计算机受控文件夹管理,自定义受控文件夹访问

自定义受控文件夹访问Customize controlled folder access

05/10/2021

本文内容

适用于：Applies to:

提示

想要体验适用于终结点的 Defender？Want to experience Defender for Endpoint? 注册免费试用版。Sign up for a free trial.

受控文件夹访问权限可帮助你保护重要数据免受恶意应用和威胁(如勒索软件)的侵害。Controlled folder access helps you protect valuable data from malicious apps and threats, such as ransomware. 受控文件夹访问权限在 Windows Server 2019 和 Windows 10 客户端上受支持。Controlled folder access is supported on Windows Server 2019 and Windows 10 clients. 本文介绍如何自定义受控文件夹访问权限，并包括以下部分：This article describes how to customize controlled folder access capabilities, and includes the following sections:

重要

受控文件夹访问权限监视应用是否被检测为恶意活动。Controlled folder access monitors apps for activities that are detected as malicious. 有时，合法应用会阻止对文件进行更改。Sometimes, legitimate apps are blocked from making changes to your files. 如果受控文件夹访问权限影响组织的工作效率，可以考虑在审核模式下运行此功能，以全面评估影响。If controlled folder access impacts your organization's productivity, you might consider running this feature in audit mode to fully assess the impact.

保护其他文件夹Protect additional folders

受控文件夹访问权限适用于许多系统文件夹和默认位置，包括 文档、****图片 和 电影等文件夹。Controlled folder access applies to many system folders and default locations, including folders such as Documents, Pictures, and Movies. 可以添加要保护的其他文件夹，但不能删除默认列表中的默认文件夹。You can add other folders to be protected, but you cannot remove the default folders in the default list.

当你不将文件存储在默认 Windows 库中，或者你已更改库的默认位置时，向受控文件夹访问权限添加其他文件夹可能会很有帮助。Adding other folders to controlled folder access can be helpful for cases when you don't store files in the default Windows libraries, or you've changed the default location of your libraries.

还可以指定网络共享和映射驱动器。You can also specify network shares and mapped drives. 支持环境变量和通配符。Environment variables and wildcards are supported. 有关使用通配符的信息，请参阅在文件名和文件夹路径或扩展名排除列表中 使用通配符。

可以使用 Windows 安全应用、组策略、PowerShell cmdlet 或移动设备管理配置服务提供程序添加和删除受保护的文件夹。You can use the Windows Security app, Group Policy, PowerShell cmdlets, or mobile device management configuration service providers to add and re