Control use of the File System API for writing: registry value DefaultFileSystemWriteGuardSetting (Chrome)UserHKCU\Software\Policies\Google\Chrome

Policy ID
DefaultFileSystemWriteGuardSetting
Scope
Computer Configuration, User Configuration
Supported on
Microsoft Windows 7 or later
Source
Google Chrome Policy Templates (version 156.0.8078.80)
Category
Google › Google Chrome › Content settings

Registry

DefaultFileSystemWriteGuardSetting

REG_DWORDUserComputer
Enabled value
Depends on the option value
Element
Control use of the File System API for writing
Options
ItemStored value
Do not allow any site to request write access to files and directories2
Allow sites to ask the user to grant write access to files and directories3
Apply with .reg · CMD · PowerShell
UserPer-account setting
.reg
Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Policies\Google\Chrome]

; Options (use only one)
; Do not allow any site to request write access to files and directories
"DefaultFileSystemWriteGuardSetting"=dword:00000002
; Allow sites to ask the user to grant write access to files and directories
"DefaultFileSystemWriteGuardSetting"=dword:00000003
CMD
:: Options (use only one)

:: Do not allow any site to request write access to files and directories
reg add "HKCU\Software\Policies\Google\Chrome" /v "DefaultFileSystemWriteGuardSetting" /t REG_DWORD /d 2 /f
:: Allow sites to ask the user to grant write access to files and directories
reg add "HKCU\Software\Policies\Google\Chrome" /v "DefaultFileSystemWriteGuardSetting" /t REG_DWORD /d 3 /f
PowerShell
# Common: create the key
New-Item -Path 'HKCU:\Software\Policies\Google\Chrome' -Force | Out-Null

# Options (use only one)
# Do not allow any site to request write access to files and directories
New-ItemProperty -Path 'HKCU:\Software\Policies\Google\Chrome' -Name 'DefaultFileSystemWriteGuardSetting' -PropertyType DWord -Value 2 -Force | Out-Null
# Allow sites to ask the user to grant write access to files and directories
New-ItemProperty -Path 'HKCU:\Software\Policies\Google\Chrome' -Name 'DefaultFileSystemWriteGuardSetting' -PropertyType DWord -Value 3 -Force | Out-Null
ComputerMachine-wide setting
.reg
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome]

; Options (use only one)
; Do not allow any site to request write access to files and directories
"DefaultFileSystemWriteGuardSetting"=dword:00000002
; Allow sites to ask the user to grant write access to files and directories
"DefaultFileSystemWriteGuardSetting"=dword:00000003
CMD
:: Options (use only one)

:: Do not allow any site to request write access to files and directories
reg add "HKLM\Software\Policies\Google\Chrome" /v "DefaultFileSystemWriteGuardSetting" /t REG_DWORD /d 2 /f
:: Allow sites to ask the user to grant write access to files and directories
reg add "HKLM\Software\Policies\Google\Chrome" /v "DefaultFileSystemWriteGuardSetting" /t REG_DWORD /d 3 /f
PowerShell
# Common: create the key
New-Item -Path 'HKLM:\Software\Policies\Google\Chrome' -Force | Out-Null

# Options (use only one)
# Do not allow any site to request write access to files and directories
New-ItemProperty -Path 'HKLM:\Software\Policies\Google\Chrome' -Name 'DefaultFileSystemWriteGuardSetting' -PropertyType DWord -Value 2 -Force | Out-Null
# Allow sites to ask the user to grant write access to files and directories
New-ItemProperty -Path 'HKLM:\Software\Policies\Google\Chrome' -Name 'DefaultFileSystemWriteGuardSetting' -PropertyType DWord -Value 3 -Force | Out-Null