Control use of the File System API for reading: registry value DefaultFileSystemReadGuardSetting (Edge)ComputerHKLM\Software\Policies\Microsoft\Edge

Policy ID: DefaultFileSystemReadGuardSetting
Scope: Computer Configuration, User Configuration
Supported on: Microsoft Edge version 86, Windows 7 or later
Source: Microsoft Edge Policy Templates (version 155.0.4283.45)
Category: Microsoft Edge › Content settings

Registry

DefaultFileSystemReadGuardSetting

REG_DWORDComputerUser

…\Software\Policies\Microsoft\EdgeHKLM\Software\Policies\Microsoft\Edge Current key
HKCU\Software\Policies\Microsoft\Edge

Enabled value: Depends on the option value
Element: Control use of the File System API for reading

Options
Item	Stored value
Don't allow any site to request read access to files and directories via the File System API	2
Allow sites to ask the user to grant read access to files and directories via the File System API	3

Apply with .reg · CMD · PowerShell

ComputerMachine-wide setting

.reg

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Edge]

; Options (use only one)
; Don't allow any site to request read access to files and directories via the File System API
"DefaultFileSystemReadGuardSetting"=dword:00000002
; Allow sites to ask the user to grant read access to files and directories via the File System API
"DefaultFileSystemReadGuardSetting"=dword:00000003

CMD

:: Options (use only one)

:: Don't allow any site to request read access to files and directories via the File System API
reg add "HKLM\Software\Policies\Microsoft\Edge" /v "DefaultFileSystemReadGuardSetting" /t REG_DWORD /d 2 /f
:: Allow sites to ask the user to grant read access to files and directories via the File System API
reg add "HKLM\Software\Policies\Microsoft\Edge" /v "DefaultFileSystemReadGuardSetting" /t REG_DWORD /d 3 /f

PowerShell

# Common: create the key
New-Item -Path 'HKLM:\Software\Policies\Microsoft\Edge' -Force | Out-Null

# Options (use only one)
# Don't allow any site to request read access to files and directories via the File System API
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Edge' -Name 'DefaultFileSystemReadGuardSetting' -PropertyType DWord -Value 2 -Force | Out-Null
# Allow sites to ask the user to grant read access to files and directories via the File System API
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Edge' -Name 'DefaultFileSystemReadGuardSetting' -PropertyType DWord -Value 3 -Force | Out-Null

UserPer-account setting

.reg

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Edge]

; Options (use only one)
; Don't allow any site to request read access to files and directories via the File System API
"DefaultFileSystemReadGuardSetting"=dword:00000002
; Allow sites to ask the user to grant read access to files and directories via the File System API
"DefaultFileSystemReadGuardSetting"=dword:00000003

CMD

:: Options (use only one)

:: Don't allow any site to request read access to files and directories via the File System API
reg add "HKCU\Software\Policies\Microsoft\Edge" /v "DefaultFileSystemReadGuardSetting" /t REG_DWORD /d 2 /f
:: Allow sites to ask the user to grant read access to files and directories via the File System API
reg add "HKCU\Software\Policies\Microsoft\Edge" /v "DefaultFileSystemReadGuardSetting" /t REG_DWORD /d 3 /f

PowerShell

# Common: create the key
New-Item -Path 'HKCU:\Software\Policies\Microsoft\Edge' -Force | Out-Null

# Options (use only one)
# Don't allow any site to request read access to files and directories via the File System API
New-ItemProperty -Path 'HKCU:\Software\Policies\Microsoft\Edge' -Name 'DefaultFileSystemReadGuardSetting' -PropertyType DWord -Value 2 -Force | Out-Null
# Allow sites to ask the user to grant read access to files and directories via the File System API
New-ItemProperty -Path 'HKCU:\Software\Policies\Microsoft\Edge' -Name 'DefaultFileSystemReadGuardSetting' -PropertyType DWord -Value 3 -Force | Out-Null