How to Configure Controlled Folder Access Against Ransomware

What Causes This?

Controlled Folder Access is a Windows Security feature that blocks untrusted apps from changing files in protected folders like Documents, Pictures, and Desktop. The problem usually comes from the feature being turned off, trusted apps not being allowed through, or ransomware protection settings not being configured after Windows setup or an update. In some cases, legitimate apps get blocked because Windows does not recognize them as safe by default.

Common Symptoms

• Files in Documents, Pictures, or Desktop are being changed or encrypted by suspicious software
• Windows Security shows ransomware protection is off
• A trusted app cannot save, edit, or create files in protected folders
• You see notifications that an app was blocked from making changes to a folder
• Important folders are not included in your current protection settings

How to Fix It Manually

1. Open Windows Security.

   • Press Start, type Windows Security, then open it.
   • Click Virus & threat protection.

2. Open ransomware protection settings.

   • Scroll down to Ransomware protection.
   • Click Manage ransomware protection.

3. Turn on Controlled Folder Access.

   • Find Controlled folder access.
   • Switch it to On.
   • If prompted by User Account Control, click Yes.

4. Review which folders are protected.

   • In the same window, click Protected folders.
   • Windows usually protects common folders automatically, such as Documents, Pictures, Videos, Music, and Desktop.
   • To add another folder, click Add a protected folder, then browse to the folder you want to protect.

5. Allow trusted apps that are being blocked.

   • Go back to the Manage ransomware protection page.
   • Click Allow an app through Controlled folder access.
   • Click Add an allowed app, then choose Recently blocked apps or Browse all apps.
   • Select the program you trust, such as your photo editor, accounting software, or backup tool.

6. Check protection history for blocked activity.

   • Return to Windows Security and open Protection history.
   • Look for entries related to Controlled Folder Access.
   • Confirm whether Windows blocked a legitimate app or something suspicious.
   • Only allow apps you fully recognize and trust.

7. Make sure Microsoft Defender real-time protection is enabled.

   • In Windows Security, go to Virus & threat protection.
   • Under Virus & threat protection settings, click Manage settings.
   • Confirm Real-time protection is turned On, since Controlled Folder Access works best as part of Defender’s overall protection.

8. Test with a trusted app.

   • Open a program you use regularly, such as Notepad or Word.
   • Try saving a file to Documents or Desktop.
   • If it fails, check Protection history again and allow the app if needed.

Fix It Automatically with Kudu

Kudu can check your Windows security settings, spot weak ransomware protection, and help fix misconfigured protection features automatically. It also makes it easier to find security issues that leave important folders exposed, without digging through multiple Windows menus.

Download Kudu Free →