Add Protected Folders to Controlled Folder Access in Windows 10  

Caledon Ken said:

Hi Brink.

Was on this thread. Member reported you needed to reboot to make changes and mentioned that sub processes may be doing the saving. Might be worth checking on reboot comment and adding mention of sub process in a "Tip"

Controlled folder access problems

Ken

I'll do some more testing for that, but you shouldn't need to restart to apply if adding the exclusion via the Windows Defender Security Center UI.

EDIT:

I've noticed that if the app is currently running when added as an allowed app, you may need to close and reopen that app to actually apply.

Thanks Brink. Any tips that will make it easier to use will help.

Ken

Brink said:

That would be a very good possibility if the 3rd party AV disabled Windows Defender.

If it has a "This setting is managed by your administrator" message above this setting, then a group policy has been configured for it instead.

Computer configuration > Administrative templates > Windows components > Windows Defender Antivirus > Windows Defender Exploit Guard > Controlled folder access

The user did not report that- but has Bitdefender installed. Merely that the button was greyed out. I haven't asked him to try disabling or uninstalling Bitdefender (his comments suggest that would not be acceptable long term).
Controlled folder access is greyed out Solved - Windows 10 Forums

If it is true that having a 3rd party AV results in the button being greyed out with no explanation, this is going to give rise to questions. Would seem worth adding to the tutorial that it's a prerequisite that Defender real time scanning be enabled and not disabled by a 3rd party AV being used- which is a very common scenario.

Agreed, if confirmed.

Well this sounds like a lawsuit in the making. If you can only use MS's product (Defender Real Time) to get the protection then all AV makers will join lawsuit on the grounds of predatory behaviour... the EU in particular. Should be interesting to watch.

Mm, if you're right, could go -er- viral. (Are bad puns allowed after tutorials?).

I've asked the OP if he can check it, but probably means uninstalling Bitdefender.

Hmmm.....subscribing to this thread....

Have had problems to allow Screenpresso to access its default folder under /pictures...

Found what was the culprit of Screenpresso couldn't access protected folders.. You have to permit screnpressoCodec.dll too. Working (saving files) without issue and without restart.

I decided to take the time and thoroughly set it up today.
Had to look for any programs that write to the default folders/libraries, and also added my OneDrive SSD and my Macrium Reflect HDD.

After setting it up, I Exported these two keys:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\Controlled Folder Access\AllowedApplications

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\Controlled Folder Access\ProtectedFolders

Then put them in a folder and put a copy on in Documents on my system and a copy on OneDrive.

Then made a system image, so I won't need to do it again.

By the way I added vmconnect, because I also put my VM's SSD as controlled access.

Here is what I allowed so far:

Hey Cliff, :)

Just to note that you'll need to take ownership of those registry keys before you'll be able to merge the .reg files to restore them.