In the Microsoft Intune admin center, choose Endpoint security $>$ Antivirus $>+$ Create Policy.

Select a platform $($such as Windows $10,$ Windows $11,$ and Windows Server$).$

For Profile, select Microsoft Defender Antivirus exclusions, and then choose Create.

On the Create profile step, specify a name and description for the profile, and then choose Next.

On the Configuration settings tab, specify your antivirus exclusions, and then choose Next.

Excluded Extensions are exclusions that you define by file type extension. These extensions apply to any file name that has the defined extension without the file path or folder. Separate each file type in the list with a $|$ character. For example, lib$|$obj$.$ For more information, see ExcludedExtensions.

Excluded Paths are exclusions that you define by their location $($path$).$ These types of exclusions are also known as file and folder exclusions. Separate each path in the list with a $|$ character. For example, C:$\backslash$Example$|$C:$\backslash$Example$1.$ For more information, see ExcludedPaths.

Excluded Processes are exclusions for files that are opened by certain processes. Separate each file type in the list with a $|$ character. For example, C:$\backslash$Example$.$ exe$|$C:$\backslash$Example$1.$exe. These exclusions aren't for the actual processes. To exclude processes, you can use file and folder exclusions. For more information, see ExcludedProcesses.

On the Scope tags tab, if you're using scope tags in your organization, specify scope tags for the policy you're creating. $($See Scope tags.$)$

On the Assignments tab, specify the users and groups to whom your policy should be applied, and then choose Next. $($If you need help with assignments, see Assign user and device profiles in Microsoft Intune.$)$

On the Review $+$ create tab, review the settings, and then choose Create.