Allow only per user or approved shell extensions: registry value EnforceShellExtensionSecurityUserHKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Policy ID

EnforceShellExtensionSecurity

Scope

User Configuration

Supported on

At least Windows 2000

Source

Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)

Category

Windows Components › File Explorer

Registry