{"id":7970,"date":"2026-10-14T15:35:16","date_gmt":"2026-10-14T12:35:16","guid":{"rendered":"https:\/\/support.withsecure.com\/?post_type=support_article&#038;p=7970"},"modified":"2026-10-14T15:35:16","modified_gmt":"2026-10-14T12:35:16","slug":"dataguard-blocks-svchost-exe-can-we-exclude-svchost-exe-from-being-blocked-by-dataguard","status":"publish","type":"support_article","link":"https:\/\/support.withsecure.com\/fi\/support-articles\/dataguard-blocks-svchost-exe-can-we-exclude-svchost-exe-from-being-blocked-by-dataguard\/","title":{"rendered":"DataGuard blocks svchost.exe. Can we exclude svchost.exe from being blocked by DataGuard?"},"content":{"rendered":"<h3>Issue:<\/h3>\n<p>DataGuard feature blocks svchost.exe. Can we exclude svchost.exe from being blocked by DataGuard?\u00a0<\/p>\n<h3>Resolution:<\/h3>\n<p>If DataGuard blocks svchost.exe, it is not recommended to add svchost.exe to the <strong>Manually added trusted applications and folders <\/strong>list since svchost.exe can be used by various processes and therefore it is not possible to fully know if the svchost operation is harmful or not.\u00a0<\/p>\n<p>If the folder, where svchost.exe is trying to access or modify a file, was automatically protected due to the <strong>Discover monitored user data folders automatically <\/strong>feature, you can add the folder to the <strong>Manually excluded folders <\/strong>list in the profile so that DataGuard will not block svchost.\u00a0<\/p>\n<p>Steps for Elements Endpoint Protection:<\/p>\n<ol>\n<li>Log in to the Elements Security Center portal<\/li>\n<li>Navigate to the <strong>Security configurations &gt; Profiles <\/strong>page<\/li>\n<li>Open the profile that is in use on the device\u00a0<\/li>\n<li>Go to the <strong>DataGuard <\/strong>settings page<\/li>\n<li>Scroll down to the <strong>Monitored folders <\/strong>section<\/li>\n<li>Under <strong>Manually excluded folders<\/strong>, click <strong>Add path\u00a0<\/strong><\/li>\n<li>Enter the path to the folder you want to exclude\n<ol>\n<li>Note: All sub-folders will also be excluded<\/li>\n<li>Note: Wildcards and environment variables are supported<\/li>\n<\/ol>\n<\/li>\n<li>Click <strong>Save profile<\/strong><\/li>\n<\/ol>\n<p>Steps for Client Security:<\/p>\n<p>Client Security does not have a\u00a0<strong>Manually excluded folders <\/strong>feature, so you will need to disable the protection for that specific automatically protected folder. For example svchost.exe is blocked due to file being in the Documents folder, you can disable the protection specifically for the Documents folder:<\/p>\n<ol>\n<li>Log in to the Policy Manager Console<\/li>\n<li>Select a host or policy domain from the domain tree<\/li>\n<li>Go to the <strong>Settings <\/strong>tab<\/li>\n<li>Navigate to <strong>Windows &gt; DataGuard<\/strong><\/li>\n<li>In the <strong>Protected data folders <\/strong>table, disable the protection for a folder<\/li>\n<li>Distribute the policy (Ctrl + D)<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"<p>DataGuard blocks svchost.exe. Can we exclude svchost.exe from being blocked by DataGuard?\u00a0<\/p>\n","protected":false},"template":"","support_article_product":[104],"class_list":["post-7970","support_article","type-support_article","status-publish","hentry"],"acf":{"source_foreign_id":"000005443","source_version":1,"source_system":"salesforce","source_date_updated":"2026-10-14 12:35:16","import_hash":"d87ccbed86849221f43fb12a1da2863d25e63c8a","vanilla_article_id":"","vanilla_url":"","vanilla_kb_id":"","vanilla_category_id":"","machine_translated":false,"reactions_helpful_yes":"","reactions_helpful_no":""},"_links":{"self":[{"href":"https:\/\/support.withsecure.com\/fi\/wp-json\/wp\/v2\/support_article\/7970","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/support.withsecure.com\/fi\/wp-json\/wp\/v2\/support_article"}],"about":[{"href":"https:\/\/support.withsecure.com\/fi\/wp-json\/wp\/v2\/types\/support_article"}],"wp:attachment":[{"href":"https:\/\/support.withsecure.com\/fi\/wp-json\/wp\/v2\/media?parent=7970"}],"wp:term":[{"taxonomy":"support_article_product","embeddable":true,"href":"https:\/\/support.withsecure.com\/fi\/wp-json\/wp\/v2\/support_article_product?post=7970"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}