Microsoft to Disable External Workbook Links to Blocked File Types By Default

Microsoft announced a significant security enhancement for Microsoft 365 apps that will fundamentally change how external workbook links function. 

Starting in October 2025, the company will disable external workbook links to blocked file types by default, implementing a new group policy to strengthen workbook security across enterprise environments.

The change represents a major shift in Microsoft’s approach to file security, expanding existing File Block Settings to encompass external workbook links. 

Key Takeaways
1. Microsoft blocks external workbook links to restricted files.
2. Warning notifications start in Build 2509, then enforcement through July 2026.
3. Admins can disable via registry/group policy.

When the policy takes effect, users attempting to create new references to blocked file types will encounter a **LOCKED error message. Existing external links will retain their last successfully refreshed values but will no longer update with new data from the source files.

Block External Workbook Links

Microsoft will begin the rollout in early October 2025, with full implementation expected by late July 2026. 

The phased approach includes two critical build releases that will progressively alert users and enforce the new restrictions.

During Build 2509, users will see warning notifications when opening workbooks containing external links to blocked file types, providing advance notice of the upcoming changes. 

The enforcement phase begins with Build 2510, where users will lose the ability to refresh or create new references to blocked file types unless administrators intervene.

The Workbook Links pane will clearly indicate which workbooks failed to refresh due to the blocking mechanism, helping users identify affected files.

This transparency ensures users understand why certain external references are no longer updating, reducing confusion during the transition period.

Organizations requiring continued access to external links for blocked file types can implement specific overrides through two primary methods. 

Administrators can modify the registry setting by configuring HKCU\Software\Microsoft\Office\16.0\Excel\Security\FileBlock\FileBlockExternalLinks to 0, effectively reverting to the previous behavior.

Alternatively, group policy configuration offers centralized management through the Excel Group Policy Template. 

Administrators can navigate to Excel Options > Security > Trust Center > File Block Settings and set “File Block includes external link files” to Disabled.

Microsoft recommends that organizations conduct thorough reviews of existing workbooks before the implementation deadline. 

The company emphasizes that organizations with no configured policies will experience no immediate changes, providing time for strategic planning and policy development.

Integrate ANY.RUN TI Lookup with your SIEM or SOAR To Analyses Advanced Threats -> Try 50 Free Trial Searches