Skip to content
Setup FoundrySetup Foundry

Documentation

Do not open files from the internet zone in Protected View

This per-user policy value determines whether PowerPoint opens files associated with the Windows Internet zone in Protected View.

since 0.9.8.11

Purpose

Show registry keys (1)
  • HKCU\software\policies\microsoft\office\16.0\powerpoint\security\protectedview\disableinternetfilesinpv

This per-user policy value determines whether PowerPoint opens files associated with the Windows Internet zone in Protected View.

The value uses the REG_DWORD data type:

  • 1: Files from the Internet zone bypass Protected View.
  • 0 or absent: Files from the Internet zone open in Protected View.

Protected View is a restricted, read-only mode in which most editing functions are disabled. It allows users to inspect potentially unsafe presentations with reduced risk before permitting editing.

Notes

Security

A value of 1 removes this additional protection layer from files originating in the Internet zone. A maliciously crafted presentation is consequently processed outside Protected View and can immediately reach PowerPoint's regular functionality. This increases the opportunity to exploit vulnerabilities in presentation processing.

This value does not automatically enable macros, ActiveX controls, or other active content. Applicable macro, File Block, Trust Center, and other security policies continue to govern those features.

Possible side effects

With a value of 0, or when the value is absent, affected files initially have only the functionality available in Protected View. Editing is restricted, and add-ins might not run or might not work as expected in this mode.

A value of 1 removes these Protected View restrictions unless another security control limits opening or editing.

Notes

The value controls only the “file from the Internet zone” trigger in PowerPoint. Protected View triggered by unsafe locations, Outlook attachments, file-validation failures, or other conditions is governed by separate settings.

Where Application Guard for Microsoft 365 is available and enabled, files that would otherwise use Protected View may open in Application Guard instead. This registry value therefore does not guarantee that every affected file will open without additional restrictions.

The 16.0 policy branch is used not only by Office 2016 but also by Microsoft 365 Apps and the supported Office 2019, Office LTSC 2021, and Office LTSC 2024 releases.

Microsoft documentation

Microsoft Support: What is Protected View?

Microsoft Learn: List of settings for the Microsoft 365 Apps for Enterprise security baseline in Intune

Microsoft Download Center: Administrative Template files (ADMX/ADML) for Microsoft Office

See also