Windows 10: Windows Defender inbuild, not 365 says Your IT administrator blocked access to this page

It's started after reset Was 2 resets 1 with file save, another with full reset. Both ended up with: Windows defender somehow saved language parametrs from old system 0 access to Windows Defender system even when i can change everything about my accound and turn on Creator Mode 0 viruses found on computer with other softwhere. Main Admin on windows also have 0 access to Defender. Internet methods with CMD Register change was not doing much. I was download program last day, it was MSL type and i accedently open it i suggest that was zip file, was sleepy, I was not installed file, but starte

:)

 

Windows Defender is blocking too much saying it viruses

Hi Sam,

Based on the screenshot that you've provided, Controlled Folder Access is turned on, blocking most apps that you're using. We suggest that you turn it off to allow blocked apps in Windows Defender. Follow the steps below:

• Select Start > Settings.
• Choose Update & security > Windows Defender.
• Select Open Windows Defender Security Center.
• Select Virus & threat protection, and then choose Virus & threat protection settings.
• Under Controlled folder access, turn it on or off.
• Once done, try accessing the apps and see if you can now access them.

Should you need further assistance, feel free to post back.

 

Windows Defender is blocking too much saying it viruses

The steps provided in the reply above are taken from this Microsoft document, which unfortunately tends to appear at top of many search result lists for “Controlled Folder Access”:

Allow an app to access controlled folders - Microsoft Support

After stating that “You can add an app to the list of safe or allowed apps to prevent them from being blocked”, this article goes on to provide the steps for turning off Controlled Folder Access, rather than the steps that you would actually take to
“Allow a blocked app in Windows Defender Security Center” (the title of the article), so there’s a rather glaring logical disconnect in this article, and it really should be fixed.

While the proper steps to “Allow a blocked app in Windows Defender Security Center” are inexplicably missing in the article that bears that title, other Microsoft documents on this topic actually do provide the proper steps for this, e.g.:

If you see an App is blocked message when you try to use a familiar app, you can simply unblock the app. If this message displays:

• Write down or take note of the path of the blocked app.
• Select the message, and then select Add an allowed app.
• Browse for the program you want to allow access.

Virus & threat protection in Windows Security - Microsoft Support





This method should allow you to add any of your blocked apps to the default list of authorized apps (whitelist) – without opening the gate to ransomware and data-wipers by turning off Controlled Folder Access.

The file path in the Unauthorized changes blocked notification does tend to be truncated – but there’s usually enough of it there to locate the app without any trouble (it’s usually in the Program Files or Program Files (x86) directory).
If the file path is truncated to the point where you can’t locate the blocked app in the
Open dialog; then open Event Viewer; navigate to the Windows Defender Operational log; and locate the blocking event (Event ID 1123):

1. Right-click on the Start button and select Event Viewer.

2. Navigate to Applications and Services
> Microsoft > Windows
> Windows Defender > Operational


3. Filter for (or just look for): Event ID
1123

Issues with this new ransomware protection feature were fully anticipated – and that’s why it includes an Audit Mode, which allows you to monitor folder access activity without having anything blocked – so you can spend some time “learning the ropes”
without having your work disrupted.

Right-click on the Start button and select Windows PowerShell (Admin); and then copy, paste, and enter this command:

Set-MpPreference -EnableControlledFolderAccess AuditMode

https://docs.microsoft.com/en-us/wi...ploit-guard/evaluate-controlled-folder-access

Issues with Adobe apps and LibreOffice are frequently reported, and it might take some time to work through these. But if you’re willing to make the effort, you might find some helpful suggestions here:

https://www.tenforums.com/antivirus.../96309-controlled-folder-access-problems.html

Going forward, application developers will also be providing specific information for allowing their apps, and should soon be providing help with this in their respective user forums; e.g.:

Defender Controlled folder access exception for LibreOffice - The Document Foundation Wiki

If you actually do encounter serious difficulties with whitelisting your unrecognized apps,
then you might want to turn off Controlled Folder Access temporarily and “try again later” – or better yet; just make sure that all of your personal files are properly backed up on a disconnected drive, and then don’t worry about turning it
back on:

https://cloudblogs.microsoft.com/mi...good-as-any-to-back-up-your-data/?source=mmpc

Additional resources:

Stopping ransomware where it counts: Protecting your data with Controlled folder access

https://cloudblogs.microsoft.com/mi...ting-your-data-with-controlled-folder-access/



Ransomware FAQ

https://www.microsoft.com/en-us/wdsi/threats/ransomware



Customize Controlled folder access

https://docs.microsoft.com/en-us/wi...rd/customize-controlled-folders-exploit-guard

 

Turn On Windows Defender Block Suspicious Behaviors in Windows 10  

The DWORD is set to 0 and I cannot get the process you suggested in the "NOTE" portion of the tutorial to work. Two attached screen shoots will show the before and after attempts to change the Permissions necessary for access to the DWORD change.




Access is denied. (Note-Protected folder in Defender is turned off)