Inclusion list for moderate risk file types: registry value ModRiskFileTypesUserHKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations
- Policy ID
- AM_SetModRiskInclusion
- Scope
- User Configuration
- Supported on
- At least Windows XP Professional with SP2
- Source
- Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
- Category
- Windows Components › Attachment Manager
Registry
ModRiskFileTypes
REG_SZUser- Enabled value
- Depends on the option value
- Element
- Specify moderate risk extensions (include a leading period, e.g. .doc;.pdf;).
- Value type
- REG_SZ
- Required
- true
Apply with .reg · CMD · PowerShell
.reg
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations] ; Value names and types follow the ADMX. Replace <enter value> below with your own data "ModRiskFileTypes"="<enter value>"
CMD
:: Value names and types follow the ADMX. Replace <enter value> below with your own data reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations" /v "ModRiskFileTypes" /t REG_SZ /d "<enter value>" /f
PowerShell
# Value names and types follow the ADMX. Replace <enter value> below with your own data New-Item -Path 'HKCU:\Software\Microsoft\Windows\CurrentVersion\Policies\Associations' -Force | Out-Null New-ItemProperty -Path 'HKCU:\Software\Microsoft\Windows\CurrentVersion\Policies\Associations' -Name 'ModRiskFileTypes' -PropertyType String -Value '<enter value>' -Force | Out-Null