Enable Controlled Folder Access in Windows 10

Controlled folder access is a Windows 10 security feature that blocks untrusted apps from modifying files in your protected folders, helping to defend against ransomware and other malicious software. This guide walks you through turning it on, adding or removing protected folders, and allowing trusted apps through. You’ll need a Windows 10 PC with administrator rights, and you should be signed in to an account with admin privileges.

What You’ll Need

• A Windows 10 PC (version 1709 or later) with administrator account access.
• An active Windows Defender antivirus subscription (the feature is part of Windows Security, which is built-in).
• Optional: a list of folders you want to protect (by default, common system folders like Documents, Pictures, Videos, Music, and Desktop are included).

Step-by-Step

1. Open Windows Security. Click the Start button, type “Windows Security” in the search box, and press Enter. Alternatively, go to Settings > Update & Security > Windows Security and click “Open Windows Security.”
2. Go to Virus & threat protection. In the Windows Security window, click the “Virus & threat protection” tile (shield icon) from the left sidebar or the main panel.
3. Scroll to Ransomware protection. Under the “Virus & threat protection” section, scroll down until you see “Ransomware protection.” Click “Manage ransomware protection.”
4. Turn on Controlled folder access. In the “Controlled folder access” section, toggle the switch to “On.” If User Account Control (UAC) prompts, click “Yes” to allow the change.
5. Review protected folders. Once enabled, click “Protected folders” to see the default list (Documents, Pictures, Videos, Music, Desktop, and sometimes Favorites). These are automatically protected.
6. Add more folders (optional). To protect additional folders, click “Protected folders” > “Add a protected folder.” Browse to the folder you want, select it, and click “Select Folder.” Repeat for any other folders.
7. Allow an app through (if needed). If a trusted app (like a backup tool or a game) is blocked, go back to the “Controlled folder access” section and click “Allow an app through Controlled folder access.” Click “Add an allowed app,” choose “Recently blocked apps” (if the app appears there) or “Browse all apps,” locate the executable file, and select it.
8. Confirm the settings. After making changes, close the Windows Security window. The feature is now active and will monitor the protected folders.

Common Mistakes

• Forgetting to add custom folders. The default list only covers system libraries. If you store important files elsewhere (e.g., D:\Data), they won’t be protected unless you add them manually.
• Blocking legitimate apps. Some apps (like Microsoft Office or certain backup software) may be blocked unexpectedly. Always review the “Recent blocked events” log to see what’s being blocked and allow only trusted apps.
• Disabling the feature entirely to fix a block. Instead of turning off controlled folder access, use the “Allow an app” option. Disabling leaves your files vulnerable.
• Not checking for updates. The feature relies on Windows Defender’s definitions. If you have outdated definitions, it may not detect new threats or may behave oddly.
• Assuming it protects all drives. By default, only folders on the system drive (C:) are protected. You must add folders on other drives manually.

Tips

• Test with a dummy file. Create a test file in a protected folder and try to modify it with a non-whitelisted app (like Notepad) to verify the feature is working.
• Use the “Recently blocked events” log. In the “Ransomware protection” page, click “Review recent activity” to see which apps were blocked. This helps you decide what to allow.
• Keep your system updated. Ensure Windows Update is set to install security patches automatically, as Microsoft regularly improves this feature.
• Combine with other security practices. Controlled folder access is not a replacement for a good backup strategy. Regularly back up important files to an external drive or cloud service.
• Use Group Policy for enterprise. If you manage multiple PCs, you can configure controlled folder access via Group Policy (Computer Configuration > Administrative Templates > Windows Components > Windows Defender Antivirus > Windows Defender Exploit Guard > Controlled Folder Access).

Troubleshooting

Issue: The toggle is grayed out. This usually means you’re not signed in as an administrator. Sign in with an admin account or ask your IT admin to enable it.

Issue: Apps are being blocked that shouldn’t be. Check the “Recent blocked events” to see which apps are blocked. If it’s a trusted app, add it to the allowed list. If the app is not in the “Recently blocked” list, use “Browse all apps” to find its executable file.

Issue: The feature doesn’t seem to work. First, confirm the toggle is on. Then, test with a dummy file. If it still doesn’t block, ensure Windows Defender’s real-time protection is on (Virus & threat protection > Real-time protection). Also, check if any third-party antivirus is interfering; sometimes they disable Windows Defender components.

Issue: Cannot add a protected folder. If you get an error when adding a folder, make sure the folder exists and you have permission to access it. Also, avoid adding system folders or the root of a drive, as this may cause issues.

Issue: After an update, the feature turns off. Windows updates can occasionally reset security settings. Re-enable it and check if any other settings were changed.

Issue: The feature is missing entirely. Controlled folder access is only available on Windows 10 version 1709 and later. Check your Windows version (Settings > System > About). If you’re on an older version, update Windows.

Frequently Asked Questions

Q: What folders are protected by default?
A: By default, Windows protects the system libraries: Documents, Pictures, Videos, Music, Desktop, and sometimes Favorites. You can add more folders.

Q: Does controlled folder access protect against all ransomware?
A: It blocks untrusted apps from modifying files in protected folders, which stops many ransomware attacks. However, it’s not a complete solution—always keep backups and use other security measures.

Q: Can I protect folders on an external drive?
A: Yes, you can add any folder, including those on external drives, to the protected list. However, the drive must be connected when you add it, and the protection applies only when the drive is present.

Q: Will this affect my normal work?
A: It might block some legitimate apps that try to modify files in protected folders. You can allow those apps through, so your workflow should remain unaffected after you whitelist trusted software.

Q: How do I know if an app is being blocked?
A: When an app is blocked, you’ll see a notification from Windows Security. You can also check the “Recent blocked events” log in the Ransomware protection page.

Q: Can I disable controlled folder access temporarily?
A: Yes, you can toggle it off anytime. But it’s better to use the “Allow an app” feature instead of disabling it, as disabling leaves your files vulnerable.

Related

• Fix Netflix App Not Working on Windows 10
• Transfer Software to a New Computer: Full Guide
• Python 2 vs Python 3: Key Differences Explained