On Windows Server 2016 or later, you should not need to define the following exclusions:
Operating system files
Server roles and any files that are added through server roles
Because Microsoft Defender Antivirus is built in, it does not require exclusions for operating system files on Windows Server 2016 or later. In addition, when you run Windows Server 2016 or later and install a role, Microsoft Defender Antivirus includes automatic
exclusions for the server role and any files that are added while installing the role.
Operating system exclusions and server role exclusions do not appear in the standard exclusion lists that are shown in the Windows Security app.
Regards,
Rachel Gomez