Using the admin console / Policies
File type and content lists
Lists in the Library that policies share, so you change a set of file types or patterns in one place.
File type lists
- What they're for: a named set of file types, such as Programs or Disk images. A download policy can use several lists, plus extra types of its own.
- Adding file types: type or paste them, separated by spaces or commas. They're tidied as you go:
EXE,exeand.exeall become.exe. - Changing a list: every policy using it follows. Browsers pick up the change within a few minutes.
- Deleting a list: only once no policy uses it. Used by shows which do.
- The built-in list: Dangerous file types is used by the default policy and can't be edited. Make a copy gives you one you can change.
What Dangerous file types covers
Programs are also recognised by their content, whatever they're named.
| Kind | File types |
|---|---|
| Programs and system files | .exe .com .pif .scr .cpl .dll .ocx .sys .drv |
| Installers and app packages | .msi .msp .mst .appx .appxbundle .msix .msixbundle .appinstaller .application .appref-ms .gadget |
| Scripts | .bat .cmd .ps1 .ps1xml .ps2 .ps2xml .psc1 .psc2 .psd1 .psm1 .js .jse .vbs .vbe .vb .wsf .wsh .wsc .ws .sct .hta |
| Shortcuts and Windows settings | .lnk .url .website .scf .library-ms .searchconnector-ms .settingcontent-ms .search-ms .msc .reg .inf .ins .isp .diagcab |
| Help files, add-ins and databases with code | .chm .hlp .xll .iqy .slk .one .ade .adp .mde .accde |
| Office documents with macros | .docm .dotm .xlsm .xltm .xlam .pptm .potm .ppam .ppsm .sldm |
| Disk images | .iso .img .vhd .vhdx |
| Packages that are ZIPs inside | .jar .war .ear .apk .aab .ipa .crx .xpi .vsix |
| Archives that can't be checked | .7z .rar .gz .tgz .gzip .bz2 .xz .lz .lzma .zst .tar .cab |
Ordinary documents (.docx, .xlsx, .pdf) and older Office files (.doc, .xls) aren't on the list. Add them to a copy if you need to.
Content lists
- What they're for: text patterns for clipboard policies, so a policy applies only when the copied text matches.
- Patterns: one per line, as regular expressions, ignoring case. A pattern that isn't valid is pointed out as you type.
- Try some text: paste text a website might copy, and see whether the list matches it.
- The built-in list: Commands people are tricked into running is used by the default malicious commands policy. Make a copy to change it.
Message templates are also in the Library: see Messages and branding.