ClickOnce app issues due to Windows Defender's Controlled Folder Access service

Question

_{Wednesday, February 20, 2019 9:12 AM}

Hi, I hope it is the right forum to my problem:

I have developed a ClickOnce application.

Newly some users have switched on Windows Defender's Controlled Folder Access service which in turn doesn't let the app to write to protected folder.

I can put the app's exe on the exclusion list, however, it is just an temporary solution since the location of the exe changes after each upgrade.

I would be thankful for any help,

Peter

Peter

All replies (4)

_{Thursday, February 21, 2019 3:04 AM ✅Answered}

Hi petardo,

Each version of the app published by ClickOnce is installed in a similar path, you can try to put this path into the exclusion list.

The installed "exe"s are in a subfolder of "C:\Users\username\AppData\Local\Apps". And "AppData" is a hidden folder.

Regards,

Kyle

MSDN Community Support
Please remember to click "Mark as Answer" the responses that resolved your issue, and to click "Unmark as Answer" if not. This can be beneficial to other community members reading this thread. If you have any compliments or complaints to MSDN Support, feel free to contact [email protected].

_{Thursday, February 21, 2019 6:33 AM}

Hi Kyle,

Thanks for your suggestion. That works, but:

1. I was talking about the exclusion list of the controlled folder access service where only exact filename can be given.
   However, yesterday I discovered myself as well that the exclusion list for defender's virus protection section is also effective for the folder protection section. So yes, the solution works.
2. But I am still not really for satisfied with this solution since it enables all other ClickOnece apps (or any ransomware installed underneath this app folder).
   That's why I didn't published this yesterday and that's why I am waiting for further suggestions and waiting with marking the solution as Answered.

Peter

Peter

_{Thursday, February 21, 2019 6:46 AM}

Hi petardo,

The installation location of the application published by ClickOnce is default and unchangeable. I am afraid it is difficult to find a way to exclude specific applications.

Regards,

Kyle

MSDN Community Support
Please remember to click "Mark as Answer" the responses that resolved your issue, and to click "Unmark as Answer" if not. This can be beneficial to other community members reading this thread. If you have any compliments or complaints to MSDN Support, feel free to contact [email protected].

_{Friday, March 1, 2019 1:25 AM}

Hi petardo,

There are subfolders under the path I provided, you can distinguish the separate folders of each app by checking the contents of the subfolders. And then put the corresponding subfolder on the exclusion list.

Regards,

Kyle

MSDN Community Support
Please remember to click "Mark as Answer" the responses that resolved your issue, and to click "Unmark as Answer" if not. This can be beneficial to other community members reading this thread. If you have any compliments or complaints to MSDN Support, feel free to contact [email protected].