Security Policy Errors

How to Allow File Scanning with Controlled Folder Access in Windows

Camila Milosovich Oct 1, 2026 869 views

Question details

The user needs to allow antivirus or file scanning tools to access files that are currently being blocked by the Controlled Folder Access feature in Windows.

How to Allow File Scanning with Controlled Folder Access

Product: Windows Security
Device & OS: Windows
Scenario: Attempting to run a system or local file scan while Windows ransomware protection features are actively enabled.
Observed behavior: Controlled folder access restricts the scanning application from reading or accessing files stored in protected system directories, causing the scan to fail or skip files.

Before you start

Ensure you are logged in with an account that has administrator privileges, as standard user accounts cannot modify Windows Security and threat protection settings.

Solution 1Recommended

Temporarily Disable Controlled Folder Access

Use this method to temporarily turn off the restriction, allowing your scanning software to access all necessary files before turning the protection back on.

Controlled folder access is a Windows Security feature designed to protect your files from unauthorized changes by malicious applications, like ransomware. Sometimes, it blocks legitimate scanning tools.

It is crucial to re-enable this feature immediately after your scan completes to maintain your device's security.

Open Windows Security

Click the Start menu, type 'Windows Security' in the search bar, and press Enter to launch the application.

Navigate to Threat Protection

On the Windows Security dashboard, click on 'Virus & threat protection' from the left sidebar or the main screen.

Manage Settings

Scroll down to the 'Virus & threat protection settings' section and click the 'Manage settings' link.

Access Controlled Folder Settings

Scroll down to find the 'Controlled folder access' section, then click on 'Manage Controlled folder access'.

Toggle Off and Scan

Switch the Controlled folder access toggle to 'Off'. Run your file or antivirus scan completely. Once the scan is finished, switch the toggle back to 'On'.

Temporarily Disable Controlled Folder Access

Administrator Prompt: You will be prompted by User Account Control (UAC) to confirm your changes when toggling this setting. Click 'Yes' to proceed.

Solution 2

Make Microsoft 365 Files Available Locally

If you are trying to scan files stored in Microsoft 365 or OneDrive, the scan may fail if the files are stored only online.

Free Microsoft Office alternative

Manage and Edit Your Files Locally with WPS Office

Avoid complex cloud-sync scanning blocks by working with your documents locally. WPS Office is a powerful, free alternative to Microsoft Office that saves your files directly to your device, making them easily accessible for security scans without triggering online-only folder access errors.

1. Download WPS Office: Visit the official WPS website to download the free, lightweight installation package.
2. Install the software: Run the installer and follow the simple on-screen instructions to set up WPS Office on your computer.
3. Open and edit files: Launch WPS Office to easily open, edit, and safely store your Microsoft Office documents locally.

Highly compatible with Microsoft Office formats (.docx, .xlsx, .pptx)Familiar, easy-to-use interface with a seamless migration processLightweight installation that does not slow down your systemSave and manage files locally by default to avoid cloud-sync scanning conflicts

microsoft office alternative - wps office

Frequently Asked Questions

Why does Controlled Folder Access block my antivirus scans?

Controlled Folder Access is a strict Windows Security feature designed to prevent unauthorized applications from modifying files in protected folders. Sometimes, it cannot distinguish between a malicious script and a legitimate third-party scanning tool, resulting in the scanner being blocked.

Do I need administrator privileges to change Controlled Folder Access settings?

Yes, modifying core Windows Security settings, including turning off Controlled Folder Access, requires administrator rights. Standard user accounts are restricted from making these changes to prevent malware from disabling system protection.

Is it safe to temporarily disable Controlled Folder Access?

Yes, it is safe to disable it temporarily if you are running a scan with a trusted, reputable antivirus or diagnostic tool. However, you should immediately re-enable the feature as soon as the scan completes to ensure your files remain protected against ransomware.

Microsoft Office Security Issues