Edit

Share via

DefaultFileSystemReadGuardSetting

Control use of the File System API for reading

Supported versions

  • On Windows and macOS since 86 or later

Description

If you set this policy to 3, websites can ask for read access to the host operating system's filesystem using the File System API. If you set this policy to 2, access is denied.

If you don't set this policy, websites can ask for access. Users can change this setting.

Policy options mapping:

  • BlockFileSystemRead (2) = Don't allow any site to request read access to files and directories via the File System API

  • AskFileSystemRead (3) = Allow sites to ask the user to grant read access to files and directories via the File System API

Use the preceding information when configuring this policy.

Policy options mapping:

Use this information when configuring this policy.

  • BlockFileSystemRead (2) = Don't allow any site to request read access to files and directories via the File System API
  • AskFileSystemRead (3) = Allow sites to ask the user to grant read access to files and directories via the File System API

Supported features

  • Can be mandatory: Yes
  • Can be recommended: No
  • Dynamic Policy Refresh: Yes
  • Per Profile: Yes
  • Applies to a profile that is signed in with a Microsoft account: Yes

Data type

  • Integer

Windows information and settings

Group Policy (ADMX) info

  • GP unique name: DefaultFileSystemReadGuardSetting
  • GP name: Control use of the File System API for reading
  • GP path (Mandatory): Administrative Templates/Microsoft Edge/Content settings
  • GP path (Recommended): N/A
  • GP ADMX file name: MSEdge.admx

Example value

Don't allow any site to request read access to files and directories via the File System API

Registry settings

  • Path (Mandatory): SOFTWARE\Policies\Microsoft\Edge
  • Path (Recommended): N/A
  • Value name: DefaultFileSystemReadGuardSetting
  • Value type: REG_DWORD

Example registry value

0x00000002

Mac information and settings

  • Preference Key name: DefaultFileSystemReadGuardSetting
  • Example value:
<integer>2</integer>

See also