How to Allow Apps in Windows 11 Controlled Folder Access

Understanding 🪟 Windows 11 Controlled Folder Access

Windows 11 controlled folder access is a security tool that protects your important files from unwanted changes, especially from ransomware that tries to lock up your data.

Why do this?

Sometimes, Windows 11 blocks a safe app because it thinks the app is a threat. By adding that app to your allowed list, you tell Windows that the program is safe to use. This keeps your files protected while letting your trusted apps work normally.

What happens when done?

Once you add an app to the list, it can read and write to your protected folders without being blocked. Ransomware will still be blocked by default, keeping your data safe from being locked by hackers.

Allowing apps through Controlled folder access

Windows 11 controlled folder access protects your files from unauthorized changes, but it can sometimes block trusted programs. You can fix this by adding the blocked app to your allowed apps list through the Windows Security app, which lets the program run normally while keeping your computer secure.

1. Click the search box on your taskbar, type Windows Security, and click Windows Security.

   

2. Click Virus & threat protection.

   

3. Look for Ransomware protection and click Manage ransomware protection.

   

4. Make sure Controlled folder access is turned On.

   

5. Click the link that says Allow an app through Controlled folder access.

   

6. Click Add an allowed app. Find the program you want to allow on your computer and click Open.

   

Managing access with PowerShell (Admin)

PowerShell (a command-line tool for advanced tasks) lets you manage Windows 11 controlled folder access quickly using text commands instead of clicking through settings menus. You can run a specific command with administrator rights to add an app to your allowed list instantly.

You can use PowerShell to quickly whitelist applications for Controlled Folder Access in Windows 11. Open PowerShell as an administrator, which gives you special permissions, and use the following command to add an application to the allowed list.

The command you use adds the specified executable to the whitelist. This action allows the executable to bypass the Controlled Folder Access restriction immediately. This bypass is crucial for applications like photo editors that need to save files to protected folders on your Windows 11 device.

Managing access with Registry (Admin)

Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\Controlled Folder Access\AllowedApplications. You can add a new string value here with the full path of your application.

Troubleshooting and Event Viewer

When Windows 11 controlled folder access blocks an app, you can check the Event Viewer to see exactly which program was stopped, helping you troubleshoot the issue.

Enterprise and MDM Deployment

In a business environment, IT administrators use Microsoft Defender for Endpoint and Attack Surface Reduction (ASR) rules to manage these settings across many computers. Using Intune or Group Policy, admins can push a centralized list of allowed applications to ensure consistent threat prevention across the entire organization.

Summary

Controlled folder access is a vital layer of data security. By managing your allowed apps through the GUI, PowerShell, or Registry, you ensure that legitimate software functions correctly while keeping ransomware at bay. Always check the Event Viewer if you suspect a legitimate app is being blocked.