Merge pull request #4359 from MicrosoftDocs/MDBranchCFADocUpdates

Md branch cfa doc updates

windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md

@@ -109,6 +109,35 @@ After following the procedure, you have created a custom view that shows events
 
 - [Evaluate controlled folder access](evaluate-controlled-folder-access.md). Use a dedicated demo tool to see how controlled folder access works, and what events would typically be created.
 
-- [Enable controlled folder access](enable-controlled-folders.md). Use Group Policy, PowerShell, or mobile device management CSPs to enable and manage controlled folder access in your network
 
-- [Customize controlled folder access](customize-controlled-folders.md). Add additional protected folders, and allow specified apps to access protected folders.
+## Default folders protected by controlled folder access
+Windows system folders are protected by default. In addition, there are several folders that are protected by controlled folder access by default. You can configure additional folders as protected, but cannot remove the default folders from the controlled folder access protection. See [Protect additional folders](customize-controlled-folders.md#protect-additional-folders) for more information.
+
+Here's the list of default protected folders:  
+- %USERPROFILE%\Documents
+- %USERPROFILE%\Favorites
+- %USERPROFILE%\Music
+- %USERPROFILE%\Pictures
+- %USERPROFILE%\Videos
+- %PUBLIC%\Documents
+- %PUBLIC%\Music
+- %PUBLIC%\Pictures
+- %PUBLIC%\Videos
+
+You can use the Windows Security app to view the list of default folders protected by controlled folder access:
+
+1. Open the Windows Security app by clicking the shield icon in the task bar or searching the start menu for **Defender**.
+
+2. Click the **Virus & threat protection** tile (or the shield icon on the left menu bar) and then scroll down to the **Ransomware protection** section.
+
+3. Click the **Manage ransomware protection** link to open the **Ransomware protection** pane.
+
+4. Under the **Controlled folder access** section, click the **Protected folders** link.
+
+5. Click **Yes** on the **User Access Control** prompt. 
+
+    The **Protected folders** pane displays the folders that are protected by default.
+
+## In this section
+
+ [Customize controlled folder access](customize-controlled-folders.md). Add additional protected folders, and allow specified apps to access protected folders.

windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md

@@ -37,7 +37,11 @@ This article describes how to customize the following settings of the controlled
 
 ## Protect additional folders
 
-Controlled folder access applies to a number of system folders and default locations, such as Documents, Pictures, Movies, and Desktop. You can add additional folders to be protected, but you can't remove the default folders in the default list.
+
+Controlled folder access applies to a number of system folders and default locations, including folders such as Documents, Pictures, and Movies.
+
+You can add additional folders to be protected, but you cannot remove the default folders in the default list.
+
 
 Adding other folders to controlled folder access can be useful. Some use-cases include if you don't store files in the default Windows libraries, or you've changed the location of the libraries away from the defaults.
 
@@ -49,11 +53,17 @@ You can use the Windows Security app or Group Policy to add and remove additiona
 
 1. Open the Windows Security app by selecting the shield icon in the task bar or searching the start menu for **Defender**.
 
-2. Select the **Virus & threat protection** tile (or the shield icon on the left menu bar) and then select **Ransomware protection**.
 
-3. Under the **Controlled folder access** section, select **Protected folders**.
+2. Click the **Virus & threat protection** tile (or the shield icon on the left menu bar) and then scroll down to the **Ransomware protection** section.
+
+3. Click the **Manage ransomware protection** link to open the **Ransomware protection** pane.
+
+4. Under the **Controlled folder access** section, click the **Protected folders** link.
+
+5. Click **Yes** on the **User Access Control** prompt. The **Protected folders** pane displays.
+
+4. Click **Add a protected folder** and follow the prompts to add folders.
 
-4. Select **Add a protected folder** and follow the prompts to add apps.
 
 ### Use Group Policy to protect additional folders