Share via

Windows Defender's "Controlled Folder Access" feature is permanently off

Anonymous
2017-10-19T16:08:22+00:00

Just updated to Win 10 ver 1709  (fall creators update) and I find that the Windows Defender  -> Settings -> Virus & Threat Detection -> Virus and Threat Detection Settings -> Controlled Folder Accessfeature is grayed out in the "off" position.  I tried to activate this feature using the Group Policy editor per instructions on a couple of helpful sounding web sites but there was no change; even after rebooting Windows. Net result is this feature can't be used.

Side note: the Real Time Protection switch is likewise grayed out in the off position. 

Second side note: My main antivirus  is Symantec Security Suite. I tried temporarily disabling it to see if the gray-out went away. It didn't.

Any useful advice VERY welcome!!

Kind regards,

Lenny W

**Moved from:  Windows / Windows 10 / Security & privacy **

Windows for home | Windows 10 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

Answer accepted by question author

Anonymous
2017-10-20T03:31:37+00:00

This is by design, since folder monitoring requires Defender’s on-access (real-time) protection. So you can’t enable Controlled folder access when you have a third-party AV app installed and Windows Defender is running in its Limited Periodic Scanning (on-demand) mode. This new feature is only available when Windows Defender’s is running in a standalone configuration, and its real-time protection is turned on, as indicated in the Requirements section of this documentation:

https://docs.microsoft.com/en-us/windows/threat-protection/windows-defender-exploit-guard/controlled-folders-exploit-guard

GreginMich

Was this answer helpful?

10+ people found this answer helpful.
0 comments

3 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2017-10-20T02:47:07+00:00

    Hi Lenny,

    It could be an outdated Windows Defender or a conflict between your 3rd party antivirus. We suggest that you install all the Cumulative and Security updates.

    Let us know if you have any other questions.

    Was this answer helpful?

    3 people found this answer helpful.
    0 comments
  2. Anonymous
    2017-10-20T16:36:20+00:00

    Thank you for your reply. I appreciate the explanation. I'll have to wait until Windows Defender's main functionality of identifying viruses matches other anti-virus programs detection rates before I can have the Controlled Folder Access feature. 

    You’re totally welcome, Lenny. Defender isn’t doing very well at all on the test that I’ve been following (the AV-Comparatives Malware Protection Test), so I’m in agreement with the waiting. Also, the developers of other AV apps are already busy adding file/folder protection and exploit protection features, so this probably won’t tip the balance in Defender’s favor any time soon. But at the same time, I do feel that migrating Windows Defender to the enterprise environment has already given it the impetus that it needs to eventually become a “real contender”.

    GreginMich

    Was this answer helpful?

    2 people found this answer helpful.
    0 comments
  3. Anonymous
    2017-10-20T14:33:26+00:00

    Thank you for your reply. I appreciate the explanation. I'll have to wait until Windows Defender's main functionality of identifying viruses matches other anti-virus programs detection rates before I can have the Controlled Folder Access feature.

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments