Page 1 of 5 123 ... LastLast
    Change Windows Defender Controlled Folder Access Settings - Windows 10

    Change Windows Defender Controlled Folder Access Settings - Windows 10

    How to Change Windows Defender Controlled Folder Access Settings in Windows 10
    Published by Category: Security System
    05 Nov 2017
    Designer Media Ltd

    Published by


    Brink's Avatar
    Administrator

    Posts: 25,290

    Show Printable Version 


    How to Change Windows Defender Controlled Folder Access Settings in Windows 10

    information   Information
    Starting with Windows 10 build 16232, Controlled folder access is introduced in Windows Defender Antivirus.

    Controlled folder access makes it easier for you to protect valuable data from malicious apps and threats, such as ransomware.

    Controlled folder access monitors the changes that apps make to files in certain protected folders. If an app attempts to make a change to these files, and the app is blacklisted by the feature, you’ll get a notification about the attempt. You can complement the protected folders with additional locations, and add the apps that you want to allow access to those folders.

    Allowing apps can be useful if you’re finding a particular app that you know and trust is being blocked by the Controlled folder access feature.

    You can add additional folders to the list of protected folders, but you cannot alter the default list, which includes folders such as Documents, Pictures, Movies, and Desktop. Adding other folders to Controlled folder access can be handy, for example, if you don’t store files in the default Windows libraries or you’ve changed the location of the libraries away from the defaults.

    This tutorial will show you how to change Windows Defender Controlled folder access settings to protect your files and folders from unauthorized changes by unfriendly applications in Windows 10.

    You must be signed in as an administrator to change Controlled folder access settings.


    CONTENTS:
    • Option One: To Turn On or Off Windows Defender Controlled Folder Access
    • Option Two: To Add or Remove Protected Folders for Windows Defender Controlled Folder Access
    • Option Three: To Add or Remove Allowed Apps through Windows Defender Controlled Folder Access





    Change Windows Defender Controlled Folder Access Settings - Windows 10 OPTION ONE Change Windows Defender Controlled Folder Access Settings - Windows 10
    To Turn On or Off Windows Defender Controlled Folder Access

    Note   Note
    Turning on or off Controlled folder access will modify the DWORD value in the registry key below.

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Exploit Guard\Controlled Folder Access

    EnableControlledFolderAccess DWORD

    0 = Off
    1 = On


    1. Open the Windows Defender Security Center, and click/tap on the Virus & threat protection icon. (see screenshot below)

    Name:  Windows_Defender_Controlled_folder_access-1.jpg
Views: 3294
Size:  43.7 KB

    2. Click/tap on the Virus & threat protection settings link. (see screenshot below)

    Name:  Windows_Defender_Controlled_folder_access-2.png
Views: 3273
Size:  29.1 KB

    3. Turn On or Off (default) Controlled folder access for what you want. (see screenshot below)

    Name:  Windows_Defender_Controlled_folder_access-3.png
Views: 3286
Size:  39.5 KB

    4. Click/tap on Yes when prompted by UAC to approve.

    5. When finished, you can close Windows Defender Security Center if you like.






    Change Windows Defender Controlled Folder Access Settings - Windows 10 OPTION TWO Change Windows Defender Controlled Folder Access Settings - Windows 10
    To Add or Remove Protected Folders for Windows Defender Controlled Folder Access

    Note   Note
    The list of added protected folders is stored in the registry key below.

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Exploit Guard\Controlled Folder Access\GuardedFolders


    1. Open the Windows Defender Security Center, and click/tap on the Virus & threat protection icon. (see screenshot below)

    Name:  Windows_Defender_Controlled_folder_access-1.jpg
Views: 3294
Size:  43.7 KB

    2. Click/tap on the Virus & threat protection settings link. (see screenshot below)

    Name:  Windows_Defender_Controlled_folder_access-2.png
Views: 3273
Size:  29.1 KB

    3. Click/tap on the Protected folders link under Controlled folder access. (see screenshot below)

    Name:  Windows_Defender_Controlled_folder_access_Protected_Folders.png
Views: 3275
Size:  38.7 KB

    4. Do step 5 (add) or step 6 (remove) below for what you would like to do.


     5. To Add a Protected Folder

    A) Click/tap on the Add a protected folder + button. (see screenshot below)

    Name:  Add_protected_folder-1.png
Views: 3258
Size:  21.5 KB

    B) Navigate to and select the folder (ex: "Documents") you want to add, click/tap on Select Folder, and go to step 7 below. (see screenshot below)
    Note   Note
    You can also select network shares and mapped drives.


    Name:  Add_protected_folder-2.png
Views: 3266
Size:  49.7 KB


     6. To Remove a Protected Folder

    Note   Note
    You will not be able to remove the default folders.

    A) Click/tap on a listed folder (ex: "Documents") you want to remove, click/tap on the Remove button, and go to step 7 below. (see screenshot below)

    Name:  Remove_protected_folder.png
Views: 3274
Size:  27.7 KB


    7. Click/tap on Yes when prompted by UAC to approve.

    8. When finished, you can close Windows Defender Security Center if you like.






    Change Windows Defender Controlled Folder Access Settings - Windows 10 OPTION THREE Change Windows Defender Controlled Folder Access Settings - Windows 10
    To Add or Remove Allowed Apps through Windows Defender Controlled Folder Access

    Note   Note
    The list of allowed apps is stored in the registry key below.

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Exploit Guard\Controlled Folder Access\AllowedApplications


    1. Open the Windows Defender Security Center, and click/tap on the Virus & threat protection icon. (see screenshot below)

    Name:  Windows_Defender_Controlled_folder_access-1.jpg
Views: 3294
Size:  43.7 KB

    2. Click/tap on the Virus & threat protection settings link. (see screenshot below)

    Name:  Windows_Defender_Controlled_folder_access-2.png
Views: 3273
Size:  29.1 KB

    3. Click/tap on the Allow an app through Controlled folder access link under Controlled folder access. (see screenshot below)

    Name:  Allow_app_through_Controlled_folder_access-1.png
Views: 3271
Size:  38.7 KB

    4. Do step 5 (add) or step 6 (remove) below for what you would like to do.


     5. To Add an Allowed App

    A) Click/tap on the Add an allowed app + button. (see screenshot below)

    Name:  Allow_app_through_Controlled_folder_access-2.png
Views: 3255
Size:  30.2 KB

    B) Navigate to and select the app (ex: "notepad.exe") you want to allow, click/tap on Open, and go to step 7 below. (see screenshot below)

    Name:  Allow_app_through_Controlled_folder_access-3.jpg
Views: 3275
Size:  96.3 KB


     6. To Remove an Allowed App

    A) Click/tap on the listed app (ex: "notepad.exe") you want to remove, click/tap on the Remove button, and go to step 7 below. (see screenshot below)

    Name:  Remove_Allowed_app_through_Controlled_folder_access.png
Views: 3294
Size:  37.9 KB


    7. Click/tap on Yes when prompted by UAC to approve.

    8. When finished, you can close Windows Defender Security Center if you like.



    That's it,
    Shawn


  1.    4 Weeks Ago #1
    Join Date : Feb 2015
    Bamberg Germany
    Posts : 17,709
    Win10 Pro, Win10 Pro N, Win10 Home, Win10 Pro Insider Fast Ring, Windows 8.1 Pro, Ubuntu

    Tried it for about 15 minutes then turned it off again

    It was blocking OneDrive & File Explorer from making changes, and if I need to white list Microsoft's own built in software, to me anyhow, disaster is preprogrammed

    Oh, and it even blocked me from restoring something from the recycle bin!
      My ComputersSystem Spec
  2.    4 Weeks Ago #2
    Join Date : Oct 2013
    Posts : 25,290
    64-bit Windows 10 Pro build 17046
    Thread Starter

    Yep, it'll literally block everything for a protected folder until allowed.
      My ComputersSystem Spec
  3.    4 Weeks Ago #3
    Join Date : Feb 2015
    Bamberg Germany
    Posts : 17,709
    Win10 Pro, Win10 Pro N, Win10 Home, Win10 Pro Insider Fast Ring, Windows 8.1 Pro, Ubuntu

    Quote Originally Posted by Brink View Post
    Yep, it'll literally block everything for a protected folder until allowed.
    That makes it only good for work PC's(running SAP) and kiosk mode then(both where there will be no changes or deletions made), because it doesn't at least present you with a link to the .exe to white list something, like restore from recycle bin, or to whatever OneDrive process.
      My ComputersSystem Spec
  4.    4 Weeks Ago #4
    Join Date : Oct 2013
    Posts : 25,290
    64-bit Windows 10 Pro build 17046
    Thread Starter

    It would be nice if it had some sort if UAC style Yes/No to approve for a controlled folder instead of just this below.

    Name:  Controlled_folder_Unauthorized_changes_blocked.png
Views: 2297
Size:  33.4 KB
      My ComputersSystem Spec
  5.    4 Weeks Ago #5
    Join Date : Oct 2014
    Trnava
    Posts : 2,871
    Windows 10.4 Home 1709 x64

    Has not the registry path and value changed or is it just for Home?

    Code:
    reg add "HKLM\Software\Microsoft\Windows Defender\Windows Defender Exploit Guard\Controlled Folder Access" /v "EnableControlledFolderAccess" /t REG_DWORD /d "1" /f
      My ComputerSystem Spec
  6.    4 Weeks Ago #6
    Join Date : Oct 2013
    Posts : 25,290
    64-bit Windows 10 Pro build 17046
    Thread Starter

    Quote Originally Posted by TairikuOkami View Post
    Has not the registry path and value changed or is it just for Home?

    Code:
    reg add "HKLM\Software\Microsoft\Windows Defender\Windows Defender Exploit Guard\Controlled Folder Access" /v "EnableControlledFolderAccess" /t REG_DWORD /d "1" /f

    It's the registry key and value you posted now. The only issue is that you have to take ownership of the key before you'll be able to modify the value of the DWORD.

    Thank you for the heads up.
      My ComputersSystem Spec
  7.    4 Weeks Ago #7
    Join Date : Jan 2015
    UK, Midlands
    Posts : 11,079
    Win 10 Pro (1703)

    Hi Brink, I've just read this post:
    Controlled folder access is greyed out - Windows 10 Forums
    I don't have the FCU, but am wondering if the option would be greyed out if a 3rd party AV were installed and real-time scanning by Defender were disabled. What do you think?

    Configure Controlled Folder Access in Windows 10 - gHacks Tech News
      My ComputerSystem Spec
  8.    4 Weeks Ago #8
    Join Date : Oct 2016
    Caledon, Ontario, Canada
    Posts : 4,113
    Windows 10 Pro Build 1703

    Hi Brink.

    Was on this thread. Member reported you needed to reboot to make changes and mentioned that sub processes may be doing the saving. Might be worth checking on reboot comment and adding mention of sub process in a "Tip"

    Controlled folder access problems

    Ken
      My ComputerSystem Spec
  9.    4 Weeks Ago #9
    Join Date : Oct 2013
    Posts : 25,290
    64-bit Windows 10 Pro build 17046
    Thread Starter

    Quote Originally Posted by dalchina View Post
    Hi Brink, I've just read this post:
    Controlled folder access is greyed out - Windows 10 Forums
    I don't have the FCU, but am wondering if the option would be greyed out if a 3rd party AV were installed and real-time scanning by Defender were disabled. What do you think?

    Configure Controlled Folder Access in Windows 10 - gHacks Tech News

    That would be a very good possibility if the 3rd party AV disabled Windows Defender.

    If it has a "This setting is managed by your administrator" message above this setting, then a group policy has been configured for it instead.

    Computer configuration > Administrative templates > Windows components > Windows Defender Antivirus > Windows Defender Exploit Guard > Controlled folder access
    Last edited by Brink; 4 Weeks Ago at 10:12.
      My ComputersSystem Spec

 
Page 1 of 5 123 ... LastLast


Similar Threads
Tutorial Category
Customization Create Windows Defender Settings shortcut in Windows 10
How to Create a Windows Defender Settings shortcut in Windows 10 Windows Defender helps protect your PC against malware (malicious software) like viruses, spyware, and other potentially unwanted software. Malware can infect your PC without your...
Tutorials
Solved W10 Storage settings and user folder structure. How to change location
Hi, I just build up a new pc and changed from W7 to new era of W10 :-) Was not that easy and pleasant experience as I thought. I have huge storage capability with this new pc but since I'm using very fast Intel 512Gb 600p M.2 SSD as C drive, I...
User Accounts and Family Safety
How do I change the folder optimization settings?
Hey all, I've been using the tutorials and tips here for a bit now, but I've run into a problem I can't seem to find anywhere. I use List view to help me sort music. However, my folders are spread across different drives, so I have to use a...
Customization
Some settings are controlled by your operator
I upgraded my custom PC a while ago (a couple months) from Windows 7 Home to Windows 10 Home and when I go into Windows update to enable insider features but it's greyed out and at the top it says "Some settings are controlled by your operator" this...
Windows Insider
Problems win 10 after a change in folder read settings
Following instructions from a game manufacturer I changed the 'read only' settings for users / documents folder. Win 10 now disfunctions (instable, search unavailable, chrome closing incorrectly, etc). How should I proceed to restore the folder...
General Support
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 19:24.
Find Us
Twitter Facebook Google+ Ten Forums iOS App Ten Forums Android App



Windows 10 Forums