Forum Discussion
Regarding Windows 10 file system access and privacy
Dear community
English is not my first language, and my Windows is in danish, so please excuse spelling mistakes etc.
"Allow that apps gain acces to file system" = ON
"Choose which apps that shall have access to your file system" = List is empty / there is no apps
I have read the support site and other articles regarding the topic
The list with the apps that shall have access to my system is empty.
1)
Does that mean, that there is no apps that have access to my file system?
2)
What is the meaning of "file system"?
Is the Windows Pictures folder and Windows Documents folder?
Is it the WHOLE drive?
3)
Where can I see, which apps previously have been granted access to my file system?
4)
Is it possible to see, if deleted apps were granted access to file system?
Thank you in advance for replying!
Best regards
21 Replies
Hi,
here is the official support article about this:
Q: Does that mean, that there is no apps that have access to my file system?
A: yes, no UWP app, but Win32 apps can have access to file system.
Exceptions to the file system access privacy settings
Not all apps will appear under Choose which apps can access your file system. Certain Windows programs, such as those that are downloaded from the internet or installed with some type of media (such as a CD, DVD, or USB storage device) won’t appear in that list and are not affected by the Allow apps access your file system setting. To allow or deny file system access for one of these programs, check the settings in the program itself.
Q:Is the Windows Pictures folder and Windows Documents folder?
Is it the WHOLE drive?A: according to the description of file system in Windows settings:
it's not whole drive, it includes Documents, Pictures, Videos and local OneDrive files.
if you want to control the whole drive (and against Win32 apps), you can use controlled folder access feature in Windows Security (aka Windows Defender)
Q: Where can I see, which apps previously have been granted access to my file system?
A: in Windows Settings => Privacy => File system
Q: Is it possible to see, if deleted apps were granted access to file system?
A: probaby using Event Viewer in Windows
HotCakeX
Thank you for your reply!
I have never installed any software using CD, USB or another drive, so that excludes that.
A: according to the description of file system in Windows settings:
It states: Documents, Pictures, Videos and OneDrive files
1)Does it refer to the standard / generic Windows folders?
2)The same folders as in the menus for Privacy - Documents and Picutes and Videos?
3)So the File system access function, only covers the Documents, Pictures, Videos and OneDrive folders?
My uncertainty sprung from other articles / forums using other phrases like:
"apps can access your full file system"
"permission to have broad file system access"Q: Where can I see, which apps previously have been granted access to my file system?
A: in Windows Settings => Privacy => File system
4)
Apps that have requested permission (both declined and granted), do they appear in the list Choose which apps can access your file system?
Thanks in advanceThe filesystem access permission you refer to is broad access to the filesystem. It includes every folder the user has access to. This permission should never be needed or used by any normal app, so it is good that this list is empty.
Every UWP has certain default permissions for file system access which do not need to be granted seperately:
- The applications install directory
- The applications data location
- Removable drives if it uses the AutoPlay extension
- Files and Folders in the users "Downloads"-Directory, but only those which the App created itself
Fo an app to gain access to additional locations it has different options. For example it can gain access to well-known user folders (Pictures, Music, Videos, Documents...) with special permissions it has to be granted first. Each of the well known folders has it's own access mechanics for UWP apps and none are granted by default.
The second option (and most used normally if an app needs access to additional files on your system) is using the filepicker-dialog. This dialog is not part of the app and is presented by Windows to the user. The user then selects the file (or folder) that he wants to open in the app. The app now only gets a handle to the file or folder selected by the user, it does not gain access to the actual location.
The last option is the permission you asked for. This would grant an app broad filesystem access, meaning it can access everything the user can access, and without asking first! No normal app should ever need this permission and you should be very careful if you want to give this permission to any app at all.
If the list is empty, no currently installed App on your system uses this permission (as it should be).
As already mentioned by HotCakeX: All this only applies to UWP Apps (apps from the Microsoft Store) and not to old-school win32-applications. If you install anything on your system not from the Microsoft Store, you can't easily know what it can access. It can be nothing or all and everything in between.
