Skip to main content

Stop having to click Unblock on every downloaded file

CAUTION: The blocking of downloaded files in Windows is a security and safety feature to help prevent your computer from being infected by viruses and other malware. Only disable this feature if you know what you're doing.

I had been plagued by this annoyance since the days of Windows Vista. Any downloaded file, no matter what browser I use, gets tagged as "blocked" by Windows. You can open downloaded documents even though they are blocked, but when you run a downloaded application (such as a setup file) you're presented with a "Security Warning" before you're allowed to run it. It's worse if you extract a downloaded ZIP file with the Windows' built-in ZIP management. Every extracted file is blocked by default.

Being a geek who finds unnecessary "security" prompts annoying, the first thing I do in Windows is to disable the User Account Control (UAC). But I couldn't quite figure out how to disable blocking of downloaded files until now. These prompts (such as UAC and file blocking) are designed to help Windows shield itself from the user. But to me, they aren't an effective solution as even an amateur user can simply click 'Allow' on any of the prompts without thinking.


While these prompts are pretty useless in shielding Windows from an amateur's haphazard usage, they are also heavily annoying to a power user who knows what he is doing. A good security solution should work in the background automatically and downright prevent users from running malicious code instead of giving them a choice where most users simply ignore the warning and go ahead anyway.

I decided to figure out if there's a way to get rid of the downloaded file blocking once and for all, and apparently there is. Source: Vista Blocked File Protection Control
  1. Click Start, type in gpedit.msc.
  2. Go to "User Configuration > Administrative Templates > Windows Components > Attachment Manager".
  3. Double-click on "Do not preserve zone information in file attachments".
  4. Choose the "Enabled" option and click Apply > OK.
  5. Close the "Local Group Policy Editor" window.
Notes: (1) You will need administrator access to do the above. (2) Previously downloaded files that are blocked will continue to remain blocked until you unblock them manually. Only the files you download after enabling the setting above will avoid getting blocked. In order to quickly unblock all existing downloaded files, do the following (advanced users only!):
  1. Download Sysinternals Streams utility from here.
  2. Extract the downloaded ZIP file to find streams.exe file.
  3. Copy this file to your Downloads folder (or wherever your downloads are).
  4. Open a Command Prompt on your Downloads folder by doing this:
    1. Right-click on the Downloads folder while holding Shift key.
    2. Select "Open command window here" from the menu.
  5. Type streams -s * and check whether all the files listed have only :Zone.Identifier:$DATA 26 as their streams. (You may need to accept EULA when using Streams first time.)
    • If any file has a stream other than the one given here, move that file out of the folder before next step, and back in after next step.
    • If the list is too long, you can pipe it into a text file like this: streams -s * > textfile.txt  and check it by sorting the lines to look for other streams, and then finding for those streams in the unsorted text file to identify the files that have them.
  6. Ensuring all listed files have only the :Zone.Identifier:$DATA stream, type streams -s -d * to delete the alternate data stream on all files in the Downloads folder and subfolders.
    • This will unblock the files.
  7. Once done, close the command window and delete the streams.exe file.
Warning: DO NOT use the above procedure on the root of C drive or other unknown locations. The Streams utility can delete important data stored in alternate data streams and this can damage your computer, The alternate data streams are not always used for blocking of a downloaded file, which is only one of their many uses.

Comments

Post a Comment

Comments are moderated, and are usually posted within 24 hours if approved. You must have a minimum of OpenID to post comments.

Popular posts from this blog

Disable auto save in JetBrains IDE software (IntelliJ IDEA, PyCharm, PhpStorm)

JetBrains provides the following IDE software: IntelliJ IDEA PhpStorm PyCharm RubyMine WebStorm AppCode CLion Google also provides Android Studio which is powered by the IntelliJ platform. If you come from a different IDE such as Eclipse, you will be unpleasantly surprised to find that JetBrains-branded IDEs automatically save everything the moment you look away. The proponents argue that as you work on your project, you should not have to worry about saving files. But to others, this auto-save behavior which is enabled by default is a curse that catches them by surprise, and a shocking departure from the workflow they are very much used to. You can change the behavior by altering some settings.

How to force redirect HTTP to HTTPS in Amazon Elastic Beanstalk

After picking up bits and pieces over the Internet, here I have the complete guide for my particular setup. My Amazon AWS Elastic Beanstalk (ELB or EBS) is as follows: 64bit Amazon Linux 2016.03 v2.1.1 running Tomcat 8 Java 8 Java/JSP application on Apache Tomcat Maven Build How to get it done: First, configure your EBS instance: Go to Configuration and click the gear on Load Balancing. Under Load Balancer, set the following options: Listener port: 80 Protocol: HTTP Secure listener port: 443 Protocol: HTTPS SSL certificate ID: Choose the cert ID that goes with your server. If you don't have one, you can use Certificate Manager to create one. Apply and save this configuration. Let the server health be OK. Test it by accessing your application web page through both HTTP and HTTPS: HTTP should load the page unsecurely. HTTPS should load the page securely. No port number should be added after the domain name in either case. Then, add a configuration file

Make Samsung DVD-C350 region-free

Update 2: An anonymous commentator has shown me a way to make Region 1 players (such as DVD-H1080R) region-free by first converting it to Region 3, then applying my region-free hack below. For details, click here or look for a comment by an Anonymous user dated 18 April 2011. Update: The instructions in the original post below did not make the DVD player region-free. Instead it only locked it to region 1. Many thanks to Anonymous who posted the first comment on this post, I now have alternate instructions. Note: If you have edited the numbers menu (see original post) , I suggest you return it to the original settings you had backed up. A modified numbers menu may prevent the instructions below from working properly.