Understanding Windows 11 File Explorer's Treatment of Local Files Originating from the Web
Windows 11 File Explorer has implemented new security measures to protect users from potential threats that may arise when opening files from the web. This article aims to provide a detailed understanding of how File Explorer handles local files originating from the web and the key concepts related to this topic, including security features and settings.
File Explorer's Treatment of Local Files Originating from the Web
In recent versions of Windows, File Explorer has implemented additional security measures to prevent potential security threats from files downloaded from the web. When a user downloads a file from the internet and saves it to their local disk, File Explorer displays the file's icon with a monitoring symbol overlaid, indicating that the file has been marked as originating from the web.
By default, File Explorer does not allow users to open these files directly from the download location. Instead, users must move or copy the file to a different location before they can open it. This security feature is designed to prevent users from accidently opening potentially harmful files that have been automatically downloaded or saved from the web.
Security Features and Settings
File Explorer's security features related to local files originating from the web can be configured through the Windows Security settings. Specifically, users can manage the security settings for Internet Zone and Local Intranet Zone.
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1These registry keys allow users to configure the security settings for files downloaded from the internet and for files located in the Local Intranet Zone. For example, users can modify the security settings to allow the execution of active content or to enable scripting for these files.
Search Certain Word Group: "Word files local disk, explorer displays results, shows files icons monitored not allowed open, claiming..."
When a user performs a search for a specific word group, such as "Word files local disk, explorer displays results, shows files icons monitored not allowed open, claiming...", File Explorer will display the search results with a monitoring symbol overlaid on the file icons. This indicates that the files have been marked as originating from the web.
In order to open a file from the search results, users must first move or copy the file to a different location, outside of the download location. This additional step is required to bypass the security feature that prevents the direct opening of files marked as originating from the web.
- File Explorer displays files with a monitoring symbol overlaid if they have been marked as originating from the web
- Files marked as originating from the web cannot be opened directly from the download location
- Users must move or copy the file to a different location before they can open it
- Security settings for Internet Zone and Local Intranet Zone can be configured through the Windows Security settings
- Files from search results must be moved or copied to a different location before they can be opened
References
-
"Windows 10 Security Best Practices." Microsoft, 2021.
-
"Understanding File Downloads." Microsoft Support, 2021.
-
"Configure Internet Explorer Security Zones and Settings." TechNet, 2021.