9.28. File System

⌘ + r › ms-settings:privacy-broadfilesystemaccess

Option is worded poorly. This prevents apps from accessing private data on the file system.

See Determining App List to generate a list of apps for more fine grained control of app access. There is no GPO equivalent.

9.28.1. Allow access to file system on this device

Enable Allow access to file system on this device

Do not configure or leave enabled. Can restrict document folder access from all apps and Windows. There is no GPO equivalent.

Deny will disable all access.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\broadFileSystemAccess

Value

SZ

Allow

Updated: 2021-02-19 Reference

9.28.2. Allow app access to file system on this device

Enable Allow app access to file system on this device

Do not configure or leave enabled. Can restrict document folder access from all apps and Windows. There is no GPO equivalent.

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\broadFileSystemAccess

Value

SZ

Allow

Updated: 2021-02-19 Reference

9.28.3. Choose which apps can access your file system

See File System.