Windows 🟡 Intermediate

How to Enable or Disable Ability to Unblock Files Downloaded from Internet in Windows 11

Written by

Richard

Aug 6, 2026 4 min read

How to Enable or Disable Ability to Unblock Files Downloaded from Internet in Windows 11

Windows 11 lets you control whether you can unblock files you download from the internet. This setting helps protect your PC from potentially risky downloads.

⚡ Quick Answer

To disable the “Unblock” option for downloaded files, open Registry Editor, navigate to 🗝️HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Attachments, create a new DWORD value named HideZoneInfoOnProperties, and set its data to 1. This prevents users from unblocking internet files through the Properties window.

Windows' Attachment Manager tool checks downloaded files. This tool examines file origins, such as the internet or email, and can block files deemed unsafe. When a file downloads, Windows adds hidden information, called metadata, which the Attachment Manager reads to assess the file's safety.

You might see a warning or be completely blocked from opening a file. This depends on how Windows assesses the download. Typically, you can unblock a file by right-clicking it, selecting ‘Properties’, and then choosing ‘Unblock’.

The type of program you are using.
The type of file you are trying to open.
The security settings for the website you downloaded the file from. This includes zones like Internet, Local intranet, Trusted sites, and Restricted sites.

Attachment Manager also sorts files into risk categories:

High Risk: If a high-risk file comes from a restricted zone, Windows will block it. If it’s from the internet zone, you’ll see a warning: “Windows found that this file is potentially harmful. To help protect your computer, Windows has blocked access to this file.”
Moderate Risk: For moderate-risk files from restricted or internet zones, you might see a warning like: “The publisher could not be verified. Are you sure you want to run this software?”
Low Risk: Windows usually won’t warn you about low-risk files, no matter where they came from.

You can turn off the 'Unblock' option on a file's Properties window and the 'Always ask before opening this file' option on the security warning. Turning off these file options means you can no longer use them to unblock downloaded files.

Important: Administrator rights are needed to make these changes.

Option 1Using Local Group Policy Editor

You can enable or disable the ability to unblock files downloaded from the internet using the Local Group Policy Editor in Windows 11 Pro, Enterprise, or Education editions. This policy lets you control whether users can remove the security warning for files they get online.

Open the Local Group Policy Editor. You can choose to apply this policy for all users, specific users or groups, or all users except administrators.
In the left side of the editor, go to: User Configuration > Administrative Templates > Windows Components > Attachment Manager.
In the right side, find 'Hide mechanisms to remove zone information' and double-click it.

Windows 11 security settings to unblock downloaded files.

To Enable the Ability to Unblock Files

Select 'Not Configured'.
Click 'OK'.

To Disable the Ability to Unblock Files

Select 'Enabled'.
Click 'OK'.

Windows 11 options for managing downloaded file security settings.

To disable the ability for users to unblock files downloaded from the internet in Windows 11, you can use the Registry Editor. This method requires administrator access and involves changing a specific setting within the Windows registry.

Option 2Using the Registry Editor

This option works for all Windows editions.

To Enable the Ability to Unblock Files (Default Setting)

No changes are needed for this setting, as it is the default.

To Disable the Ability to Unblock Files

Press the Windows key + R on your keyboard to open the Run dialog box.
Type regedit and press Enter or click OK. This will open the Registry Editor. If prompted by User Account Control, click Yes.
Navigate to the following key in the Registry Editor:
The Registry Editor allows you to change specific Windows settings. To adjust how Windows handles downloaded files, open the Registry Editor and go to the key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Attachments. This location controls whether Windows warns you about files downloaded from the internet.
Right-click on the 'Attachments' key in the left pane.
Select 'New' > 'DWORD (32-bit) Value'.
Name the new value HideZoneInfoOnProperties and press Enter.
Double-click the new HideZoneInfoOnProperties value.
In the 'Value data' field, type 1 and click OK.

This change disables the 'Unblock' option for internet-downloaded files.

To re-enable the 'Unblock' option, you can either delete the HideZoneInfoOnProperties value or set its 'Value data' to 0.

Summary

This guide explained two ways to manage whether files downloaded from the internet can be unblocked in Windows 11. You can use the Local Group Policy Editor for Pro, Enterprise, and Education versions, or the Registry Editor for any Windows edition, to control this security setting.

Was this guide helpful?

Tags: #Windows 11

Was this helpful?

About the Author

Richard

Tech Writer, IT Professional

Richard, a writer for Geek Rewind, is a tech enthusiast who loves breaking down complex IT topics into simple, easy-to-understand ideas. With years of hands-on experience in system administration and enterprise IT operations, he’s developed a knack for offering practical tips and solutions. Richard aims to make technology more accessible and actionable. He's deeply committed to the Geek Rewind community, always ready to answer questions and engage in discussions.

2771 articles → Twitter