Export (0) Print
Expand All

Manage blocked file types in SharePoint 2013


Applies to: SharePoint Server 2013, SharePoint Foundation 2013

Topic Last Modified: 2014-05-28

Summary: How to block file types in SharePoint 2013 from being uploaded or downloaded based on their file name extension.

For information on blocked file types in SharePoint Online have a look here: Types of files that cannot be added to a list or library

You can restrict file types from being uploaded or downloaded in SharePoint 2013. Each web application maintains a list of blocked file types that is based on file name extensions. For example, you can block files that have the .exe extension because those files can be run on the client computer and can contain malicious code.

By default, many file types are blocked, including file types that are treated as executable by Internet Explorer. Files whose names include braces (for example, filename.{doc}) are also blocked by default. If you add a file type of a file that exists in the site collection, a message informs you that the item already exists and you are prevented from entering the file type.

The following table shows the file types that are blocked by default and their corresponding file name extensions.

Table: File types blocked by default

File name extension File type


Microsoft Access project extension


Microsoft Access project


Application file


ASP declarations file


ASP.NET Web handler file. Web handlers are software modules that handle raw HTTP requests received by ASP.NET.


ASP.NET Web Services source file


Active Server Pages


Microsoft Visual Basic class module


Batch file


Compound index


Certificate file


Compiled HTML Help file


Java class file


Windows NT command script


Microsoft MS-DOS program


Configuration file


Control Panel extension


Security certificate


Script file


Windows dynamic-link library




Microsoft Visual FoxPro compiled program


Help file


HTML program


Script file


HTML document


Internet Information Services file


Internet database connector file


Internet data query file


Internet Naming Service


Internet Communication settings


Internet Document Set file


JScript Encoded script file


Korn Shell script file
















Microsoft Access stored procedure










Microsoft Access add-in program


Microsoft Access program


Microsoft Access MDE database


Microsoft Access data file


Microsoft Access workgroup


Microsoft Access wizard program


Microsoft Common Console document


Microsoft Agent script helper


Microsoft Agent script helper


Microsoft Agent script helper


Microsoft Agent script helper


Microsoft Agent script helper


Microsoft Agent script helper


Windows Installer package


Windows Installer update package file


Visual Test source files


Microsoft Office profile settings file


Photo CD image or Microsoft Visual Test compiled script


Shortcut to MS-DOS program


System file


Program source file


Printer file


Microsoft Outlook personal folder file


Registration entries


ACT! database maintenance file


Windows Explorer command file


Screen saver


Script file


Windows shortcut


Shell Scrap object


HTML file that contains server-side directives


HTML file that contains server-side directives


Simple Object Access Protocol file


HTML file that contains server-side directives


Uniform Resource Locator (Internet shortcut)


Microsoft Visual Basic Scripting Edition file


VBScript Encoded Script file


VBScript file


Windows Script file


Windows Script Component


Windows Script file


Windows Script Host settings file

The steps in this article apply to both SharePoint Foundation 2013 and SharePoint Server 2013.

Use this procedure when you want to prohibit files of a specific type from being saved or retrieved from any web application on a server.

To add or remove blocked file types by using Central Administration
  1. Verify that you have the following administrative credentials.

    • You must be a farm administrator on the server.

  2. In Central Administration, click Security.

  3. On the Security page, in the General Security section, click Define blocked file types.

  4. On the Blocked File Types page, if you want to change the selected web application, on the Web Application menu, click Change Web Application. Use the Select Web Application page to select a web application.

  5. Do one of the following:

    • To block an additional file type, scroll to the bottom of the Type each file name extension on a separate line text box, type the file name extension that you want to block, and then click OK.

      You do not have to type a file name extension in the list in alphabetical order. The next time that you open the list, the file name extension you added will be correctly sorted in alphabetical order.
    • To stop blocking a file type, select a file type from the list, press the Delete key, and then click OK.

Was this page helpful?
(1500 characters remaining)
Thank you for your feedback
© 2014 Microsoft