Activer la navigation restreinte

Vérifié avec Microsoft 365/Office 5568.1000 — mis à jour le 4 septembre 2026

Pris en charge sur : Au minimum Windows Server 2008 R2 ou Windows 7

Chemin dans la console GPO

Configuration utilisateur\Modèles d'administration\Microsoft Office 2016\Boîte de dialogue Ouvrir/Enregistrer\Navigation restreinte

Description

Si la navigation restreinte est activée, la boîte de dialogue Enregistrer sous est limitée, de sorte que l’utilisateur ne peut accéder qu’aux emplacements spécifiés dans le paramètre « Navigation restreinte\Approuver les emplacements », ainsi qu’aux enfants de ces emplacements. Pour activer le paramètre de stratégie « Approuver les emplacements », vous devez préalablement activer le paramètre de stratégie « Approuver les emplacements ».

Registre

HKCU software\policies\microsoft\office\16.0\common\open find\restrictedbrowse\optin

Plus d'options disponibles

Options

Microsoft Access

microsoft access boolean

Microsoft Excel

microsoft excel boolean

Microsoft SharePoint Designer

microsoft sharepoint designer boolean

Microsoft InfoPath

microsoft infopath boolean

Microsoft OneNote

microsoft onenote boolean

Microsoft Outlook

microsoft outlook boolean

Microsoft PowerPoint

microsoft powerpoint boolean

Microsoft Project

microsoft project boolean

Microsoft Publisher

microsoft publisher boolean

Microsoft Visio

microsoft visio boolean

Microsoft Word

microsoft word boolean

Générateur d'exports

BETA

Configurez l'état, la portée et les options, puis générez les sorties .reg, PowerShell, Intune et SCCM — ou ajoutez le paramètre à une collection multi-paramètres.

Ces exports écrivent le registre — ce n'est pas une GPO managée. ⓘ

Non configuré Activé Désactivé

Fichier .reg

Windows Registry Editor Version 5.00

; Exported from gporais.com
; Policy: Activer la navigation restreinte
; State: Enabled
; Supported on: Au minimum Windows Server 2008 R2 ou Windows 7

[HKEY_CURRENT_USER\software\policies\microsoft\office\16.0\common\open find\restrictedbrowse\optin]
"microsoft access"=dword:00000000
"microsoft excel"=dword:00000000
"microsoft sharepoint designer"=dword:00000000
"microsoft infopath"=dword:00000000
"microsoft onenote"=dword:00000000
"microsoft outlook"=dword:00000000
"microsoft powerpoint"=dword:00000000
"microsoft project"=dword:00000000
"microsoft publisher"=dword:00000000
"microsoft visio"=dword:00000000
"microsoft word"=dword:00000000

Autres formats (PowerShell, Intune, SCCM)

PowerShell

# Exported from gporais.com
# Policy: Activer la navigation restreinte
# State: Enabled
# Supported on: Au minimum Windows Server 2008 R2 ou Windows 7
# Warning: In SYSTEM context (the Intune default), HKCU targets the SYSTEM profile. Run this script using the logged-on credentials.

$path = 'HKCU:\software\policies\microsoft\office\16.0\common\open find\restrictedbrowse\optin'
New-Item -Path $path -Force | Out-Null
Set-ItemProperty -Path $path -Name 'microsoft access' -Value 0 -Type DWord
Set-ItemProperty -Path $path -Name 'microsoft excel' -Value 0 -Type DWord
Set-ItemProperty -Path $path -Name 'microsoft sharepoint designer' -Value 0 -Type DWord
Set-ItemProperty -Path $path -Name 'microsoft infopath' -Value 0 -Type DWord
Set-ItemProperty -Path $path -Name 'microsoft onenote' -Value 0 -Type DWord
Set-ItemProperty -Path $path -Name 'microsoft outlook' -Value 0 -Type DWord
Set-ItemProperty -Path $path -Name 'microsoft powerpoint' -Value 0 -Type DWord
Set-ItemProperty -Path $path -Name 'microsoft project' -Value 0 -Type DWord
Set-ItemProperty -Path $path -Name 'microsoft publisher' -Value 0 -Type DWord
Set-ItemProperty -Path $path -Name 'microsoft visio' -Value 0 -Type DWord
Set-ItemProperty -Path $path -Name 'microsoft word' -Value 0 -Type DWord

Intune XML

Aucune correspondance directe Policy CSP / OMA-URI pour cette stratégie. Utilisez l'onglet Intune Remediation, ou importez l'ADMX dans Intune.

Intune Remediation

# === Detection script ===
# Exported from gporais.com
# Policy: Activer la navigation restreinte
# State: Enabled
# Supported on: Au minimum Windows Server 2008 R2 ou Windows 7
# Warning: In SYSTEM context (the Intune default), HKCU targets the SYSTEM profile. Run this script using the logged-on credentials.

function Test-RegistryValue {
  param(
    [Parameter(Mandatory = $true)][string]$Path,
    [Parameter(Mandatory = $true)][string]$Name,
    [object]$Expected,
    [ValidateSet('String', 'DWord', 'MultiString')][string]$Kind = 'String',
    [switch]$Absent
  )

  try {
    $item = Get-ItemProperty -LiteralPath $Path -Name $Name -ErrorAction Stop
  } catch {
    return $Absent.IsPresent
  }

  if ($Absent.IsPresent) { return $false }
  $actual = $item.$Name

  if ($Kind -eq 'DWord') { return ([int64]$actual) -eq ([int64]$Expected) }
  if ($Kind -eq 'MultiString') {
    $actualValues = @($actual)
    $expectedValues = @($Expected)
    if ($actualValues.Count -ne $expectedValues.Count) { return $false }
    for ($i = 0; $i -lt $expectedValues.Count; $i++) {
      if ([string]$actualValues[$i] -ne [string]$expectedValues[$i]) { return $false }
    }
    return $true
  }

  return [string]$actual -eq [string]$Expected
}

$checks = @(
  (Test-RegistryValue -Path 'HKCU:\software\policies\microsoft\office\16.0\common\open find\restrictedbrowse\optin' -Name 'microsoft access' -Expected 0 -Kind DWord)
  (Test-RegistryValue -Path 'HKCU:\software\policies\microsoft\office\16.0\common\open find\restrictedbrowse\optin' -Name 'microsoft excel' -Expected 0 -Kind DWord)
  (Test-RegistryValue -Path 'HKCU:\software\policies\microsoft\office\16.0\common\open find\restrictedbrowse\optin' -Name 'microsoft sharepoint designer' -Expected 0 -Kind DWord)
  (Test-RegistryValue -Path 'HKCU:\software\policies\microsoft\office\16.0\common\open find\restrictedbrowse\optin' -Name 'microsoft infopath' -Expected 0 -Kind DWord)
  (Test-RegistryValue -Path 'HKCU:\software\policies\microsoft\office\16.0\common\open find\restrictedbrowse\optin' -Name 'microsoft onenote' -Expected 0 -Kind DWord)
  (Test-RegistryValue -Path 'HKCU:\software\policies\microsoft\office\16.0\common\open find\restrictedbrowse\optin' -Name 'microsoft outlook' -Expected 0 -Kind DWord)
  (Test-RegistryValue -Path 'HKCU:\software\policies\microsoft\office\16.0\common\open find\restrictedbrowse\optin' -Name 'microsoft powerpoint' -Expected 0 -Kind DWord)
  (Test-RegistryValue -Path 'HKCU:\software\policies\microsoft\office\16.0\common\open find\restrictedbrowse\optin' -Name 'microsoft project' -Expected 0 -Kind DWord)
  (Test-RegistryValue -Path 'HKCU:\software\policies\microsoft\office\16.0\common\open find\restrictedbrowse\optin' -Name 'microsoft publisher' -Expected 0 -Kind DWord)
  (Test-RegistryValue -Path 'HKCU:\software\policies\microsoft\office\16.0\common\open find\restrictedbrowse\optin' -Name 'microsoft visio' -Expected 0 -Kind DWord)
  (Test-RegistryValue -Path 'HKCU:\software\policies\microsoft\office\16.0\common\open find\restrictedbrowse\optin' -Name 'microsoft word' -Expected 0 -Kind DWord)
)

if ($checks -notcontains $false) {
  Write-Output 'Compliant'
  exit 0
}

Write-Output 'Non-compliant'
exit 1

# === Remediation script ===
# Exported from gporais.com
# Policy: Activer la navigation restreinte
# State: Enabled
# Supported on: Au minimum Windows Server 2008 R2 ou Windows 7
# Warning: In SYSTEM context (the Intune default), HKCU targets the SYSTEM profile. Run this script using the logged-on credentials.

$path = 'HKCU:\software\policies\microsoft\office\16.0\common\open find\restrictedbrowse\optin'
New-Item -Path $path -Force | Out-Null
Set-ItemProperty -Path $path -Name 'microsoft access' -Value 0 -Type DWord
Set-ItemProperty -Path $path -Name 'microsoft excel' -Value 0 -Type DWord
Set-ItemProperty -Path $path -Name 'microsoft sharepoint designer' -Value 0 -Type DWord
Set-ItemProperty -Path $path -Name 'microsoft infopath' -Value 0 -Type DWord
Set-ItemProperty -Path $path -Name 'microsoft onenote' -Value 0 -Type DWord
Set-ItemProperty -Path $path -Name 'microsoft outlook' -Value 0 -Type DWord
Set-ItemProperty -Path $path -Name 'microsoft powerpoint' -Value 0 -Type DWord
Set-ItemProperty -Path $path -Name 'microsoft project' -Value 0 -Type DWord
Set-ItemProperty -Path $path -Name 'microsoft publisher' -Value 0 -Type DWord
Set-ItemProperty -Path $path -Name 'microsoft visio' -Value 0 -Type DWord
Set-ItemProperty -Path $path -Name 'microsoft word' -Value 0 -Type DWord

Scripts SCCM

# Exported from gporais.com
# Policy: Activer la navigation restreinte
# State: Enabled
# Supported on: Au minimum Windows Server 2008 R2 ou Windows 7
# SCCM Configuration Item guidance:
# Create a Configuration Item of type "Setting: Script".
# Discovery script: use the Detection script below.
# Remediation script: use the Remediation script below.
# Compliance rule: the Discovery script output equals 'Compliant'.

# === Detection script ===
# Exported from gporais.com
# Policy: Activer la navigation restreinte
# State: Enabled
# Supported on: Au minimum Windows Server 2008 R2 ou Windows 7
# Warning: In SYSTEM context (the Intune default), HKCU targets the SYSTEM profile. Run this script using the logged-on credentials.

function Test-RegistryValue {
  param(
    [Parameter(Mandatory = $true)][string]$Path,
    [Parameter(Mandatory = $true)][string]$Name,
    [object]$Expected,
    [ValidateSet('String', 'DWord', 'MultiString')][string]$Kind = 'String',
    [switch]$Absent
  )

  try {
    $item = Get-ItemProperty -LiteralPath $Path -Name $Name -ErrorAction Stop
  } catch {
    return $Absent.IsPresent
  }

  if ($Absent.IsPresent) { return $false }
  $actual = $item.$Name

  if ($Kind -eq 'DWord') { return ([int64]$actual) -eq ([int64]$Expected) }
  if ($Kind -eq 'MultiString') {
    $actualValues = @($actual)
    $expectedValues = @($Expected)
    if ($actualValues.Count -ne $expectedValues.Count) { return $false }
    for ($i = 0; $i -lt $expectedValues.Count; $i++) {
      if ([string]$actualValues[$i] -ne [string]$expectedValues[$i]) { return $false }
    }
    return $true
  }

  return [string]$actual -eq [string]$Expected
}

$checks = @(
  (Test-RegistryValue -Path 'HKCU:\software\policies\microsoft\office\16.0\common\open find\restrictedbrowse\optin' -Name 'microsoft access' -Expected 0 -Kind DWord)
  (Test-RegistryValue -Path 'HKCU:\software\policies\microsoft\office\16.0\common\open find\restrictedbrowse\optin' -Name 'microsoft excel' -Expected 0 -Kind DWord)
  (Test-RegistryValue -Path 'HKCU:\software\policies\microsoft\office\16.0\common\open find\restrictedbrowse\optin' -Name 'microsoft sharepoint designer' -Expected 0 -Kind DWord)
  (Test-RegistryValue -Path 'HKCU:\software\policies\microsoft\office\16.0\common\open find\restrictedbrowse\optin' -Name 'microsoft infopath' -Expected 0 -Kind DWord)
  (Test-RegistryValue -Path 'HKCU:\software\policies\microsoft\office\16.0\common\open find\restrictedbrowse\optin' -Name 'microsoft onenote' -Expected 0 -Kind DWord)
  (Test-RegistryValue -Path 'HKCU:\software\policies\microsoft\office\16.0\common\open find\restrictedbrowse\optin' -Name 'microsoft outlook' -Expected 0 -Kind DWord)
  (Test-RegistryValue -Path 'HKCU:\software\policies\microsoft\office\16.0\common\open find\restrictedbrowse\optin' -Name 'microsoft powerpoint' -Expected 0 -Kind DWord)
  (Test-RegistryValue -Path 'HKCU:\software\policies\microsoft\office\16.0\common\open find\restrictedbrowse\optin' -Name 'microsoft project' -Expected 0 -Kind DWord)
  (Test-RegistryValue -Path 'HKCU:\software\policies\microsoft\office\16.0\common\open find\restrictedbrowse\optin' -Name 'microsoft publisher' -Expected 0 -Kind DWord)
  (Test-RegistryValue -Path 'HKCU:\software\policies\microsoft\office\16.0\common\open find\restrictedbrowse\optin' -Name 'microsoft visio' -Expected 0 -Kind DWord)
  (Test-RegistryValue -Path 'HKCU:\software\policies\microsoft\office\16.0\common\open find\restrictedbrowse\optin' -Name 'microsoft word' -Expected 0 -Kind DWord)
)

if ($checks -notcontains $false) {
  Write-Output 'Compliant'
  exit 0
}

Write-Output 'Non-compliant'
exit 1

# === Remediation script ===
# Exported from gporais.com
# Policy: Activer la navigation restreinte
# State: Enabled
# Supported on: Au minimum Windows Server 2008 R2 ou Windows 7
# Warning: In SYSTEM context (the Intune default), HKCU targets the SYSTEM profile. Run this script using the logged-on credentials.

$path = 'HKCU:\software\policies\microsoft\office\16.0\common\open find\restrictedbrowse\optin'
New-Item -Path $path -Force | Out-Null
Set-ItemProperty -Path $path -Name 'microsoft access' -Value 0 -Type DWord
Set-ItemProperty -Path $path -Name 'microsoft excel' -Value 0 -Type DWord
Set-ItemProperty -Path $path -Name 'microsoft sharepoint designer' -Value 0 -Type DWord
Set-ItemProperty -Path $path -Name 'microsoft infopath' -Value 0 -Type DWord
Set-ItemProperty -Path $path -Name 'microsoft onenote' -Value 0 -Type DWord
Set-ItemProperty -Path $path -Name 'microsoft outlook' -Value 0 -Type DWord
Set-ItemProperty -Path $path -Name 'microsoft powerpoint' -Value 0 -Type DWord
Set-ItemProperty -Path $path -Name 'microsoft project' -Value 0 -Type DWord
Set-ItemProperty -Path $path -Name 'microsoft publisher' -Value 0 -Type DWord
Set-ItemProperty -Path $path -Name 'microsoft visio' -Value 0 -Type DWord
Set-ItemProperty -Path $path -Name 'microsoft word' -Value 0 -Type DWord

Vous construisez une collection multi-paramètres ? Ajoutez ce paramètre et générez des exports combinés (.reg, PowerShell, GPO).

Ouvrir le Builder

Rechercher dans GPORais

Activer la navigation restreinte

Chemin dans la console GPO

Description

Registre

Options

Générateur d'exports

Fichier .reg

PowerShell

Intune XML

Intune Remediation

Scripts SCCM

Intégrer cette GPO sur votre site

Activer la navigation restreinte

Chemin dans la console GPO

Description

Registre

Options

Générateur d'exports

Fichier .reg

PowerShell

Intune XML

Intune Remediation

Scripts SCCM

Paramètres liés

Dans le même dossier de la console : “Navigation restreinte”