Inclusion list for moderate risk file types

Supported OS tags: Windows10, Windows10RT, Windows11, Windows7, Windows8, Windows81, WindowsRT, WindowsRT81, WindowsServer2008, WindowsServer2012, WindowsServer2012R2, WindowsServer2016, WindowsVista, WindowsXP

This policy setting allows you to configure the list of moderate-risk file types. If the attachment is in the list of moderate-risk file types and is from the restricted or Internet zone, Windows prompts the user before accessing the file. This inclusion list overrides the list of potentially high-risk file types built into Windows and it takes precedence over the low-risk inclusion list but has a lower precedence than the high-risk inclusion list (where an extension is listed in more than one inclusion list). If you enable this policy setting, you can specify file types which pose a moderate risk. If you disable this policy setting, Windows uses its default trust logic. If you do not configure this policy setting, Windows uses its default trust logic.

No explicit registry values are set for enabled or disabled states.

• User
  Default risk level for file attachments

  At least Windows XP Professional with SP2
• User
  Do not preserve zone information in file attachments

  At least Windows XP Professional with SP2
• User
  Hide mechanisms to remove zone information

  At least Windows XP Professional with SP2
• User
  Inclusion list for high risk file types

  At least Windows XP Professional with SP2
• User
  Inclusion list for low file types

  At least Windows XP Professional with SP2
• User
  Notify antivirus programs when opening attachments

  At least Windows XP Professional with SP2
• User
  Trust logic for file attachments

  At least Windows XP Professional with SP2