Controlled-folder Access Blocked

Question

I have started having a message saying "Controlled-folder access blocked" whenever I try to run programs. It says that Windows Defender is blocking them.  These are popular programs. I have never had this problem before.

I don't know what started causing this or how to fix it. Thanks.

Answer 1

Its a new feature in Windows 10 1709. For users who might be getting that error, here is how you remove.

Open Windows Defender Security Center

Click Virus & threat protection

Click Virus & threat protection settings

Scroll down to Controlled folder access

Toggle it off

in later versions

Open Windows Defender Security Center

Click Virus & threat protection

Click Ransomware protection

Toggle off Controlled folder access

Answer 2

Hi haydnguy,

Controlled folder access is going to be a great feature in Windows 10 in the battle against malware like CryptoLocker . . . etc.

Open Windows Defender Security Center

Go to Virus & threat protection - Virus & threat protection settings

Scroll down to Controlled folder access

From there, you can add those applications to the list of safe or allowed applications to prevent them from being blocked

Answer 3

Hi Haydnguy,

The CFA feature functions, by blocking APPS from altering the contents of certain

protected folders. Apps that are not recognized by W10 and its "White List".

You can see the folders, that are involved in this procedure, by scrolling down to

"Ransomware protection", on the "Virus & threat protection" screen in WD, and

selecting "Manage ransomware protection". Then select "Protected folders", below

the CFA "ON" switch. You are not altering these folders when you allow an App to

pass through CFA. You are adding the App that was blocked, to the "White List".

Ransomware intends to encrypt or alter the contents of these protected folders.

CFA only allows apps on the "White List" to do that. If you only add apps to the

"White List, that you want, you prevent ransomware from attacking your PC.

Anything from the internet, that attempts to alter the protected folders, is also

subject to passing the White List.

Before v1809 Build 17763.55, it's a little "user unfriendly", to add apps to the list.

Not hard, but inconvenient. When you are at that build, it is straight forward and

simple. One click on the app, from the recently blocked apps list, and it's done.

Regards,  Glen

Answer 4

I just went down and looked to see where to toggle it off and it says, "This setting is managed by your administrator." And has the toggle button greyed out. All it will let me do is "allow" recently blocked apps. (It shows me what they were).

Answer 5

HI Haydnguy,

It looks like you are describing two opposing problems.

1. That CFA is blocking apps that you want.
2. That CFA is disabled. Not just turned off, as you have been instructed to do.

Have you recently installed a third party anti-virus program, in your attempt

to eliminate the blocks?  That might explain your opposing symptoms now. If so, you

should consider uninstalling it, and using its tool for complete removal.

CFA requires that Windows Defender is set for real-time protection, to function. See

"Requirements" in this link.  https://docs.microsoft.com/en-us/windows/threat-protection/windows-defender-exploit-guard/controlled-folders-exploit-guard?ocid=cx-blog-mmpc

Since your switch for CFA is greyed out, it appears that CFA is disabled. A third party

security program would cause real-time protection to be turned off in Windows Defender. Resulting in disabling CFA.

Obviously, you have experienced CFA blocking some apps that you want it to pass.

But it must have been before CFA became disabled. I suspect that your message,

"Controlled-folder access blocked", is in someway a warning, that CFA is no longer

functioning. Not that it is blocking an app now.

I have great news, regarding allowing an app to pass through CFA. Of course, it can be

done now, as long as you have the app's complete path. But it is cumbersome and un-

handy. Today, I received cumulative update 2018-10 KB4464330 for v1809 (build 17763.55)

that simplifies the procedure tremendously.

Clicking on the "Blocked App" popup, takes you directly to the "Allow an App" procedure.

There, you are given the option to see "Recently Blocked Apps". Clicking on this option,

lists all the Apps that have been blocked by CFA. Their paths are included, and you can

add them to the allowed list directly, with one click. This is better than a pocket on a shirt.

It is no longer necessary to turn off Controlled Folder Access, and lose its protection

from Ransomware, just because it is inconvenient!!!

Regards,  Glen