How to Allow Apps in Windows 11 Controlled Folder Access

Understanding 🪟 Windows 11 Controlled Folder Access

Windows 11 controlled folder access is a security tool that protects your important files from unwanted changes, especially from ransomware that tries to lock up your data.

Why do this?

Sometimes, Windows 11 blocks a safe app because it thinks the app is a threat. By adding that app to your allowed list, you tell Windows that the program is safe to use. This keeps your files protected while letting your trusted apps work normally.

What happens when done?

Once you add an app to the list, it can read and write to your protected folders without being blocked. Ransomware will still be blocked by default, keeping your data safe from being locked by hackers.

Allowing apps through Controlled folder access

Windows 11 controlled folder access might block an app you trust, but you can easily add it to the allowed list through Windows Security settings.

1. Click 🔍 the search box on 🖥️ your taskbar, type Windows Security, and click Windows Security.

2. Click Virus & threat protection.

   

3. Look for Ransomware protection and click Manage ransomware protection.

   

4. Make sure Controlled folder access is turned On.

   

5. Click the link that says Allow an app through Controlled folder access.

   

6. Click Add an allowed app. Find the program you want to allow on your computer and click Open.

   

Managing access with PowerShell (Admin)

Note: This section requires admin privileges.

You can use PowerShell to quickly whitelist applications. Open PowerShell as an administrator and use the following command:

Add-MpControlledFolderAccessAllowedApplication -ApplicationPath "C:\Path\To\Your\App.exe"

This command adds the specified executable to the whitelist, allowing it to bypass the restriction immediately.

Managing access with Registry (Admin)

Note: This section requires admin privileges.

Advanced users can modify the registry to manage allowed apps. Navigate to 🗝️HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\Controlled Folder Access\AllowedApplications. You can add a new string value here with the full path of your application.copy

Troubleshooting and Event Viewer

When Windows 11 controlled folder access blocks an app, you can check the Event Viewer to see exactly which program was stopped, helping you troubleshoot the issue.

Enterprise and MDM Deployment

In a business environment, IT administrators use Microsoft Defender for Endpoint and Attack Surface Reduction (ASR) rules to manage these settings across many computers. Using Intune or Group Policy, admins can push a centralized list of allowed applications to ensure consistent threat prevention across the entire organization.

Summary

Controlled folder access is a vital layer of data security. By managing your allowed apps through the GUI, PowerShell, or Registry, you ensure that legitimate software functions correctly while keeping ransomware at bay. Always check the Event Viewer if you suspect a legitimate app is being blocked.