(Solved) Can't Save to Desktop

[CraigS26]

See last Post

W10-HOME ... in the recent past has stopped allowing me to Save Downloads or even a Word doc to the desktop (You don't have permission - See Admin);
I DID save a Word doc to Desktop in -- Admin Bkup Acct --
Controlled Folder Access mod is a solution for some but Start-Search says - See my IT Admin to activate it - and Regedit has No HKLM value where I found Controlled Folder Access.
Any help is appreciated & Everyone Stay Well!.

[HansV]

Does How to Enable or Disable Windows Defender Exploit Guard Controlled Folder Access in Windows 10 help?

[CraigS26]

Thanks, Hans. I think I saw that / similar but here's my dilemma -

Option One: Turn On or Off Controlled Folder Access in Windows Defender Security Center - Don't SEE it anywhere (or Ransomeware) although I use -- ESET EIS (a suite)-
Option Two: Turn On or Off Controlled Folder Access in PowerShell ... (See #4)
Option Three: Enable or Disable Controlled Folder Access in Local Group Policy Editor - gpedit (failed in RUN) is PRO-Enterprise-Education ONLY
Option Four: Enable or Disable Controlled Folder Access using a REG file - I PRESUMED that IF it's Not activated then HOME is NOT supposed to use it so Modifying That Setting from - No Value -
might open a new can of worms -- which is why I'm still treading water .............

[HansV]

Can you log in to Windows using an admin account? The setting should then be available from the Start > typing Controlled Folder Access

[CraigS26]

Couldn't log-in for awhile but here's the latest for tracking this issue & a hopeful solution that evolves for future Search-ers ....

Your problem is strange - I have Windows 10 Home and I can toggle Controlled Folder Access without problem in the security dashboard.
You mentioned that you use ESET. Could ESET's HIPS (Host-based Intrusion Prevention System) be the culprit?
HansV

I Found Controlled Folder Access ONLY by Allowing Random Scan by Defender (ESET is STILL the main Security) BUT it was OFF already.
Turned OFF HIPS in ESET and No Change.
I Only use an Admin Acct with No Login and other than the Backup Admin Acct ALLOWING Save to Desktop, I remain stumped but will keep Searching & advise.
I'm the one who had 3 registry lines for Desktop BUT a Downloads link in My PC that showed ALL of the Desktop members when clk'd. SO, I DO have a knack for weird issues.
Thanks for the ideas.

[CraigS26]

I think I recall a similar non-intuitive Fix and it went like this: In My PC\Desktop\Rt Clk\Properties\Security tab\Everyone had the Modify Box UN-chk'd/ I chk'd it and Saved a Word Doc to the desktop. Presume Downloads will be allowed, too (later Dnloaded a small App straight to Desktop per Firefox setup).

This is with the - Me Admin Acct (all boxes chk'd) - being the Only acct used. Go figure.

[HansV]

I'm glad you found a solution, but it's weird that Modify had become disallowed for the Desktop folder...

[CraigS26]

Did you notice it was for the "Everyone" Group, which is the big mystery With All Boxes in the Main, exclusively used Admin acct being Chk'd.
Of course, I have no clue what the Everyone Group is about.

[HansV]

On my Windows 10 Home computer, there is no Everyone group...

[StuartR]

I have an Everyone security group on my Windows 10 home computer. I always thought this was one of the builtin groups that you couldn't remove.

[HansV]

I see two groups: SYSTEM and Administrators.

[CraigS26]

The following is an explanation typical of what still leaves me lost. Your expertise may can assemble logic from it, though.

All interactive, network, dial-up, and authenticated users are members of the Everyone group.
This special identity group gives wide access to system resources.
Whenever a user logs on to the network, the user is automatically added to the Everyone group.

The Everyone group includes all members of the Authenticated Users group as well as the built-in Guest account, and several other built-in security accounts
like SERVICE, LOCAL_SERVICE, NETWORK_SERVICE , and others.
A Guest account is a built-in account on a Windows system that is disabled by default.

[StuartR]

I see two groups: SYSTEM and Administrators.

Try editing security permissions on a file or folder, Add..., then enter the name Everyone and click Check Names

[HansV]

@StuartR: yes, the name Everyone is recognized when I click Check Names.