Internet Explorer Processes
This ADMX-backed Group Policy setting controls the `FEATURE_WINDOW_RESTRICTIONS` feature for File Explorer and Internet Explorer processes.
since 0.9.8.11
Purpose
Show registry keys (4)
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONSHKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS\(Reserved)HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS\explorer.exeHKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS\iexplore.exe
This ADMX-backed Group Policy setting controls the FEATURE_WINDOW_RESTRICTIONS feature for File Explorer and Internet Explorer processes. The feature constrains windows that scripts open, resize, or reposition programmatically.
When the policy is enabled or not configured, the window restrictions apply to explorer.exe and iexplore.exe. In particular, scripts cannot display windows whose title or status bars are hidden from the user, or position windows so that they obscure the title and status bars of other windows. The setting does not act as a blanket prohibition on every popup; it restricts security-sensitive characteristics of script-created windows.
When the policy is disabled, these restrictions do not apply to the named processes. Scripts can continue to create popup windows and windows that obscure other windows or their controls.
Notes
Security
The restrictions make it harder for websites and other content rendered by the affected processes to create deceptive window arrangements. This reduces opportunities to hide recognizable browser or window elements and mislead users into interacting with a different window than intended.
The policy does not disable scripting generally and does not block every popup window. It therefore does not replace security controls for Internet zones, active content, or downloads.
Possible side effects
Legacy websites and applications that use Internet Explorer technology and depend on freely resized or precisely positioned script windows may be unable to display those windows at the requested size or location. Dialogs, auxiliary windows, and similar scripted interfaces may consequently appear or behave differently.
Notes
The entries under HKLM represent the device scope, while those under HKCU represent the user scope. (Reserved), explorer.exe, and iexplore.exe collectively form the registry representation of this policy; Microsoft’s public policy description does not assign a separate functional meaning to (Reserved).
Microsoft lists the corresponding policy for both device and user scope. The stated applicability beginning with Windows 10, version 1709, applies specifically to delivery through the InternetExplorer Policy CSP.