Share via


Disable file downloads not working. (Group Policy)

Question

Monday, January 29, 2018 8:28 PM

So I've created (through mmc.exe) a group policy object for a local user. Now im trying to disable this user from downloading any kind of file. This includes any file in existens. I've went into the group policy object for the user to disable "Allow file downloads." I've done it in every zone just to be sure and even so it doesn't work. 

(And yes i know this policy only works on IE, but even on IE it still lets the user install files.)

All replies (2)

Tuesday, January 30, 2018 1:48 AM

Your behavior seems to be correct, besides configure GPO in Computer Configuration, you should also disable file downloads in User Configuration.

If it’s convenient to you, check the Security Settings in Internet Zone.

Next, enabling Group Policy:

User Configuration → Administrative Templates → Windows Components → Internet Explorer → Internet Control Panel → Security Page → Internet Zone → Show security warning for unsafe files. (The policy must be Enabled, and the option set to Disable.)

See Information about the Attachment Manager in Microsoft Windows for the list of the file types that IE considers “unsafe”.

Information about the Attachment Manager in Microsoft Windows

https://support.microsoft.com/en-us/help/883260/information-about-the-attachment-manager-in-microsoft-windows

Note that Google Chrome also use the Windows Attachment Manager for downloads, so the IE setting will block downloads in those browsers too.

Regards

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].


Wednesday, January 31, 2018 9:08 AM

Would you mind letting me know the update of the problem? If you need further assistance, feel free to let me know.

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].