Where to Find Approved Shell Extensions in Regedit

This guide details the exact Windows Registry paths for the registered shell extension approved list, explains how these entries enforce Explorer stability, and shows how to locate both 64-bit and 32-bit shell extensions in the Registry Editor.

The Registry Path for Approved Shell Extensions

In Windows, the list of approved shell extensions is stored in the following Registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved

For 32-bit shell extensions running on a 64-bit version of Windows, the approved list is located under the WOW6432Node:

HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved

How the Approved List Works

Inside the Approved key, registered shell extensions are cataloged as string values (REG_SZ):

• Value Name: The Class ID (CLSID) GUID of the shell extension (e.g., {42071714-76d4-11d1-8b24-00a0c9068ff3}).
• Value Data: A descriptive name of the extension or the software provider (e.g., “Display Panning CPL Extension”).

The presence of a GUID in this list indicates to the operating system that the specified extension is verified and authorized to integrate into Windows Explorer.

Enforcement and System Stability

By default, Windows may load non-listed extensions unless strict security enforcement is turned on. System administrators enforce the approved list using Group Policy or by configuring the registry directly:

• Policy Path: Computer Configuration > Administrative Templates > Windows Components > File Explorer
• Policy Setting: “Only allow approved Shell extensions”
• Direct Registry Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer
• Registry Value: EnforceShellExtensionSecurity (DWORD set to 1)

When this enforcement is active, Windows Explorer (explorer.exe) blocks any shell extension whose CLSID does not exist in the Shell Extensions\Approved key. This prevents unverified, corrupt, or incompatible third-party context menu handlers and icon overlays from causing explorer crashes and system instability.