Control use of the File System API for reading: registry value DefaultFileSystemReadGuardSetting (Chrome)ComputerHKLM\Software\Policies\Google\Chrome

Policy ID: DefaultFileSystemReadGuardSetting
Scope: Computer Configuration, User Configuration
Supported on: Microsoft Windows 7 or later
Source: Google Chrome Policy Templates (version 156.0.8078.80)
Category: Google › Google Chrome › Content settings

Registry

DefaultFileSystemReadGuardSetting

REG_DWORDComputerUser

…\Software\Policies\Google\ChromeHKLM\Software\Policies\Google\Chrome Current key
HKCU\Software\Policies\Google\Chrome

Enabled value: Depends on the option value
Element: Control use of the File System API for reading

Options
Item	Stored value
Do not allow any site to request read access to files and directories via the File System API	2
Allow sites to ask the user to grant read access to files and directories via the File System API	3

Apply with .reg · CMD · PowerShell

ComputerMachine-wide setting

.reg

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome]

; Options (use only one)
; Do not allow any site to request read access to files and directories via the File System API
"DefaultFileSystemReadGuardSetting"=dword:00000002
; Allow sites to ask the user to grant read access to files and directories via the File System API
"DefaultFileSystemReadGuardSetting"=dword:00000003

CMD

:: Options (use only one)

:: Do not allow any site to request read access to files and directories via the File System API
reg add "HKLM\Software\Policies\Google\Chrome" /v "DefaultFileSystemReadGuardSetting" /t REG_DWORD /d 2 /f
:: Allow sites to ask the user to grant read access to files and directories via the File System API
reg add "HKLM\Software\Policies\Google\Chrome" /v "DefaultFileSystemReadGuardSetting" /t REG_DWORD /d 3 /f

PowerShell

# Common: create the key
New-Item -Path 'HKLM:\Software\Policies\Google\Chrome' -Force | Out-Null

# Options (use only one)
# Do not allow any site to request read access to files and directories via the File System API
New-ItemProperty -Path 'HKLM:\Software\Policies\Google\Chrome' -Name 'DefaultFileSystemReadGuardSetting' -PropertyType DWord -Value 2 -Force | Out-Null
# Allow sites to ask the user to grant read access to files and directories via the File System API
New-ItemProperty -Path 'HKLM:\Software\Policies\Google\Chrome' -Name 'DefaultFileSystemReadGuardSetting' -PropertyType DWord -Value 3 -Force | Out-Null

UserPer-account setting

.reg

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Policies\Google\Chrome]

; Options (use only one)
; Do not allow any site to request read access to files and directories via the File System API
"DefaultFileSystemReadGuardSetting"=dword:00000002
; Allow sites to ask the user to grant read access to files and directories via the File System API
"DefaultFileSystemReadGuardSetting"=dword:00000003

CMD

:: Options (use only one)

:: Do not allow any site to request read access to files and directories via the File System API
reg add "HKCU\Software\Policies\Google\Chrome" /v "DefaultFileSystemReadGuardSetting" /t REG_DWORD /d 2 /f
:: Allow sites to ask the user to grant read access to files and directories via the File System API
reg add "HKCU\Software\Policies\Google\Chrome" /v "DefaultFileSystemReadGuardSetting" /t REG_DWORD /d 3 /f

PowerShell

# Common: create the key
New-Item -Path 'HKCU:\Software\Policies\Google\Chrome' -Force | Out-Null

# Options (use only one)
# Do not allow any site to request read access to files and directories via the File System API
New-ItemProperty -Path 'HKCU:\Software\Policies\Google\Chrome' -Name 'DefaultFileSystemReadGuardSetting' -PropertyType DWord -Value 2 -Force | Out-Null
# Allow sites to ask the user to grant read access to files and directories via the File System API
New-ItemProperty -Path 'HKCU:\Software\Policies\Google\Chrome' -Name 'DefaultFileSystemReadGuardSetting' -PropertyType DWord -Value 3 -Force | Out-Null