How-To Geek - Protect Your Files From Ransomware  

Bree said:

I 'played with it' from the moment it was first included in version 1803. I leave Controlled Folder Access turned on for all my machines find it completely unobtrusive.

The trick is to allow your preferred apps access. Many (such as MS Office) will automatically be allowed access, but some (mainly 3rd-party apps) will not. While the protection side of the ransomware protection has changed little since 1803, in the beginning it was almost impossible to determine what had been blocked. You had to go into event viewer just to find the path and name of any blocked executable that needed to be granted access.

With each new version since then the reporting of which apps to grant access has improved. Now in 1903/1909 you just need to open Windows Security's ransomware protection, click on 'Add an allowed app' and pick from a list of recently blocked apps.

I have about half a dozen apps in my 'allowed' list now, and I can't remember the last time I was blocked from doing anything. Once your apps are on the 'allowed' list you won't notice the protection in action.

Add or Remove Allowed Apps for Controlled Folder Access in Windows 10

Thanks again, Bree.

I tried creating a test in Word, and it wasn't allowed. I may have done something wrong in setting it up, so I'll go back and revisit with it on Build 19551.

Tomorrow, though. I'm about done in for tonight. Then again, when I wake up in the middle of the night . . . again . . . I may try working with it.

I really do like the idea of being able to "cordon off" my data files.

I've not used Microsoft's implementation of Ransomware protection, as I have used Bitdefender's Pro setup for a number of years, ( from when the Ransomware explosion happened a few years ago).

I can recall almost switching it off in the initial stages, the odd layout of my data storage meant that It took awhile for the system to setup what was protected, what was allowed access, and who was allowed access. which was a right royal PITA at times

I have to say that when I read this post I had to check that I still had it switched on, I had not had a "peep" from it for a long time, but it was there in the background doing it's job.

Ransomware, Although not as high in the public consciousness as it was, it is still out there, so needs thinking of when we set up our system protection.

It's a pain, but a lesser one than losing access to your "stuff", we keep lives on our computers these days, best to look after them

Barman58 said:

I've not used Microsoft's implementation of Ransomware protection, as I have used Bitdefender's Pro setup for a number of years, ( from when the Ransomware explosion happened a few years ago).

I can recall almost switching it off in the initial stages, the odd layout of my data storage meant that It took awhile for the system to setup what was protected, what was allowed access, and who was allowed access. which was a right royal PITA at times

I have to say that when I read this post I had to check that I still had it switched on, I had not had a "peep" from it for a long time, but it was there in the background doing it's job.

Ransomware, Although not as high in the public consciousness as it was, it is still out there, so needs thinking of when we set up our system protection.

It's a pain, but a lesser one than losing access to your "stuff", we keep lives on our computers these days, best to look after them

Oh, boy, Nigel! I think what I've done (it's back on with advice from Bree) is adequate to separate my data files from the rest of the computer.

I can easily restore with a backup, but if things get really tough, my setup is simple enough, and I have all my product keys listed in a safe place, so it wouldn't be impossible to have things going again within a day or so.

Wynona said:

Thanks again, Bree.

I tried creating a test in Word, and it wasn't allowed. I may have done something wrong in setting it up, so I'll go back and revisit with it on Build 19551.

Tomorrow, though. I'm about done in for tonight. Then again, when I wake up in the middle of the night . . . again . . . I may try working with it.

I really do like the idea of being able to "cordon off" my data files.

OK, I have Controlled Folder Access turned back on, and following your advice, I checked what had been denied access.

I had indeed been denied access to WinWord and two other files, so I gave access and all is well. I'm sure I'll have to fix a few new "issues" going forward, but I can work with that.

I think we can lay my inadequacy to rest now.

I will go through this thread and pick out the nuggets for safe keeping.

Thanks again, everyone, for your help. It's much appreciated.

The writers of ransomware,

are not trying to read your data, it's not important enough to them, to bother getting it

Are not interested in deleting your data they're not spiteful four year olds breaking a siblings toys.

They are interested in your money, and they assume, (often correctly), that the data will be important enough to the owner to induce them to pay

backups made often and stored offline will help, but if you've just taken a never to be repeated picture a few hours after your last backup and moved it to your PC - ransomware attacks can happen at any time and even Microsoft's solution will work for most attacks so why not use it as an additional layer of security ?

Barman58 said:

The writers of ransomware,

are not trying to read your data, it's not important enough to them, to bother getting it

Are not interested in deleting your data they're not spiteful four year olds breaking a siblings toys.

They are interested in your money, and they assume, (often correctly), that the data will be important enough to the owner to induce them to pay

backups made often and stored offline will help, but if you've just taken a never to be repeated picture a few hours after your last backup and moved it to your PC - ransomware attacks can happen at any time and even Microsoft's solution will work for most attacks so why not use it as an additional layer of security ?

My sentiments exactly, Nigel! Thanks.