Controlled access folder is blocking most actions

I updated my computer to Windows 10 Fall Creator (build 1709), and now I am suffering from the Controlled Access Folder feature. I would like to keep this featured enabled because of all its security and protection purposes; however, almost any action I want to take is being blocked by it. I couldn't use atom IDE to save my code; I couldn't use gnuplot to print and save my plots; I couldn't create new folders. For some of these, I was able to find the applications that needed permission and allowed them through the folder access control manually to restore normal operation. However, for some other operations I wasn't able to find all the necessary components to white-list.

Other people who updated don't seem to have any issues, and my issue is pretty annoying. Does anyone else experience this? Or perhaps, someone can suggest a way to keep this feature enabled while getting rid of this issue.

Ptheguy

Posted 2017-10-24T18:03:16.027

Reputation: 153

Answers

Use the PowerShell script documented in the following page. You can quickly allow all (or selected) blocked apps.

Allow all blocked apps to Controlled folder access (interactively) using PowerShell

The PowerShelll script shows the list of blocked apps (read from the event log) and allows you to whitelist them en masse.

w32sh

Posted 2017-10-24T18:03:16.027

Reputation: 8 611

Some blocked items do not show up on on the blocked list. – chx101 – 2019-10-02T16:32:55.930

You should review your Event Viewer logs for the event IDs: 5007; 1123; 1124. Specifically 1123 (Audited Events) and 1124 (Blocked Events).

If you need to fine tune the feature, then you should put it in audit mode and then monitor for events to determine which programs need to be whitelisted.

From within an administrative PowerShell window, the following command puts it in audit mode:

Set-MpPreference -EnableControlledFolderAccess AuditMode

The following command will fully enable controlled folder access once it is fine tuned:

Set-MpPreference -EnableControlledFolderAccess Enabled

https://docs.microsoft.com/en-us/windows/threat-protection/windows-defender-exploit-guard/evaluate-controlled-folder-access

Appleoddity

Posted 2017-10-24T18:03:16.027

Reputation: 9 360

Sorry this is a bit beyond my knowledge with windows. I am looking through Event Viewer and can't locate IDs: 1123 and 1124. – Ptheguy – 2017-10-24T18:34:11.300

So I downloaded the file from the microsoft link so to only view the relevant IDs. Are you suggesting that I should regularly check this place and manually white-list the apps it blocks until I restore normal operation through out the whole windows environment? Isn't there a better way? Maybe a command that would white-list all executables currently installed? – Ptheguy – 2017-10-24T19:08:55.197

@Ptheguy - what's the point of whitelisting all apps that You have on pc? In that case just turn off Windows Folder Protection - the result will be the same, but-and You will be without the protection. – integratorIT – 2018-04-08T19:53:18.283

Add your IDE under all "an app or feature through Windows Defender Firewall" under control panel. Ensure to add java.exe. move your database in a folder directly under your C drive. Move your programming project folder to C drive also. This should work with no issues. Thank you.

Evans Mwila

Posted 2017-10-24T18:03:16.027

Reputation: 1