Edit

Share via

DefaultFileSystemWriteGuardSetting

Control use of the File System API for writing

Supported versions

  • On Windows and macOS since 86 or later

Description

If you set this policy to 3, websites can ask for write access to the host operating system's filesystem using the File System API. If you set this policy to 2, access is denied.

If you don't set this policy, websites can ask for access. Users can change this setting.

Policy options mapping:

  • BlockFileSystemWrite (2) = Don't allow any site to request write access to files and directories

  • AskFileSystemWrite (3) = Allow sites to ask the user to grant write access to files and directories

Use the preceding information when configuring this policy.

Policy options mapping:

Use this information when configuring this policy.

  • BlockFileSystemWrite (2) = Don't allow any site to request write access to files and directories
  • AskFileSystemWrite (3) = Allow sites to ask the user to grant write access to files and directories

Supported features

  • Can be mandatory: Yes
  • Can be recommended: No
  • Dynamic Policy Refresh: Yes
  • Per Profile: Yes
  • Applies to a profile that is signed in with a Microsoft account: Yes

Data type

  • Integer

Windows information and settings

Group Policy (ADMX) info

  • GP unique name: DefaultFileSystemWriteGuardSetting
  • GP name: Control use of the File System API for writing
  • GP path (Mandatory): Administrative Templates/Microsoft Edge/Content settings
  • GP path (Recommended): N/A
  • GP ADMX file name: MSEdge.admx

Example value

Don't allow any site to request write access to files and directories

Registry settings

  • Path (Mandatory): SOFTWARE\Policies\Microsoft\Edge
  • Path (Recommended): N/A
  • Value name: DefaultFileSystemWriteGuardSetting
  • Value type: REG_DWORD

Example registry value

0x00000002

Mac information and settings

  • Preference Key name: DefaultFileSystemWriteGuardSetting
  • Example value:
<integer>2</integer>

See also