Prevent managing the phishing filter (Windows 11 Group Policy)

What it does

This policy setting prevents the user from managing a filter that warns the user if the website being visited is known for fraudulent attempts to gather personal information through "phishing." If you enable this policy setting, the user is not prompted to enable the phishing filter. You must specify which mode the phishing filter uses: manual, automatic, or off. If you select manual mode, the phishing filter performs only local analysis, and the user is prompted to permit any data to be sent to Microsoft. If the feature is fully enabled, all website addresses that are not on the filter's allow list are sent automatically to Microsoft without prompting the user. If you disable or do not configure this policy setting, the user is prompted to decide the mode of operation for the phishing filter.

What it writes

Hive: HKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
Registry key: Software\Policies\Microsoft\Internet Explorer\PhishingFilter

In Intune

No native CSP; import the ADMX (Intune-ready).

From Microsoft's Policy CSP DDF files (DDF v2 Files, February 2026), read 18 Oct 2026.

Options

Option	Type	Registry value	Allowed values
Select phishing filter modeRequired	Drop-down list	`Enabled`	Off`0` Manual`1` Automatic`2`

Configure and deploy

Choose a state and the option values; the output below is generated from the template for exactly that.

Fix the highlighted options to generate output.

History 3 retained releases

22H2 · 1.015 Jul 2024
- Already present in the first release ChangeIntel keeps.

2 later releases left it unchanged.

Template

Internal name: Disable_Managing_Phishing_Filter
Namespace: Microsoft.Policies.InternetExplorer
Template file: inetres.admx
Release: Windows 11 23H2 · 1.0 · file set d784d0ea5f14a680…

Definition, editor controls and support

Definition

<policy class="Both" displayName="$(string.Disable_Managing_Phishing_Filter)" explainText="$(string.IE_Explain_DisableManagingPhishingFilter)" key="Software\Policies\Microsoft\Internet Explorer\PhishingFilter" name="Disable_Managing_Phishing_Filter" presentation="$(presentation.Disable_Managing_Phishing_Filter_1)" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions">
      <parentCategory ref="Microsoft.Policies.InternetExplorer:InternetExplorer" />
      <supportedOn ref="Microsoft.Policies.InternetExplorer:SUPPORTED_IE7ONLY" />
      <elements>
        <enum id="PhishingOptions" required="true" valueName="Enabled">
          <item displayName="$(string.PhishingOff)">
            <value>
              <decimal value="0" />
            </value>
          </item>
          <item displayName="$(string.ManualPhishing)">
            <value>
              <decimal value="1" />
            </value>
          </item>
          <item displayName="$(string.AutomaticPhishing)">
            <value>
              <decimal value="2" />
            </value>
          </item>
        </enum>
      </elements>
    </policy>

Editor controls

<presentation id="Disable_Managing_Phishing_Filter_1" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions">
        <dropdownList refId="PhishingOptions">Select phishing filter mode</dropdownList>
      </presentation>

Supported platforms and category

Microsoft.Policies.InternetExplorer:category:InternetExplorer
<category displayName="$(string.InternetExplorer)" explainText="$(string.IE_ExplainCat)" name="InternetExplorer" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions">
      <parentCategory ref="Microsoft.Policies.Windows:WindowsComponents" />
    </category>
Microsoft.Policies.InternetExplorer:definition:SUPPORTED_IE7ONLY
<definition displayName="$(string.SUPPORTED_IE7ONLY)" name="SUPPORTED_IE7ONLY" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions">
        <or>
          <reference ref="Microsoft.Policies.Products:InternetExplorer70" />
        </or>
      </definition>
Microsoft.Policies.InternetExplorer:unresolved:Microsoft.Policies.Products:InternetExplorer70
<unresolved reference="Microsoft.Policies.Products:InternetExplorer70" />
Microsoft.Policies.Windows:category:WindowsComponents
<category displayName="$(string.WindowsComponents)" explainText="$(string.WindowsComponents_Help)" name="WindowsComponents" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions" />
Microsoft.Policies.InternetExplorer:category:InternetExplorer
<category displayName="$(string.InternetExplorer)" explainText="$(string.IE_ExplainCat)" name="InternetExplorer" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions">
      <parentCategory ref="Microsoft.Policies.Windows:WindowsComponents" />
    </category>
<strings><string id="Microsoft.Policies.InternetExplorer:IE_ExplainCat">Contains settings to configure Internet Explorer</string><string id="Microsoft.Policies.InternetExplorer:InternetExplorer">Internet Explorer</string></strings>
Microsoft.Policies.InternetExplorer:definition:SUPPORTED_IE7ONLY
<definition displayName="$(string.SUPPORTED_IE7ONLY)" name="SUPPORTED_IE7ONLY" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions">
        <or>
          <reference ref="Microsoft.Policies.Products:InternetExplorer70" />
        </or>
      </definition>
<strings><string id="Microsoft.Policies.InternetExplorer:SUPPORTED_IE7ONLY">Only Internet Explorer 7.0</string></strings>
Microsoft.Policies.Windows:category:WindowsComponents
<category displayName="$(string.WindowsComponents)" explainText="$(string.WindowsComponents_Help)" name="WindowsComponents" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions" />
<strings><string id="Microsoft.Policies.Windows:WindowsComponents">Windows Components</string><string id="Microsoft.Policies.Windows:WindowsComponents_Help">Contains settings for operating system components.</string></strings>