How to Completely Disable ‘Downloads’ (Prevent File Downloads) via Group Policy in Microsoft Edge

In highly secure environments, such as public kiosks, testing centres, or strict corporate workstations handling classified data, allowing users to download arbitrary files from the internet is a massive security risk. Even with robust antivirus software (like Windows Defender SmartScreen) actively scanning traffic, zero-day malware or restricted corporate documents could still be downloaded and subsequently exfiltrated via USB drives or local network shares. To guarantee a sterile environment, administrators must forcibly block all file downloads directly at the browser level.

This guide explains how to completely disable the ability to download files system-wide in Microsoft Edge using Group Policy.

Disable Downloads via Group Policy

To enforce a strict block that prevents users from downloading any files, and locks the setting so it cannot be bypassed, we must use an administrative template. Note that this requires Windows 11 Pro, Enterprise, or Education editions.

1. Log into Windows 11 with an Administrator account.
2. Press the Windows Key + R to open the Run dialogue box.
3. Type gpedit.msc and press Enter to launch the Local Group Policy Editor.
4. In the left-hand navigation pane, carefully navigate to this path:

   Computer Configuration > Administrative Templates > Microsoft Edge

5. In the right-hand pane, scroll down to locate the policy named Allow download restrictions.
6. Double-click the policy to open its configuration window.
7. Select the radio button next to Enabled.
8. In the “Options” pane below, click the drop-down menu and select Block all downloads.
9. Click Apply, then click OK.

Verify the Lockdown

Group Policy changes require the browser to read the registry upon its next launch. Close all running instances of Microsoft Edge.

To verify the restriction is active, reopen Microsoft Edge and navigate to a safe testing site (like downloading a standard installer for VLC or 7-Zip). Click the download link. The browser will immediately intercept the request, and the Downloads flyout menu will display a prominent red error message stating, “Blocked by your organization.” The file will not be written to the local disk, ensuring the workstation remains completely insulated from external file payloads.