Controlled Folder Access is a security feature in Windows 11 that helps protect important folders from unauthorized changes. It is part of Microsoft Defender Antivirus and Windows Security, and it is designed to help prevent malicious applications, including ransomware, from modifying protected files.
When Controlled Folder Access is enabled, Windows monitors applications that attempt to make changes to protected folders. Trusted applications can continue working normally, while unknown or untrusted applications may be blocked.
This feature can be especially useful for protecting documents, pictures, videos, and other personal files. However, it can occasionally prevent legitimate applications from saving files. Windows provides options to allow trusted applications and manage the folders that are protected.
Method 1: Enable Controlled Folder Access From Windows Security
The simplest way to turn on Controlled Folder Access is through the Windows Security application.
Follow these steps:
- Press Windows + S.
- Search for Windows Security.
- Open the application.
- Click Virus & threat protection.
- Scroll down to Ransomware protection.
- Click Manage ransomware protection.
- Find Controlled folder access.
- Click Manage Controlled folder access.
- Turn on the Controlled folder access switch.
Windows will now begin monitoring applications that attempt to make changes to protected folders.
You may receive a User Account Control prompt when changing the setting. Approve it if required.
Once enabled, Windows Security will help protect supported folders against unauthorized modifications.
Method 2: Check Which Folders Are Protected
Controlled Folder Access uses a list of protected folders. You can review this list through Windows Security.
Follow these steps:
- Open Windows Security.
- Select Virus & threat protection.
- Click Manage ransomware protection.
- Select Manage Controlled folder access.
- Click Protected folders.
Windows will display the folders currently protected by Controlled Folder Access.
You may see standard folders such as:
- Documents
- Pictures
- Videos
- Music
- Desktop
The exact list can vary depending on your Windows configuration.
If you store important files in another folder, you can add that folder to the protected list.
Method 3: Add a Folder to Controlled Folder Access
You can manually add additional folders that contain important files.
Follow these steps:
- Open Windows Security.
- Go to Virus & threat protection.
- Select Manage ransomware protection.
- Open Manage Controlled folder access.
- Click Protected folders.
- Select Add a protected folder.
- Choose the folder you want to protect.
- Confirm the selection.
The selected folder will now be included in Controlled Folder Access protection.
Consider adding folders that contain particularly important documents or other irreplaceable files.
For example, if you keep important work files in a custom folder outside your normal Documents directory, adding that folder can provide another layer of protection.
Method 4: Allow a Blocked App Through Controlled Folder Access
Controlled Folder Access can sometimes block a legitimate application from changing files in a protected folder.
If you trust the application, you can add it to the allowed-app list.
Follow these steps:
- Open Windows Security.
- Select Virus & threat protection.
- Click Manage ransomware protection.
- Select Allow an app through Controlled folder access.
- Click Add an allowed app.
- Select Browse all apps.
- Locate the application’s executable file.
- Select the application.
- Confirm the selection.
The application will then be allowed to make changes to protected folders.
Only allow applications that you trust. Do not add an application simply because Windows blocked it.
If you are unsure why an application was blocked, investigate the program before allowing it to bypass this protection.
Method 5: Enable Controlled Folder Access Using PowerShell
Advanced users can manage Controlled Folder Access through PowerShell.
Follow these steps:
- Press Windows + S.
- Search for PowerShell.
- Right-click Windows PowerShell or the appropriate Terminal option.
- Select Run as administrator.
- Click Yes if User Account Control appears.
To enable Controlled Folder Access, run:
Set-MpPreference -EnableControlledFolderAccess EnabledPress Enter.
To check the current setting, run:
Get-MpPreference | Select-Object EnableControlledFolderAccessWindows will display the current Controlled Folder Access configuration.
PowerShell is useful when you need to manage Windows Security settings from the command line or are administering multiple Windows systems.
Be careful when using security-related PowerShell commands and make sure you understand the setting you are changing.
Method 6: Disable Controlled Folder Access When It Blocks Trusted Software
If a trusted application cannot save or modify files because of Controlled Folder Access, you do not necessarily need to disable the entire feature.
The preferred approach is usually to allow the specific trusted application.
However, if you need to temporarily turn the feature off, you can do so through Windows Security.
Follow these steps:
- Open Windows Security.
- Click Virus & threat protection.
- Select Manage ransomware protection.
- Click Manage Controlled folder access.
- Turn the Controlled folder access switch off.
The protection will stop monitoring applications through this feature.
If you only need to solve an application compatibility problem, consider turning Controlled Folder Access back on afterward and adding the trusted application to the allowed list instead.
This allows you to maintain the security feature while still permitting legitimate software to work.
Method 7: Troubleshoot Controlled Folder Access Notifications
If Windows repeatedly reports that an application was blocked, you can investigate the notification before deciding what to do.
Start by identifying the application.
The notification may indicate that an application was prevented from making a change to a protected folder.
If you recognize and trust the application:
- Open Windows Security.
- Go to Virus & threat protection.
- Select Manage ransomware protection.
- Open Allow an app through Controlled folder access.
- Add the trusted application.
If you do not recognize the application, do not immediately add it to the allowed list.
Instead, investigate the program and verify that it is legitimate.
You should also keep Microsoft Defender Antivirus and Windows updated. Security features work best when Windows and its malware protection components have current updates.
Conclusion
Controlled Folder Access is a useful Windows 11 security feature that can help protect important files from unauthorized changes. It works by monitoring applications that attempt to modify files inside protected folders.
You can enable the feature through Windows Security > Virus & threat protection > Manage ransomware protection > Manage Controlled folder access. You can also review protected folders, add additional folders, and allow trusted applications when necessary.
If a legitimate application is blocked, it is generally better to allow that specific application rather than disabling Controlled Folder Access completely. If you do turn the feature off temporarily, remember to enable it again when you are finished.
Because Controlled Folder Access is designed to provide protection against potentially harmful file modifications, avoid allowing unknown applications simply to make an error disappear.
FAQs
1. What does Controlled Folder Access do in Windows 11?
Controlled Folder Access helps protect protected folders from unauthorized changes by applications. It is designed as an additional defense against threats such as ransomware.
2. How do I turn on Controlled Folder Access?
Open Windows Security > Virus & threat protection > Manage ransomware protection, select Manage Controlled folder access, and turn the feature on.
3. Why is Controlled Folder Access blocking my application?
Windows may block an application if it attempts to modify files in a protected folder and is not recognized as an allowed application. If you trust the application, you can add it to the allowed-app list.
4. Should I disable Controlled Folder Access?
It is generally better to keep the feature enabled when possible. If a trusted application is blocked, add that application to the allowed list instead of disabling the entire protection feature.
Quick Summary
- Open Windows Security > Virus & threat protection > Ransomware protection to manage Controlled Folder Access.
- Turn on Controlled folder access to help protect important files.
- Add important custom folders under Protected folders.
- Allow individual trusted applications when they are blocked instead of disabling the entire feature.