Windows 10: Why is Controlled Folder Access (Ransomware Protection) blocking system services and...

When I was on build 1809 with ransomware protection enabled, I only got alerts for 3rd party programs trying to write to the controlled folders. Friday, Windows updated to 1903, and now I'm getting alerts that it is blocking Windows system files and services from protected folder and memory access.


So far it has blocked the following:

cleanmgr.exe

CompatTelRunner.exeexplorer.exe

msiexec.exe

SearchIndexer.exe
svchost.exe

WinSAT.exe

WmiPrvSE.exe


Why is it suddenly blocking Windows system processes and services? Until the 1903 update, it never blocked any of these processes. What was a minor annoyance for the extra protection has become a major pain and about to disabled it. Whenever Defender blocks a program from protected folder or memory access, after allowing it I have to restart that program before it can write to the folders. Now that it is blocking system services and processes, they remain blocked until I reboot.

:)

 

What does "Protected folder access blocked" mean?

Hi Ronaldo

Windows 10 Defender has a new security feature called Controlled Folder Access, that is designed to protect your system against Ransomware attacks

Sometimes it will block an application from accessing your personal folders, if you trust the application in question, you can add it to the list of allowed apps through Controlled Folder Access . . .

Open Windows Defender Security Center

Go to Virus & threat protection - Virus & threat protection settings

Scroll down to Controlled folder access

From there, you can add an app to the list of safe or allowed apps to prevent them from being blocked

Please do not leave Controlled Folder Access turned off permanently

 

Controlled Folder Access blocked

Hi Aeolus0,

The Controlled Folder Access is an enterprise-class ransomware protection component that was recently added to Windows Defender. When you turn on Controlled folder access, a lot of the folders you use most often will be protected by default. This means that
content in any of these folders cannot be accessed or changed by any unknown or untrusted apps. Once you add additional folders, they become automatically protected as well. To add protected folders:

• Select Virus & threat protection settings.
• Under Controlled folder access, select Protected folders.
• Select Add a protected folder and follow the prompts to add folders.

If you see an App is blocked message when you try to use a familiar app, you can simply unblock the app. If this message displays:

• Write down or take note of the path of the blocked app.
• Select the message, and then select Add an allowed app.
• Browse for the program you want to allow access.

As for your query about having no sounds on your computer, it could be caused by an outdated or corrupted audio driver. For us to assist you better, kindly answer the questions below:

• Have you made any changes to your computer prior to this issue?
• What troubleshooting steps have you done so far?
• Which version and OS build number of Windows 10 is currently installed? To check, press the
  Windows key, type winver, and press the
  Enter key.
• Have you tried to download and install the latest audio driver from the manufacturer's website of your device?

Meanwhile, you can try the steps in this
link to troubleshoot sound issues on Windows 10.

We'll be looking forward to your reply.

 

Controlled Folder Access is off. Shouldn't this be on?

Suggestion to also read

• this article (ignore ads):
  How to Protect Your Files From Ransomware With Windows Defender’s New “Controlled Folder Access”
• and this thread:
  Controlled Folder Access Feature in Windows 10 Fall Creators Update Questions?