Global Exceptions are all users that need to be excluded from any software suppression, no matter if you configure a blacklist or a whitelist. If you configure a whitelist, it is essential that you register all accounts of service users in this list. A service user account, for example, is used by software deployment or other management services. If the whitelist stops service processes of you management systems, you cannot use them properly.
Using a whitelist allows all components of the operating systems and all products that have been registered with a whitelist record. Everything else will be blocked, including all your management software. So – please make sure that all your service user accounts are in this list to make sure that they can start the services.