Allow file group descriptor operations to write to any destination path
- Policy ID
- AllowAllCopyFGDDestinations
- Scope
- Computer Configuration
- Supported on
- At least Windows Server 2012, Windows 8 or Windows RT
- Source
- Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
- Category
- Windows Components › File Explorer
Description
This policy setting determines whether path traversal containment checks are enforced when writing files received via clipboard or drag-drop file group descriptors (CFSTR_FILEDESCRIPTOR).
If you enable this policy setting, path traversal containment checks are not enforced and files may be written to any path reachable by the destination folder. Enable this policy only if the default behavior breaks a required workflow.
If you disable or do not configure this policy setting, file group descriptor operations enforce path containment and reject file names that attempt to escape the destination folder via relative path components.
Registry
ComputerHKEY_LOCAL_MACHINE
- AllowAllCopyFGDDestinationsREG_DWORD