File size limits for Intranet zone
Verified with Windows 11 25H2 — updated on July 23, 2026
Supported on: At least Internet Explorer 5.0
Path in the GPO console
User Configuration\Administrative Templates\Windows Components\Internet Explorer\Persistence Behavior Description
Limits the amount of storage that a page or site using the DHTML Persistence behavior can use for the Local Intranet security zone. If you enable this policy, you can specify the persistence storage amount per domain or per document for this security zone. If you disable this policy or do not configure it, you cannot set this limit. Note: This setting does not appear in the user interface.
Registry
HKCU
Software\Policies\Microsoft\Internet Explorer\Persistence Export Builder
BETAConfigure the state, scope and options, then generate .reg, PowerShell, Intune and SCCM outputs — or add the setting to a multi-setting collection.
These exports write the registry — this is not a managed GPO. ⓘ
.reg file
Windows Registry Editor Version 5.00
; Exported from gporais.com
; Policy: File size limits for Intranet zone
; State: Enabled
; Supported on: At least Internet Explorer 5.0
[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Persistence]
"DomainLimit"=dword:00002800
"DocumentLimit"=dword:00000200More formats (PowerShell, Intune, SCCM)
PowerShell
# Exported from gporais.com
# Policy: File size limits for Intranet zone
# State: Enabled
# Supported on: At least Internet Explorer 5.0
# Warning: In SYSTEM context (the Intune default), HKCU targets the SYSTEM profile. Run this script using the logged-on credentials.
$path = 'HKCU:\Software\Policies\Microsoft\Internet Explorer\Persistence'
New-Item -Path $path -Force | Out-Null
Set-ItemProperty -Path $path -Name 'DomainLimit' -Value 10240 -Type DWord
Set-ItemProperty -Path $path -Name 'DocumentLimit' -Value 512 -Type DWordIntune XML
No direct Policy CSP / OMA-URI mapping for this policy. Use the Intune Remediation tab, or ingest the ADMX in Intune.Intune Remediation
# === Detection script ===
# Exported from gporais.com
# Policy: File size limits for Intranet zone
# State: Enabled
# Supported on: At least Internet Explorer 5.0
# Warning: In SYSTEM context (the Intune default), HKCU targets the SYSTEM profile. Run this script using the logged-on credentials.
function Test-RegistryValue {
param(
[Parameter(Mandatory = $true)][string]$Path,
[Parameter(Mandatory = $true)][string]$Name,
[object]$Expected,
[ValidateSet('String', 'DWord', 'MultiString')][string]$Kind = 'String',
[switch]$Absent
)
try {
$item = Get-ItemProperty -LiteralPath $Path -Name $Name -ErrorAction Stop
} catch {
return $Absent.IsPresent
}
if ($Absent.IsPresent) { return $false }
$actual = $item.$Name
if ($Kind -eq 'DWord') { return ([int64]$actual) -eq ([int64]$Expected) }
if ($Kind -eq 'MultiString') {
$actualValues = @($actual)
$expectedValues = @($Expected)
if ($actualValues.Count -ne $expectedValues.Count) { return $false }
for ($i = 0; $i -lt $expectedValues.Count; $i++) {
if ([string]$actualValues[$i] -ne [string]$expectedValues[$i]) { return $false }
}
return $true
}
return [string]$actual -eq [string]$Expected
}
$checks = @(
(Test-RegistryValue -Path 'HKCU:\Software\Policies\Microsoft\Internet Explorer\Persistence' -Name 'DomainLimit' -Expected 10240 -Kind DWord)
(Test-RegistryValue -Path 'HKCU:\Software\Policies\Microsoft\Internet Explorer\Persistence' -Name 'DocumentLimit' -Expected 512 -Kind DWord)
)
if ($checks -notcontains $false) {
Write-Output 'Compliant'
exit 0
}
Write-Output 'Non-compliant'
exit 1
# === Remediation script ===
# Exported from gporais.com
# Policy: File size limits for Intranet zone
# State: Enabled
# Supported on: At least Internet Explorer 5.0
# Warning: In SYSTEM context (the Intune default), HKCU targets the SYSTEM profile. Run this script using the logged-on credentials.
$path = 'HKCU:\Software\Policies\Microsoft\Internet Explorer\Persistence'
New-Item -Path $path -Force | Out-Null
Set-ItemProperty -Path $path -Name 'DomainLimit' -Value 10240 -Type DWord
Set-ItemProperty -Path $path -Name 'DocumentLimit' -Value 512 -Type DWordSCCM scripts
# Exported from gporais.com
# Policy: File size limits for Intranet zone
# State: Enabled
# Supported on: At least Internet Explorer 5.0
# SCCM Configuration Item guidance:
# Create a Configuration Item of type "Setting: Script".
# Discovery script: use the Detection script below.
# Remediation script: use the Remediation script below.
# Compliance rule: the Discovery script output equals 'Compliant'.
# === Detection script ===
# Exported from gporais.com
# Policy: File size limits for Intranet zone
# State: Enabled
# Supported on: At least Internet Explorer 5.0
# Warning: In SYSTEM context (the Intune default), HKCU targets the SYSTEM profile. Run this script using the logged-on credentials.
function Test-RegistryValue {
param(
[Parameter(Mandatory = $true)][string]$Path,
[Parameter(Mandatory = $true)][string]$Name,
[object]$Expected,
[ValidateSet('String', 'DWord', 'MultiString')][string]$Kind = 'String',
[switch]$Absent
)
try {
$item = Get-ItemProperty -LiteralPath $Path -Name $Name -ErrorAction Stop
} catch {
return $Absent.IsPresent
}
if ($Absent.IsPresent) { return $false }
$actual = $item.$Name
if ($Kind -eq 'DWord') { return ([int64]$actual) -eq ([int64]$Expected) }
if ($Kind -eq 'MultiString') {
$actualValues = @($actual)
$expectedValues = @($Expected)
if ($actualValues.Count -ne $expectedValues.Count) { return $false }
for ($i = 0; $i -lt $expectedValues.Count; $i++) {
if ([string]$actualValues[$i] -ne [string]$expectedValues[$i]) { return $false }
}
return $true
}
return [string]$actual -eq [string]$Expected
}
$checks = @(
(Test-RegistryValue -Path 'HKCU:\Software\Policies\Microsoft\Internet Explorer\Persistence' -Name 'DomainLimit' -Expected 10240 -Kind DWord)
(Test-RegistryValue -Path 'HKCU:\Software\Policies\Microsoft\Internet Explorer\Persistence' -Name 'DocumentLimit' -Expected 512 -Kind DWord)
)
if ($checks -notcontains $false) {
Write-Output 'Compliant'
exit 0
}
Write-Output 'Non-compliant'
exit 1
# === Remediation script ===
# Exported from gporais.com
# Policy: File size limits for Intranet zone
# State: Enabled
# Supported on: At least Internet Explorer 5.0
# Warning: In SYSTEM context (the Intune default), HKCU targets the SYSTEM profile. Run this script using the logged-on credentials.
$path = 'HKCU:\Software\Policies\Microsoft\Internet Explorer\Persistence'
New-Item -Path $path -Force | Out-Null
Set-ItemProperty -Path $path -Name 'DomainLimit' -Value 10240 -Type DWord
Set-ItemProperty -Path $path -Name 'DocumentLimit' -Value 512 -Type DWordBuilding a multi-setting collection? Add this setting and generate combined .reg / PowerShell / GPO scripts.