Policy
Restrict potentially unsafe HTML Help functions to specified folders
Windows 11 25H2
Policy overview
Key metadata and intent for this policy.
This policy setting allows you to restrict certain HTML Help commands to function only in HTML Help (.chm) files within specified folders and their subfolders. Alternatively, you can disable these commands on the entire system. It is strongly recommended that only folders requiring administrative privileges be added to this policy setting. If you enable this policy setting, the commands function only for .chm files in the specified folders and their subfolders. To restrict the commands to one or more folders, enable the policy setting and enter the desired folders in the text box on the Settings tab of the Policy Properties dialog box. Use a semicolon to separate folders. For example, to restrict the commands to only .chm files in the %windir%\help folder and D:\somefolder, add the following string to the edit box: "%windir%\help;D:\somefolder". Note: An environment variable may be used, (for example, %windir%), as long as it is defined on the system. For example, %programfiles% is not defined on some early versions of Windows. The "Shortcut" command is used to add a link to a Help topic, and runs executables that are external to the Help file. The "WinHelp" command is used to add a link to a Help topic, and runs a WinHLP32.exe Help (.hlp) file. To disallow the "Shortcut" and "WinHelp" commands on the entire local system, enable the policy setting and leave the text box on the Settings tab of the Policy Properties dialog box blank. If you disable or do not configure this policy setting, these commands are fully functional for all Help files. Note: Only folders on the local computer can be specified in this policy setting. You cannot use this policy setting to enable the "Shortcut" and "WinHelp" commands for .chm files that are stored on mapped drives or accessed using UNC paths. For additional options, see the "Restrict these programs from being launched from Help" policy.
Registry values
How enabled and disabled states update the registry.
No explicit registry values are set for enabled or disabled states.
Policy elements
Inputs and configuration options exposed by this policy.
| Element | Type | Registry mapping | Constraints & behavior |
|---|---|---|---|
Enter folder names separated by semi-colons: ID HelpQualifiedRootDir_Edit | text | HKLM\Software\Policies\Microsoft\Windows\System\HelpQualifiedRootDir Type REG_SZ | None |
Other policies in this category
Explore related policies at the same level.
- ComputerActivate Shutdown Event Tracker System State Data featureWindows Server 2003 only
- ComputerAllow Distributed Link Tracking clients to use domain resourcesWindows Server 2003, Windows XP, and Windows 2000 only
- UserCentury interpretation for Year 2000At least Windows 2000
- ComputerConfigure the behavior of the sudo commandAt least Windows 11
- UserCustom User InterfaceAt least Windows 2000
- ComputerDisplay highly detailed status messagesAt least Windows 2000
- ComputerDisplay Shutdown Event TrackerAt least Windows Server 2003 operating systems or Windows XP Professional
- ComputerDo not automatically encrypt files moved to encrypted foldersAt least Windows 2000
- ComputerDo not display Manage Your Server page at logonAt least Windows Server 2003
- UserDo not display the Getting Started welcome screen at logonWindows 2000 only
- ComputerDo not turn off system power after a Windows system shutdown has occurred.At least Windows Server 2003 operating systems or Windows XP Professional with SP1
- UserDon't run specified Windows applicationsAt least Windows 2000