Windows 10: Controlled folder access is very strict!


  1. Posts : 1,524
    WinX Pro x64 IP current
       29 Nov 2017 #1

    Controlled folder access is very strict!


    So, I recently clean installed Fall Creators Update, then enabled WinX IP Fast ring to get back on build 17046.

    When going through all of the settings in Settings, I finally got to Update and Security and then opened Windows Defender Security Center. In tooling around, I went to Virus & threat protection settings and saw that, by default, a setting called Controlled folder access is disabled. After reading up on it, I decide to give it a try, and enabled it.

    Click image for larger version. 

Name:	WinX Defender Advanced settings Controlled folder access.PNG 
Views:	23 
Size:	6.0 KB 
ID:	166133

    First thing to note - every time I installed a browser (or, most any other application that saves its icon to the common desktop) I got a warning about it from the system. OK, no big deal, as I usually remove most of my application desktop icons anyway, so, that was a check in the win column for me. If I really wanted to allow the application to save its desktop icon, there is a method to allow exceptions on a per-application basis (all or nothing, unfortunately).

    Then something really, really odd happened. I went to make a screenshot to use at another forum, using standard Snipping tool and trying to save it to my normal Pictures folder.

    Defender blocked it. Seriously.

    Click image for larger version. 

Name:	WinX Defender Advanced settings Controlled folder access 2.PNG 
Views:	23 
Size:	58.5 KB 
ID:	166134

    That is one strict setting. But I think that, overall, I like its operation.

    YMMV - be sure to do some reading on this feature before just running willy nilly to Defender and enabling it
      My ComputersSystem Spec


  2. Posts : 7,474
    Windows 10 Pro x64 Build 1709
       29 Nov 2017 #2

    and this tutorial and subsequent posts are one place to start.

    Change Windows Defender Controlled Folder Access Settings - Windows 10
      My ComputerSystem Spec


  3. Posts : 1,524
    WinX Pro x64 IP current
    Thread Starter
       30 Nov 2017 #3

    Should have known (and searched) for that - thanks
      My ComputersSystem Spec


  4. Posts : 20,269
    Win10 Pro, Win10 Pro N, Win10 Home, Win10 Pro Insider Fast Ring, Windows 8.1 Pro, Ubuntu
       30 Nov 2017 #4

    One word of warning John, It just happened to me:
    If you have folders on other hard disks in your system, like I do(see my system specs), and you hve them protected by controlled access, and did not turn them off, then do a clean install, you will have permission problems, and need to take permission of all the other disks, manually. I tried using the "Take Ownership" from Shawn, but it wasn't enough. I need to go down to many... many subfolders(example music) and add my Microsoft account to the permission list.
    But this is only if you have no choice other than clean installing, because Windows will not boot, and you cannot repair the boot loader.
      My ComputersSystem Spec


  5. Posts : 1,524
    WinX Pro x64 IP current
    Thread Starter
       30 Nov 2017 #5

    I read that in the tutorial, probably while you were posting this here.

    Interestingly enough, since I user multiple HDDs myself, I was immediately reminded that I have had this issue occur numerous times before this feature was available in Defender. Sometimes a clean install had 0 issues with reassigning a folder on another drive as the default location for one of the football folders, and someone's it balls and I have to take ownership of said folder (which I usually just take ownership of the entire drive, instead).

    This had been happening since back on the days of Windows 7, so obviously not directly related to this new Defender feature, but regardless, your warning is duly noted.
      My ComputersSystem Spec


  6. Posts : 20,269
    Win10 Pro, Win10 Pro N, Win10 Home, Win10 Pro Insider Fast Ring, Windows 8.1 Pro, Ubuntu
       30 Nov 2017 #6

    johngalt said: View Post
    I read that in the tutorial, probably while you were posting this here.

    Interestingly enough, since I user multiple HDDs myself, I was immediately reminded that I have had this issue occur numerous times before this feature was available in Defender. Sometimes a clean install had 0 issues with reassigning a folder on another drive as the default location for one of the football folders, and someone's it balls and I have to take ownership of said folder (which I usually just take ownership of the entire drive, instead).

    This had been happening since back on the days of Windows 7, so obviously not directly related to this new Defender feature, but regardless, your warning is duly noted.
    I have a post at the end of the thread somewhere, that explains more of what happened, but if you already of knowledge about this, you're way ahead of where I was. It sucked
      My ComputersSystem Spec


  7. Posts : 1,524
    WinX Pro x64 IP current
    Thread Starter
       30 Nov 2017 #7

    It was from 3 days ago, next to last post in tutorial thread.

    But, yeah, using multiple drives is a great idea, until that very first time when something gives you a permission error and you try to fix it, and end up taking ownership of the entire drive.

    Every clean install after that negates your old ownership as the SID changes, and though WinX will tell you the exact SID that had ownership of the item(s) in question, unless you make a custom install .ISO and force it yourself (if that can even be done), you'll end up with needing to take ownership again. And again. And yet again.

    Fortunately, even on large capacity drives, it doesn't take too long for me, maybe ~20 for all drives (2x 1TB + 1x 1.5TB).
      My ComputersSystem Spec


 

Related Threads
Controlled folder access problems in AntiVirus, Firewalls and System Security
I turned on controlled folder access in latest Windows 10 and tested with a few programs I use. I tested by adding Libreoffice calc (c:\program files\libreoffice5\scalc.exe) as an allowed app. However, with controlled folder access on I can't save...
Controlled folder Access question in AntiVirus, Firewalls and System Security
I decided to try this new feature in 1709. So I am busily adding .exe to my whitelist. But I have a question. I have a 3rd party music programme I use for ripping CD's, playing songs and the like. From time to time it prompts me to update to...
Odd Defender 'Controlled Folder Access' alert in AntiVirus, Firewalls and System Security
Fall Creators Update 1709 introduced a new 'Controlled Folder Access' function in Defender. This is off by default, but I have turned it on to test it. I've had to allow a couple of apps access (VLC was one) but other than that it seem unobtrusive....
Controlled Folder Access in AntiVirus, Firewalls and System Security
I have followed all of the instructions given to enable access to 'Controlled Folder access' but for whatever reason I do not seem to have this option available to me. Can anyone throw any light on this for me please. Many thanks.
Solved Controlled folder access is greyed out in AntiVirus, Firewalls and System Security
In the new Fall update there is a controlled folder access option. Which I would much like to use. I think it is meant to be on by default, for at least basic protection.. Mine is both off and greyed out so that I can not turn it on. I've read a...
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 12:01.
Find Us