Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
On Windows, the right way to stop an associated app from opening depends on what started the launch. A website opening a game or other app uses web-to-app linking; a packaged Store app attempting to hand a URI to a desktop program uses a different policy; and a file extension or link type can be redirected through Settings > Apps > Default apps. For web links, Microsoft’s ApplicationDefaults Policy CSP documents EnableAppUriHandlers: setting it to 0 disables web-to-app linking so http and https open in the default browser. That is a device policy, not a universal switch for every custom URI scheme. Use the path below that matches the launch you are seeing.
Which Windows launch behavior are you trying to stop?
“File or URI scheme” describes several separate association systems. Identifying the trigger first prevents you from applying a policy that cannot affect the behavior. A URI is the address-like value passed to an application; its scheme is the part before the colon, such as http:, mailto:, or a game launcher’s custom scheme. A file association maps an extension such as .pdf or .xyz to an application. These mechanisms can point to the same program but are not controlled as one master list.
As an Amazon Associate I earn from qualifying purchases.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →| What starts the launch? | What opens? | Windows control | Scope and important limits |
|---|---|---|---|
| A website link in a browser, message, or document | An associated app instead of the browser | EnableAppUriHandlers in the ApplicationDefaults Policy CSP |
Device-scope policy; Windows 10 version 1803 and later on listed Pro, Enterprise, Education, and IoT Enterprise editions; reboot required after a change |
| A packaged Store app tries to open a URI in a desktop app | The default desktop application for that URI | BlockProtocolElevation |
Targets this packaged-app-to-desktop elevation path; it has documented exceptions for http, https, and mailto |
| You double-click a file or select a particular link type | The app currently assigned to that extension or link type | Settings > Apps > Default apps | User-selected association for the chosen type; it does not disable every registered handler |
These controls should not be treated as interchangeable. A browser link, a custom protocol such as a game launcher scheme, and a file extension can follow different registration and policy paths. The first useful question is therefore not “How do I block URI schemes?” but “Which program initiated the launch, and what exact scheme or extension did it pass?”
A quick decision process
- Reproduce the problem. Note whether you clicked a link, opened a file, or activated a command inside a packaged Store app.
- Record the target type. Write down the complete scheme, such as
httpsor a custom name, or the file extension. - Identify the destination. Confirm whether Windows opened a browser, a desktop application, or a packaged app.
- Choose the narrowest control. Use a user association for one type,
EnableAppUriHandlersfor device-wide web-to-app routing, andBlockProtocolElevationonly for the documented packaged-app hand-off. - Change one thing at a time. This makes testing and recovery much easier, especially on a managed computer.
How do I stop website links from opening an associated app?
On supported Windows editions, disable the EnableAppUriHandlers device policy. Microsoft states that disabling it turns off web-to-app linking and causes http and https URIs to open in the default browser instead of launching the associated app. This is the relevant fix when a link in a site, message, or document consistently jumps from the browser context into an installed application.
Popular on Amazon
- Spacious Design: Measuring 21.1" wide and 14.1" deep, our lap desk comfortably fits most laptops up to 15.6". Extra room for accessories ensures convenience.
- Enhanced Functionality: Packed with handy features, including a 5x9" precision tracking mouse pad and a built-in phone slot for seamless work or video calls. Plus, enjoy ergonomic support with the integrated cushioned wrist rest.
- Cool Comfort: Enjoy a stable surface with our lap desk's dual bolster cushion, designed for comfort and airflow, keeping your lap cool during extended use.
- Durable Surface: Work with confidence on our lap desk's solid surface, featuring a sleek black carbon color, ensuring optimal air circulation to prevent your laptop from overheating.
- On-the-Go Convenience: With an integrated handle and lightweight design (2.8 lbs), our lap desk is portable for travel or moving around the house, offering flexibility in any space.
Check support before changing the policy
- The policy applies to Windows 10 version 1803 and later according to Microsoft’s ApplicationDefaults Policy CSP documentation, updated in 2025.
- Microsoft’s policy table lists Pro, Enterprise, Education, and IoT Enterprise editions. Confirm the device edition rather than assuming that every Windows installation exposes the setting. The cited policy table does not establish a consumer-edition procedure.
- This is a device-scope control. On a managed computer, an administrator or management service may control the value and may overwrite a local change during the next synchronization.
- Plan for a restart. Microsoft specifies that a change to this policy takes effect after reboot, so testing immediately after saving a policy can produce a misleading result.
Set EnableAppUriHandlers to disabled
- Open the device’s organization-approved policy management system that exposes the ApplicationDefaults Policy CSP. The exact console can differ by organization; use the channel your administrator supports.
- Create or edit the
EnableAppUriHandlerssetting under that policy and set its allowed value to0(disabled). Microsoft lists1as the default enabled value. - Apply or synchronize the device policy, then restart Windows. A policy that is merely saved but not applied, or applied but not followed by the required restart, has not completed the documented change process.
- After the restart, open a normal
httporhttpslink that previously launched an app. It should now open in the system’s default browser. Test from the same kind of source that exposed the issue, because a custom scheme follows a different path.
Microsoft’s documented behavior is specific: “Disabling this policy disables web-to-app linking and http(s) URIs will be opened in the default browser instead of launching the associated app.” In practical terms, the browser becomes the route for those web schemes, while the application remains installed.
The policy changes routing for web links; it is not an uninstall operation and does not remove an app’s registration. If you need the old behavior again, return the value to 1 (enabled) and reboot. Record the original value before editing a managed policy so another administrator can restore the intended state precisely.
Free tools Windows power users keep installed
One-click scans. No signup required.
What this policy does not prove
EnableAppUriHandlers is documented for web-to-app linking. Do not present it as a blanket blocker for every custom protocol, local file association, or URI generated by another application. A game-specific scheme may still be registered and may continue to launch its handler. Likewise, changing this device policy does not select a new application for a file extension. Those are separate association decisions.
How do I prevent a packaged Store app from opening a URI in a desktop app?
Use the BlockProtocolElevation policy when the initiating program is a packaged Store app and the unwanted result is a URI being opened by the default desktop application. This policy addresses that elevation route; it is not a general “disable all URI schemes” switch.
Apply the policy for the packaged-app scenario
- Verify that the launch begins in a packaged Store app rather than in a website or a file association. The distinction determines whether this policy is relevant.
- In the organization’s supported Windows policy-management interface, enable
BlockProtocolElevationfor the scope provided by that management system. - Allow policy synchronization to complete, then reproduce the action from the packaged app and check whether the desktop hand-off is blocked.
- If the behavior remains, record the exact URI scheme and the initiating app. A different registration path may be responsible, or a documented exception may apply.
Which schemes remain exceptions?
Microsoft’s documentation explicitly says that enabling BlockProtocolElevation does not prevent packaged apps from opening the default desktop app for http, https, and mailto. Those exceptions mean the policy cannot be described as a universal URI blocker. A packaged app can still use those schemes to reach the default desktop handler even while other packaged-app-to-desktop URI elevation is blocked.
Do not infer that an exception means the policy is broken. First check the scheme. If the action uses mailto, for example, continued opening of the default desktop mail handler is the documented result. If it uses a custom scheme, check whether the initiating app is genuinely packaged and whether the policy has reached the device.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errorsAlso popular on Amazon
- 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
- Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
- Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
- HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
- What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.
How do I change the app that opens one file type or link type?
For a single extension or protocol, use Windows’ Default apps experience. This is the appropriate choice when you want a different handler rather than a device-wide ban on web-to-app linking. It is also the least disruptive option when only one association is wrong and other links or files should continue working normally.
- Open Settings.
- Go to Apps > Default apps.
- Search for the file extension or link type you want to change. Select the relevant type when Windows displays it; do not assume that changing an application’s general defaults changes every association.
- Choose the preferred application from the list and confirm the Windows prompt.
- Test that exact file or link type. Leave unrelated associations unchanged unless you intentionally edit them as well.
This procedure changes the selected association. Choosing a different application for one extension does not disable other extensions, custom URI schemes, or web-to-app registrations that may point to the same app. If the same application opens several file types, inspect each type separately and change only the ones that need a different handler.
Why use Settings instead of a registry edit?
Microsoft’s Windows app defaults platform guidance says Windows does not allow programmatic changes to default apps without user interaction in system UI. The supported path is therefore the Default apps experience or an administrator-managed policy, not an unapproved registry script intended to bypass the user confirmation flow.
This protection matters when troubleshooting. A script that appears to write a new association may be ignored, reverted, or leave the user-facing default unchanged. It can also make it harder to tell whether the actual problem is a file association, a URI handler, or a policy. Use the visible Windows selection for a personal change, and use the organization’s documented management channel for a managed-device change.
Recommended Free Tools
What is the difference between the two URI policies?
The policies intervene at different points in the launch chain. Applying the wrong one can leave the behavior unchanged or block less than you expect.
| Characteristic | EnableAppUriHandlers |
BlockProtocolElevation |
|---|---|---|
| Launch source | Website or another web link invoking an app | Packaged Store app invoking a desktop app through a URI |
| Primary result when enabled as a block | http/https open in the default browser |
Packaged-app-to-desktop URI elevation is blocked, subject to exceptions |
| Scope noted by Microsoft | Device policy | Use the scope exposed by your Windows management configuration |
| Documented exceptions | Policy description concerns web-to-app linking and web schemes | http, https, and mailto remain exceptions |
| Restart requirement | Microsoft says changes take effect after reboot | Follow the management system’s policy-application status; do not assume the first policy’s reboot rule applies |
| Best fit | Every user on a supported device should keep ordinary web links in the browser | A packaged application must not hand a URI to a desktop handler, except for the listed schemes |
For example, disabling EnableAppUriHandlers is appropriate when clicking an https link on a portal opens an installed app. It is not the right explanation for a file that opens after a double-click, and it does not supersede the exceptions in BlockProtocolElevation. Conversely, enabling BlockProtocolElevation does not promise that a website link will stay in the browser.
Also popular on Amazon
- Note: Not suitable for MacBooks released after 2023 or devices with a protruding front camera; Not applicable to full-screen or notch-style tempered glass screen protectors; Do not use on the rear camera of the phone.
- 💻 Why Do You Need a Webcam Cover Slide? — Safeguard your privacy by covering your webcam with our reliable webcam cover when not in use. Don't let anyone secretly watch you. Stay protected!
- ✅ Thin & Stylish — Enhance your laptop's functionality and aesthetics with our 0.027" ultra-thin webcam covers. Seamlessly close your laptop while adding a touch of sophistication.
- ✅ Fits Most Devices — Compatible with laptops, phones, tablets, desktops! Keep your privacy intact on Ap/ple, Mac/Book, iPh/one, iP/ad, H/P, L/novo, De/ll, Ac/er, As/us, Sa/msung devices.
- ✅ 365 Days Protection — Our upgraded 3.0 adhesive ensures a strong hold that won't damage your equipment. Experience reliable, long-term privacy protection day in and day out.
How can I diagnose an app that still launches?
Use the symptom to identify which association is actually being used before changing another setting. Keep a short record of the source, exact scheme or extension, destination app, policy value, and whether the device was restarted. That record prevents repeated changes that obscure the original cause.
Only links from websites launch the app
Check whether the links are http or https. If so, confirm that EnableAppUriHandlers is set to 0 on the affected device and reboot after policy application. If the link uses a custom scheme, the documented web-link policy may not cover it. Also check whether the test link came from a source that rewrites or redirects the address; test a plain link as well as the original page.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallOutdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchOnly one extension launches the unwanted program
Go to Settings > Apps > Default apps and inspect that extension’s association. Changing the browser or another unrelated default will not alter a separate file-type assignment. If the file opens correctly from Settings but not from a particular application, the initiating application may be invoking its own command or URI rather than the ordinary file association; capture that distinction before changing policies.
A packaged app launches the desktop program
Identify the initiating packaged app and evaluate BlockProtocolElevation. Remember that http, https, and mailto are exceptions, so a launch using one of those schemes can continue even when the policy is enabled. For a custom scheme, note its exact spelling and whether the destination is a desktop app, because similar-looking actions can use different registration paths.
The policy appears correct but behavior has not changed
- Reboot when using
EnableAppUriHandlers; Microsoft specifies a reboot for that policy. - Confirm that the device is running a supported Windows version and edition for the ApplicationDefaults policy.
- Check whether the computer is managed. A device policy can be replaced by the organization’s next synchronization.
- Verify that the policy value was actually applied to the affected device, not merely saved in an administrative console.
- Capture the exact scheme, extension, initiating program, and destination app. Similar-looking launches can be controlled by different settings.
- Test an ordinary
httplink, an ordinaryhttpslink, and the exact custom scheme or extension separately. This distinguishes a policy effect from an unrelated association.
The computer runs another operating system
The controls and paths in this article are Windows-specific. The cited Microsoft documentation does not establish equivalent settings for macOS, Linux, Android, or iOS, so use the platform’s own association and URI-handler documentation rather than applying Windows policy names elsewhere.
What should an administrator decide before deploying a block?
Blocking web-to-app linking can improve predictability on shared or tightly controlled systems, but it also changes how users reach apps from web links. A per-association change is narrower and is usually better when only one file type or protocol is wrong. There is no hardware purchase, repair utility, or third-party security product required for the controls described here; they are built into Windows policy and Settings experiences.
Also popular on Amazon
- Anti-Slip Surface - Transform your laptop into a mobile workstation with the AboveTEK portable laptop lap desk. The anti-slip surface provides a strong grip for laptops up to 15.6 inches(Diagonal), while the double rubber strip on the bottom ensures a stable display or typing experience on your lap, couch, or bed.
- Retractable Mouse Pad - Retractable laptop mouse pad extends on both directions for the left/right handed with elevation along the edges for stopping mouse from falling off. The size of laptop tray is 14" X 9.7" and the size of mouse pad is 7.4" X 6.1".
- Effective Heat Shield - The effective heat shield made of sturdy and thick material protects your laptop from overheating. Prioritizes your comfort and safety, an ideal lap pad or board for working anywhere.
- EASY to Carry and Store - With an ergonomic and simplistic design, the lap desk is portable to store in a backpack. Only 15" in size, 2.2 lb of weight and with slim 0.6 inch thickness, it is ready to be easily carried around.
- Widely Applicable - The smooth platform accommodates laptops and tablets up to 15.6 inches(Diagonal), making it a versatile accessory and one of the best gifts for mom, dad, students and professionals. Perfect for use as a laptop bed tray or tablet holder anywhere at home, library, or park.
- Choose a device policy when every user on a supported Windows device should have ordinary web links routed to the browser.
- Choose
BlockProtocolElevationonly when the specific concern is a packaged app handing a URI to a desktop application, and document the three exceptions. - Choose Default apps when one user needs a different handler for one extension or link type.
- Confirm edition and version before planning a rollout. Microsoft’s ApplicationDefaults table names Windows 10 version 1803 and later and lists Pro, Enterprise, Education, and IoT Enterprise editions.
- Record the previous value before changing a managed policy so it can be restored accurately.
- Test both allowed and blocked paths, including ordinary web links and the exact custom scheme or file extension involved in the complaint.
- Explain the user impact. Disabling web-to-app linking keeps
httpandhttpsin the default browser; it does not remove the application, so users may still open it through another entry point.
What are the safest recovery steps?
Recovery depends on the control you changed. For a web-link policy, restore the documented default value of 1 and complete the required restart. For a single association, return to Default apps and select the prior application. For a packaged-app policy, disable the policy through the same management channel that enabled it, then retest with an exception scheme and the original scheme separately.
Avoid stacking multiple changes at once. Reverse one setting at a time, wait for policy synchronization where applicable, and repeat the original test. If the behavior returns only for one extension or scheme, leave the broader policy unchanged and correct that narrower association. If a managed device repeatedly reverts your setting, involve the administrator responsible for the policy rather than attempting a registry workaround.
Practical checklist
- Write down the launch source: website, packaged Store app, or file selection.
- Write down the exact scheme or extension.
- Decide whether the desired scope is one user and one association or the whole device.
- For web-to-app behavior, use
EnableAppUriHandlers=0only on a supported, managed Windows configuration and reboot. - For packaged-app-to-desktop behavior, evaluate
BlockProtocolElevationand preserve thehttp,https, andmailtoexceptions. - For one file or link type, use Settings > Apps > Default apps.
- Do not use registry edits to bypass Windows’ user-interaction requirement for defaults.
- Retest the exact original action and at least one action that should remain unaffected.
Frequently Asked Questions
Will disabling web-to-app linking remove the associated game or application?
No. The documented policy changes how supported web links are routed; it does not uninstall the application or erase its files. You can still launch the application through its normal entry points unless another policy restricts it.
Does EnableAppUriHandlers block custom schemes such as a game-specific URI?
Microsoft’s description specifically covers web-to-app linking and says that http and https open in the default browser when disabled. It does not establish that every custom scheme is blocked, so identify the scheme and use its supported association or management control.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →On a shared Windows PC, does changing Default apps affect everyone?
Default apps is the user-facing association experience, while EnableAppUriHandlers is documented as a device-scope policy. A per-user default selection and a device policy therefore have different audiences and should be planned separately.
Can an administrator silently script a new default app for users?
Microsoft’s app defaults platform guidance says Windows does not allow programmatic default-app changes without user interaction in system UI. Use the supported Settings experience or an organization-managed policy rather than a registry workaround.
Also popular on Amazon
- Spacious Design: Measuring 21.1" wide and 12" deep, our lap desk comfortably fits most laptops up to 15.6". Extra room for accessories ensures convenience.
- Enhanced Functionality: Packed with handy features, including a 5x9" precision tracking mouse pad and a built-in phone slot for seamless work or video calls. Plus, enjoy laptop support with the integrated device ledge.
- Cool Comfort: Enjoy a stable surface with our lap desk's dual bolster cushion, designed for comfort and airflow, keeping your lap cool during extended use.
- Durable Surface: Work with confidence on our lap desk's solid surface, featuring a blush pink color, ensuring optimal air circulation to prevent your laptop from overheating.
- On-the-Go Convenience: With an integrated handle and lightweight design (2.14 lbs), our lap desk is portable for travel or moving around the house, offering flexibility in any space.
Why did my policy change appear to do nothing?
For EnableAppUriHandlers, confirm the device and edition are supported, verify that the value is 0, allow the policy to apply, and reboot because Microsoft specifies that the change takes effect after restart. For BlockProtocolElevation, check the initiating app and scheme, especially the documented http, https, and mailto exceptions.
Is there a single switch that disables every URI handler?
No universal switch is established by Microsoft’s documentation here. EnableAppUriHandlers concerns web-to-app linking, BlockProtocolElevation concerns a packaged-app-to-desktop route with exceptions, and Default apps changes a selected file or link association.
What if I only want a different program for one extension?
Use Settings > Apps > Default apps, select that extension, and choose the preferred application. This changes the selected association without claiming to disable other extensions or URI schemes.
What if the unwanted launch happens on macOS or Linux?
The policies and Settings path described here are Windows controls. The Microsoft material does not provide equivalent instructions for other operating systems, so consult that platform’s official URI-handler and file-association documentation.
The Bottom Line
First identify whether a website, packaged Store app, or file association starts the launch. Use EnableAppUriHandlers=0 for device-wide web-to-app blocking on supported Windows editions and reboot; use BlockProtocolElevation only for the packaged-app-to-desktop scenario, remembering its http, https, and mailto exceptions; and use Settings > Apps > Default apps for one file or link type. These controls are separate, so the narrowest matching fix is the safest.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
