Windows 10: Add or Remove Allowed Apps for Controlled Folder Access in Windows 10  

    Add or Remove Allowed Apps for Controlled Folder Access in Windows 10

    Add or Remove Allowed Apps for Controlled Folder Access in Windows 10

    How to Add or Remove Allowed Apps through Controlled Folder Access in Windows 10
    Published by Category: Security System
    27 Aug 2018
    Designer Media Ltd

    Published by


    Brink's Avatar
    Administrator

    Posts: 33,245

    Show Printable Version 


    How to Add or Remove Allowed Apps through Controlled Folder Access in Windows 10


    Starting with Windows 10 build 16232, Controlled folder access is introduced in Windows Defender Antivirus.

    When Controlled folder access is turned on, it helps you protect valuable data from malicious apps and threats, such as ransomware. It is part of Windows Defender Exploit Guard.

    You can specify if certain apps should always be considered safe and given write access to files in protected folders. Allowing apps can be useful if you're finding a particular app that you know and trust is being blocked by the Controlled folder access feature.

    By default, Windows adds apps that it considers friendly to the allowed list - apps added automatically by Windows are not recorded in the list shown in the Windows Defender Security Center app. You shouldn't need to add most apps. Only add apps if they are being blocked and you can verify their trustworthiness.

    When you add an app, you have to specify the app's location. Only the app in that location will be permitted access to the protected folders - if the app (with the same name) is located in a different location, then it will not be added to the allow list and may be blocked by Controlled folder access.

    For more details about Controlled folder access, see:

    This tutorial will show you how to add and remove if specific apps are allowed through the Controlled folder access feature of Windows Defender Exploit Guard in Windows 10.

    You must be signed in as an administrator to add or remove an allowed app through Controlled folder access.


     CONTENTS:

    • Option One: Add an Allowed App through Controlled Folder Access in Windows Defender Security Center
    • Option Two: Remove Allowed App from Controlled Folder Access in Windows Defender Security Center
    • Option Three: Add an Allowed App through Controlled Folder Access in PowerShell
    • Option Four: Remove Allowed App from Controlled Folder Access in PowerShell
    • Option Five: Configure Allowed Apps Policy for Controlled Folder Access in Local Group Policy Editor
    • Option Six: Configure Allowed Apps Policy for Controlled Folder Access in Registry Editor


    EXAMPLE: Windows Defender Exploit Guard Controlled Folder Access








    Add or Remove Allowed Apps for Controlled Folder Access in Windows 10 OPTION ONE Add or Remove Allowed Apps for Controlled Folder Access in Windows 10
    Add an Allowed App through Controlled Folder Access in Windows Defender Security Center


    The list of allowed apps is stored in the registry key below.

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\Controlled Folder Access\AllowedApplications

    1. Open the Windows Defender Security Center, and click/tap on the Virus & threat protection icon. (see screenshot below)

    Name:  Windows_Defender_Controlled_folder_access-1.jpg
Views: 1450
Size:  48.0 KB

    2. Click/tap on the Manage ransomware protection link under the Ransomware protection section. (see screenshot below)

    Name:  Windows_Defender_Controlled_folder_access-2.jpg
Views: 1436
Size:  61.6 KB

    3. Click/tap on the Allow an app through Controlled folder access link. (see screenshot below)

    Name:  Windows_Defender_Controlled_folder_access-3.jpg
Views: 1446
Size:  57.5 KB

    4. Click/tap on Yes when prompted by UAC to approve.

    5. Click/tap on Add an allowed app, and click/tap on Browse all apps (build 17704 and later). (see screenshot below)

    Starting with Windows 10 build 17704, when an app is blocked, it will appear in a recently blocked apps list. Click/tap on the plus Add an allowed app button and choose Recently blocked apps. Select any of the apps to add them to the allowed list. You can also Browse all apps from this page as well to manually add a selected app.

    Name:  Windows_Defender_Controlled_folder_access-4.jpg
Views: 1425
Size:  45.2 KB

    6. Navigate to and select the app (ex: "notepad.exe") you want to allow through Controlled folder access, and click/tap on Open. (see screenshot below)

    Name:  Windows_Defender_Controlled_folder_access-5.png
Views: 1427
Size:  54.4 KB

    7. When finished adding apps, you can close Windows Defender Security Center if you like. (see screenshot below)

    Sometimes you may need to restart the computer to apply.

    Name:  Windows_Defender_Controlled_folder_access-6.jpg
Views: 1431
Size:  41.4 KB






    Add or Remove Allowed Apps for Controlled Folder Access in Windows 10 OPTION TWO Add or Remove Allowed Apps for Controlled Folder Access in Windows 10
    Remove Allowed App from Controlled Folder Access in Windows Defender Security Center

    1. Open the Windows Defender Security Center, and click/tap on the Virus & threat protection icon. (see screenshot below)

    Name:  Windows_Defender_Controlled_folder_access-1.jpg
Views: 1450
Size:  48.0 KB

    2. Click/tap on the Manage ransomware protection link under the Ransomware protection section. (see screenshot below)

    Name:  Windows_Defender_Controlled_folder_access-2.jpg
Views: 1436
Size:  61.6 KB

    3. Click/tap on the Allow an app through Controlled folder access link. (see screenshot below)

    Name:  Windows_Defender_Controlled_folder_access-3.jpg
Views: 1446
Size:  57.5 KB

    4. Click/tap on Yes when prompted by UAC to approve.

    5. Click/tap on an added app (ex: "notepad.exe") you want to remove, and click/tap on Remove. (see screenshot below)

    Name:  Windows_Defender_Controlled_folder_access-7.jpg
Views: 1427
Size:  46.2 KB

    6. When finished removing apps, you can close Windows Defender Security Center if you like.






    Add or Remove Allowed Apps for Controlled Folder Access in Windows 10 OPTION THREE Add or Remove Allowed Apps for Controlled Folder Access in Windows 10
    Add an Allowed App through Controlled Folder Access in PowerShell

    1. Open an elevated PowerShell.

    2. Enter the command below into the elevated PowerShell, and press Enter. (see screenshot below)

    Add-MpPreference -ControlledFolderAccessAllowedApplications "Full path of app's .exe or .com file"

    Substitute Full path of app's .exe or .com file in the command above with the actual full path (ex: "C:\Windows\notepad.exe") of the app (Notepad) you want to allow through Controlled folder access.

    For example: Add-MpPreference -ControlledFolderAccessAllowedApplications "C:\Windows\notepad.exe"

    3. You can now close the elevated PowerShell if you like.

    Name:  Windows_Defender_Controlled_folder_access_allowed_app_PowerShell-1.jpg
Views: 1418
Size:  25.5 KB






    Add or Remove Allowed Apps for Controlled Folder Access in Windows 10 OPTION FOUR Add or Remove Allowed Apps for Controlled Folder Access in Windows 10
    Remove Allowed App from Controlled Folder Access in PowerShell

    1. Open an elevated PowerShell.

    2. Enter the command below into the elevated PowerShell, and press Enter. (see screenshot below)

    Remove-MpPreference -ControlledFolderAccessAllowedApplications "Full path of app's .exe or .com file"

    Substitute Full path of app's .exe or .com file in the command above with the actual full path (ex: "C:\Windows\notepad.exe") of the allowed app (Notepad) you want to remove from Controlled folder access.

    For example: Remove-MpPreference -ControlledFolderAccessAllowedApplications "C:\Windows\notepad.exe"

    3. You can now close the elevated PowerShell if you like.

    Name:  Windows_Defender_Controlled_folder_access_allowed_app_PowerShell-2.jpg
Views: 1420
Size:  26.4 KB






    Add or Remove Allowed Apps for Controlled Folder Access in Windows 10 OPTION FIVE Add or Remove Allowed Apps for Controlled Folder Access in Windows 10
    Configure Allowed Apps Policy for Controlled Folder Access in Local Group Policy Editor


    Apps you add using this option to allow through Controlled folder access cannot be removed using Option Two and Option Four.

    The Local Group Policy Editor is only available in the Windows 10 Pro, Enterprise, and Education editions.

    All editions can use Option Six below for this policy.

    1. Open the Local Group Policy Editor.

    2. In the left pane of Local Group Policy Editor, navigate to the location below. (see screenshot below)

    Computer Configuration\Administrative Templates\Windows Components\Windows Defender Antivirus\Windows Defender Exploit Guard\Controlled Folder Access

    Name:  Windows_Defender_Controlled_folder_access_allowed_app_gpedit-1.png
Views: 1421
Size:  44.9 KB

    3. In the right pane of Controlled Folder Access in Local Group Policy Editor, double click/tap on the Configure allowed applications policy to edit it. (see screenshot above)

    4. Do step 5 (default) or step 6 (configure) below for what you would like to do.


     5. To Not "Configure allowed applications" for Controlled Folder Access

    A) Select (dot) Not Configured or Disabled, click/tap on OK, and go to step 7 below. (see left screenshot below)

    Not Configured is the default setting.


     6. To "Configure allowed applications" for Controlled Folder Access

    A) Select (dot) Enabled, and click/tap on the Show button in Options. (see left screenshot below)

    B) In the Value name column, type the full path (ex: "C:\Windows\notepad.exe") of the app's .exe or .com file you want to add and allow through Controlled folder access. (see right screenshot below)

    You will need to double click/tap in the field to be able to enter the full path.

    C) In the Value column to the right of the added app, type the number 0. (see right screenshot below)

    You will need to double click/tap in the field to be able to enter the number.

    D) If you want to remove an added app, double click/tap on the Value name and Value fields for the app you want to remove, and edit them out until blank. (see right screenshot below)

    E) When finished adding and removing apps, click/tap on OK. (see right screenshot below)

    F) Click/tap on OK, and go to step 7 below. (see left screenshot below)

    Name:  Windows_Defender_Controlled_folder_access_allowed_app_gpedit-2.jpg
Views: 1422
Size:  83.8 KB Name:  Windows_Defender_Controlled_folder_access_allowed_app_gpedit-3.png
Views: 1425
Size:  26.4 KB

    7. When finished, close the Local Group Policy Editor.






    Add or Remove Allowed Apps for Controlled Folder Access in Windows 10 OPTION SIX Add or Remove Allowed Apps for Controlled Folder Access in Windows 10
    Configure Allowed Apps Policy for Controlled Folder Access in Registry Editor


    Apps you add using this option to allow through Controlled folder access cannot be removed using Option Two and Option Four.

    This option is for the same policy in Option Five.


    1. Do step 2 (default), step 3 (add apps), or step 4 (remove apps) below for what you would like to do.


     2. To Not "Configure allowed applications" for Controlled Folder Access

    This is the default setting. It will remove all apps added using this policy.

    A) Click/tap on the Download button below to download the file below.

    Undo_Configure_allowed_applications_group_policy.reg

    download

    B) Save the .reg file to your desktop.

    C) Double click/tap on the downloaded .reg file to merge it.

    D) When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.


     3. "Configure allowed applications" to Add App and Allow through Controlled Folder Access

    A) Click/tap on the Download button below to download the file below.

    This downloadable .reg file will add the registry keys for you to make it easier to set in this step.

    Configure_allowed_applications_group_policy.reg

    download

    B) Save the .reg file to your desktop.

    C) Double click/tap on the downloaded .reg file to merge it.

    D) When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.

    E) Press the Win+R keys to open Run, type regedit into Run, and click/tap on OK to open Registry Editor.

    F) Navigate to the key below in the left pane of Registry Editor. (see screenshot below)

    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Controlled Folder Access\AllowedApplications

    Name:  Windows_Defender_Controlled_folder_access_allowed_app_regedit-1.jpg
Views: 1430
Size:  55.9 KB

    G) In the right pane of the AllowedApplications key, right click on an empty space, click/tap on New, and click/tap on String Value. (see screenshot above)

    H) Type the full path (ex: "C:\Windows\notepad.exe") of the app you want to add as the name of this string value, and press Enter. (see screenshot below)

    Name:  Windows_Defender_Controlled_folder_access_allowed_app_regedit-2.jpg
Views: 1424
Size:  53.7 KB

    I) Double click/tap on this string value (ex: "C:\Windows\notepad.exe") to modify it. (see screenshot above)

    J) Type the number 0, and click/tap on OK. (see screenshot below)

    Name:  Windows_Defender_Controlled_folder_access_allowed_app_regedit-3.png
Views: 1421
Size:  16.7 KB

    K) Repeat steps 3G to 3J if you want to add anymore apps to allow through Controlled folder access.

    L) When finished adding apps, you can close Registry Editor if you like.


     4. "Configure allowed applications" to Remove Added App Allowed through Controlled Folder Access

    A) Press the Win+R keys to open Run, type regedit into Run, and click/tap on OK to open Registry Editor.

    B) Navigate to the key below in the left pane of Registry Editor. (see screenshot below)

    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Controlled Folder Access\AllowedApplications

    Name:  Windows_Defender_Controlled_folder_access_allowed_app_regedit-4.png
Views: 1420
Size:  107.2 KB

    C) In the right pane of the AllowedApplications key, right click on the string value (REG_SZ) of the app (ex: "C:\Windows\notepad.exe") you want to remove, and click/tap on Delete. (see screenshot above)

    D) Click/tap on Yes to confirm. (see screenshot below)

    Name:  Windows_Defender_Controlled_folder_access_allowed_app_regedit-5.png
Views: 1418
Size:  13.2 KB

    E) When finished removing apps, you can close Registry Editor if you like.


    That's it,
    Shawn






  1. Posts : 93
    Windows 7-pro-sp1 and windows 10-pro-1803
       26 Jul 2018 #1

    I've been trying to learn to use controlled folders. I'm annoyed that when Defender notifies that something is blocked, showing the exact path of the application they block, there's no way answer that alert and pick up the path, and I have to go through browsing for the application.
    Until this tutorial. Though having to logout and login as admin, do it, logout, logme in ... it's still a pain, but context menu sounds good. Thank you for the tutorials :)
    This section isn't too clear to me:
    [quote]You can specify if certain apps should always be considered safe and given write access to files in protected folders. Allowing apps can be useful if you're finding a particular app that you know and trust is being blocked by the Controlled folder access feature.[\quote]
    Windows has some hidden list what they protect and I added few folders.
    But what you wrote implies, I think, that if I add some .exe file it'll have a blanket permission to everything including the folders windows added. Doesn't seem safe to me.
    I may want excel or word to access Documents, but not everything in the system.
    What do you think?
      My ComputerSystem Spec

  2. Brink's Avatar
    Posts : 33,245
    64-bit Windows 10 Pro build 18262
    Thread Starter
       26 Jul 2018 #2

    Hello 91fw,

    Here's the context menu for adding apps to the allowed list to help.

    Add Allow App through Controlled Folder Access context menu Windows 10 | Windows 10 Tutorials

    That quote means that you can add an .exe file you consider to be safe to be allowed access to your protected folders. Basically, an app exception list.
      My ComputersSystem Spec


  3. Posts : 93
    Windows 7-pro-sp1 and windows 10-pro-1803
       26 Jul 2018 #3

    Please clarify "your protected folders" - Does it mean access to just the few folders I added or the entire list that is currently visible in defender's GUI?
    Another question: example - defender is blocking access of SeaMonkey (browser) to user profile\desktop. Does it mean the shortcuts on my screen? or perhaps folders or files (if any)? The blocking seems to have no effect on SeaMonkey so I change nothing. Let'm block.
      My ComputerSystem Spec

  4. Brink's Avatar
    Posts : 33,245
    64-bit Windows 10 Pro build 18262
    Thread Starter
       27 Jul 2018 #4

    Protected folders are the ones below that are included by default and any you manually add.

    Add Protected Folders to Controlled Folder Access in Windows 10 | Windows 10 Tutorials
      My ComputersSystem Spec


  5. Posts : 93
    Windows 7-pro-sp1 and windows 10-pro-1803
       27 Jul 2018 #5

    Understood. Thank you, Brink :)
      My ComputerSystem Spec

  6. Brink's Avatar
    Posts : 33,245
    64-bit Windows 10 Pro build 18262
    Thread Starter
       27 Jul 2018 #6

    You're most welcome.
      My ComputersSystem Spec

  7.    05 Aug 2018 #7

    Hi,

    1.Feature seems like a good idea - but its awfully implemented

    2.It blocks my Adobe Suite apps from functioning

    3.other apps such as winrar also seems to not function correctly

    4.My plan - to add all current application to "allowed list"

    5.I have created list with all *.exe files, but how do i BATCH add the txt/csv list of allowed applications to the Ransomware registry? which is located here:
    Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\Controlled Folder Access\AllowedApplications

    Thank you for any input!
      My ComputerSystem Spec

  8. Brink's Avatar
    Posts : 33,245
    64-bit Windows 10 Pro build 18262
    Thread Starter
       05 Aug 2018 #8

    Hello @Frosti7, and welcome to Ten Forums.

    The registry key you posted above is a protected key, and you would have to take ownership and change permissions to allow full control of it before you will be able to add apps via a .batch file.


    If you like, you might see if adding the context menu below may help to make it easier to add allowed apps as needed via Windows Security.

    Add Allow App through Controlled Folder Access context menu Windows 10 | Windows 10 Tutorials
      My ComputersSystem Spec


 

Tutorial Categories

Add or Remove Allowed Apps for Controlled Folder Access in Windows 10 Tutorial Index Network & Sharing Instalation and Upgrade Browsers and Email General Tips Gaming Customization Apps and Features Virtualization BSOD System Security User Accounts Hardware and Drivers Updates and Activation Backup and Restore Performance and Maintenance Mixed Reality Phone


Related Threads
Is anyone using Windows Defender Controlled folder access? in AntiVirus, Firewalls and System Security
I was not aware of Windows Defender's built in Ransomware protection! However the first problem I have encountered is that my games can't access the documents folder to grab the save file/game settings etc! It is a great idea but seems very...
How to Enable or Disable Windows Defender Exploit Guard Controlled Folder Access in Windows 10 Starting with Windows 10 build 16232, Controlled folder access is introduced in Windows Defender Antivirus. Controlled folder access helps you...
I have three systems in my home LAN. I would like to do all this work just once, and then replicate the settings across the other two systems. How could I accomplish this?
cannot change CONTROLLED FOLDER ACCESS option in Windows Defender in AntiVirus, Firewalls and System Security
177065
Controlled Folder Access in AntiVirus, Firewalls and System Security
I have followed all of the instructions given to enable access to 'Controlled Folder access' but for whatever reason I do not seem to have this option available to me. Can anyone throw any light on this for me please. Many thanks.

Tags for this Thread

Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 00:09.
Find Us