How to Enable or Disable Controlled Folder Access for Microsoft Defender Antivirus in Windows 11
You enable or disable Controlled Folder Access in Windows 11 to protect your important files from ransomware and other malicious apps using Microsoft Defender Antivirus.
Controlled Folder Access is a security feature that prevents unauthorized applications from modifying files in your chosen protected folders, like Documents or Pictures.
This feature works by maintaining a list of trusted applications that are allowed to access these sensitive locations.
For example, if a new, untrusted app attempts to write to your Documents folder, Controlled Folder Access will block the action and notify you, safeguarding your data from potential threats like ransomware, which can lock your files and demand payment.
You need administrator privileges and Real-time Protection enabled in Microsoft Defender to manage this setting.
Open Windows Security, navigate to Virus & threat protection, then Manage ransomware protection. Toggle Controlled folder access On or Off. Alternatively, use the command line with Set-MpPreference -EnableControlledFolderAccess [Enabled/Disabled].
Option 1Use Windows Security Settings
You can easily turn controlled folder access on or off in Windows 11 using the built-in Windows Security app.Option 2Use Command Line
- ⚠️ Admin Required: Open Windows Terminal (Admin) and choose either Windows PowerShell or Command Prompt.
- Copy and paste one of the commands below, then press Enter:
- To Turn On Controlled Folder Access:
Set-MpPreference -EnableControlledFolderAccess Enabled - To Turn Off Controlled Folder Access (default):
Set-MpPreference -EnableControlledFolderAccess Disabled
- To Turn On Controlled Folder Access:
- Close Windows Terminal when finished.
Option 3Use Local Group Policy Editor
Windows 11 Pro, Enterprise, and Education users can manage controlled folder access using the Local Group Policy Editor, a tool that lets you change computer settings.
- ⚠️ Admin Required: Open the Local Group Policy Editor (gpedit.msc).
- In the left panel, navigate to this location:
Computer Configuration\Administrative Templates\Windows Components\Microsoft Defender Antivirus\Microsoft Defender Exploit Guard\Controlled folder access - In the right panel, double-click the Configure Controlled folder access policy.
To Turn Off Controlled Folder Access:
- Select Enabled.
- In the Configure the guard my folders feature dropdown, select Disable (Default).
- Click OK.
To Use Default Settings:
- Select Not Configured.
- Click OK.
Option 4Use Registry Editor
⚠️ Admin Required: Use this method on all Windows 11 editions, including Home.
To Always Turn On Controlled Folder Access:
Click the Download button below to download the file, then follow the installation steps.
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Controlled Folder Access" /v EnableControlledFolderAccess /t REG_DWORD /d 1 /f
To Turn Off Controlled Folder Access:
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Controlled Folder Access" /v EnableControlledFolderAccess /t REG_DWORD /d 0 /f
To Use Default Settings:
reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Controlled Folder Access" /v EnableControlledFolderAccess /f
Summary
Controlled folder access in Windows 11 is a security tool that stops bad apps from changing your important files, like documents and photos, protecting them from ransomware.
Why should you use it? It protects your important documents and personal files from ransomware and other malicious software.
How do you turn it on? You have four options: use Windows Security settings, run a command, edit Group Policy (Pro/Enterprise/Education only), or edit the Registry. All methods require administrator access.
What happens when it is on? Trusted apps can access your protected folders normally. Untrusted apps are blocked, and you receive a warning when they try to access protected files.
Can I turn controlled folder access off?
Windows Security (GUI) method: Use the Windows Security app to quickly enable or disable Controlled Folder Access on a single device by toggling it under Ransomware Protection, provided Microsoft Defender is fully enabled.
Is controlled folder access worth it?
Controlled folder access is a feature that helps protect your documents and files from modification by suspicious or malicious apps. It's especially useful in helping protect against ransomware that attempts to encrypt your files and hold them hostage.
Was this guide helpful?
About the Author
Richard
Tech Writer, IT Professional
Richard, a writer for Geek Rewind, is a tech enthusiast who loves breaking down complex IT topics into simple, easy-to-understand ideas. With years of hands-on experience in system administration and enterprise IT operations, he’s developed a knack for offering practical tips and solutions. Richard aims to make technology more accessible and actionable. He's deeply committed to the Geek Rewind community, always ready to answer questions and engage in discussions.
No comments yet — be the first to share your thoughts!