How to Manage App Permissions for Documents, Pictures and Videos in Windows 11 Privacy Settings

What these permissions control, and what they don’t

The Documents, Pictures and Videos pages control apps from the Microsoft Store or packaged apps—the modern app format that Windows can isolate from your system. When you block one of these apps, Windows stops it from browsing or reading that library on its own.

• Traditional desktop programs are not controlled here. Programs installed with an .exe or .msi installer, such as older editors or installers you download from vendor sites, run with your account’s file access. They do not appear in these lists, and the switches do not affect them. The Controlled folder access section later in this article covers that case.
• Files you pick yourself still open. If you block an app and then choose a file in its Open dialog, the app can read that one file. Blocking stops the app from reaching into the library by itself. It does not stop it from receiving a file you hand over.
• The settings ⚙️ belong to your account. Another user on the same PC has their own settings.

The File system page, further down the same list, is a separate permission with its own app list. It covers broader access to files on the PC, so it is a different switch from the three library pages.

Before you start

The per-user switches on these pages do not need administrator privileges on a standard personal PC. The one exception in this article is Controlled folder access, which does need administrator approval. That step is marked.

If the PC is managed by a school or employer, some switches may be locked. The troubleshooting section below covers what you will see.

How to open the Documents, Pictures or Videos permission page

This section gets you to the right page. Do it once and repeat it for each library you want to change.

1. Open Settings by pressing Win + I.

   

2. Select Privacy & security in the left pane. The right pane shows privacy options in groups.

   

3. Scroll to the App permissions group.

   

4. Select Documents, Pictures or Videos. The page opens with a main switch at the top and a list of apps below it.

If you cannot find the page by scrolling, use the shortcuts instead. Press Win + R, type one of the following, and press Enter:

• ms-settings:privacy-documents
• ms-settings:privacy-pictures
• ms-settings:privacy-videos

The Settings window opens directly on that page. If nothing happens, check that you typed the colon and the hyphen exactly as shown.

How to block every app from a library

Use this when you want no Microsoft Store app to touch a library, for example your Documents folder. The main switch overrides the individual app switches.

1. Open the page for the library, as described above.
2. Find the main switch at the top of the page. Its label is a variation of "let apps access your documents library" (or pictures, or videos). The exact wording differs slightly between Windows 11 builds.
3. Set the switch to Off. The individual app switches below it turn grey and become unavailable.
4. Close Settings. The change applies immediately and you do not need to restart Windows.

Close and reopen any app you want to test.

Expect some apps to complain after this. Apps that exist to work with your files, such as photo viewers, video players and some note-taking apps, may show an empty library or a message that they cannot access your files. If an app you rely on stops working properly, turn the main switch back on and block individual apps instead.

How to allow or block individual apps

Use this when you want most apps to keep working and only restrict specific ones. It gives you finer control than the main switch.

1. Open the page for the library you want to change.
2. Check that the main switch is set to On. If it is off, the app list is greyed out and you cannot change individual apps.
3. Scroll through the app list below the main switch. Each entry shows the app name and its own switch.
4. Set the switch next to an app to Off to block it, or On to allow it.
5. Close and reopen the app you changed. It then follows the new setting.

The change takes effect for that app only. The other apps in the list keep their current setting.

When you block an app that was already using the library, it may show an error, an empty folder view, or a prompt to grant access. That is normal. If the app crashes instead of showing a message, turn its switch back on and check the app's own support page.

How to review who has access across all three libraries

Each library has its own list, so an app can be allowed in Pictures and blocked in Documents. Review all three to see the full picture.

1. Open Documents under Privacy & security and note which apps are set to On.
2. Go back and open Pictures. Compare the list with the one you just saw.
3. Go back and open Videos and do the same.
4. Open File system in the same App permissions group and check that list as well. An app that you block in the three library pages can still appear here with its own access.

Look for apps you do not recognise or no longer use. If you no longer need an app at all, uninstalling it removes its permissions entry. Blocking only stops that one kind of access.

Why an app is missing from the list

Several things cause this, and they are easy to mix up.

• It is a desktop program. As explained above, programs installed the traditional way never appear on these pages. Their access is not managed here.
• The app does not request that library. The list shows apps that have declared they use it. An app that only touches its own storage has nothing to show.
• The list is not fully loaded. Close Settings and reopen the page. If the app was installed recently, it can take a moment to show.
• The app was installed for another user. Settings shows apps for the account you are signed in to. Sign in to the account that has the app.

If you are sure the app is from the Microsoft Store and it still does not appear, official documentation does not list other known causes. Check the app's own settings, which sometimes have a separate option for the folders it can read.

Why the switches are greyed out or say settings are managed

Two different situations look similar.

The main switch is off. The app list is greyed out because the main switch overrides it. Turn the main switch on, then adjust individual apps.

A policy controls the setting. A notice at the top of the page says some settings are managed by your organisation. The switches will not respond to changes. This happens on work or school PCs and on PCs where an administrator applied a policy. You cannot change these from Settings. Ask whoever manages the PC. Windows Home and Pro both honour these policies, so the edition does not decide whether you are affected.

How to restrict desktop programs with Controlled folder access

The library pages cannot stop a desktop program from reading your files. Controlled folder access, a Windows Security feature that guards chosen folders against unapproved programs, is the closest built-in tool. It is designed to stop ransomware (malware that locks your files), so it blocks unapproved programs from changing protected folders. It is not a general read-blocking tool. Windows protects Documents, Pictures and Videos by default when you turn it on.

This step requires administrator privileges, and Windows may ask you to approve a prompt.

1. Open the Start menu, type Windows Security, and press Enter.
2. Select Virus & threat protection.

   

3. Under Ransomware protection, select Manage ransomware protection.

   

4. Set Controlled folder access to On. Approve the User Account Control prompt if it appears.

If Ransomware protection is missing or the switch is locked, a third-party antivirus program may be managing protection, or a policy applies. In that case Windows Security cannot change it.

Once the feature is on, a trusted program that is blocked from saving to a protected folder triggers a notification. You can allow that program through the Allow an app through Controlled folder access option on the same page.

How to undo the changes

Every change on these pages can be reversed at the same place where you made it.

1. Open Settings, then Privacy & security, then the Documents, Pictures or Videos page.
2. Set the main switch back to On if you turned it off.
3. Set any individual app switches you changed back to On.
4. Close and reopen the affected app so it picks up the restored access.

To undo Controlled folder access, set the Controlled folder access switch back to Off in Windows Security. This also needs administrator approval.

What to do next

If an app still opens your files after you block it, check the File system page under App permissions, since that is a separate permission with its own list. If the app is a traditional desktop program, none of these switches apply to it, and Controlled folder access or removing the program are the remaining options. Once you have settled the file permissions, the Camera and Microphone pages in the same App permissions group work the same way and are the closest task to move on to.