

If you aren't quite ready to deploy this feature into your organization, you can run it in Audit mode to see if not loading untrusted fonts causes any usability or compatibility issues.Įxclude apps to load untrusted fonts. The name of the apps that use untrusted fonts appear in your event log. Turns on event logging, but doesn’t block fonts from loading, regardless of location. Helps stop any font processed using GDI from loading outside of the %windir%/Fonts directory. There are three ways to use this feature: By default, this feature isn't turned on. What does this mean for me?īlocking untrusted fonts helps improve your network and employee protection against font-processing-related attacks. Blocking untrusted fonts helps prevent both remote (web-based or email-based) and local EOP attacks that can happen during the font file-parsing process. Untrusted fonts are any font installed outside of the %windir%/Fonts directory. Using this feature, you can turn on a global setting that stops your employees from loading untrusted fonts processed using the Graphics Device Interface (GDI) onto your network. To help protect your company from attacks that may originate from untrusted or attacker-controlled font files, we’ve created the Blocking Untrusted Fonts feature.

#Install fonts to extensis fonts windows 10#
Learn more about what features and functionality are supported in each Windows edition at Compare Windows 10 Editions.
