Approved Shell Extensions Registry Location in Windows
This article explains the exact Windows Registry locations where Explorer shell extensions are cataloged in the Approved list. You will learn the specific registry paths used by 32-bit and 64-bit Windows environments, the structure of these registry entries, and how Windows Explorer utilizes this list to maintain system stability and prevent application crashes.
Primary Registry Paths for Approved Shell Extensions
Windows Explorer catalogs approved shell extensions under the
HKEY_LOCAL_MACHINE (HKLM) hive. The exact path depends on
your system architecture:
For 64-bit Extensions (and standard 32-bit Windows systems):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\ApprovedFor 32-bit Extensions on a 64-bit Windows system:
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
Structure of the “Approved” Registry Key
Inside the Approved key, Windows stores shell
extensions as a series of string values (REG_SZ):
- Value Name: The globally unique identifier
(CLSID/GUID) of the registered COM object representing the shell
extension (e.g.,
{42071714-76d4-11d1-8b24-00a0c9068ff3}). - Value Data: A human-readable description of the extension or the software provider (e.g., “Display Troubleshoot Extension”).
Purpose and Impact on Explorer Stability
Windows uses this catalog to prevent unverified third-party shell
extensions from loading into the explorer.exe process.
While non-approved extensions can load under standard Windows
configurations, administrators can enforce strict stability rules
through Group Policy or the Registry by enabling the
“EnforceShellExtensionSecurity” policy.
When shell extension security is enforced: 1. Windows Explorer checks
the CLSID of every shell extension against the
Approved list before initializing it. 2. Any extension
not explicitly listed in this registry key is blocked from executing. 3.
This prevents faulty context menu handlers, icon overlays, or property
sheet extensions from crashing the Windows desktop and file manager.
How to View the List in Regedit
- Press
Win + R, typeregedit, and press Enter. - Paste
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approvedinto the address bar at the top of the Registry Editor. - Press Enter to view the catalog of all approved shell extensions installed on the system.