Controlled Folder Access Blocked problem in Windows Defender

Hi Nsmth,

In this thread, on march 25, GreginMich gave excellent advice regarding this

problem. You should go back and read his post.

I don't understand why so many are having a problem with Controlled Folder

Access. GreginMich offers an approach, that should address just about any

problem that there could be with this feature.

However, getting the path for the App that you want to allow, is sometimes

truncated in the notification on the taskbar. That may be contributing to the

difficulty that some are experiencing. The full path for an App that is flagged

by controlled folder access can be found in the Event Viewer.

Open the Event Viewer, and navigate to Windows Defender "Operational.

"Applications and Service Logs" >Microsoft >Windows >Windows Defender

>Operational.   Scan the log for Event ID 1123 or 1127. If the log is too big

to see either of these right away, you can click on "Create Custom View" on

the right side of the screen. Click "All Event IDs" and enter 1123,1127. Click OK

and also click OK on the next screen. You should see just these IDs now.

Right click on the line for one, and click "Event Properties". In the Properties

screen, you will find the full path displayed. If you have several different Apps

that are being blocked, repeat this action on the other entries, and find their

path as well. Use the paths to allow their processes to pass through Controlled

Folders Access, as you have done before. 

Regards,  Glen

Hi Jimmy,

Sorry to hear about your problem with Controlled Folder Access. My PC works

with the feature, exactly as depicted. I am at v1803 Build 17134.228.

Obviously, there is some common problem, that is affecting several of you.

The switch that won't stay turned off, is really weird. Their must be some

sort of corruption in your OS. You may want to consider a Repair Upgrade.

Since mine is working, I am sure I will be of no help. However, you asked for

a place in the Registry where you might be able to gain control over the

feature. I have located just such a place. Ten Forums has an article, describing

how to enable / disable Controlled Folder Access. You may have to determine

how you can get the Registry key to allow you to modify it though. It doesn't

cooperate, even as an administrator.

Hkey_Local_Machine\Software\Policies\Microsoft\Windows Defender\Windows

 Defender Exploit Guard\Controlled Folder Access >EnableControlledFolderAccess.

DWord = 0 is Disable.  DWord = 1 is Enable.

If you are adventurous, they also offer a download for a Registry tweak, that is

supposed to do what you want. Good luck. I hope this helps you out.

https://www.tenforums.com/tutorials/113380-enable-disable-controlled-folder-access-windows-10-a.html#option4

Glen

How do I turn it off?  It is horrendous.  It blocks Outlook.  (You realize that is a MS app right?).  I have added Outlook as an allowed app.  It doesn't work.

Syncing with my Google drive now fails.  Writing to my documents folder fails.  I've tried to unblock the app.  No luck.

All of my Canon (You know - Canon - The world-renowned hackers and camera makers) software is blocked.  I have had to unblock several applications.  Maybe the CIO of Microsoft and Canon could get together to figure out which applications are safe.  Include folks from Alphabet (Google) to the meeting too.

I've gone through the useless steps of turning off the Controlled folder access.  I click to turn it off.  The popup asking if I will allow the app to make changes appears.  I click yes.  Then it turns this horrid pile of rubbish setting back on.

Where in the registry do I fix this myself?  I never should have turned it on.  I made this mistake about a week ago and have been dreading it ever since.

Hi Fahd,

On the Ransomeware protection screen, below the Controlled folder access button,

there is an option, "Allow an app through Controled folder access". If you select that

option, you can allow an app to pass thru Controled folder access.

Click on  +  "Add an allowed app". When you do, it opens Explorer for you. You

can navigate to the app that you want to allow, click on it, and click "open".

Example: Navigate to C: > Program Files > CCleaner > CCleaner64  (the application).

Click on CCleaner64, and "open.

The application will be added to allowed apps list, and Controlled folder access will

let it through. Much better to do it this way. Turning the feature OFF, takes away some

of your built in protection.

Regards,  Glen

Except that is not always the case. I receive the notification on iexplore (which i've allowed), rundll32 (which i've allowed), excel, and word (both of which i've allowed.) outside of iexplore, the others are recent blocks. Others i've allowed no longer are blocked but the fact that Microsoft generated items are being blocked regularly is strange.

Hi Fahd,

On the Ransomeware protection screen, below the Controlled folder access button,

there is an option, "Allow an app through Controled folder access". If you select that

option, you can allow an app to pass thru Controled folder access.

Click on  +  "Add an allowed app". When you do, it opens Explorer for you. You

can navigate to the app that you want to allow, click on it, and click "open".

Example: Navigate to C: > Program Files > CCleaner > CCleaner64  (the application).

Click on CCleaner64, and "open.

The application will be added to allowed apps list, and Controlled folder access will

let it through. Much better to do it this way. Turning the feature OFF, takes away some

of your built in protection.

Regards,  Glen