Frequently Asked Question
Please feel free to put in a ticket request for this feature along with the VT000?????? asset number from the machine that you would like protected. Or, use the Windows Security App:
Windows Security app
- Open the Windows Security app by selecting the shield icon in the task bar. You can also search the start menu for Defender.
- Select the Virus & threat protection tile (or the shield icon on the left menu bar) and then select Ransomware protection.
- Set the switch for Controlled folder access to On.
Note
If controlled folder access is configured with Group Policy, PowerShell, or MDM CSPs, the state will change in the Windows Security app after a restart of the device. If the feature is set to Audit mode with any of those tools, the Windows Security app will show the state as Off. If you are protecting user profile data, we recommend that the user profile should be on the default Windows installation drive.
Windows 10 comes with its own baked-in antivirus solution called Windows Defender, and it is enabled by default when setting up a new PC. At the very least, that affords you some basic protection against the many malware threats out in the wild. But did you know there is an added optional layer that can keep your pictures, videos, work documents, and other files safe in the event of a ransomware infection? The caveat is that you have to manually enable ransomware protection in Windows 10.
Or more specifically, a feature called 'Controlled folder access.'
A big hat-tip to Forbes for pointing this out, because this is not something I was aware existed. To enable it, type 'Ransomware protection' in the Windows search bar, or take the long way by navigating to Settings > Update & Security, click on Open Windows Security, click on Virus & threat protection, then scroll down and click on Manage ransomware protection.
The Controlled folder access toggle is set to 'off' by default (or at it least it was on my PCs). Turning it on designates specific folders that only trusted apps have permission to access, and you can add folders beyond the ones that are selected by default. There's also a section to grant specific apps permission to access your protected folders, if need be.
-PcMag: https://www.pcgamer.com/windows-10-has-a-built-in-ransomware-block-you-just-need-to-enable-it/