File Explorer Native TAR/7z Management

Question

Hi Microsoft team

With Windows 11 natively supporting archive formats like .tar, .7z, and .gz via the libarchive open-source project, our security team wants to prevent users from extracting unauthorized compressed files that bypass traditional email gateways. Is there a specific Group Policy or MDM CSP to restrict or audit native File Explorer extraction behavior for specific extension types?

Answer 1

Hi Jie Jun,

At present, there isn’t a dedicated Group Policy or MDM CSP that lets you block or selectively restrict File Explorer’s built-in handling of formats like .tar, .7z, or .gz. The native support is powered by the libarchive project, and Windows treats these formats much like .zip files, without offering extension-specific controls.

That said, you do have options. You can use AppLocker or Windows Defender Application Control (WDAC) policies to restrict which applications are allowed to run, including blocking third-party extraction tools if needed. For auditing, Microsoft Defender for Endpoint can help track file operations and alert when users attempt to open or extract certain file types. Another approach is to enforce endpoint DLP policies that monitor and restrict access to sensitive compressed files, even if they’re opened natively in Explorer.

Best practice is to combine these controls with monitoring ,for example, using Defender for Endpoint advanced hunting queries to identify extraction events, and layering WDAC rules to prevent unauthorized tools from being used. While there’s no single “block .7z in Explorer” switch today, these enterprise-grade controls give you visibility and enforcement at the right level.

If you find this answer helpful, kindly hit “accept answer”.

Jason