How to set up and manage Windows 11 Controlled Folder Access to protect against ransomware

Controlled Folder Access is a built-in security feature in Windows 11 that protects your important files and folders from unauthorised changes by ransomware and other malicious software. It works by monitoring protected folders and blocking any application that is not on the approved list from modifying files within them. This is particularly valuable for small business and home office users across Australia who want an extra layer of defence without investing in third-party security software.

By default, Controlled Folder Access protects your standard Windows user folders (Documents, Pictures, Videos, Music, Desktop, and Favourites). You can add additional folders that contain critical business data, such as accounting records, client information, or project files.

Quick Fix Steps

1. Open Windows Security from the Start menu or system tray.
2. Select Virus & threat protection in the left sidebar.
3. Scroll down and click Manage ransomware protection.
4. Toggle Controlled folder access to On.
5. Confirm the User Account Control prompt if it appears.

Detailed Instructions

Enabling Controlled Folder Access

1. Click the Start button and type Windows Security, then press Enter.
2. In the Windows Security window, click Virus & threat protection.
3. Scroll down to the Ransomware protection section and click Manage ransomware protection.
4. Under Controlled folder access, click the toggle switch to turn it On.
5. If prompted by User Account Control, click Yes to confirm.

Adding Protected Folders

Controlled Folder Access automatically protects your default Windows folders. To add custom folders that contain important business or personal data:

1. On the Ransomware protection page, click Protected folders.
2. Click Add a protected folder.
3. Browse to the folder you want to protect (for example, D:\Business\Invoices) and click Select Folder.
4. Repeat for any additional folders you want to safeguard.

Allowing Trusted Applications

When Controlled Folder Access is enabled, some legitimate applications may be blocked from saving files to protected folders. You can add these applications to the allowed list:

1. On the Ransomware protection page, click Allow an app through Controlled folder access.
2. Click Add an allowed app.
3. Choose Recently blocked apps to select from a list of applications that were recently prevented from making changes, or choose Browse all apps to locate the executable file manually.
4. Select the application and click Open.

Reviewing Block History

1. On the Ransomware protection page, click Block history.
2. Review the list of blocked applications and the folders they attempted to access.
3. If you recognise and trust a blocked application, click Actions and select Allow on device.
4. If you do not recognise the application, leave it blocked and consider running a full scan with Windows Security.

Troubleshooting

An application cannot save files to a protected folder

This is expected behaviour when Controlled Folder Access is enabled. The application must be added to the allowed list:

• Open Windows Security > Virus & threat protection > Manage ransomware protection.
• Click Allow an app through Controlled folder access.
• Add the application using Recently blocked apps or Browse all apps.

Controlled Folder Access keeps turning off

Some third-party antivirus or security software may disable Controlled Folder Access to avoid conflicts. If you are running a third-party antivirus program, check its settings for a similar ransomware protection feature. Alternatively, uninstall the third-party software if you prefer to use Windows Security exclusively.

I cannot find the Ransomware protection section

Ensure your Windows 11 installation is up to date. Open Settings > Windows Update and click Check for updates. Install any pending updates and restart your computer before trying again.

Files are still being modified by unknown applications

If you suspect ransomware or other malware is active on your system despite Controlled Folder Access being enabled, disconnect from the internet immediately and run a full offline scan:

1. Open Windows Security.
2. Click Virus & threat protection.
3. Click Scan options.
4. Select Microsoft Defender Offline scan and click Scan now.
5. Your computer will restart and perform a thorough scan before Windows loads.

Related Articles

• Password reset (Windows login)