You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: defender-endpoint/controlled-folders.md
+6-3Lines changed: 6 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -3,7 +3,7 @@ title: Protect important folders from ransomware from encrypting your files with
3
3
description: Files in default folders can be protected from changes through malicious apps. Prevent ransomware from encrypting your files.
4
4
ms.service: defender-endpoint
5
5
ms.localizationpriority: medium
6
-
ms.date: 03/04/2025
6
+
ms.date: 04/15/2025
7
7
author: denisebmsft
8
8
ms.author: deniseb
9
9
audience: ITPro
@@ -38,6 +38,7 @@ search.appverid: met150
38
38
## What is controlled folder access?
39
39
40
40
Controlled folder access helps protect your valuable data from malicious apps and threats, such as ransomware. Controlled folder access protects your data by checking apps against a list of known, trusted apps. Controlled folder access can be configured by using the Windows Security App, Microsoft Endpoint Configuration Manager, or Intune (for managed devices). Controlled folder access is supported on:
41
+
41
42
- Windows 11
42
43
- Windows 10
43
44
- Windows Server 2025
@@ -92,8 +93,10 @@ Default folders appear in the user's profile, under **This PC**, as shown in the
92
93
93
94

94
95
96
+
The same profile folders are also protected for system accounts, such as `LocalService`, `NetworkService`, `systemprofile`, and so on. For example, `C:\Windows\System32\config\systemprofile\Documents` is also protected (if it exists).
97
+
95
98
> [!NOTE]
96
-
> You can configure more folders as protected, but you can't remove the Windows system folders that are protected by default.
99
+
> You can configure more folders as protected, but you can't remove Windows system folders that are protected by default.
97
100
98
101
## Requirements for controlled folder access
99
102
@@ -150,7 +153,7 @@ You can use the Windows Security app to view the list of folders that are protec
150
153
151
154
4. If controlled folder access is turned off, you need to turn it on. Select **protected folders**.
152
155
153
-
5.Do one of the following steps:
156
+
5.Take one of the following steps:
154
157
155
158
- To add a folder, select **+ Add a protected folder**.
156
159
- To remove a folder, select it, and then select **Remove**.
0 commit comments