Ransomware is a type of malware that can lock or encrypt files and demand payment to restore access. Because personal documents, photos, videos, and other files can be valuable, protecting them from unauthorized changes is an important part of Windows security.
Windows 11 includes ransomware protection through the built-in Windows Security application. One of its most useful features is Controlled Folder Access, which can help prevent untrusted applications from modifying files in protected folders.
You can turn on ransomware protection without installing additional antivirus software. Windows Security also lets you review protected folders and allow trusted applications if they are blocked.
The following methods explain different ways to enable and manage ransomware protection in Windows 11.
Method 1: Turn On Ransomware Protection From Windows Security
The easiest way to enable ransomware protection is through Windows Security.
Follow these steps:
- Press Windows + S.
- Search for Windows Security.
- Open the application.
- Click Virus & threat protection.
- Scroll down to Ransomware protection.
- Click Manage ransomware protection.
- Find Controlled folder access.
- Click Manage Controlled folder access.
- Turn on Controlled folder access.
Windows will now monitor applications that attempt to make changes to protected folders.
If User Account Control appears, click Yes to approve the change.
Once enabled, the feature provides an additional layer of protection for files stored in protected locations.
Method 2: Check the Protected Folders
After enabling Controlled Folder Access, you can review the folders Windows is protecting.
Follow these steps:
- Open Windows Security.
- Select Virus & threat protection.
- Click Manage ransomware protection.
- Select Manage Controlled folder access.
- Click Protected folders.
Windows will display the folders currently protected by Controlled Folder Access.
Common locations may include:
- Desktop
- Documents
- Pictures
- Videos
- Music
The exact folders can vary depending on your Windows configuration.
If you keep important files in a custom location, you can add that folder to the protected list.
Method 3: Add Important Folders to Ransomware Protection
You can add additional folders to Controlled Folder Access if they contain important files.
Follow these steps:
- Open Windows Security.
- Go to Virus & threat protection.
- Select Manage ransomware protection.
- Click Manage Controlled folder access.
- Select Protected folders.
- Click Add a protected folder.
- Browse to the folder you want to protect.
- Select the folder.
The folder will now be included in the protection provided by Controlled Folder Access.
This can be useful if you store important work documents, photographs, projects, or other files in a custom folder outside the standard Windows locations.
Adding a folder does not encrypt the files. Instead, Controlled Folder Access helps restrict unauthorized applications from changing files inside the protected location.
Method 4: Allow a Trusted Application
Ransomware protection can occasionally interfere with legitimate applications. For example, an application may need to save or modify a file in a protected folder but Windows may block the operation.
If you know the application is safe, you can add it to the allowed-app list.
Follow these steps:
- Open Windows Security.
- Select Virus & threat protection.
- Click Manage ransomware protection.
- Select Allow an app through Controlled folder access.
- Click Add an allowed app.
- Choose Browse all apps.
- Locate the application’s executable file.
- Select the application.
Windows will allow the selected application to make changes to protected folders.
Only allow applications that you trust.
If you do not recognize an application that has been blocked, do not add it simply because you want to stop the notification. Investigate the program first.
Method 5: Enable Ransomware Protection Using PowerShell
Advanced users can enable Controlled Folder Access through PowerShell.
Follow these steps:
- Press Windows + S.
- Search for PowerShell.
- Right-click the appropriate PowerShell or Terminal result.
- Select Run as administrator.
- Click Yes when User Account Control appears.
Run:
Set-MpPreference -EnableControlledFolderAccess EnabledPress Enter.
To check whether Controlled Folder Access is enabled, run:
Get-MpPreference | Select-Object EnableControlledFolderAccessWindows will display the current configuration.
PowerShell is useful when you are comfortable working from the command line or need to configure Windows Security on systems where using the graphical interface is inconvenient.
Be careful when changing security settings from PowerShell and make sure you use an elevated terminal when required.
Method 6: Check Windows Security for Ransomware-Related Alerts
After enabling ransomware protection, Windows Security can notify you when an application is prevented from making a change to a protected folder.
If you receive such a notification:
- Open Windows Security.
- Select Virus & threat protection.
- Review the available protection information.
- Open the ransomware protection settings if necessary.
- Identify the application involved.
- Determine whether you recognize and trust it.
If the application is legitimate, you can add it through Allow an app through Controlled folder access.
If you do not recognize the application, leave it blocked and investigate it before taking further action.
This approach helps avoid weakening ransomware protection simply because an application encountered a restriction.
Method 7: Turn Ransomware Protection Off Temporarily
There may be situations where you need to temporarily disable Controlled Folder Access for compatibility or troubleshooting.
If you need to do this:
- Open Windows Security.
- Click Virus & threat protection.
- Select Manage ransomware protection.
- Click Manage Controlled folder access.
- Turn Controlled folder access off.
However, if only one trusted application is being blocked, it is generally better to allow that application rather than disabling the entire protection feature.
After completing your troubleshooting, turn Controlled Folder Access back on if you disabled it temporarily.
Keeping the protection enabled provides an additional security layer against unauthorized file modifications.
Conclusion
Windows 11 includes built-in ransomware protection through Windows Security, with Controlled Folder Access providing an important layer of protection for selected folders.
You can enable it from Windows Security > Virus & threat protection > Manage ransomware protection > Manage Controlled folder access. You can then review protected folders and add additional locations containing important files.
If a trusted application is blocked, Windows allows you to add that application to the allowed list. This is generally preferable to turning off ransomware protection entirely.
Advanced users can also enable and check Controlled Folder Access through PowerShell. Regardless of which method you use, keep Windows and its security components updated and avoid allowing unknown applications to modify protected files.
FAQs
1. Does Windows 11 have built-in ransomware protection?
Yes. Windows 11 includes ransomware-related protection features through Windows Security. Controlled Folder Access can help protect files in selected folders from unauthorized changes.
2. How do I turn on ransomware protection in Windows 11?
Open Windows Security > Virus & threat protection > Manage ransomware protection > Manage Controlled folder access, then turn on Controlled Folder Access.
3. Will Controlled Folder Access delete or encrypt my files?
No. Controlled Folder Access is designed to restrict unauthorized applications from modifying files in protected folders. It does not encrypt your files as part of this feature.
4. What should I do if ransomware protection blocks a trusted application?
If you are certain that the application is legitimate, add it through Allow an app through Controlled folder access. Avoid disabling the entire protection feature unless it is necessary for troubleshooting.
Quick Summary
- Open Windows Security > Virus & threat protection > Manage ransomware protection.
- Turn on Controlled folder access to add protection against unauthorized file changes.
- Add important custom folders under Protected folders.
- Allow individual trusted applications when necessary instead of disabling ransomware protection completely.