Endpoint Protection

Is there a way to prevent the end users from adding certain exclusions but still give them latitude to add their own exclusions. i.e. prevent the user from adding C:\ to the list of exclusions but still allow them to add exclusion for specific piece of software that's known good but triggers a fault. I don't want to have to add an exclusion every time one of the users runs into a problem but I also don't want to give them the latitude to exclude their entire C: drive.

Unfortunately, it is an all or nothing process when it comes to allowing users the ability add exclusions.

If you give them the ability to add an exclusion for C:\test, they will also have the ability to add C:\ (or whatever else)

There is nothing within the exception options to allow for this type of granularity within SEP/SEPM.

You can probably allow the Users for Application Exception and File Exception but do not allow Folder Exception and Extention exception.

Under Exception Policy- Client Restrictions.