How to Enable or Disable Controlled Folder Access in Windows 10  

Page 4 of 4 FirstFirst ... 234

  1. Posts : 68,543
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       #30

    Chrysalis said:
    How do I test this? I tried to alter files with notepad2 and its allowed, I am guessing defender is auto allowing it as a trusted application.
    Hello,

    You can check below to see if Notepad2 is listed as an allowed app for Controlled Folder Access.

    Add or Remove Allowed Apps for Controlled Folder Access in Windows 10

    In addition, the folder the file is in will need to be listed (added) as a protected folder below for Controlled Folder Access.

    Add Protected Folders to Controlled Folder Access in Windows 10
      My Computers


  2. Posts : 281
    Win 10 21H2 LTSC
       #31

    Hi Brink.

    No apps were added, according to Microsoft documention various apps are automatically allowed.

    So what I did was added my entire user profile folder to see if I could wake this feature up and I finally did.

    Vivaldi, Powershell, Dumeter all triggering notifications.

    Disappointed to find out there is an internal whitelist of apps, as of course that is an attack vector to be exploited at a future date.

    But now more bad news.

    I whitelisted vivaldi, I then also changed it to audit mode, and started monitoring the logs.

    It then proceeded to do the following.

    It initially reported "would have been blocked" so audit mode, but now is reporting "has been blocked" even though it is in audit mode, and is also now reporting vivaldi is blocked when it is whitelisted. If I switch back to block mode the vivaldi prompts stop, so it looks like Audit mode is a buggy mess sadly.

    A potentially awesome feature but on LTSC 1809 not in a great state.

    Now the audit mode does disable the whitelisted application list in the security applet, so the whitelist not working "might" be by design, but it is reporting blocks when in audit mode is a cause for concern.
      My Computer


  3. Posts : 68,543
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       #32

    Looks like some more works needs to be done for it.
      My Computers


  4. Posts : 14
    Windows 10 Pro
       #33

    Has anyone discovered the actual path and name of the program for "Manage ransomeware protection", other than starting at the link in the "Virus & threat protection" settings menu? Or a link/shortcut to the "Allow an app" menu? I am NOT looking for a way to turn the entire protection on or off, just a way to build a shortcut to let me see what SPECIFIC apps got recently blocked and unblock it (them), as needed, without all the menu traversals.
      My Computer


  5. RBT
    Posts : 53
    Windows 10 Home
       #34

    Thanks for the Tutorial:
    I tried this and got an error (shown below). I surmise since I'm running Norton 360 and it takes this over. As of yet I haven't found a way to disable this in Norton.
    https://answers.microsoft.com/en-us/...4-8fdec2c99f01

    I want to leave this Enabled most of the time, and only disable when need to rename several folders. I get this message on each rename->folder access denied -You'll need to provide administrator permission to rename this folder.

    Powershell (with admin), error shown below.
    [-
    PS C:\Windows\system32> Set-MpPreference -EnableControlledFolderAccess Disabled
    Set-MpPreference : Operation failed with the following error: 0x800106ba. Operation: Set-MpPreference. Target:
    EnableControlledFolderAccess.
    At line:1 char:1
    + Set-MpPreference -EnableControlledFolderAccess Disabled
    + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo : NotSpecified: (MSFT_MpPreference:root\Microsoft\...FT_MpPreference) [Set-MpPreference],
    CimException
    + FullyQualifiedErrorId : HRESULT 0x800106ba,Set-MpPreference
    -]
      My Computer


  6. Posts : 68,543
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       #35

    RBT said:
    Thanks for the Tutorial:
    I tried this and got an error (shown below). I surmise since I'm running Norton 360 and it takes this over. As of yet I haven't found a way to disable this in Norton.
    https://answers.microsoft.com/en-us/...4-8fdec2c99f01

    I want to leave this Enabled most of the time, and only disable when need to rename several folders. I get this message on each rename->folder access denied -You'll need to provide administrator permission to rename this folder.

    Powershell (with admin), error shown below.
    [-
    PS C:\Windows\system32> Set-MpPreference -EnableControlledFolderAccess Disabled
    Set-MpPreference : Operation failed with the following error: 0x800106ba. Operation: Set-MpPreference. Target:
    EnableControlledFolderAccess.
    At line:1 char:1
    + Set-MpPreference -EnableControlledFolderAccess Disabled
    + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo : NotSpecified: (MSFT_MpPreference:root\Microsoft\...FT_MpPreference) [Set-MpPreference],
    CimException
    + FullyQualifiedErrorId : HRESULT 0x800106ba,Set-MpPreference
    -]
    Hello RBT,

    Do you have option one available in Windows Security?

    If not, turn on Periodic scanning below to see if you may afterwards.

    Turn On or Off Microsoft Defender Periodic Scanning in Windows 10
      My Computers


  7. RBT
    Posts : 53
    Windows 10 Home
       #36

    Brink said:
    Hello RBT,
    Do you have option one available in Windows Security?
    If not, turn on Periodic scanning below to see if you may afterwards.
    Turn On or Off Microsoft Defender Periodic Scanning in Windows 10
    Thanks for that tip. After reading this I did that and it worked. I got a Norton Popup afterwards saying->(Windows Defender is turned on with limited Periodic scanning enabled which may interfere with Norton protection.<-).
    But if I have a lot of renaming I can use your tip and then just set it back afterwards.
      My Computer


  8. Posts : 68,543
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       #37

    RBT said:
    Thanks for that tip. After reading this I did that and it worked. I got a Norton Popup afterwards saying->(Windows Defender is turned on with limited Periodic scanning enabled which may interfere with Norton protection.<-).
    But if I have a lot of renaming I can use your tip and then just set it back afterwards.
      My Computers


 

Tutorial Categories

How to Enable or Disable Controlled Folder Access in Windows 10 Tutorial Index Network & Sharing Instalation and Upgrade Browsers and Email General Tips Gaming Customization Apps and Features Virtualization BSOD System Security User Accounts Hardware and Drivers Updates and Activation Backup and Restore Performance and Maintenance Mixed Reality Phone


  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 04:30.
Find Us




Windows 10 Forums