Allow download restrictions

Configures the type of downloads that Microsoft Edge completely blocks, without letting users override the security decision.

Set 'BlockDangerousDownloads' to allow all downloads except for those that carry Microsoft Defender SmartScreen warnings.

Set 'BlockPotentiallyDangerousDownloads' to allow all downloads except for those that carry Microsoft Defender SmartScreen warnings of potentially dangerous or unwanted downloads.

Set 'BlockAllDownloads' to block all downloads.

If you don't configure this policy or set the 'DefaultDownloadSecurity' option, the downloads go through the usual security restrictions based on Microsoft Defender SmartScreen analysis results.

Note that these restrictions apply to downloads from web page content, as well as the 'download link...' context menu option. These restrictions don't apply to saving or downloading the currently displayed page, nor do they apply to the Save as PDF option from the printing options.

See https://go.microsoft.com/fwlink/?linkid=2094934 for more info on Microsoft Defender SmartScreen.

Policy options mapping:

* DefaultDownloadSecurity (0) = No special restrictions

* BlockDangerousDownloads (1) = Block dangerous downloads

* BlockPotentiallyDangerousDownloads (2) = Block potentially dangerous or unwanted downloads

* BlockAllDownloads (3) = Block all downloads

Use the preceding information when configuring this policy.

Download restrictions

0. No special restrictions
   

   Registry Hive	HKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
   Registry Path	Software\Policies\Microsoft\Edge\Recommended
   Value Name	DownloadRestrictions
   Value Type	REG_DWORD
   Value	0

1. Block dangerous downloads
   

   Registry Hive	HKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
   Registry Path	Software\Policies\Microsoft\Edge\Recommended
   Value Name	DownloadRestrictions
   Value Type	REG_DWORD
   Value	1

2. Block potentially dangerous or unwanted downloads
   

   Registry Hive	HKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
   Registry Path	Software\Policies\Microsoft\Edge\Recommended
   Value Name	DownloadRestrictions
   Value Type	REG_DWORD
   Value	2

3. Block all downloads
   

   Registry Hive	HKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
   Registry Path	Software\Policies\Microsoft\Edge\Recommended
   Value Name	DownloadRestrictions
   Value Type	REG_DWORD
   Value	3