Windows 10: CFA blocking explorer.exe and Word etc - why??

As the subject says. Really strange. Keeps blocking random things when using the official Office programs. I've added them to the allow app section now, but I feel it may continue to block more. Is it ok to white list them or should I be keeping whatever it's blocking blocked? I couldn't see any problems when using the program as yet, but haven't used them fully at the moment and the blocked pop up is very annoying. Any ideas??

:)

 

Smartscreen blocking an EXE

Hi,

Please answer these questions to assist you better.

• Do you get any option to save password?
• Which application are you referring to?

Follow the steps below and check if that helps.

• Right click on the shortcut or in File explorer and select Run as administrator check if that helps.
• Also observe when you type password do you get a prompt for saving password just above Taskbar.

You may also refer the link below and check if that helps.


Smart Screen Filter: FAQ.

http://windows.microsoft.com/en-US/internet-explorer/use-smartscreen-filter#ie=ie-11

Hope the issue with smart screen blocking exe will resolved. Do let us know if you need further assistance.

Thank you.

 

Moving Files to Explorer

Controlled Folder Access was introduced in build 16232, that was an Insider build prior to the public release in version 1709 build 16299. Little has change in 1803 build 17134 except that CFA is on by default now (it was off by default in 1709).

That would be a useful addition, perhaps they will in subsequent versions? In the mean time, we have to add apps as best we can.

I have found that occasionally CFA starts to block more things than it should, a Restart cures that - try that first.

Yes, you could turn CFA off to let you move files, but as you say that reduces security. You could create a C:\Temp folder, you'd be able to move them there with CFA turned on because that would not be a protected folder. CFA should let File Explorer move them from there to your intended destination (it shouldn't block explorer.exe, if it does you need a Restart). Or you could give access to the app(s) that are being blocked.

The notifications that blocking has occurred are fleeting, and often don't show the full path to the binary file the needs to be added (it's not always the obvious .exe, sometimes it's a .bin).

The event viewer also logs the apps that were blocked. Open Event Viewer, look at the log for:
Applications and Services > Microsoft > Windows > Windows Defender > Operational
Event ID 1123 shows the name and full path of the executable that was blocked. In the Actions pane on the right you can 'Filter current log...' to help you find event ID 1123 quickly.

 

Moving Files to Explorer


Ok, so I turned off CFA and am now able to move the files, is my only 2 options, the protection of CFA and not being able to move files within my system, or turning it off and being vulnerable? I can't be the only person with this issue.

Bree, following your last link I believe this was introduced in a recent windows build.

Also when an app is blocked, why didn't MS add the ability to click on an "allow" button so it could be added to the list so I don't need to fish around looking for the exe file.