F5F Stay Refreshed Software Operating Systems Access to folders under control in Windows 10

Access to folders under control in Windows 10

Access to folders under control in Windows 10

U
Unmigrate
Senior Member
644
06-30-2016, 12:04 PM
#1
I enabled restricted file access settings. If a program breaks these rules, the notification will cut off the program’s path. I checked the event logs but didn’t see any entries. I had to turn it off because it was too bothersome. Appreciate your help.
U
Unmigrate
06-30-2016, 12:04 PM #1

I enabled restricted file access settings. If a program breaks these rules, the notification will cut off the program’s path. I checked the event logs but didn’t see any entries. I had to turn it off because it was too bothersome. Appreciate your help.

H
Heyello
Member
196
06-30-2016, 12:47 PM
#2
CFA operational logs appear in the event log under Applications and Services > Microsoft > Windows > Windows Defender > Operational. For blocked accesses, focus on Event ID 1123 to view all blocked entries. ID 5007 indicates changes to settings and lists the registry path for permitted programs—HKLM\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\Controlled Folder Access\AllowedApplications\*. Setting up a custom view can help you quickly monitor these logs.
H
Heyello
06-30-2016, 12:47 PM #2

CFA operational logs appear in the event log under Applications and Services > Microsoft > Windows > Windows Defender > Operational. For blocked accesses, focus on Event ID 1123 to view all blocked entries. ID 5007 indicates changes to settings and lists the registry path for permitted programs—HKLM\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\Controlled Folder Access\AllowedApplications\*. Setting up a custom view can help you quickly monitor these logs.