

If an app tries to make a modification to. The good news for administrators is that the logging is very clean and by looking in the right place, it is possible to see exactly what is going on and why. Controlled folder access keeps a watch on the changes that applications make to files in certain protected folders. Controlled folder access works by only allowing apps to access protected folders if the app is included on a list of trusted software. We recommend messaging this requirement very clearly prior to enabling Controlled Folder Access, as the error messages are not very descriptive and may cause end users to become confused or believe that something is wrong with their computer.įor example, after I personally enabled Controlled Folder Access, I attempted to edit and save a file with VS Code and kept receiving a strange error. All necessary applications must be added to the approved application list as part of the setup/install process, or they will not be able to access files in protected folders. The list is initially empty, which means that protected folders cannot be updated or modified by any programs, even system-normal applications like Microsoft Word. While there is a bit of a learning curve associated with Microsoft Defender’s Controlled Folder Access protection capabilities, it is an impressive tool that has been able to stop everything we’ve thrown at it so far.Īs mentioned, the solution works based on an approved application list. One of the layers of defense, Controlled Folder Access, checks programs against a list of known, approved apps and prevents unapproved programs from affecting folder contents. Windows Defender helps protect data from malicious apps and threats such as ransomware.
