Antimalware support on UWF-protected devices

Learn how to enable antimalware support on your USB Filter-enabled Windows 10 Enterprise device.

When using antimalware software on your Unified Write Filter (UWF)-protected device, you must add the required file and registry exclusions that enable the software to apply updates to signature files and persist changes to the device after a system restart.

Add support for Windows Defender on UWF-protected devices

Add these exclusions to UWF:

  1. File exclusions
    • C:\Program Files\Windows Defender
    • C:\ProgramData\Microsoft\Windows Defender
    • C:\Windows\WindowsUpdate.log
    • C:\Windows\Temp\MpCmdRun.log
  2. Registry exclusions
    • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender

Add support for System Center Endpoint Protection on UWF-protected devices

Add these exclusions to UWF:

  1. File exclusions
    • C:\Program Files\Microsoft Security Client
    • C:\Windows\Windowsupdate.log
    • C:\Windows\Temp\Mpcmdrun.log
    • C:\ProgramData\Microsoft\Microsoft Antimalware
  2. Registry exclusions
    • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft Antimalware

Note

Windows 10 Enterprise does not include System Center Endpoint Protection. You can purchase licenses and install System Center Endpoint Protection independently.

Service UWF-protected devices