Saved from URL

Purpose

Show registry keys (14)

• HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_unc_savedfilecheck\groove.exe
• HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_unc_savedfilecheck\excel.exe
• HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_unc_savedfilecheck\mspub.exe
• HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_unc_savedfilecheck\powerpnt.exe
• HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_unc_savedfilecheck\pptview.exe
• HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_unc_savedfilecheck\visio.exe
• HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_unc_savedfilecheck\winproj.exe
• HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_unc_savedfilecheck\winword.exe
• HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_unc_savedfilecheck\outlook.exe
• HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_unc_savedfilecheck\spdesign.exe
• HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_unc_savedfilecheck\exprwd.exe
• HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_unc_savedfilecheck\msaccess.exe
• HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_unc_savedfilecheck\onenote.exe
• HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_unc_savedfilecheck\mse7.exe

This setting controls the process-specific Internet Explorer feature control FEATURE_UNC_SAVEDFILECHECK for the listed Office applications. Each application name is represented by a separate REG_DWORD value. A value of 1 enables the check for that process.

When the check is enabled, the Windows URL security component evaluates “saved from URL,” or Mark of the Web, information embedded in a web page or similar web resource loaded from a UNC share. If that information identifies an Internet origin, the resource can be assigned to the Internet security zone instead of the normally less restrictive Local intranet zone. The security rules for the resulting zone then apply.

Notes

Security

Without this check, a web page stored on a UNC share may be processed in the Local intranet zone even when its origin information identifies it as content saved from the Internet. If the intranet zone permits less restricted behavior, active or otherwise security-sensitive content may receive capabilities that would not be available in the Internet zone.

This setting does not generally prevent files from being opened, nor does it automatically block all active content. Its security effect is to include the saved-origin information in security-zone mapping; the restrictions actually imposed depend on the settings for the resulting zone.

Possible side effects

Evaluating the saved-origin and zone information adds processing to access over UNC paths and can reduce performance. A web page on a network share may also run under stricter restrictions when its origin information maps it to the Internet zone. Active content or other zone-dependent functionality may consequently behave differently or cease to work.

Notes

Each value applies only to the process named by that value. This is a process-specific feature control of the Internet Explorer/MSHTML security infrastructure. It is not the general Mark of the Web handling mechanism for every document opened by Office and does not, by itself, enable Protected View for Office files.

Microsoft documentation

Microsoft Learn: INTERNETFEATURELIST enumeration

Microsoft Learn: MapUrlToZone flags

See also

• Entry in the reference