Group Policy to Prevent Downloading of Exe Files.

I am looking for a group policy setting that will prevent users from downloading exe files from the internet.  While our current group policy prevents them from installing programs I would also like to be able to prevent them from downloading any executable files.

Many thanks for any assistance that you can provide.


Sharon Clift
Bird Semple Solicitors
Who is Participating?
mdiglioConnect With a Mentor Commented:
This is not an exact fit for your situation but you can disable IE from downloading files altogether.

User configuration > windows settings > Internet Explorer Maintenance > security >
open 'security Zones and Content Ratings > under 'security zones and privacy' choose
'import the current security zones and privacy settings > click the 'Modify Settings' button.

Choose 'Internet' zone > custom level > scroll down to the 'downloads' section > set 'file download' to disable

If you have any sites in your trusted lists then you will have to edit the trusted sites zone as well as the internet zone

Link this group policy to an OU that contains your users

here is the registry edit for this setting:
Disable File Download in Internet Explorer
this isnt an option with group policy, its more of a proxy solution
BirdsempleAuthor Commented:
Many thanks for this.  I knew there was some way to restrict IE from downloading but just could not find where.

The 14th Annual Expert Award Winners

The results are in! Meet the top members of our 2017 Expert Awards. Congratulations to all who qualified!

Glad it worked for you!
i didnt realise you wanted to block all! glad all is well
BirdsempleAuthor Commented:
If possible I would have preferred to just block exe files, however since that isn’t possible blocking all downloads might be the way to go.  

Thanks for your assistance
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.