Press CTRL+K to open search

Exploit Guard Protection for Windows Servers

  • Published on Sep 8, 2026
  • 1 minute(s) read
Prev Next

Exploit Guard Protection also supports Windows server operating systems 2008, 2012, and 2016. By default, Exploit Guard support for Windows servers is disabled, even if the Exploit Guard policy is enabled for other host endpoints. Exploit Guard automatically determines whether a host endpoint is a server and disables Exploit Guard for those endpoints.  

In release 4.5 or later, you can enable and disable Exploit Guard processing for server operating systems using the Trellix Endpoint Security (HX) Web UI or API. See Enabling and Disabling Exploit Guard for more information. You cannot enable it with the CLI.

:
Related articles
  • Understanding Exploit Guard Protection
    Endpoint Security Agent (HX) > Endpoint Security Agent (HX) 35 Administrator Guide > Agent Configuration > Exploit Guard Protection overview
  • Exploit guard protection
    Endpoint Security Agent (HX) > Endpoint Security Agent (HX) 35 Administrator Guide > Overview > About Trellix Endpoint Security (HX) xAgents
  • Exploit guard protection
    Endpoint Security Agent (HX) > Endpoint Security Agent (HX) 36 Administrator Guide > Overview > About Trellix Endpoint Security (HX) xAgents