Windows App Permissions: Review Access by Capability
Use Windows app-permission pages to decide which apps may use a capability. Do not assume those lists cover every desktop program or every route by which data can be accessed.
On this page
Make a capability inventory
| Capability | Keep access for | Check after restricting it |
|---|---|---|
| Microphone | Your intended calling or recording app | A local recording or test call. |
| Camera | Your chosen video or capture app | Preview in the relevant application. |
| Location | Features that actually need precise location | The specific location-dependent feature. |
| Contacts or calendar | Apps you intentionally use with that data | Whether the expected item can still be opened. |
Review permissions rather than enabling a blanket preset
- Open Privacy & security on Windows 11 or Privacy on Windows 10. Select the capability, not just the application name.
- Distinguish a device-wide access switch from per-app choices and any desktop-app control.
- Restrict an app you do not want to use the capability, then check a permitted app still works.
- For browser-based services, also review the website permission in the browser.
Understand the coverage limit
Microsoft notes that some desktop applications have broad system access and are not controlled by every item in these lists. Installation source, application permissions, account access, and the vendor’s privacy practices still matter. A short list of enabled apps is not evidence that all other software is sandboxed.
Questions and answers
Why is my desktop application absent from the list?
Some desktop applications are not represented as individually controllable Store-style app entries.
Can Windows allow a browser while the website stays blocked?
Yes. Windows capability access and a website’s browser permission are separate layers.