Add a path to exclude from an Allow List policy

The following table describes the information that you must provide to exclude a file from an Allow List policy.
Path exclusion settings
Exclusion setting
Description
Prefix
The following prefixes are supported:
  • [NONE]
    No prefix is prepended.
  • [COMMON_APPDATA]
    The file system folder containing application data for all users.
  • [COMMON_DESKTOPDIRECTORY]
    The file system folder that contains the files and folders that appear on the desktop for all users.
  • [COMMON_DOCUMENTS]
    The file system folder that contains the documents that are common to all users.
  • [COMMON_PROGRAMS]
    The file system folder that contains the folders for the common program groups that appear on the
    Start
    menu for users.
  • [COMMON_STARTUP]
    The file system folder that contains all the programs that appear in the
    Startup
    folder for all users.
  • [PROGRAM_FILES]
    The
    Program Files
    folder. For example,
    C:\Program Files
    and
    C:\Program Files (x86)
    .
  • [PROGRAM_FILES_COMMON]
    The folders for those components that are shared across applications. For example,
    C:\Program Files\Common Files
    and
    C:\Program Files (x86)\Common Files.
  • [SYSTEM]
    The Windows System folder.
  • [SYSTEM_DRIVE]
    The location where the Windows operating system is installed.
  • [USER_PROFILE]
    File system folders that correspond to all the users.
  • [WINDOWS]
    The Windows folder or SYSROOT. It corresponds to the %windir% or %SYSTEMROOT% environmental variable.
Path
The full path on disk. For example:
C:\temp
Check the box to include all subfolders under the specified path.
Turn on/off path exclusion from one or more technologies
You can apply the path exclusion for the Allow List policy for multiple technologies.
  • Auto-Protect
    Excludes a path from real-time scans.
  • Scheduled and On-Demand scans
    Excludes a path from scheduled and on-demand scans.
  • Behavioral Analysis
    Excludes a path from real-time heuristic scans.
  • Device Control
    Excludes a path from device control.
More information