GPO tool

Group Policy made searchable

A free ADMX browser or comparison tool for IT administrators.Search policies, find registry keys, and see exactly what each setting writes to the Windows Registry. Or compare two GPO backups to see exactly what has changed between them.

Select a product
  • Select a category.

Untrusted Font Blocking

This security feature provides a global setting to prevent programs from loading untrusted fonts. Untrusted fonts are any font installed outside of the %windir%Fonts directory. This feature can be configured to be in 3 modes: On, Off, and Audit. By default, it is Off and no fonts are blocked. If you aren't quite ready to deploy this feature into your organization, you can run it in Audit mode to see if blocking untrusted fonts causes any usability or compatibility issues.

Registry Information

VendorMicrosoft
ProductGroup Policy
CategoryMitigation Options
Applies toComputer Configuration
Supported onWindows 10 0
Registry Key[HKLM]SOFTWAREPoliciesMicrosoftWindows NTMitigationOptions

Policy Settings

Mitigation Options

Registry Key[HKLM]SOFTWAREPoliciesMicrosoftWindows NTMitigationOptions
Value NameMitigationOptions_FontBocking
TypeREG_SZ
Values
  • Block untrusted fonts and log events (1000000000000)
  • Do not block untrusted fonts (2000000000000)
  • Log events without blocking untrusted fonts (3000000000000)