Untrusted Font Blocking: registry value MitigationOptions_FontBockingComputerHKLM\SOFTWARE\Policies\Microsoft\Windows NT\MitigationOptions

Policy ID: FontMitigation
Scope: Computer Configuration
Supported on: At least Windows Server 2016, Windows 10
Source: Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
Category: System › Mitigation Options

Registry

MitigationOptions_FontBocking

REG_SZComputer

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\MitigationOptions Current key

Enabled value: Depends on the option value
Element: Mitigation Options

Options
Item	Stored value
Block untrusted fonts and log events	1000000000000
Do not block untrusted fonts	2000000000000
Log events without blocking untrusted fonts	3000000000000

Apply with .reg · CMD · PowerShell

.reg

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\MitigationOptions]

; Options (use only one)
; Block untrusted fonts and log events
"MitigationOptions_FontBocking"="1000000000000"
; Do not block untrusted fonts
"MitigationOptions_FontBocking"="2000000000000"
; Log events without blocking untrusted fonts
"MitigationOptions_FontBocking"="3000000000000"

CMD

:: Options (use only one)

:: Block untrusted fonts and log events
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\MitigationOptions" /v "MitigationOptions_FontBocking" /t REG_SZ /d 1000000000000 /f
:: Do not block untrusted fonts
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\MitigationOptions" /v "MitigationOptions_FontBocking" /t REG_SZ /d 2000000000000 /f
:: Log events without blocking untrusted fonts
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\MitigationOptions" /v "MitigationOptions_FontBocking" /t REG_SZ /d 3000000000000 /f

PowerShell

# Common: create the key
New-Item -Path 'HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\MitigationOptions' -Force | Out-Null

# Options (use only one)
# Block untrusted fonts and log events
New-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\MitigationOptions' -Name 'MitigationOptions_FontBocking' -PropertyType String -Value '1000000000000' -Force | Out-Null
# Do not block untrusted fonts
New-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\MitigationOptions' -Name 'MitigationOptions_FontBocking' -PropertyType String -Value '2000000000000' -Force | Out-Null
# Log events without blocking untrusted fonts
New-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\MitigationOptions' -Name 'MitigationOptions_FontBocking' -PropertyType String -Value '3000000000000' -Force | Out-Null