How to Disable Downloaded Files from being Blocked in Windows
The Attachment Manager is included in Windows to help protect your PC from unsafe attachments that you might receive with an e-mail message and from unsafe files that you might save from the Internet. If the Attachment Manager identifies an attachment that might be unsafethe Attachment Manager prevents (blocks) you from opening the fileor it warns you before you open the file.
It uses the IAttachmentExecute application programming interface (API) to find the file typeto find the file association. When one of these applications saves a downloaded file on a disk formatted with NTFSthen it updates the metadata for the file with the zone it was downloaded from. The metadata is saved as an Alternate Data Stream (ADS). If you wish to unblock a downloaded fileyou can do so by right-clicking itselecting Properties and clicking on Unblock.
The following determine whether you are prevented from opening the file or whether you are warned before you open the file:
- The type of program that you are using.
- The file type that you are downloading or trying to open
- The security settings of the Web content zone that you are downloading the file from.
- Internet
- Local intranet
- Trusted sites
- Restricted sites
The Attachment Manager classifies files that you receive or that you download based on the file type and the file name extension. Attachment Manager classifies files types as high riskmedium riskand low risk.
- High Risk If the attachment is in the list of high risk file types and is from the restricted zoneWindows blocks the user from accessing the file. If the file is from the Internet zoneWindows prompts the user with a Windows Security Warning: Windows found that this file is potentially harmful. To help protect your computerWindows has blocked access to this file.
- Moderate Risk If the attachment is in the list of moderate risk file types and is from the restricted or Internet zoneWindows prompts the user with a warning: "The publisher could not be verified. Are you sure you want to run this software?".
- Low Risk If the attachment is in the list of low risk file typesWindows will not prompt the user before accessing the fileregardless of the files zone information.
If you likethere is a "Do not preserve zone information in file attachments" policy that allows you to manage whether Windows marks file attachments with information about their zone of origin (such as restrictedInternetintranetlocal). If this policy is enabledit will effectively disable downloaded files from being blocked.
This tutorial will show you how to enable or disable downloaded files from being blocked for all users in VistaWindows 7Windows 8and Windows 10.
You must be signed in as an administrator to enable or disable downloaded files from being blocked.
This will not affect blocked files that have already been downloaded before setting this policy.Warning
By not preserving the zone informationWindows cannot make appropriate risks assessments. This can cause a security risk to your PC by not having downloaded files blocked by default anymore.
- If you enable this policy settingWindows does not mark file attachments by using their zone information.
- If you disable this policy settingWindows marks file attachments by using their zone information.
- If you do not configure (default) this policy settingWindows marks file attachments by using their zone information.
Contents
- Option One: To Enable or Disable Downloaded Files from being Blocked in Group Policy
- Option Two: To Enable or Disable Downloaded Files from being Blocked using a REG file
EXAMPLE: Blocked files
![]()
![]()
OPTION ONETo Enable or Disable Downloaded Files from being Blocked in Group Policy
The Local Group Policy Editor is only available in the Windows 10 ProEnterpriseand Education editions.
All editions can use Option Two below.
1 Open the all usersspecific users or groupsor all users except administrators Local Group Policy Editor for how you want this policy applied.
2 Navigate to User ConfigurationAdministrative TemplatesWindows Componentsand Attachment Manager in the left pane of the Local Group Policy Editor. (See screenshot below)
3 In the right pane of Attachment Managerdouble click/tap on the Do not preserve zone information in file attachments policy to edit it. (see screenshot above)
4 Do step 5 (Enable) or step 6 (Disable) below for what you would like to do.
5 To Enable Downloaded Files from being Blocked
A) Select (dot) either Not Configured or Disabledclick/tap on OKand go to step 7 below. (see screenshot below)
Not Configured is the default setting.
6 To Disable Downloaded Files from being Blocked
7 When finishedyou can close Local Group Policy Editor if you like.
OPTION TWOTo Enable or Disable Downloaded Files from being Blocked using a REG file
The downloadable .reg files below will add and modify the DWORD value in the registry keys below.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Attachments
SaveZoneInformation DWORD
(delete) = Enable
1 = Disable
1 Do step 2 (enable) or step 3 (disable) below for what you would like to do.
2 To Enable Downloaded Files from being Blocked for All Users
This is the default setting.
A) Click/tap on the Download button below to download the file belowand go to step 4 below.
Enable_block_downloaded_files.reg
Download
3 To Disable Downloaded Files from being Blocked for All Users
A) Click/tap on the Download button below to download the file belowand go to step 4 below.
Disable_block_downloaded_files.reg
Download
4 Save the .reg file to your desktop.
5 Double click/tap on the downloaded .reg file to merge it.
6 When promptedclick/tap on RunYes (UAC)Yesand OK to approve the merge.
7 You could now delete the downloaded .reg file if you like.
That's it,
Shawn
Related Tutorials
- How to Unblock a File in Windows 10
- How to Add Unblock File Context Menu in Windows 10
- How to Turn On or Off Windows Defender SmartScreen for Apps and Files in Windows 10
- How to Bypass "This app has been blocked for your protection" in Windows 10




Quote

but in the admin (CU) there is