設定受控資料夾存取權 的登錄值 EnableControlledFolderAccess電腦HKLM\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Controlled Folder Access
- 原則 ID
- ExploitGuard_ControlledFolderAccess_EnableControlledFolderAccess
- 適用範圍
- 電腦設定
- 支援的作業系統
- 至少需要 Windows Server 2016、Windows 10 1709 版
- 來源
- Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (版本 1.0)
- 類別
- Windows 元件 › Microsoft Defender 防毒軟體 › Microsoft Defender 惡意探索防護 › 受控資料夾存取權
登錄
EnableControlledFolderAccess
-電腦EnableControlledFolderAccess
REG_DWORD電腦- 啟用時的值
- 取決於選項值
- 元素
- 設定 [防護我的資料夾] 功能
| 項目 | 儲存的值 |
|---|---|
| 停用 (預設值) | 0 |
| 封鎖 | 1 |
| 稽核模式 | 2 |
| 只封鎖磁碟修改 | 3 |
| 只稽核磁碟修改 | 4 |
以 .reg · CMD · PowerShell 套用
.reg
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Controlled Folder Access] ; 選項 (只使用其中一個) ; 停用 (預設值) "EnableControlledFolderAccess"=dword:00000000 ; 封鎖 "EnableControlledFolderAccess"=dword:00000001 ; 稽核模式 "EnableControlledFolderAccess"=dword:00000002 ; 只封鎖磁碟修改 "EnableControlledFolderAccess"=dword:00000003 ; 只稽核磁碟修改 "EnableControlledFolderAccess"=dword:00000004
CMD
:: 選項 (只使用其中一個) :: 停用 (預設值) reg add "HKLM\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Controlled Folder Access" /v "EnableControlledFolderAccess" /t REG_DWORD /d 0 /f :: 封鎖 reg add "HKLM\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Controlled Folder Access" /v "EnableControlledFolderAccess" /t REG_DWORD /d 1 /f :: 稽核模式 reg add "HKLM\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Controlled Folder Access" /v "EnableControlledFolderAccess" /t REG_DWORD /d 2 /f :: 只封鎖磁碟修改 reg add "HKLM\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Controlled Folder Access" /v "EnableControlledFolderAccess" /t REG_DWORD /d 3 /f :: 只稽核磁碟修改 reg add "HKLM\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Controlled Folder Access" /v "EnableControlledFolderAccess" /t REG_DWORD /d 4 /f
PowerShell
# 共通: 建立機碼 New-Item -Path 'HKLM:\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Controlled Folder Access' -Force | Out-Null # 選項 (只使用其中一個) # 停用 (預設值) New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Controlled Folder Access' -Name 'EnableControlledFolderAccess' -PropertyType DWord -Value 0 -Force | Out-Null # 封鎖 New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Controlled Folder Access' -Name 'EnableControlledFolderAccess' -PropertyType DWord -Value 1 -Force | Out-Null # 稽核模式 New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Controlled Folder Access' -Name 'EnableControlledFolderAccess' -PropertyType DWord -Value 2 -Force | Out-Null # 只封鎖磁碟修改 New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Controlled Folder Access' -Name 'EnableControlledFolderAccess' -PropertyType DWord -Value 3 -Force | Out-Null # 只稽核磁碟修改 New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Controlled Folder Access' -Name 'EnableControlledFolderAccess' -PropertyType DWord -Value 4 -Force | Out-Null