Configure allowed applications
Add additional applications that should be considered "trusted" by controlled folder access. These applications are allowed to modify or delete files in controlled folder access folders. Microsoft Defender Antivirus automatically determines which applications should be trusted. You can configure this setting to add additional applications. Enabled: Specify additional allowed applications in the Options section.. Disabled: No additional applications will be added to the trusted list. Not configured: Same as Disabled. You can enable controlled folder access in the Configure controlled folder access GP setting. Default system folders are automatically guarded, but you can add folders in the configure protected folders GP setting.
Policy Details
- Policy Name
- ExploitGuard_ControlledFolderAccess_AllowedApplications
- Registry Key
- Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Controlled Folder Access
- Value Name
- ExploitGuard_ControlledFolderAccess_AllowedApplications
- Supported On
- At least Windows Server 2016, Windows 10 Version 1709
- OMA-URI (CSP)
- ADMX_MicrosoftDefenderAntivirus/ExploitGuard_ControlledFolderAccess_AllowedApplicationsOS Build Version:10.0.22000, 10.0.19043.1202, 10.0.19042.1202, 10.0.19041.1202CSP Version:10.0Conflict Resolution:LastWriteAllowed Editions:EnterpriseEnterprise NProfessionalProfessional NEnterprise EvaluationEnterprise N EvaluationEducationEducation NEnterprise SEnterprise S NEnterprise S EvaluationEnterprise S N EvaluationHolographic BusinessPro Single LanguagePro ChinaPro WorkstationPro Workstation NPro For EducationPro For Education NEnterprisegEnterprisegnServerrdshIotenterpriseIotenterprisesCloudeditionnCloudeditionIotenterpriseskIotenterpriseseval
- Available Languages
- en-us
Configuration Elements
Enter the applications that should be trusted:
Type: list