Details

This policy setting allows you to manage whether file downloads are permitted from the zone. This option is determined by the zone of the page with the link causing the download, not the zone from which the file is delivered.

If you enable this policy setting, files can be downloaded from the zone.

If you disable this policy setting, files are prevented from being downloaded from the zone.

If you do not configure this policy setting, files are prevented from being downloaded from the zone.

Solution

Policy Path: Windows ComponentsInternet ExplorerInternet Control PanelSecurity PageRestricted Sites Zone
Policy Setting Name: Allow file downloads

Supportive Information

The following resource is also helpful.

• https://techcommunity.microsoft.com/t5/microsoft-security-baselines/security-baseline-final-for-windows-10-v1909-and-windows-server/ba-p/1023093

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Windows.

References

• 800-53|CM-7a.

Source

• Tenable.com/audits