Prevent unwanted iFilters and protocol handlers

Supported OS tags: WindowsServer2003, WindowsXP

Enabling this policy prevents Windows Desktop Search from using iFilters and protocol handlers unless they are specified in the allow list. However, This policy will not prevent iFilters or protocol handlers from being installed, nor will it prevent them from being used by other applications or services. You can also specify an allow list of add-ins by providing the classID or ProgId string. For example, if you plan to deploy a particular iFilter, make sure that this iFilter is on the allow list, either as a GUID such as {xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx} (include the braces) or a ProgID such as VisFilter.CFilter.1. If you maintain a locked desktop environment, this setting is redundant because non-administrative users do not have permission to install new components. If your users have Administrator permissions or can install software, this policy prevents them from specifically using Windows Desktop Search-related add-ins. Note: Because of a limitation in the Group Policy editor, you must add at least one entry in the allow list, even if you want to enable this policy without an allow list. Create a list entry by putting a space in the name field and a space in the value field and then save it. This will create a placeholder entry that is ignored by the program.

No explicit registry values are set for enabled or disabled states.

• Computer
  Add primary intranet search location

  Microsoft Windows XP, or Windows Server 2003 with Windows Search version 3.01 or later
• Computer
  Add secondary intranet search locations

  Microsoft Windows XP, or Windows Server 2003 with Windows Search version 3.01 or later
• Computer
  Allow Cloud Search

  At least Windows Server 2016, Windows 10
• Computer
  Allow Cortana

  At least Windows Server 2016, Windows 10
• Computer
  Allow Cortana above lock screen

  At least Windows Server 2016, Windows 10
• Computer
  Allow Cortana Page in OOBE on an AAD account

  At least Windows Server 2016, Windows 10
• Computer
  Allow indexing of encrypted files

  Microsoft Windows Vista, or any version of Windows with Windows Search 4.0 or later
• Computer
  Allow search and Cortana to use location

  At least Windows Server 2016, Windows 10
• Computer
  Allow search highlights

  At least Windows Server 2016, Windows 10
• Computer
  Allow use of diacritics

  Microsoft Windows Vista, or any version of Windows with Windows Search 3.01 or later
• Computer
  Always use automatic language detection when indexing content and properties

  Microsoft Windows 8 or later
• Computer
  Configures search on the taskbar

  At least Windows 11