From c7ba41797dccfddce2b92f2aab52d8835015ddf8 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Wed, 8 Jul 2020 16:25:45 -0700 Subject: [PATCH 1/5] Updates per TASK 4260123 --- .../customize-controlled-folders.md | 12 ++++++++---- 1 file changed, 8 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md index 6a0da83f4f..0b34ad2183 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md +++ b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md @@ -37,7 +37,7 @@ This topic describes how to customize the following settings of the controlled f ## Protect additional folders -Controlled folder access applies to a number of system folders and default locations, including folders such as Documents, Pictures, Movies, and Desktop. +Controlled folder access applies to a number of system folders and default locations, including folders such as Documents, Pictures, and Movies. You can add additional folders to be protected, but you cannot remove the default folders in the default list. @@ -51,11 +51,15 @@ You can use the Windows Security app or Group Policy to add and remove additiona 1. Open the Windows Security app by clicking the shield icon in the task bar or searching the start menu for **Defender**. -2. Click the **Virus & threat protection** tile (or the shield icon on the left menu bar) and then click **Ransomware protection**: +2. Click the **Virus & threat protection** tile (or the shield icon on the left menu bar) and then scroll down to the **Ransomware protection** section. -3. Under the **Controlled folder access** section, click **Protected folders** +3. Click the **Manage ransomware protection** link to open the **Ransomware protection** pane. -4. Click **Add a protected folder** and follow the prompts to add apps. +4. Under the **Controlled folder access** section, click the **Protected folders** link. + +5. Click **Yes** on the **User Access Control** prompt. The **Protected folders** pane displays. + +4. Click **Add a protected folder** and follow the prompts to add folders. ### Use Group Policy to protect additional folders From 13fea9536330b5cdbdcd80b279a494b920059c7f Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Thu, 9 Jul 2020 16:19:19 -0700 Subject: [PATCH 2/5] Added a section for default protected folders --- .../controlled-folders.md | 28 +++++++++++++++++++ 1 file changed, 28 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md b/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md index 6efcb63fd5..91950a7343 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md +++ b/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md @@ -82,6 +82,34 @@ Event ID | Description 1124 | Audited controlled folder access event 1123 | Blocked controlled folder access event +## Default folders protected by controlled folder access +Windows system folders are protected by default. In addition, there are several folders that are protected by controlled folder access by default. You can configure additional folders as protected, but cannot remove the default folders from the controlled folder access protection. See [Protect additional folders](customize-controlled-folders.md#protect-additional-folders) for more information. + +Here's the list of default protected folders: +- %USERPROFILE%\Documents +- %USERPROFILE%\Favorites +- %USERPROFILE%\Music +- %USERPROFILE%\Pictures +- %USERPROFILE%\Videos +- %PUBLIC%\Documents +- %PUBLIC%\Music +- %PUBLIC%\Pictures +- %PUBLIC%\Videos + +You can use the Windows Security app to display the list of default folders protected by controlled folder access: + +1. Open the Windows Security app by clicking the shield icon in the task bar or searching the start menu for **Defender**. + +2. Click the **Virus & threat protection** tile (or the shield icon on the left menu bar) and then scroll down to the **Ransomware protection** section. + +3. Click the **Manage ransomware protection** link to open the **Ransomware protection** pane. + +4. Under the **Controlled folder access** section, click the **Protected folders** link. + +5. Click **Yes** on the **User Access Control** prompt. + + The **Protected folders** pane displays the folders that are protected by default. + ## In this section Topic | Description From 0ee539afc1f57886181f6cfd08907396cefdb164 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Fri, 10 Jul 2020 08:42:36 -0700 Subject: [PATCH 3/5] minor update --- .../microsoft-defender-atp/controlled-folders.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md b/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md index 91950a7343..9fd138309e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md +++ b/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md @@ -96,7 +96,7 @@ Here's the list of default protected folders: - %PUBLIC%\Pictures - %PUBLIC%\Videos -You can use the Windows Security app to display the list of default folders protected by controlled folder access: +You can use the Windows Security app to view the list of default folders protected by controlled folder access: 1. Open the Windows Security app by clicking the shield icon in the task bar or searching the start menu for **Defender**. From 8d9ca432a1947dbcf8c681c21a917a7a638d19cc Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Dec 2020 11:56:24 -0800 Subject: [PATCH 4/5] Update microsoft-defender-antivirus-compatibility.md --- .../microsoft-defender-antivirus-compatibility.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md index 3264d39c1e..c9bb2217ed 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md @@ -13,7 +13,7 @@ ms.author: deniseb ms.custom: nextgen ms.reviewer: manager: dansimp -ms.date: 12/07/2020 +ms.date: 12/08/2020 --- # Microsoft Defender Antivirus compatibility @@ -72,7 +72,7 @@ The following table summarizes the functionality and features that are available |State |[Real-time protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-real-time-protection-microsoft-defender-antivirus) and [cloud-delivered protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus) | [Limited periodic scanning availability](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/limited-periodic-scanning-microsoft-defender-antivirus) | [File scanning and detection information](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/customize-run-review-remediate-scans-microsoft-defender-antivirus) | [Threat remediation](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-remediation-microsoft-defender-antivirus) | [Security intelligence updates](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus) | |--|--|--|--|--|--| |Active mode

|Yes |No |Yes |Yes |Yes | -|Passive mode |No |No |Yes |Only during [scheduled or on-demand scans](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/scheduled-catch-up-scans-microsoft-defender-antivirus) |Yes | +|Passive mode |Yes |No |Yes |Only during [scheduled or on-demand scans](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/scheduled-catch-up-scans-microsoft-defender-antivirus) |Yes | |[EDR in block mode enabled](../microsoft-defender-atp/edr-in-block-mode.md) |No |No |Yes |Yes |Yes | |Automatic disabled mode |No |Yes |No |No |No | From ffadba68830ff65f73836057d5b6a22a2506bf89 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Dec 2020 11:59:31 -0800 Subject: [PATCH 5/5] Update microsoft-defender-antivirus-compatibility.md --- .../microsoft-defender-antivirus-compatibility.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md index c9bb2217ed..355486f404 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md @@ -104,3 +104,4 @@ If you uninstall the other product, and choose to use Microsoft Defender Antivir - [EDR in block mode](../microsoft-defender-atp/edr-in-block-mode.md) - [Configure Endpoint Protection](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection-configure) - [Configure Endpoint Protection on a standalone client](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection-configure-standalone-client) +- [Learn about Microsoft 365 Endpoint data loss prevention](https://docs.microsoft.com/microsoft-365/compliance/endpoint-dlp-learn-about?view=o365-worldwide)