LandzDown Forum

Security => Security Software Programs => Topic started by: Digerati on November 09, 2017, 12:44:43 PM

Title: Windows Defender "Controlled folder access" woes
Post by: Digerati on November 09, 2017, 12:44:43 PM
Rather than run the Pale Moon Security Updates (http://www.landzdown.com/security-alerts-briefings/pale-moon-version-27-6-0-released-with-security-updates/) thread further OT, I thought I better start a new thread.

As noted in that thread, Windows Defender's new anti-ransomware feature that came in the Fall Creators Update was blocking Pale Moon from making unauthorized changes to my users\me\desktop folder. The new feature, "Controlled folder access (http://www.zdnet.com/article/windows-10-tip-turn-on-the-new-anti-ransomware-features-in-the-fall-creators-update/)", designed to protect us, may be too restrictive for many, I fear. I wonder if MS feels the same since the new feature is disabled by default.

I added Palm Moon to the white list, easy enough - if you know your way around File Manager. Not everyone does.

Yesterday, I got the security warning for IE. :( I can only imagine MS did not pre-white list IE because they want [to force?] everyone to move to Edge.

Today, I could not save a new entry in my password manager. That was a little frustrating because that executable was buried deep and does not have an obvious name. And sadly the "Controlled folder access" popup warning did not tell me the file name. Fortunately (in a backwards sort of way), my password manager crashed when I tried to save the entry and popped up its own error message telling me the file name and path affected so I could white list it.

I applaud MS for taking the initiative to make WD an even stronger anti-malware solution, but this new feature (at least the management/configuration process) clearly has some very rough edges MS needs to smooth out. But, with ransomware attacks on the rise, they better do it quick or for sure, the the attention seeking "wannabe journalists" in the IT press and the MS bashers will surely bash MS for failing to do something about it. 
Title: Re: Windows Defender "Controlled folder access" woes
Post by: Corrine on November 09, 2017, 05:40:14 PM
Coincidentally, just published, Microsoft partners extend Windows Defender ATP across platforms - Windows For Your BusinessWindows For Your Business (https://blogs.windows.com/business/2017/11/08/microsoft-partners-extend-windows-defender-atp-across-platforms/)

Quote
Organizations often use computers, operating systems, and databases from a variety of vendors. That’s why today, we’re excited to announce three leading security companies – Bitdefender, Lookout, and Ziften – are partnering with us to enable Windows Defender Advanced Threat Protection (ATP) to detect, protect, and respond to security threats on macOS, Linux, iOS, and Android devices.
Title: Re: Windows Defender "Controlled folder access" woes
Post by: Aaron Hulett on November 09, 2017, 05:58:15 PM
I couldn't update graphics drivers from Nvidia with this turned on. I promptly turned it off; it's not ready for home users IMHO.

Maybe that's because it's not targeted for home users? At least not now? Idunno.
Title: Re: Windows Defender "Controlled folder access" woes
Post by: techie on November 09, 2017, 06:44:40 PM
I ran into this with a few programs. Had to turn it off to upgrade them. The one I'm still scratching my head on is why MS word was being blocked and not whitelisted. I would hate to be a IT deploying this on numerous systems.
Title: Re: Windows Defender "Controlled folder access" woes
Post by: Digerati on November 10, 2017, 02:01:52 PM
Quote
Maybe that's because it's not targeted for home users? At least not now? Idunno.
I think it is hard to put a label on what a "home user" is. This is a feature in Windows 10 Pro. Does that suggest "Pro" is not for home users?

And again, it is disabled by default so I agree, at least for now, it is not ready for prime time. That said, I am keeping it enabled, for now.

My MS Word was not blocked (2007).

Title: Re: Windows Defender "Controlled folder access" woes
Post by: techie on November 13, 2017, 09:43:52 PM
Quote
Maybe that's because it's not targeted for home users? At least not now? Idunno.
I think it is hard to put a label on what a "home user" is. This is a feature in Windows 10 Pro. Does that suggest "Pro" is not for home users?

And again, it is disabled by default so I agree, at least for now, it is not ready for prime time. That said, I am keeping it enabled, for now.

My MS Word was not blocked (2007).

It is available in Windows 10 Home as well, disabled by default. I'm using it. My MS word is part Office 2010.
Title: Re: Windows Defender "Controlled folder access" woes
Post by: techie on November 13, 2017, 10:06:09 PM
It doesn't prevent the MS word document from opening and running. It blocks the temporary word document and prevents automatic deletion once closed.