When the users have had the ability to set exclusions locally on the SEPM client and the the policy in the SEPM is adjusted to control the exclusions locally on the SEPM there should also be the ability when enforcing this to wipe or disable any user based exceptions done locally on the SEP client on that machine. So that only the exclusions defined on the SEPM policy are enforced.
↧