configuration\Administrative Templates\Windows Components\Windows Defender Antivirus\Windows Defender Exploit Guard\Network Protection\Prevent users and apps from accessing dangerous websites"

These are standalone Win10Pro machines running version 1803. I've tried the following:

1) Using gpedit, adding the application exe and path to
"Computer Configuration\Administrative Templates\Windows Components\Windows Defender Antivirus\Exclusions\Path Exclusions"

2) Using Defender Security Center - App&browser Control - Exploit protection settings - Program Settings
Adding each application and then disabling ALL system options.

I'm kinda stuck at the moment and I'm hoping I'm missing something.

Thanks,
Dave

:)

 

network protection, a feature in windows defender exploit guard, doesn't work right

In case it still isn’t clear; the Windows IT Pro Center documentation gets cited in discussions of the Windows Defender Exploit Guard features because it’s the most comprehensive documentation for all of these next-gen features, including the Network
Protection feature. That shouldn’t be taken to imply that any of these technologies are limited to enterprise environments, or that the topic is limited to security administrators. If you’re looking for the simplified documentation, it's right here:

Enable Windows Defender Exploit Guard Network Protection in Windows 10

And yes, I can personally guarantee that no Enterprise Security Administrator would ever be caught dead downloading Brink’s
Enable_Windows_Defender_Network_Protection.reg file. That file is for Windows 10 Home users who are afraid of the PowerShell command line.

 

Does Windows Defender Exploit Protection log anywhere?


Does this document helps?

*Arrow docs.microsoft.com | list-of-all-windows-defender-exploit-guard-events

and docs.microsoft.com | evaluate-exploit-protection

 

Bug? In Windows Defender Exploit Guard.

If we assume that this is just a glitch, then you might be able to reset the Exploit protection defaults by exporting the settings from an unaffected PC (with default settings) and then importing those settings on the affected machines. This looks
to be the backup/restore tool for the Exploit protection settings:

Deploy exploit protection mitigations across your organization

Export and Import Exploit Protection Settings in Windows 10