How to Restrict File Types in Modern SharePoint Communication Sites
Question details
The user wants to block specific file types from being uploaded to modern SharePoint communication sites by default.
- Product
- Microsoft SharePoint
- Device & OS
- not provided
- Scenario
- Attempting to prevent certain file types from being uploaded to document libraries in modern SharePoint, similar to the functionality previously available in SharePoint 2010 Central Administration.
- Observed behavior
- Modern SharePoint allows all file types to be uploaded by default, and site collection administrators cannot natively enforce tenant-wide file restrictions without global administrator privileges.
Ensure you have Microsoft 365 Global Administrator privileges, as standard Site Collection Administrator rights are insufficient to configure tenant-level compliance policies or enforce broad file restrictions in modern SharePoint environments.
Configure File Restrictions via Microsoft Purview and Admin Support
Since modern SharePoint lacks out-of-the-box file extension blocks per library, tenant-wide settings or compliance policies managed by a global admin are required to restrict specific file uploads.
The legacy file-blocking feature from SharePoint 2010 Central Administration has been deprecated in modern SharePoint Online. To secure your libraries, you must utilize Microsoft 365 security and compliance tools or engage Microsoft backend support for tenant-level configurations.
Reach out to your organization's Microsoft 365 Global Administrator to discuss implementing tenant-wide governance policies, as site-level admins cannot apply these restrictions.
Have the global admin navigate to the Microsoft Purview compliance portal to configure Data Loss Prevention (DLP) rules or Microsoft Defender for Office 365 Safe Attachments to filter out malicious or unwanted file formats.
If backend configuration is required, the global admin can open the Microsoft 365 admin center, click 'Show all', select 'Support' > 'Help & support', and create a ticket requesting assistance with restricting specific file types in your tenant.
Build a Custom Upload Workflow with Power Apps
Use Microsoft Power Apps to create a customized upload interface that validates file extensions before they are saved to the SharePoint document library.
Manage and Edit Documents Seamlessly with WPS Office
While SharePoint manages your team's file storage and access policies, you need a reliable, lightweight suite for your everyday document creation. WPS Office is a powerful, free alternative to Microsoft Office that ensures your team can edit and collaborate without compatibility issues.
- 1. Download and Install: Visit the official WPS website to download and install the free WPS Office suite on your device.
- 2. Open SharePoint Documents: Sync your SharePoint libraries locally using OneDrive and open any .docx, .xlsx, or .pptx file directly in WPS Office.
- 3. Edit and Save: Edit your documents using familiar tools and save them. Your changes will automatically sync back to SharePoint via OneDrive.
Frequently Asked Questions
Can a Site Collection Administrator restrict file types in a SharePoint document library?
No, in modern SharePoint environments, Site Collection Administrators cannot natively restrict file types at the library level. This task usually requires Microsoft 365 Global Administrator permissions to configure tenant-level compliance policies or run backend scripts.
Is the 'Block specific file types' feature from SharePoint 2010 available in modern SharePoint Online?
No, the direct 'block file types' functionality found in SharePoint 2010 Central Administration was deprecated in modern SharePoint Online. Administrators must now rely on Microsoft Purview policies, Defender for Office 365, or custom Power Apps workflows.
How do I prevent executable files (.exe) from being uploaded to SharePoint?
You can prevent the upload of potentially malicious file types like .exe by having a global administrator configure Microsoft Defender for Office 365 Safe Attachments for SharePoint, OneDrive, and Microsoft Teams, or by utilizing Microsoft Purview Data Loss Prevention (DLP) rules.
How do I contact backend support for SharePoint tenant configuration?
Your Microsoft 365 Global Administrator can submit a support request by logging into the Microsoft 365 admin center, navigating to the 'Show all' menu on the left pane, and selecting 'Support' followed by 'Help & support'.
