How to Protect Against Ransomware with Controlled Folder Access in Windows 10

The Windows 10 Fall Creators Update introduced some new features and made a lot of improvements to the existing ones. Of all the new features in Windows 10 FCU, the Controlled Folder Access is very useful and is specifically designed to protect your files and folders from ransomware.

What Is Controlled Folder Access

Generally, traditional Windows programs can access all the files and folders in your system. If those programs choose to, they can easily modify the content of the files and folders. Rogue programs like ransomware can take advantage of this unrestricted access and encrypt all your data and hold you for ransom. This has become a big issue over the last few years.

To deal with this, Microsoft added a new feature called “Controlled Folder Access” to the Windows operating system, or more specifically, to Windows Defender. This new feature lets you lock down important folders of your choice so that no program, unless it is deemed safe by Microsoft or specifically selected by you, can modify files and folders in that specific folder.

Enable and Configure Controlled Folder Access

Due to the restriction it places on other programs, Controlled Folder Access is disabled by default. To enable it, search for “Windows Defender” in the Start Menu and open it.


In Windows Defender, navigate to “Virus and Threat Protection” on the left panel and click on the link “Virus and threat protection settings” appearing on the right panel.


In this window scroll down on the right panel, find the “Controlled folder access” option and toggle the button under it to “On.” This action will enable the Controlled Folder Access feature.


By default, this feature is configured to protect your home folders like Documents, Pictures, Videos, Music, Desktop, and Favorites. You cannot remove these default folders, but you can extend the protection to other folders.

To do that, click on the “Protected Folders” link appearing right under the On/Off button.

Click on the “Add a protected folder” button, select the folder or the entire drive from the Browse window, and click on the “Open” button.


As soon as you click the button, the folder will be added to the Protected Folders list. If you want to remove the folder in the future, simply click on the “Remove” button.


From this point onward, any program that tries to modify files in the protected folder will be blocked.


Provide Access to an App

If your favorite program is blocked from making changes to the protected folder, then you can manually give access to it. To give access to a program, click on the “Allow an app through controlled folder access” link appearing under the “Controlled Folder Access” section.


Click on the “Add an allowed app” button.


In the browse window navigate to the app installation folder, select the EXE file and click on the “Open” button.


You’ve successfully added an app that can modify files in protected folders.

When using the Controlled Folder Access feature, you might find that some programs like Photoshop are being blocked by Windows Defender. All you have to do is give them access as shown above.

It might cause some inconvenience initially, but the extra effort is worth it to protect your important files like photos, videos, documents, and other data. Do remember that this feature is not an alternative to regular backups. Always back up your important data.

Comment below sharing your thoughts and experiences regarding using the new Controlled Folder Access feature to protect your files and folders from ransomware and other rogue programs.

The Complete Windows 10 Customization Guide

The Complete Windows 10 Customization Guide

In this ebook we’ll be exploring the multitude of options to fully customize Windows 10. By the end of this ebook you’ll know how to make Windows 10 your own and become an expert Windows 10 user.

Get it now! More ebooks »


  1. I have version 1703 of 64 bit Windows 10 and I do not see this feature in Windows Defender

    1. You have to install Fall Creators Update (build 1709).The update is being rolled out in waves. So, it might take some time for the update to reach your machine. If you want to, you can manually download the ISO from Microsoft website.

    2. That’s because you need version 1709 which is the Creator’s update.

  2. Just another reason to switch to LINUX!!

  3. It’s great except for “unless it is deemed safe by Microsoft or….”
    It is not up to microsoft to deem anything safe.

  4. When I open Defender v4.10 I do not see a VIRUS & THREAT PROTECTION option.
    I’m running Windows 10 Pro, Anniversary edition.

    1. Dan, you are two major updates behind. Update your system to fall creators update (ver 1709).

      1. Vamsi,
        I wish I could update beyond the Anniversary Edition. According to MS, because my PC is so old, there are drivers missing that prevented the upgrade (to Spring Creator) from occurring. I wish MS had reported what devices required the drivers so I could disable them in hopes of the upgrade succeeding, but they didn’t.
        Anyhow, as always, thanks for your reply.

Comments are closed.