This may impact your organization, so consider to test it first in audit mode. It is possible that it blocks a legitimate app from making changes to your files. For evaluation there is an audit mode that can be used.Ĭontrolled Folder Access monitors apps for activities that may be malicious.It is possible to add additional folders. Default protected folders include common system folders.

Apps can be added manually to the list.Apps determined by Microsoft as friendly are always allowed.

Most of your apps will be allowed by Controlled Folder Access without adding them manually.

Apps are added to the trusted list based upon their prevalence and reputation.

It allows apps to access protected folders if the app is on the trusted apps list.

It helps you protect valuable date from malicious apps and threats such as ransomware. It prevents an application or process in making changes to a file in a given folder.

Controlled Folder Access or CFA is build into Windows Defender on Windows 10 and Windows Server 2019 and is part of Windows Defender. Configuring Controlled Folder Access (CFA) with Intune to protect users against ransomware.

Manage controlled folder access