Some organization may want to prohibit its penis to download file from the internet but calm allowing unconstipated internet access. It could be for efficiency reason. By restricting file download, the administration can keep its shared bandwidth use at minimal. It could be for the security reason arsenic well. By doing thus, it will minimize the risk of end-users downloading infect files or malicious programs to the calculator. In this article, weâ€™re going to show you how to Disable File Download in Internet Explorer using Group Policy .
Disable File Download in Internet Explorer using Group Policy
If youâ€™re using Group Policy, you can enforce the setting to block file download to all computers in the constitution. When the fix is applied, user will no longer able to download file from the internet even though they are still able to open the sites .
now we ’ re going to demonstrate the steps to disable file download in Internet Explorer using Group Policy. In this scenario, a company with sphere name mustbegeek.com wants to disable file download in Internet Explorer for all employee computers. The Domain Controller installed on Windows Server 2012 R2, and all employee computers are stored under OU named Endpoints .
As the network administrator, the tax is to setup a policy aim that contains a set that blocks file download, and apply it to the right target. hera ’ mho how we do it :
1. Determine the policy object
The arrange must be configured in a policy object. You can either create a new policy object or use existing ones. In this exercise, weâ€™re creating a new policy named “ MBG Internet Policy ” .
open GPMC in the Domain Controller. Right click on Group Policy Objects and blue-ribbon New .
Enter the policy name then click OK to confirm .
2. Configuring the policy
The following step is to configure the set in the choose policy object. In our case, the policy name is “ MBG Internet Policy ” so we right click on that policy object and select Edit .
Navigate to Computer Configuration > Policies > Administrative Templates > Windows Components > Internet Explorer > Internet Control Panel > Security Page > Internet Zone. The set that weâ€™re looking for should be there with identify “ Allow file downloads ” as shown below :
Double click that setting and a new window will pop up. Set the state as “ Enabled ” but on the Allow file downloads section, choose “ Disable ” from the dismiss down menu. See name below :
Hit OK button to confirm .
3. Apply policy to the target OU
The final mistreat is to link the policy on the aim OU if it hasnâ€™t been done even. As this fix is under Computer Configurations, remember to link this policy on an OU that contains computers .
Right click on the target OU and choose Link an Existing GPO as shown below. In our event the target OU is “ Endpoints ” .
Select the right policy diagnose and that ’ s all the steps .
Things to Note
When the policy has been applied to the computers, user will receive telling “ Security Warning: Your Current Settings do not Allow This File to be Downloaded ” when they attempt to download any file. You can wait for the Group Policy to apply naturally by itself, or force it by using the command gpupdate /force .
note that the Group Policy only enforce this setting for Internet Explorer and thereâ€™s no manner to control early browser. therefore, as the workaround we normally need to combine this setting with other settings that blocks other browsers than Internet Explorer.
And that ’ s how you disable file download in Internet Explorer using Group Policy .