Antimalware Support on UWF-Protected Devices (Standard 8)

September 29, 2016

Learn how to add antimalware support to your Unified Write Filter (UWF)-protected Windows Embedded 8 Standard (Standard 8) device.

When using antimalware on your Unified Write Filter (UWF)-protected device, you must add support for the required file and registry exclusions that enable the software to apply updates to signature files and persist changes to the device after a system restart.

Windows Embedded 8 Standard (Standard 8) provides support for Windows Defender and System Center EndPoint Protection (SCEP/Forefront) on UWF-protected devices. You can add the required exclusions by adding the appropriate feature module to your device by using the procedures described here.

To add support for Windows Defender on UWF-protected devices

1. In Image Configuration Editor (ICE), in the Catalog pane on the far left, expand Features, and then expand Lockdown.

2. Right-click UWF AntiMalware in the Catalog pane and select Add to Configuration File.

   The UWF AntiMalware feature module adds support for these exclusions:

   • File Exclusions
     • C:\Program Files\Windows Defender
     • C:\ProgramData\Microsoft\Windows Defender
     • C:\Windows\WindowsUpdate.log
     • C:\Windows\Temp\MpCmdRun.log
   • Registry Exclusions
     • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender

   For more information using Windows Defender on your Standard 8 device, see AntiMalware.

To add support for System Center Endpoint Protection (SCEP) on UWF-protected devices

1. In Image Configuration Editor (ICE), in the Catalog pane on the far left, expand Features, expand Lockdown, and then expand UWF Application Support.

2. Right-click SCEP Support in the Catalog pane and select Add to Configuration File.

   The SCEP Support feature module adds support for these exclusions:

   • File Exclusions
     • C:\Program Files\Microsoft Security Client
     • C:\Windows\Windowsupdate.log
     • C:\Windows\Temp\Mpcmdrun.log
     • C:\ProgramData\Microsoft\Microsoft Antimalware
   • Registry Exclusions
     • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft Antimalware

   Note

   The SCEP Support feature module provides the necessary exclusions to enable SCEP to update and persist its signature file. However, SCEP will not be installed and the user must purchase licenses and install SCEP independently.

See Also

Reference

UWF AntiMalware
SCEP Support

Concepts

Service UWF-Protected Devices