When you download a file from the internet (Chrome, Edge, or even a USB drive from a friend), Windows invisibly tags that file with a metadata stream that says: “ZoneId=3” (Internet Zone).
We have all been there. You download a crucial script from your team’s internal server, a legacy installer from an old hard drive, or a sensitive PDF from a secure email portal. You double-click it, expecting magic.
When you try to run that file, Windows Defender checks the tag. If it says "Internet," Windows assumes the file is hostile until proven otherwise. It locks the file, preventing PowerShell scripts from running, DLLs from registering, and EXEs from executing. If you know the file is safe (you wrote the script yourself, or you trust the source explicitly), you need to tell Windows to remove that Internet tag.
April 14, 2026 | Reading Time: 4 minutes
The moment you unblock a file, you are telling Windows, "I vouch for this." Make sure you are right. Have a script that keeps getting blocked? Drop the error code in the comments below.
The “Unblock File” Button: Your First Line of Defense (and How to Use It Safely)