Allow or Deny Apps Access to File System in Windows 10

TairikuOkami · 22 Dec 2019

There is a typo in Option Two's Note. It should be HKLM not HKCU. Reg file is OK. Thanks btw.

Brink · 22 Dec 2019

TairikuOkami said:

There is a typo in Option Two's Note. It should be HKLM not HKCU. Reg file is OK. Thanks btw.

Thank you. Now corrected.

EmilDK · 06 Dec 2020

First of all, sorry for necroing this old thread

I made another thread, with questions regarding the topic, and this thread shed light on some of it
Regarding Windows 10 file system access and privacy

“which UWP apps can access your full file system”
“Particular UWP apps will be granted permission to have broad file system access”
1)
Is it access to the whole drive? And all my personal files?

"If a UWP app has the broad file system access restricted capability, you will receive a consent dialog prompting you to accept or deny the request"
“and if it’s on you can also turn it on or off for each app that has requested the capability”
2)
Apps that have requested the capability (both declined and granted), do they appear in the list Choose which apps can access your file system?

“On this page, you can turn access on or off globally”
3)
What does globally here mean?
That they get granted access automatically, or they still have to ask for permission?

4)
In my Documents, Pictures and Videos menu, there are Apps on the list, which have access to each of these. The list in File system (Choose which apps can access your file system) is empty, does that mean, that no apps have access to my file system?

5)
Where can I see, which apps previously have been granted access to my file system?

6)
Is it possible to see, if deleted apps were granted access to my file system?

Thank you in advance for replying

Brink · 06 Dec 2020

Hello @EmilDK, and welcome to Ten Forums.

You will be able to see of these settings on the Settings > Privacy > File system page like in option 1.

File system access is granted based on user rights and permissions by default in Windows. An app's permissions are based on the current user running the app, and if the user used "Run as administrator" or not.

These settings are a way to also allow or deny specific UWP apps access. However, this will only apply to any UWP app listed under the Choose which apps can access your file system section.

EmilDK · 06 Dec 2020

Dear Brink

Thank you for your fast reply

I am not quite sure, how to place your reply accordingly to my quetions 1-6

Would you kindly try to answer them more specifically?

Thank you!

Brink · 06 Dec 2020

EmilDK said:

Dear Brink

Thank you for your fast reply

I am not quite sure, how to place your reply accordingly to my quetions 1-6

Would you kindly try to answer them more specifically?

Thank you!

No problem.

Q1,2,4) This is to turn on or off allowing UWP apps access file in the folders (ex: Documents, Music, Pictures, etc...) in your C:\Users\<username> user profile folder.

All apps will have access to them by default. Only apps listed under the Choose which apps can access your file system section will be affected by these settings.

Q3) Globally is for option 1 or 2 to turn off access for all apps under Choose which apps can access your file system for all users on the computer.

Q5,6) Only the apps listed under the Choose which apps can access your file system section are affected by these settings. Nothing else.

EmilDK · 09 Dec 2020

Dear Brink

Thank you for your reply!

I have more questions, which I really hope you will help me with

"This is to turn on or off allowing UWP apps access file in the folders (ex: Documents, Music, Pictures, etc...) in your C:\Users\<username> user profile folder."
1)
Is it all the folders in the user profile folder?
Including Desktop folder?
Or can you mention the specific folders?

In my Documents, Pictures and Videos menu, there are Apps on the list, which have access to each of these. The list in File system (Choose which apps can access your file system) is empty.
"All apps will have access to them by default. Only apps listed under the Choose which apps can access your file system section will be affected by these settings."
2)
Does that mean, that no apps have access to my file system? (YES?)

"Only the apps listed under the Choose which apps can access your file system section are affected by these settings. Nothing else."
3)
So this also includes all apps that has asked for permission but not been granted it?
And what about apps that has been deleted from the PC?

Looking forward to your reply

Best regards

Brink · 09 Dec 2020

@EmilDK,

Q1) It's for all folders in your C:\Users\<username> user profile folder. There's currently not an option to specify folders though.

Q2,3) It means no UWP app listed under Choose which apps can access your file system will have access to your files in your C:\Users\<username> user profile folder.

Q3) If an app has been uninstalled, then it will no longer apply to it.

EmilDK · 11 Dec 2020

Thank you for your replies

I took the liberty, to create a thread in another forum aswell:
https://techcommunity.microsoft.com/...cy/m-p/1959338

Access file system is actually not only the user folder, but the WHOLE drive and everything that the user can access.

This link broadens the explanation:
https://docs.microsoft.com/en-us/win...ss-permissions
Capabilities for accessing other locations > broadFileSystemAccess

But as other points out (in the thread link), "downloads, desktop, OneDrive, etc." is a quite vague explanation

Allow or Deny Apps Access to File System in Windows 10

Allow or Deny Apps Access to File System in Windows 10

Allow or Deny Apps Access to File System for All Users in Settings

Allow or Deny Apps Access to File System for All Users using a REG file

Turn On or Off Allow Apps Access to Your File System in Settings

Turn On or Off Allow Apps Access to Your File System using a REG file

Turn On or Off Allow Specific Apps Access to Your File System in Settings