Removing the "Exclusion" option from Microsoft Defender

[Jose_Amaya]

Hello,

We're deploying MS Defender, but need some help with how to remove or hide the "Exclusion" option from MS Defender user interface, if it's possible. My current configuration "MDATP MDAV configuration settings" appears to enable to exclude a default path, but I prefer to not have "Exclusion" option available or visible.

[andrew_nicholas · Accepted solution]

You need to set the value of exclusionsMergePolicy to admin_only as in the below.

<key>exclusionsMergePolicy</key>
<string>admin_only</string>

This will disable it and leave text that it is blocked by policy. 

[Jose_Amaya]

Thank you that worked!