Windows Defender Attack Surface Reduction Exclusions Required

Indications

You may see an error message similar to this:
 
"ASR rule 'Block process creations originating from PSExec and WMI commands' is enabled and can block this tool from performing network validation if no exclusion is set"

Probable Cause

Windows Defender ATP (ASR) can sometimes prevent Right Click Tools from functioning as intended.

Resolution

Add the following items to the list of exclusions for Windows Defender ASR

  • C:\Windows\System32\schtasks.exe
  • C:\windows\System32\wbem\WmiPrvSE.exe
  • C:\Windows\System32\msiexec.exe
  • %ProgramFiles(x86)%\Recast Software\Recast Agent\recastagent.exe
  • %ProgramFiles(x86)%\Recast Software\Recast RCT\Right Click Tools Desktop.exe
Copyright © 2023 Recast Software, LLC. All rights reserved.