{"id":4201,"date":"2026-06-08T18:00:16","date_gmt":"2026-06-08T15:00:16","guid":{"rendered":"https:\/\/support.withsecure.com\/en\/?post_type=support_article&#038;p=4201"},"modified":"2026-06-08T18:00:16","modified_gmt":"2026-06-08T15:00:16","slug":"how-to-prevent-a-local-user-from-creating-exclusions-for-elements-endpoint-protection","status":"publish","type":"support_article","link":"https:\/\/support.withsecure.com\/en\/support-articles\/how-to-prevent-a-local-user-from-creating-exclusions-for-elements-endpoint-protection\/","title":{"rendered":"How to prevent a local user from creating exclusions for Elements Endpoint Protection?"},"content":{"rendered":"<h3>Issue:<\/h3>\n<p>How to forbid a local user from creating real-time scanning or DeepGuard exclusions for Elements Endpoint Protection (Elements EPP for Computers or Servers)?<\/p>\n<h3>Resolution:<\/h3>\n<p>You can block or disallow a local user from creating or adding new exclusions in the local Elements Agent user interface by changing a few settings in the profile that is in use on your devices.\u00a0<\/p>\n<p>Follow these steps:<\/p>\n<ol>\n<li>Log in to the Elements Security Center: <a href=\"https:\/\/elements.withsecure.com\" target=\"_blank\" rel=\"noopener\">https:\/\/elements.withsecure.com<\/a><\/li>\n<li>Open the\u00a0<strong>Security Configurations\u00a0<\/strong>section from the menu on the left<\/li>\n<li>Go to the\u00a0<strong>Profiles\u00a0<\/strong>page<\/li>\n<li>Select the profile that is in use on your devices (note that only custom profiles can be edited)<\/li>\n<li>Go to the\u00a0<strong>General settings\u00a0<\/strong>page<\/li>\n<li>Scroll down to the\u00a0<strong>Quarantine\u00a0<\/strong>section and disable\u00a0<strong>Allow users to release blocked and quarantined items\u00a0<\/strong><\/li>\n<li>Scroll back up a little to the\u00a0<strong>Exclude folders and files from all security scans\u00a0<\/strong>section and\u00a0<strong>enable<\/strong>\u00a0the\u00a0<strong>lock\u00a0<\/strong>on the right side of the exclusions table<\/li>\n<li>Click\u00a0<strong>Save and publish\u00a0<\/strong><\/li>\n<\/ol>\n<p>Now all the devices that have this profile in use will have it so that even local users with administrator rights cannot add exclusions, since the\u00a0<strong>Add new\u00a0<\/strong>button will be grayed out and the setting is locked.\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"<p>How to forbid a local user from creating real-time scanning or DeepGuard exclusions for Elements Endpoint Protection (Elements EPP for Computers or Servers)?<\/p>\n","protected":false},"template":"","support_article_product":[99],"class_list":["post-4201","support_article","type-support_article","status-publish","hentry"],"acf":{"source_foreign_id":"000012522","source_version":3,"source_system":"salesforce","source_date_updated":"2026-06-08 15:00:16","import_hash":"4c5de8d7a0948265ffb122cef160302b25f6e7b5","vanilla_article_id":32366,"vanilla_url":"https:\/\/community.withsecure.com\/en\/kb\/articles\/32366-how-to-prevent-a-local-user-from-creating-exclusions-for-elements-endpoint-protection","vanilla_kb_id":30,"vanilla_category_id":102,"machine_translated":false,"reactions_helpful_yes":0,"reactions_helpful_no":0},"_links":{"self":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/support_article\/4201","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/support_article"}],"about":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/types\/support_article"}],"wp:attachment":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/media?parent=4201"}],"wp:term":[{"taxonomy":"support_article_product","embeddable":true,"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/support_article_product?post=4201"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}