By default, it is Off and no fonts are blocked. This feature can be configured to be in 3 modes: On, Off, and Audit. Untrusted fonts are any font installed outside of the %windir%\Fonts directory. This security feature provides a global setting to prevent programs from loading untrusted fonts. This is what Group Policy says about Untrusted Font Blocking: The document recommended enabling this, to stop untrusted fonts being used as they’re a security risk – the loading of a font can allow elevated privileges, and has been used before. Made sense to me, so I enabled it. One of these settings was ‘ Untrusted Font Blocking‘. There were very few settings I didn’t follow exactly. I followed this (I’ve linked to a newer version) and made choices based on understanding each option, and what worked for us. I worked out what the problem and fix was (jump to the end if you want that now), but here’s the story on how we got to this broken state:Īs part of prepping for Windows 10, I followed Microsoft’s Security Baseline documentation which contains a handy Excel spreadsheet, with recommendations on what Group Policy settings you should use for best security practises. and other browsers weren’t affected – Chrome could display these sites perfectly fine. The visible options in Internet Explorer seemed identical.
#CHINESE FONTS WINDOWS WINDOWS 10#
This was found while piloting Windows 10 from Windows 7. This was even presenting itself in Office 365 – I couldn’t see the Notifications, Settings or Help buttons, and they would instead show as blank boxes.
The buttons themselves worked, which you could either use if they had a graphical representation of the button still, or you knew where to click. These were often buttons, but sometimes other symbols.