Author Topic: Windows Defender "Controlled folder access" woes  (Read 352 times)

0 Members and 1 Guest are viewing this topic.

Offline Digerati

  • LzD Friends
  • Hero Member
  • *****
  • Posts: 828
    • View Profile
Windows Defender "Controlled folder access" woes
« on: November 09, 2017, 12:44:43 PM »
Rather than run the Pale Moon Security Updates thread further OT, I thought I better start a new thread.

As noted in that thread, Windows Defender's new anti-ransomware feature that came in the Fall Creators Update was blocking Pale Moon from making unauthorized changes to my users\me\desktop folder. The new feature, "Controlled folder access", designed to protect us, may be too restrictive for many, I fear. I wonder if MS feels the same since the new feature is disabled by default.

I added Palm Moon to the white list, easy enough - if you know your way around File Manager. Not everyone does.

Yesterday, I got the security warning for IE. :( I can only imagine MS did not pre-white list IE because they want [to force?] everyone to move to Edge.

Today, I could not save a new entry in my password manager. That was a little frustrating because that executable was buried deep and does not have an obvious name. And sadly the "Controlled folder access" popup warning did not tell me the file name. Fortunately (in a backwards sort of way), my password manager crashed when I tried to save the entry and popped up its own error message telling me the file name and path affected so I could white list it.

I applaud MS for taking the initiative to make WD an even stronger anti-malware solution, but this new feature (at least the management/configuration process) clearly has some very rough edges MS needs to smooth out. But, with ransomware attacks on the rise, they better do it quick or for sure, the the attention seeking "wannabe journalists" in the IT press and the MS bashers will surely bash MS for failing to do something about it. 
Bill (AFE7Ret)
Freedom is NOT Free!
2007 - 2018

Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 18301
  • "Stronger than the past, united in our goal."
    • View Profile
    • Security Garden
Re: Windows Defender "Controlled folder access" woes
« Reply #1 on: November 09, 2017, 05:40:14 PM »
Coincidentally, just published, Microsoft partners extend Windows Defender ATP across platforms - Windows For Your BusinessWindows For Your Business

Quote
Organizations often use computers, operating systems, and databases from a variety of vendors. That’s why today, we’re excited to announce three leading security companies – Bitdefender, Lookout, and Ziften – are partnering with us to enable Windows Defender Advanced Threat Protection (ATP) to detect, protect, and respond to security threats on macOS, Linux, iOS, and Android devices.


Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Offline Aaron Hulett

  • Administrator
  • Hero Member
  • *****
  • Posts: 1434
  • Schrödinger's cat walks into a bar... and doesn't.
    • View Profile
    • My Site
Re: Windows Defender "Controlled folder access" woes
« Reply #2 on: November 09, 2017, 05:58:15 PM »
I couldn't update graphics drivers from Nvidia with this turned on. I promptly turned it off; it's not ready for home users IMHO.

Maybe that's because it's not targeted for home users? At least not now? Idunno.

Offline techie

  • LzD Friends
  • Hero Member
  • *****
  • Posts: 503
    • View Profile
Re: Windows Defender "Controlled folder access" woes
« Reply #3 on: November 09, 2017, 06:44:40 PM »
I ran into this with a few programs. Had to turn it off to upgrade them. The one I'm still scratching my head on is why MS word was being blocked and not whitelisted. I would hate to be a IT deploying this on numerous systems.

Offline Digerati

  • LzD Friends
  • Hero Member
  • *****
  • Posts: 828
    • View Profile
Re: Windows Defender "Controlled folder access" woes
« Reply #4 on: November 10, 2017, 02:01:52 PM »
Quote
Maybe that's because it's not targeted for home users? At least not now? Idunno.
I think it is hard to put a label on what a "home user" is. This is a feature in Windows 10 Pro. Does that suggest "Pro" is not for home users?

And again, it is disabled by default so I agree, at least for now, it is not ready for prime time. That said, I am keeping it enabled, for now.

My MS Word was not blocked (2007).

Bill (AFE7Ret)
Freedom is NOT Free!
2007 - 2018

Offline techie

  • LzD Friends
  • Hero Member
  • *****
  • Posts: 503
    • View Profile
Re: Windows Defender "Controlled folder access" woes
« Reply #5 on: November 13, 2017, 09:43:52 PM »
Quote
Maybe that's because it's not targeted for home users? At least not now? Idunno.
I think it is hard to put a label on what a "home user" is. This is a feature in Windows 10 Pro. Does that suggest "Pro" is not for home users?

And again, it is disabled by default so I agree, at least for now, it is not ready for prime time. That said, I am keeping it enabled, for now.

My MS Word was not blocked (2007).

It is available in Windows 10 Home as well, disabled by default. I'm using it. My MS word is part Office 2010.

Offline techie

  • LzD Friends
  • Hero Member
  • *****
  • Posts: 503
    • View Profile
Re: Windows Defender "Controlled folder access" woes
« Reply #6 on: November 13, 2017, 10:06:09 PM »
It doesn't prevent the MS word document from opening and running. It blocks the temporary word document and prevents automatic deletion once closed.