How to Configure Controlled Folder Access in Windows 11

Controlled Folder Access is a built-in Windows 11 security feature that shields your critical files from unauthorized changes and ransomware attacks. By monitoring the applications that attempt to modify files in protected directories, it blocks unrecognized or malicious executables from locking or altering your personal data. This guide walks you through the steps to enable the feature, add custom folders to the protection list, and whitelist trusted applications that require access.

How to Enable Controlled Folder Access

  1. Open the Start menu, search for Windows Security, and press Enter.
  2. Select Virus & threat protection from the left-hand sidebar or the main dashboard.
  3. Scroll down to the Ransomware protection section at the bottom and click Manage ransomware protection.
  4. Toggle the switch under Controlled folder access to the On position.
  5. Select Yes if prompted by the User Account Control (UAC) dialog.

Once enabled, default system folders such as Documents, Pictures, Videos, Music, and Desktop are automatically protected.

Adding Custom Folders to Protect

If you store important files outside the default Windows user libraries, you can manually add those directories to the protected list:

  1. In the Ransomware protection settings window, click on Protected folders.
  2. Click Add a protected folder.
  3. Browse your file system, select the folder you want to secure, and click Select Folder.

The chosen directory is now monitored, preventing unauthorized software from modifying its contents.

Allowing Safe Applications Through Controlled Folder Access

Legitimate programs may occasionally be blocked from saving or modifying files in protected folders. To grant access to a trusted program:

  1. Return to the Ransomware protection settings page.
  2. Click Allow an app through Controlled folder access.
  3. Click Add an allowed app.
  4. Choose Recently blocked apps to quickly permit software that Windows recently stopped, or select Browse all apps to locate the program’s .exe file manually.
  5. Select the application and confirm your choice.

Viewing Blocked Attempts

To review security events and see which applications were prevented from accessing your data, navigate to Windows Security > Virus & threat protection > Protection history. Any unauthorized attempts blocked by Controlled Folder Access will be logged here, allowing you to identify potential threats or troubleshoot blocked legitimate software.