Windows 10 hides a useful shield that blocks unauthorized access to important folders, but most users keep it turned off. Controlled folder access lives a quick search away from the Start Menu under "ransomware protection," as discovered by PCGamesSN. Enabling it is a matter of toggling a single switch in Windows Security.
The feature ships as part of Windows 10's broader virus and threat protection stack, sitting alongside the standard Windows Defender controls. Turning it on does not change how your antivirus behaves, but it adds a second layer that watches for unknown applications trying to touch protected folders. Here is how to switch it on, what it actually does, and where it falls short.
Quick take
- Controlled folder access is disabled by default and must be turned on manually through Windows Security.
- It is reached by searching "ransomware protection" from the Start Menu.
- Microsoft describes it as protection for files, folders, and memory areas from unauthorized changes by unfriendly applications.
- It does not stop ransomware from running. It blocks unauthorized programs from touching protected folders instead.
- You can whitelist apps that falsely trip the feature, which matters for some games.
How the shield actually works
The idea behind Controlled folder access is narrow and specific. Rather than scanning every file the way a traditional antivirus does, it watches for any unfamiliar program that tries to read, write, or modify files inside the folders you have chosen to protect. If something unauthorized tries to act, Windows Security intervenes and surfaces a notification.
That behavior is closer to a locked filing cabinet than to a guard dog. Anything on the system's approved list can still reach your documents, photos, and desktop. Anything else gets blocked. You can see the feature in action in tests run by the PC Security Channel on YouTube, where some ransomware samples still ran but were unable to touch the protected folders. The files remained accessible to the user afterward.
This distinction matters. Anyone marketing it as a kill switch for ransomware is overselling it. The real value is in the side effects: blocked encryption of your documents, blocked tampering with your OneDrive sync folder, blocked modification of your startup locations. Those are the exact moves most file-locking malware relies on.
What it means for you
A built-in layer that hardens your folders for free is hard to ignore. Pairing Controlled folder access with OneDrive's file backup gives you a third layer beyond the system restore points and the cloud copy.
You also get a single switch that you can toggle when working with unfamiliar downloads or untrusted software. Say you are about to run a sketchy installer from a forum. With Controlled folder access on, that installer cannot quietly start encrypting your documents while it pretends to set up the program. If something trips the warning, you know quickly. That speed is often the difference between a close call and a full-blown incident.
The trade-off is the occasional false positive. Some games and older utilities behave in ways the system does not recognize, which means they may need an explicit exemption. The fix is simple: when Windows Security blocks a program you trust, add it to the allowed list. This is a small price to pay for an extra guard rail.
How to enable it
The setup is short. Type "ransomware protection" into the Start Menu and open the matching page inside Windows Security. Flip the toggle for Controlled folder access. You can also add or remove protected folders from the same screen, and review the list of allowed apps that are exempt from the rule.
For most home users, the default protected set covers the common cases: Documents, Pictures, Desktop, Music, Videos, and Favorites. Leave it alone unless you have a specific reason to expand it.
What to watch next
Microsoft has been folding more anti-ransomware features into OneDrive, including automatic cloud backup of important folders when the system suspects an attack. Keep an eye on how tightly those hooks integrate with Controlled folder access in future updates. If Microsoft tightens the loop, this hidden switch becomes a meaningful part of a default defense rather than a niche setting for power users.
Bottom line: flip it on, leave the defaults alone, and add an exemption only when Windows Security complains about something you actually trust.
Key takeaways
- Type "ransomware protection" into the Start Menu and toggle Controlled folder access on.
- Treat it as a folder-locking layer, not a full ransomware killer; pair it with OneDrive backup.
- Whitelist games or tools that get falsely flagged rather than turning the feature off.
Frequently asked questions
Does Controlled folder access block all ransomware?
No. It blocks unknown programs from touching protected folders, but the underlying malware can still run. It is a defense-in-depth layer, not a replacement for antivirus.
Will turning it on slow down my PC?
For most users, the impact is negligible. The feature runs quietly in the background and only intervenes when an unknown program tries to access a protected folder.
Do I still need a third-party antivirus?
Yes. Controlled folder access complements Windows Defender rather than replacing broader malware detection, so a dedicated security suite or paid antivirus is still worthwhile.
Why is this feature off by default?
Microsoft left it opt-in to avoid false positives on legitimate software. Turning it on is safe once you whitelist trusted apps that get flagged.