Block additional file extensions for OLE embedding: registry value blockedextensionsUserHKCU\software\policies\microsoft\office\common\security

Policy ID: L_BlockedExtensions
Scope: User Configuration
Supported on: At least Windows Server 2008 R2 or Windows 7
Source: Microsoft 365 Apps / Office Administrative Templates (version 5568.1000)
Category: Microsoft Office 2016 › Security Settings

Registry

blockedextensions

REG_SZUser

HKCU\software\policies\microsoft\office\common\security Current key

Enabled value: Depends on the option value
Element: File extensions:
Value type: REG_SZ

Apply with .reg · CMD · PowerShell

.reg

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\software\policies\microsoft\office\common\security]

; Value names and types follow the ADMX. Replace <enter value> below with your own data
"blockedextensions"="<enter value>"

CMD

:: Value names and types follow the ADMX. Replace <enter value> below with your own data

reg add "HKCU\software\policies\microsoft\office\common\security" /v "blockedextensions" /t REG_SZ /d "<enter value>" /f

PowerShell

# Value names and types follow the ADMX. Replace <enter value> below with your own data

New-Item -Path 'HKCU:\software\policies\microsoft\office\common\security' -Force | Out-Null
New-ItemProperty -Path 'HKCU:\software\policies\microsoft\office\common\security' -Name 'blockedextensions' -PropertyType String -Value '<enter value>' -Force | Out-Null