



My best guess is that legitimate, popular programs signed by trusted digital certificates is one evaluated trait of a “friendly” program. I can’t find technical details of what “unfriendly” means, but friendly applications appear to include the major Microsoft programs and many other major vendor programs. Microsoft says Controlled Folder Access, when enabled, prevents changes to protected files and folders by unauthorized and unfriendly programs. The default protected folders include Windows system files and the built-in, common default document and content folders. In a nutshell, Controlled Folder Access will try to prevent “unsafe” applications from modifying protected files, folders and files stored in memory. It even prevents unauthorized writes to disk sectors and files stored in memory. Of course, you should enable with careful testing and custom configuration because it will likely block legitimate programs, some of which could be critical to your computer or organization.Īdded with the Windows 10 Fall Creators Update in 2017 now in Windows Server 2019, Controlled Folder Access is another welcomed, built-in (but not-enabled-by-default) Windows security feature to help prevent ransomware from damaging your files and folders. Controlled Folder Access gives you another way to mitigate the impact of ransomware. Microsoft added a cool, new feature to Microsoft Windows client and server products.
