Windows 10: OS BLOCKED executables

Hi! What is the RunTime Broker and what does it do? Are they safe to auto-run by the OS? Thank you.

:)

 

How do I find the application executable that is blocked by Control Folder Access.

I turned on Control Folder Access. When I run a application that is not trusted I get a notification that shows an abbreviated path due to notification length restrictions. I save it to view it under Notifications it is still not readable. I click on it
to expand the message and it goes away. I have tried going to the "Allow an app through Controlled folder". Instead of showing a list of apps it displays File Manager expecting me to find the executable. Since I cannot read the path or executable in the notification
I cannot add the app to the list of allowed apps.

Is there a log that displays the entire notification?

Is there a log of app names blocked?

Suggestions:

1. If you are going to use notifications to advise an app is blocked display the executable only. That way I can search for the executable.

2, Give the option of accepting/denying the app access in the Notification.

Wayne

 

Why does Controlled Folder Access block known Microsoft executables?

Hello all

I use Controlled Folder Access (CFA), and every so often I get a notification telling me that a Microsoft program has been blocked from making changes to memory. I am very happy with CFA, and I'm very able to add and remove programs from the "allowed" list.
That is not my question.

My question is: why are known Microsoft executables (which are part of Windows 10) being blocked? Surely CFA should know about Windows 10's own executables.

My usual response to this is just ignore it; everything carries on fine when I ignore it. In the screenshot below WmiPrvSE.exe is being blocked, and that's part of Windows 10 itself. This has happened a few times a day for the last week or so. I'm ignoring
the notifications and I expect them to go away eventually. And I expect to get notifications later about some other Windows 10 executable being blocked.

Another obvious question is: Can I do anything to "refresh" CFA's knowledge about which executables are legitimate Windows 10 programs. I don't want to add all these programs to the "allowed" list. I just think CFA ought to know which executables are part
of Windows 10 and are allowed, and that maybe I ought to be able to "remind" it.

So in summary:

• Why are Windows 10's own executables being blocked by CFA?
• Can I do anything to "remind" CFA about what it should know already?

Many thanks.

 

Applocker not blocking -- Win10Pro, Applocker configured, AppIDsvc run

• OS: Win10Pro
• Applocker: configured blocking of apps and executables
• Applocker rules: set to enforcing
• Service: AppIDSvc is running

I've been trying to get Edge and a couple other utilities blocked on the laptop to keep distractions to a minimum for my child who uses the computer to study.
However, even after rules are defined, and they are set to enforcing as blocked, the apps and executables are still available to them -- even after a reboot.

I have followed the instructions here: https://social.technet.microsoft.com...10itprogeneral
However, there is still no blocking of the apps or the executables.
Thank you for your consideration.