Turn off shell protocol protected mode

Supported OS tags: Windows10, Windows10RT, Windows11, Windows7, Windows8, Windows81, WindowsRT, WindowsRT81, WindowsServer2008, WindowsServer2012, WindowsServer2012R2, WindowsServer2016, WindowsVista, WindowsXP

This policy setting allows you to configure the amount of functionality that the shell protocol can have. When using the full functionality of this protocol, applications can open folders and launch files. The protected mode reduces the functionality of this protocol allowing applications to only open a limited set of folders. Applications are not able to open files with this protocol when it is in the protected mode. It is recommended to leave this protocol in the protected mode to increase the security of Windows. If you enable this policy setting the protocol is fully enabled, allowing the opening of folders and files. If you disable this policy setting the protocol is in the protected mode, allowing applications to only open a limited set of folders. If you do not configure this policy setting the protocol is in the protected mode, allowing applications to only open a limited set of folders.

This policy has no additional user input fields.

• User
  Allow only per user or approved shell extensions

  At least Windows 2000
• Computer
  Allow the use of remote paths in file shortcut icons

  At least Windows Server 2012, Windows 8 or Windows RT
• Computer
  Configure Windows Defender SmartScreen

  At least Windows Server 2012, Windows 8 or Windows RT
• ComputerUser
  Disable binding directly to IPropertySetStorage without intermediate layers.

  At least Windows Vista
• User
  Disable Known Folders

  At least Windows Server 2008 R2 or Windows 7
• User
  Display confirmation dialog when deleting files

  At least Windows Server 2003 operating systems or Windows XP Professional
• User
  Display the menu bar in File Explorer

  At least Windows Vista