Windows 10: Is anyone using Windows Defender Controlled folder access?

Discus and support Is anyone using Windows Defender Controlled folder access? in AntiVirus, Firewalls and System Security to solve the problem; I spoke too soon. Some Microsoft apps are now being blocked from making changes. It would be nice to know what's whitelisted by default. Discussion in 'AntiVirus, Firewalls and System Security' started by Ground Sloth, Apr 5, 2018.

  1. Is anyone using Windows Defender Controlled folder access?


    I spoke too soon. Some Microsoft apps are now being blocked from making changes. It would be nice to know what's whitelisted by default.
     
    Ground Sloth, Apr 5, 2018
    #1
  2. Kol12 Win User

    I was not aware of Windows Defender's built in Ransomware protection! However the first problem I have encountered is that my games can't access the documents folder to grab the save file/game settings etc! It is a great idea but seems very restrictive. What are your thoughts?

    :)
     
    Kol12, Apr 15, 2018
    #2
  3. jagman55 Win User
    Windows Defender Controlled Folder Access is blocking VLC media player

    I posted somewhere on this post a very detail, step by step on how to cure the issue within Win 10.
     
    jagman55, Apr 15, 2018
    #3
  4. Is anyone using Windows Defender Controlled folder access?

    Windows Defender Controlled Folder Access is blocking VLC media player

    Do you have Version 1709? Check at Settings > System > About.

    After choosing Virus & Threat Protection categorys, did you then choose Virus & Threat Protection Settings? It should be there. It's the only extra control Defender has to do something like that, in the latest version. But default setting is Off so it might
    have been toggled on by a bloatware antivirus. Which do you have?
     
    Greg Carmack - Windows MVP, Apr 15, 2018
    #4
  5. Cliff S New Member
    You're going to need to take time to add all the .exe you want.
    Including Windows own ones, like WordPad, Notepad, Paint and so on.


    You can find those in C:\Windows and C:\Windows\System32
    Then you need to add the ones in Programs and Programs x86.

    Some programs will also need certain .dll's or files in the ..bin and .etc folder also access given, to write to your C: partition and any other disk or partition you decided to add.


    It took me a whole Saturday to do it, because after I did the ones I knew & thought about, I ran some of the ones I wasn't to sure of.

    Also, installers(the ones you trust) will need permission too, so don't just click through, and always save them when downloading), incase you need to run the installer again, after you have given permission.
     
    Cliff S, Apr 15, 2018
    #5
  6. Kol12 Win User
    @Cliff S

    Yikes that sounds like a long long job. So each and every file say in Documents you allowed through has to be added individually correct? You cannot allow whole folders it seems.
     
    Kol12, Apr 15, 2018
    #6
  7. Cliff S New Member
    Not the files are allowed only the programs that can write to your disk(s)
    The idea is to keep unwanted changes from happening to your installation and user folders(or any other dive/partitions.).
     
    Cliff S, Apr 15, 2018
    #7
  8. jimbo45 Win User

    Is anyone using Windows Defender Controlled folder access?

    Hi there

    Filtering / controlling at individual file level seems IMO a bit of a cackhanded way of doing it -- I'd imagine that a better (or at least seemingly more sensible way) would be to provide protection at the directory level .

    That said though if your program can actually read by HDD sector / cluster then (although complex to do - it's dooable for some reasonably clever coders -- all you need to know is NTFS file structure and HDD geometry) your rogue program could easily bypass any of this type of file restriction especially on the NTFS file system.

    Surely it would make more sense also only allow to have specific users who have "execute authority" which presumably can be done in Windows with some sort of adding users to specific groups..
    However at least Ms is on the right track.

    Personally I'd also like to see some type of "Sandboxing" HDD writes so that users can examine logs before actually updating HDD -- by this type of Sandboxing I don't mean running Virtual machines but not commiting changes to HDD until some process allows it. If anything untoward is on the system then in this way changes aren't committed to HDD.

    Not sure how difficult or what changes to the Windows kernel is required -- at least Ms is on the right lines here -- the more sophisticated Virus writers know that people often take clean image of their system -- but spectacularly fail to adequately back up or control their data and this is what they are trying to do now rather than break your OS.

    It's about time NTFS was replaced by a much better more modern file system with decent journalling -- NTFS is "Out of the Ark" as far as computing systems are concerned -- good in its day but been around for donkeys years. Obviously legacy hardware will have to support it for a while but a decent new FS with some sensible software RAID possibilities should be a priority for Windows updates / improvements.

    Cheers
    jimbo
     
    jimbo45, Apr 15, 2018
    #8
  9. Kol12 Win User
    Ah I see, you allow the particular application/game access to the protected Documents folder for the files it needs. I had things back to front and was allowing the individual files rather than the application, that would be cackhanded.
     
    Kol12, Apr 15, 2018
    #9
  10. I actually turned on Controlled Folder Access last night. I am slowly but surely getting every needed program added. I would like to add something:

    If you add a program and it doesn't work still, you will need to reboot. I had this happen last night with my screenshot program. If it still doesn't work, you might need to add the dll, etc like Cliff posted.
     
    Access Denied, Apr 15, 2018
    #10
  11. Bree New Member
    The notification from Defender helps with this, it tells you the exact name of the exe, dll, bin, etc. that was blocked.
     
  12. Wow, that is great to know. Thank you for pointing this out.
     
    Access Denied, Apr 15, 2018
    #12
  13. Is anyone using Windows Defender Controlled folder access?

    Also would like to add something for anyone using Macrium..... Be sure to add the folder(s) where your backups are located. That way nothing can mess with your backups except Macrium. (and the programs you allow of course Is anyone using Windows Defender Controlled folder access? :p)
     
    Access Denied, Apr 15, 2018
    #13
  14. Interesting, Chrome and Firefox both can save pictures/files to the Desktop and I did not add them to allowed programs.
     
    Access Denied, Apr 15, 2018
    #14
  15. Welp, I can't be bothered to use this. I tried to install an app earlier and it blocked it, so I had to add the exe then reboot. Then again just a few min ago I had to update a game on steam and it writes to a folder in my Documents with the updater which required another reboot to allow and work properly.

    Needs more work where an Admin user can add a program and have it work without a reboot. I will wait until they make some changes.
     
    Access Denied, Apr 16, 2018
    #15
Thema:

Is anyone using Windows Defender Controlled folder access?

Loading...
  1. Is anyone using Windows Defender Controlled folder access? - Similar Threads - anyone using Defender

  2. Windows Defender’s Controlled Folder Access blocking System 32

    in Windows 10 Ask Insider
    Windows Defender’s Controlled Folder Access blocking System 32: Hey there, am I the only one having issues with Defender’s Controller Folder Access? The feature works as intended but my problem is it’s blocking System32 tasks. I saw posts from more than a year ago but no reports of this issue recently. Things blocked by CFA:...
  3. Windows Defender Controlled Folder Access Turn off

    in AntiVirus, Firewalls and System Security
    Windows Defender Controlled Folder Access Turn off: Conrolled folder access turns it self off when i click it to turn it on. i need help [Original Title: Windows defender] https://answers.microsoft.com/en-us/protect/forum/all/windows-defender-controlled-folder-access-turn-off/67e73935-1c11-4e63-b5b3-6be93eebe7b2
  4. CONTROLLED FOLDER ACCESS

    in Windows 10 BSOD Crashes and Debugging
    CONTROLLED FOLDER ACCESS: MY CONTOLLED FOLDER ACCESS WILL NOT TURN ON https://answers.microsoft.com/en-us/windows/forum/all/controlled-folder-access/7c2fdde9-b968-47ee-88b5-b8411d7e02b9
  5. Problem with Windows Defender/Controlled Folder Access

    in AntiVirus, Firewalls and System Security
    Problem with Windows Defender/Controlled Folder Access: When I'm trying to save a file in a portable application, I'm getting an error that the file couldn't be found. Based on my searching, I've found that it's a problem with "Controlled Folder Access" in Windows Security (new update renamed Windows Defender I guess). I was just...
  6. Windows Defender and Controlled Folder Access and Exclusions

    in AntiVirus, Firewalls and System Security
    Windows Defender and Controlled Folder Access and Exclusions: I just recently started using Windows Defender as my antivirus software expired and I was looking for another option other than paying for another program. I don't totally understand how to use it and reading thru tutorials is somewhat foreign to me so please understand my...
  7. Controlled folder access

    in AntiVirus, Firewalls and System Security
    Controlled folder access: For the last week the controlled folder access is blocking my Quicken program from updating or downloading anything. When I click on the notice it takes me to the allow app but when I open that to choose to allow app nothing is there! I really need to use my Quicken. How do...
  8. cannot change CONTROLLED FOLDER ACCESS option in Windows Defender

    in AntiVirus, Firewalls and System Security
    cannot change CONTROLLED FOLDER ACCESS option in Windows Defender: [img] 104282
  9. Odd Defender 'Controlled Folder Access' alert

    in AntiVirus, Firewalls and System Security
    Odd Defender 'Controlled Folder Access' alert: Fall Creators Update 1709 introduced a new 'Controlled Folder Access' function in Defender. This is off by default, but I have turned it on to test it. I've had to allow a couple of apps access (VLC was one) but other than that it seem unobtrusive. However, very...
  10. About the "Controlled Folder Access" in windows defender...

    in AntiVirus, Firewalls and System Security
    About the "Controlled Folder Access" in windows defender...: Although not that important, I noticed that when you open Winders Defender, and then click on Virus and threat protection settings, and then scroll down to controlled folder access,.. It states, " Protect your files and folders from unauthorized CHANGED by unfriendly...