Allow file group descriptor operations to write to any destination path

Policy ID
AllowAllCopyFGDDestinations
Scope
Computer Configuration
Supported on
At least Windows Server 2012, Windows 8 or Windows RT
Source
Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
Category
Windows Components › File Explorer

Description

This policy setting determines whether path traversal containment checks are enforced when writing files received via clipboard or drag-drop file group descriptors (CFSTR_FILEDESCRIPTOR).

If you enable this policy setting, path traversal containment checks are not enforced and files may be written to any path reachable by the destination folder. Enable this policy only if the default behavior breaks a required workflow.

If you disable or do not configure this policy setting, file group descriptor operations enforce path containment and reject file names that attempt to escape the destination folder via relative path components.

Registry

ComputerHKEY_LOCAL_MACHINE
  • AllowAllCopyFGDDestinationsREG_DWORD

Other policies in the same category

View all policies in this category (23)