Microsoft Defender for Endpoint

Defender Endpoint Exclusions Common Mistakes

4 September 2026Doc update+1 / −1 lines

In brief

The documentation now links to a different Microsoft Support page for folders that should be excluded when using file-level antivirus protection in SharePoint.

What Defender admins need to know

Administrators following this guidance should use the updated support link.

Summaries are generated from the documentation change itself.

Documentation change

View full page diff

View on Microsoft Learn

The comparison below shows only the changed extract. Use the full-page view for complete context.

Note
You should exclude the following folders when you use file-level antivirus protection in SharePoint
Note
You should exclude the following folders when you use file-level antivirus protection in SharePoint:

C:\Users\ServiceAccount\AppData\Local\Temp or C:\Users\Default\AppData\Local\Temp.

@@ -54,7 +54,7 @@ Attackers can abuse some folders, so don't exclude the following folders from sc   - `C:\Users\<UserProfileName>\AppData\Local\Temp\` or `C:\Users\<UserProfileName>\AppData\LocalLow\Temp\`       > [!NOTE]-     > You **should** exclude the following folders when you use [file-level antivirus protection in SharePoint](https://support.microsoft.com/office/01cbc532-a24e-4bba-8d67-0b1ed733a3d9):+     > You **should** exclude the following folders when you use [file-level antivirus protection in SharePoint](https://support.microsoft.com/SharePoint/admin/certain-folders-may-have-to-be-excluded-from-antivirus-scanning-when-you-use-file-level-antivirus-so):      >      > `C:\Users\ServiceAccount\AppData\Local\Temp` or `C:\Users\Default\AppData\Local\Temp`.