How To Enable Windows’ Built-In Ransomware Protection

Windows has built-in ransomware protection features, primarily designed to help protect your files and data from being encrypted by ransomware. These features include Controlled Folder Access and Windows Defender Antivirus. Below is a step-by-step guide on how to enable these protections in Windows.

1. Enable Controlled Folder Access (Ransomware Protection)

Controlled Folder Access helps prevent unauthorized apps from accessing or modifying files in certain folders, which is useful in protecting against ransomware attacks.

Steps to Enable Controlled Folder Access:

1. Open Windows Security:

   • Click on the Start menu and type Windows Security, then click on the Windows Security app.

2. Go to Virus & Threat Protection:

   • In the Windows Security window, click on the Virus & Threat Protection option.

3. Ransomware Protection:

   • Scroll down to the Ransomware Protection section, and click on Manage ransomware protection.

4. Enable Controlled Folder Access:

   • In the Ransomware Protection settings, toggle the switch to On under Controlled Folder Access.
   • You may also see an option to Block potentially unwanted apps—ensure that this is enabled to prevent unapproved apps from running.

5. Choose Protected Folders:

   • Once enabled, Windows automatically protects common folders like Documents, Pictures, and Desktop.
   • To add additional folders, click on Protect folders, then Add a protected folder. You can select any folder that you want to protect.

6. Allow Apps Through Controlled Folder Access:

   • If you want to allow a specific app to access the protected folders (e.g., if a trusted program is being blocked), click Allow an app through Controlled Folder Access and add the app manually.

2. Enable Cloud-delivered Protection and Automatic Sample Submission

Windows Defender Antivirus offers advanced protection by analyzing suspicious files and actions in the cloud. Enabling this will help detect newer types of ransomware.

Steps to Enable Cloud-delivered Protection:

1. Open Windows Security:

   • Click on the Start menu and type Windows Security, then select the Windows Security app.

2. Go to Virus & Threat Protection:

   • Click on Virus & Threat Protection.

3. Manage Settings:

   • Scroll down to the Virus & Threat Protection Settings section, and click on Manage settings.

4. Enable Cloud-delivered Protection:

   • Toggle the Cloud-delivered protection switch to On.

5. Enable Automatic Sample Submission:

   • Turn on Automatic sample submission. This allows Windows Defender to send suspicious files to Microsoft for analysis to improve protection.

3. Enable Microsoft Defender Exploit Guard (Advanced Security)

Microsoft Defender Exploit Guard helps protect against exploits and ransomware attacks that use known vulnerabilities in apps or the operating system.

Steps to Enable Exploit Guard:

1. Open Windows Security:

   • Click the Start menu, type Windows Security, and open the app.

2. Go to Virus & Threat Protection:

   • In Windows Security, click on Virus & Threat Protection.

3. Manage Settings:

   • Scroll down to the Exploit Protection section and click on Manage settings.

4. Enable Exploit Protection:

   • In the Exploit Protection settings, you can adjust advanced settings for various programs or enable global protection settings.
   • You can also configure settings for Attack Surface Reduction, which helps protect against ransomware that uses exploits in software.

4. Enable Tamper Protection (Protect Windows Defender Settings)

Tamper Protection prevents malicious software from disabling Windows Defender Antivirus and altering your security settings, including ransomware protection.

Steps to Enable Tamper Protection:

1. Open Windows Security:

   • Click on Start and search for Windows Security, then open the app.

2. Go to Virus & Threat Protection:

   • In the Windows Security window, click on Virus & Threat Protection.

3. Manage Settings:

   • Scroll down and click on Manage settings under Virus & Threat Protection settings.

4. Enable Tamper Protection:

   • Scroll down to Tamper Protection and toggle it On. This will prevent unauthorized changes to your security settings.

5. Use Regular Backups (For Extra Protection)

Ransomware can encrypt your files, making them inaccessible. Regular backups of important data are an additional layer of defense.

Steps to Enable Backup:

1. Open Settings:

   • Press Win + I to open the Settings menu.

2. Go to Update & Security:

   • Select Update & Security and then Backup from the sidebar.

3. Set Up File History:

   • Click Add a drive and select an external or network drive for backing up your files.
   • Turn on Automatically back up my files to keep your files safe.

4. Use OneDrive (Cloud Backup):

   • You can use OneDrive to automatically back up files to the cloud. Enable File On-Demand so you can access files even when they’re not stored locally.

6. Keep Windows and Software Up-to-Date

Many ransomware attacks exploit known vulnerabilities in outdated software. Make sure to keep your operating system and all apps updated.

Steps to Update Windows:

1. Open Settings:

   • Press Win + I to open the Settings menu.

2. Go to Update & Security:

   • Click on Update & Security, then select Windows Update.

3. Check for Updates:

   • Click Check for updates to install any available updates.

7. Additional Tips for Ransomware Protection

• Avoid suspicious links and downloads: Be cautious about phishing emails and downloads from untrusted sources.
• Use a strong, unique password: Protect your user accounts with strong, unique passwords. Use a password manager to manage your passwords.
• Enable Two-Factor Authentication (2FA): If possible, enable two-factor authentication for extra security on online accounts.

Conclusion

By enabling Windows’ built-in ransomware protection features like Controlled Folder Access, Cloud-delivered protection, Exploit Guard, and Tamper Protection, you significantly reduce the risk of ransomware attacks. Regularly updating your system, making backups, and practicing safe computing habits further enhance your defense against ransomware and other cyber threats.