deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-06-19 04:13:41 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Update customize-controlled-folders.md

Browse Source
This commit is contained in:
Denise Vangel-MSFT
2020-12-16 14:09:19 -08:00
parent cd77fa9eaa
commit bfdfe38a07
1 changed files with 2 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md
View File

@ -36,12 +36,10 @@ This article describes how to customize the following settings of the controlled
## Protect additional folders ## Protect additional folders
Controlled folder access applies to a number of system folders and default locations, including folders such as Documents, Pictures, and Movies. Controlled folder access applies to a number of system folders and default locations, including folders such as Documents, Pictures, and Movies.
You can add additional folders to be protected, but you cannot remove the default folders in the default list. You can add additional folders to be protected, but you cannot remove the default folders in the default list.
Adding other folders to controlled folder access can be useful. Some use-cases include if you don't store files in the default Windows libraries, or you've changed the location of the libraries away from the defaults. Adding other folders to controlled folder access can be useful. Some use-cases include if you don't store files in the default Windows libraries, or you've changed the location of the libraries away from the defaults.
You can also enter network shares and mapped drives. Environment variables and wildcards are supported. For information about using wildcards, see [Use wildcards in the file name and folder path or extension exclusion lists](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus#use-wildcards-in-the-file-name-and-folder-path-or-extension-exclusion-lists). You can also enter network shares and mapped drives. Environment variables and wildcards are supported. For information about using wildcards, see [Use wildcards in the file name and folder path or extension exclusion lists](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus#use-wildcards-in-the-file-name-and-folder-path-or-extension-exclusion-lists).
@ -62,7 +60,6 @@ You can use the Windows Security app or Group Policy to add and remove additiona
4. Click **Add a protected folder** and follow the prompts to add folders. 4. Click **Add a protected folder** and follow the prompts to add folders.
### Use Group Policy to protect additional folders ### Use Group Policy to protect additional folders
1. On your Group Policy management computer, open the [Group Policy Management Console](https://technet.microsoft.com/library/cc731212.aspx), right-click the Group Policy Object you want to configure and select **Edit**. 1. On your Group Policy management computer, open the [Group Policy Management Console](https://technet.microsoft.com/library/cc731212.aspx), right-click the Group Policy Object you want to configure and select **Edit**.
@ -82,8 +79,7 @@ You can use the Windows Security app or Group Policy to add and remove additiona
```PowerShell ```PowerShell
Add-MpPreference -ControlledFolderAccessProtectedFolders "<the folder to be protected>" Add-MpPreference -ControlledFolderAccessProtectedFolders "<the folder to be protected>"
``` ```
3. Repeat step 2 until you have added all the folders you want to protect. Folders that are added are visible in the Windows Security app.
Continue to use `Add-MpPreference -ControlledFolderAccessProtectedFolders` to add more folders to the list. Folders added using this cmdlet will appear in the Windows Security app.
![Screenshot of a PowerShell window with the cmdlet above entered](../images/cfa-allow-folder-ps.png) ![Screenshot of a PowerShell window with the cmdlet above entered](../images/cfa-allow-folder-ps.png)