When using Docker on Windows Server 2022 or 2025 you may encounter this error:

2f526230bc2b: Download complete
docker: failed to register layer: re-exec error: exit status 1: output: hcsshim::ProcessBaseLayer \\?\C:\ProgramData\docker\windowsfilter\...: Access is denied.

This is most often caused by conflict with local A/V software. To address this, try disabling Controlled Folder Access in Windows Defender. In addition, you can add Docker exclusions:

Set-MpPreference -EnableControlledFolderAccess Disabled

Set-MpPreference -ExclusionProcess "C:\Program Files\Docker\Docker\resources\dockerd.exe"
Set-MpPreference -ExclusionProcess "C:\Program Files\Docker\Docker\resources\docker.exe"
Set-MpPreference -ExclusionPath    "C:\ProgramData\Docker"