Skip to content
Setup FoundrySetup Foundry
DESign in

Documentation

Allow file downloads

This policy controls the file-download URL security action for the **Restricted Sites Zone**.

since 0.9.8.11

Purpose

Show registry keys (2)
  • HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1803
  • HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1803

This policy controls the file-download URL security action for the Restricted Sites Zone. The final identifier, 1803, is the name of a REG_DWORD value representing URLACTION_SHELL_FILE_DOWNLOAD.

The decision is based on the security zone of the page containing the link that initiates the download. It is not based on the zone assigned to the server that delivers the file.

The value data has the following meanings:

  • 0: File downloads initiated from pages in the zone are permitted.
  • 3: File downloads initiated from pages in the zone are blocked.

When the policy is not configured, file downloads are blocked by default in the Restricted Sites Zone.

Notes

Security

A value of 0 removes the download restriction normally associated with the Restricted Sites Zone. Pages deliberately assigned to this untrusted zone can consequently offer downloadable files, increasing the opportunity for users to retrieve unwanted or malicious content from compromised or hostile sites.

This setting does not by itself run downloaded files or override other reputation checks, download warnings, or security controls. Separate policies govern automatic downloads that were not initiated by the user.

A value of 3 blocks downloads only when the initiating page belongs to the Restricted Sites Zone. It is not a universal download restriction applying to every browser.

Possible side effects

With the value set to 3, download links on legitimate pages assigned to the Restricted Sites Zone do not work. This remains true when the file itself is supplied by a server assigned to another, more trusted zone.

Notes

The policy supports both computer and user configuration. It applies to Internet Explorer and other components that evaluate this URL action through the Internet security-zone model. Browsers and applications that use their own security zones or download controls are not necessarily affected.

Microsoft documentation

Microsoft Learn: InternetExplorer Policy CSP – RestrictedSitesZoneAllowFileDownloads

See also