Policy

Allow file extensions for OLE embedding

This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise, and to subscription versions of Project and Visio.​ This policy setting allows you to specify which file extensions Office won’t block when they are embedded as an OLE package in an Office file by using the Object Packager control. By default, Office blocks certain file extensions. For a list of those file extensions, go to https://go.microsoft.com/fwlink/?linkid=847759. Important: Malicious scripts and executables can be embedded as an OLE package and can cause harm if clicked by the user. If you enable this policy setting, enter the file extensions to allow, separated by semicolons. For example, exe;vbs;js. If you disable or don’t configure this policy setting, the default set of file extensions will be blocked. If you want to block additional file extensions, enable the "Block additional file extensions for OLE embedding" policy setting.

Policy
Pack Microsoft Office
Category Microsoft Office 2016 / Security Settings
Policy ID 5000ca628533
Internal name L_AllowedExtensions

Registry

Copy registry mappings

HKCU\software\policies\microsoft\office\common\security\allowedextensions

Policy notes

This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise, and to subscription versions of Project and Visio.​ This policy setting allows you to specify which file extensions Office won’t block when they are embedded as an OLE package in an Office file by using the Object Packager control. By default, Office blocks certain file extensions. For a list of those file extensions, go to https://go.microsoft.com/fwlink/?linkid=847759. Important: Malicious scripts and executables can be embedded as an OLE package and can cause harm if clicked by the user. If you enable this policy setting, enter the file extensions to allow, separated by semicolons. For example, exe;vbs;js. If you disable or don’t configure this policy setting, the default set of file extensions will be blocked. If you want to block additional file extensions, enable the "Block additional file extensions for OLE embedding" policy setting.

Related policies

ActiveX Control InitializationAllow Basic Authentication prompts from network proxiesAllow root or intermediate certificates as VBA trusted publishersAllow specified hosts to show Basic Authentication prompts to Office appsAllow VBA to load typelib references by path from untrusted intranet locationsAutomation SecurityBlock additional file extensions for OLE embedding