Windows 10/11 built-in Ransomware Protection (Controlled Folder Access) and CryptoPrevent

(repost)  CryptoPrevent version 21.7.23 adds a new setting for “Controlled Folder Access” which is not a CryptoPrevent protection but a newer protection provided by Windows 10 and Windows 11, so the setting will now appear in CryptoPrevent on these operating systems. We’ve determined that when configured properly, Controlled Folder Access works very well with CryptoPrevent to block unknown ransomware threats.  It works by blocking all unknown applications from accessing data in protected folders on your hard drive (by default the “user” folders such as Documents, Pictures, Desktop, etc. are protected.)

It is important to note that the new setting in CryptoPrevent for Controlled Folder Access is independent of other CryptoPrevent settings, and not part of a CryptoPrevent Protection Plan.  The setting is not normally known in Windows and therefore CryptoPrevent wishes to bring it to your attention as another layer of defense against ransomware.  We do recommend you enable the setting through CryptoPrevent if you wish to try it out, because CryptoPrevent will automatically add the necessary whitelist entries for itself so that Controlled Folder Access and CryptoPrevent’s FolderWatch/HoneyPot work well together.

Once the setting is enabled through CryptoPrevent (you do NOT need to click the Apply Protections button after selecting the checkbox, by putting the check in the box you are enabling Controlled Folder Access) you may click the “Configure” button to open Controlled Folder Access settings in Windows Security, where you can add additional allowed applications, or even more protected folders.  You will want to familiarize yourself with area this because you may discover after enabling the setting, your 3rd party (non-Windows included) programs that edit documents or pictures will no longer be able to save data to your protected folders.  You will be notified by Windows in the notification area when Controlled Folder Access blocks a program, and you will be able to make note of the program and add it to the allowed programs through Controlled Folder Access settings in Windows Security, as mentioned above.

For more information about Controlled Folder Access from Microsoft, please see this link or this link for more.