File Block Settings In The Trust Center [repack] -

This is the "graceful compromise." It allows the file to open, but inside a sandboxed window where Editing, Saving, Printing, and Macros are disabled.

Use File Block Settings to enforce your file format policy , not to fix a one-off error. If a user complains they cannot open a .prn file from 1992, do not globally unblock .prn . Convert the file for them. Your security posture is only as strong as your oldest allowed file format. Have you been bitten by an aggressive File Block policy? Or are you using it to successfully block legacy macro malware? Let us know in the comments below. file block settings in the trust center

"If I unblock everything, my system is vulnerable." Reality: Unblocking .xls does not suddenly make you vulnerable to .xls malware if you have macros disabled and Protected View enabled. Security is layered. File Block Settings are one layer, not the whole wall. This is the "graceful compromise

You can deploy specific GUIDs for each file type. For example, the policy setting for blocking legacy Excel 2.0 spreadsheets is a simple registry key under: HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\16.0\Excel\Security\FileBlock Convert the file for them