Typically, commonly used folders, such as those used for documents, pictures, downloads, and so on, are included in the list of controlled folders.Ĭontrolled folder access works with a list of trusted apps. Protected folders are specified when controlled folder access is configured. How does controlled folder access work?Ĭontrolled folder access works by only allowing trusted apps to access protected folders. However, you can view information about controlled folder access blocks in the device timeline view, while using advanced hunting, or with custom detection rules. For example, PowerShell is not trusted by controlled folder access, even if you allow with certificate and file indicators.Ĭontrolled folder access works best with Microsoft Defender for Endpoint, which gives you detailed reporting into controlled folder access events and blocks as part of the usual alert investigation scenarios.Ĭontrolled folder access blocks don't generate alerts in the Alerts queue. Scripting engines are not trusted and you cannot allow them access to controlled protected folders. Supported on Windows Server 2012 R2, Windows Server 2016, Windows Server 2019, Windows Server 2022, Windows 10, and Windows 11 clients, controlled folder access can be turned on using the Windows Security App, Microsoft Endpoint Configuration Manager, or Intune (for managed devices). Controlled folder access protects your data by checking apps against a list of known, trusted apps. What is controlled folder access?Ĭontrolled folder access helps protect your valuable data from malicious apps and threats, such as ransomware. Want to experience Defender for Endpoint? Sign up for a free trial.
Protect important folders with controlled folder access
0 kommentar(er)
