Tuesday, November 14, 2017

Windows Fall Creators Update Controlled Folder Access

 Ransomware threats are growing. Microsoft is providing some protection.

 With the Fall Creators Update, Windows 10 users can enable Controlled Folder Access.

 While this feature, when enabled, offers some protections be aware the ransomware will still be a threat. To make yourself safer use 3-2-1 backup.
  3 copies of your important files
  2 separate media
  1 copy offline (except when doing the backup for offline storage)

 As mentioned the Controlled Folder Access feature is off by default. Also, the feature is provided by the Fall Creators Update.

 The feature has a list of files and folders and a list of approved applications that can modify that list of files and folders. Users can add or remove the list of files and folders   or the list of applications allowed access. The goal is to allow file and folder access as normal, but to prevent ransomware or malware from any modifications. The feature may work for you as intended, but you may need to tune the list of applications or files & folders. I expect ramsomware to bypass the feature in future as well as Microsoft updating the feature to those ransomware changes.

 To enable the feature use the Windows Defender Security Center. Type defender into the Cortana search box.


Click on Virus and threat protection



Then Virus and threat protection settings


Now set Controlled folder access to On as shown above.

You can view and edit the protected files and folders list

and the application list


Note: If the button to turn on Controlled folder access is grayed out, you may have a conflict with another security application or security suite and Windows Defender.

 Other tutorials on Controlled folder access are on the Internet and YouTube. 

 Beware: A tactic ransomware could employ to gain access to files and folders to encrypt and require a ransom is to spoof the name of the application to have you enable that access.

No comments:

Post a Comment