Windows 10: Change Windows Defender Controlled Folder Access Settings - Windows 10

Mm, if you're right, could go -er- viral. (Are bad puns allowed after tutorials?).

I've asked the OP if he can check it, but probably means uninstalling Bitdefender.

 

Hmmm.....subscribing to this thread....*Wink

 

Have had problems to allow Screenpresso to access its default folder under /pictures...

Found what was the culprit of Screenpresso couldn't access protected folders.. You have to permit screnpressoCodec.dll too. Working (saving files) without issue and without restart.

 

I decided to take the time and thoroughly set it up today.
Had to look for any programs that write to the default folders/libraries, and also added my OneDrive SSD and my Macrium Reflect HDD.

After setting it up, I Exported these two keys:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\Controlled Folder Access\AllowedApplications

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\Controlled Folder Access\ProtectedFolders

Then put them in a folder and put a copy on in Documents on my system and a copy on OneDrive.



Then made a system image, so I won't need to do it again.

By the way I added vmconnect, because I also put my VM's SSD as controlled access.

Here is what I allowed so far:

 

Hey Cliff, *Smile

Just to note that you'll need to take ownership of those registry keys before you'll be able to merge the .reg files to restore them.

 

Thanks for the warning. I'll only need them when all else fails.
I use Tweaking(dot)com's Registry Backup, and save a weekly backups. Plus there is always Macrium*Smile
But it's cool I can just add whole disks.
I use Macrium Free, so I don't have Image Guardian, so Windows Controlled Access will come in handy there(on my online system images backup. My offline won't be a problem.).

 

This can really be a PITA sometimes, I did both IE in Programs & Programs X86 for good measure
C:\Program Files (x86)\Internet Explorer
C:\Program Files\internet explorer

 

Internet Explorer wasn't even open at the time(it hardly ever is anymore*Wink), that's the best part*Busted

 

Same here.

Another problem (general) about protected folders approach is installation of programs (upgrades included). If you want to have desktop icons (shortcuts) it's a no go. Desktop is protected folder and and a program you're installing isn't allowed (can't be, as it is new program - even upgrade is a new version). So no desktop shortcuts for protected folders approach (OK, one can add it later, but this isn't the same).

Wonder, if that problem with non-showing checkboxes when installing programs is also connected to protected folders feature

 

That's ok, I can understand; 3rd party stuff being blocked until you give permission(can't stand desktop icons any how), but a Windows .exe file???? Not already set to allowed??? As Default??? That's going way too far in my book.

 

I think it may be easier and best to remove the folders from "Protected Folders" that are used by programs all the time, and instead only add folders that you truly want as protected with zero access for anything.

 

There is a problem ... one can't remove default folder, at least not via usual easy click and set. Editing a registry is not a good advice to common user.

Btw, check ie and same here, if trying to save a favorite

 

I did a test to day using some of my benching programs, that I had already added yesterday(just added the .exe's of the .dll it depends on if the program runs as an executable or a batch(like Heaven or Valley from Unigine), and had no problem when it saved the scores. The only warnings I have been getting are from some of Windows own stuff*Confused

 

My setup:

 

So much for that idea. *Sad