--- title: How to Block .EXE File Downloads in Google Chrome Using GAT Shield description: "The [GAT Shield](https://gatlabs.com/knowledge/tech-tips/gat-shield-overview/) extension allows admins to **track and view user behavior** while logged into their Google domain account. [Google Workspace Admins](https://support.google.com/a/?hl=en#topic=4388346) can set up real-time alerts based on the behavior of the end-users.  With this guide, you'll learn **how…" url: "https://gatlabs.com/knowledge/tech-tips/how-to-block-exe-file-downloads-in-google-chrome-using-gat-shield/" updated: "2025-06-25" category: "Users Audit & Management" tags: - GAT Shield --- # How to Block .EXE File Downloads in Google Chrome Using GAT Shield The [GAT Shield](https://gatlabs.com/knowledge/tech-tips/gat-shield-overview/) extension allows admins to **track and view user behavior** while logged into their Google domain account. [Google Workspace Admins](https://support.google.com/a/?hl=en#topic=4388346) can set up real-time alerts based on the behavior of the end-users.  With this guide, you'll learn **how to** **block .EXE file downloads** using Shield’s alert rules. These Alert Rules allow admins to stop and report unsafe downloads by users across their domain. ## How to Report and Remove exe. File downloaded by Google Workspace Users? ### Set Up Rules to Block .EXE File Downloads Navigate to  **GAT** **Shield → Alerts → +New Alert Rule ** Fill in the details for the download alert rule ### 1. Name & Type For each field, various options are displayed for selection. - **Name**: Enter a descriptive name for the alert rule. - **Type**: Select "Download" from the drop-down menu. This option triggers a notification when a user downloads a file. You can customize the alert based on file formats, sizes, and specific web pages it applies to. **Action** When an alert rule is triggered, a pre-selected action will be executed on the user's device. Note that only tabs that trigger the rule will be affected if "Close" or "Redirect" actions are chosen. - **Show a warning message**: Display a warning message to the end-user. - **Close**: Close the Browse tab. - **Close without warning**: Close the Browse tab directly, without any prior notification. - **Redirect**: Redirect the user's browser tab. You must also enter a warning message to be displayed to the end-user. - **Redirect without warning**: Redirect the user's Browse tab without displaying a warning message. - **No action**: Select this option if no action should be performed on the end-user's device. **Default Severity** When an alert rule is triggered, a notification is generated. The severity of this notification indicates its level of importance. "Default Severity" is the value assigned to all notifications created by this specific rule. - Select **Low**, **Unspecified** (default), or **High** to set the notification's severity level. ![Creating a new GAT Shield alert rule with the name 'exe and png download', setting the rule type to 'Download', the action to 'Show warning', and default severity to 'Low'.](https://gatlabs.com/knowledge/wp-content/uploads/2025/04/2025-06-23-11_22_00-Shield.png) ### 2. Scope of the New Alert Rule In the Scope field, select all the users who will be affected by the alert rule - **Scope** - add the users, group of users, or org. unit of users that will be affected by the rule - **Rule exclusions** - select a list of users to be excluded from the rule - **Time restriction** - select the times when the rules will be applied. - By default, when no time restriction is added, the rule will always be active. To change it, select days and time ranges when rule will be active. - **Continue** - click to continue to the next configuration  ![Scope - a window where to enter the affected users by the rule, you can select user, group or org unuit of users, rule exclusions, select users to be excluded from the alert and time restriction option where you can select times where the rule will be active](https://gatlabs.com/knowledge/wp-content/uploads/2025/04/2025-06-23-12_19_05-Shield.png) ### 3. Configuration of the New Alert Rule In the configuration, fill in the required information - **Mode** - select what mode to be enabled.  - File extensions and Size - File extensions only  - Size only  - **File extensions** - enter the file extensions for which the rule will be applied. The alert rule will be triggered if the downloaded file has any of these extensions. If the minimum file size is set you can leave this list empty to trigger on any download. - **Minimum File** **size** - Enter a minimum file size to trigger the alert.   - **Cancel download** - Enabling this option cancels the download and removes local files   - **Continue** - click the button to continue  ![Mode Selection Choose the mode that defines how the alert rule will be applied: File extensions and Size: The rule will be triggered based on both file extensions and file size. File extensions only: The rule will be triggered based solely on file extensions. Size only: The rule will be triggered based solely on file size. File Specifications File extensions: Enter the specific file extensions that will trigger this rule (e.g., "pdf, docx, zip"). If a Minimum File size is configured, you can leave this field empty to trigger the alert on any download, regardless of extension. Minimum File size: Enter a numerical value representing the minimum file size (in bytes, kilobytes, or megabytes) that will trigger the alert. For example, "10KB" or "5MB". Cancel download: Enable this option to automatically cancel the download and delete any locally saved files when the alert rule is triggered.](https://gatlabs.com/knowledge/wp-content/uploads/2025/04/2025-06-23-12_28_34-Shield.png) ### 4. Notifications of the New Alert Rule In the notifications, - Recipients - Select the alert recipients - Notification interval - select time (in minutes) for which the alert notification will not be sent - Full alert context by saving website and file information, and including them in the notifications - Screen capture - select an option from the list   - Do not send - Send in the notification email - Send in the notification email and save to the rule creator's Drive - Send in the notification email, save to the rule creator's Drive, and shareit  with other alert recipients - Webcam capture - select an option from the list  - Do not send - Send in the notification email - Send in the notification email and save to the rule creator's Drive - Send in the notification email, save to the rule creator's Drive, and share it with other alert recipients - **Continue** - click the button to continue  ![Alert Rule Configuration: Notifications This section describes how to configure the notification settings for your alert rules. Recipients and Frequency Recipients: Choose the individuals or groups who will receive these alerts. Notification interval: Set the time in minutes during which duplicate alert notifications will not be sent for the same event. This prevents notification spam. Alert Context Full alert context: Enable this option to include detailed website and file information directly within the alert notifications. This provides a comprehensive overview of the triggered event. Visual Captures Screen capture: Select one of the following options for screen captures when an alert is triggered: Do not send: No screen capture will be included in the notification. Send in the notification email: A screen capture will be attached to the notification email. Send in the notification email and save to the rule creator's Drive: The screen capture will be sent via email and also saved to the Google Drive of the user who created the rule. Send in the notification email, save to the rule creator's Drive and share with other alert recipients: The screen capture will be emailed, saved to the rule creator's Drive, and shared with all other designated alert recipients. Webcam capture: Select one of the following options for webcam captures when an alert is triggered: Do not send: No webcam capture will be included in the notification. Send in the notification email: A webcam capture will be attached to the notification email. Send in the notification email and save to the rule creator's Drive: The webcam capture will be sent via email and also saved to the Google Drive of the user who created the rule. Send in the notification email, save to the rule creator's Drive and share with other alert recipients: The webcam capture will be emailed, saved to the rule creator's Drive, and shared with all other designated alert recipients.](https://gatlabs.com/knowledge/wp-content/uploads/2025/04/2025-06-23-12_37_04-Shield.png) ### 5. Summary of the New Alert Rule In the Summary, the Admin can view all the details for the rule that has been created Click on the **Create** button to create the rule ![Summary of the configured alert rule in GAT Shield, showing the name, type, action, scope, severity, file extensions, minimum size, cancellation setting, and alert message before final creation.](https://gatlabs.com/knowledge/wp-content/uploads/2025/04/2025-06-23-12_39_36-Shield.png) ### Result for the end-user The end-user where the rule is applied will receive a **notification** on their screen, depending on what "End-user" action is selected. The download will **be removed, and**the user will see this message in the recent download history on their Chrome browser ![Pop up showing block .exe file downloads](https://gatlabs.com/knowledge/wp-content/uploads/2022/01/removed-download.png) ### Result for the Google Workspace Admin All the results will be displayed in **GAT  Shield > Alerts > Notifications ** ![alert notifications - where all Shield alerts are triggered will be displayed](https://gatlabs.com/knowledge/wp-content/uploads/2025/04/2025-06-23-12_52_38-Shield.png) ## How-to video: [GAT Shield Alert Rules](https://www.youtube.com/watch?v=1M8xNTbONZ8) [https://www.youtube.com/embed/1M8xNTbONZ8?feature=oembed&color=red&rel=0&controls=1&start=&end=&fs=0&iv_load_policy=0&autoplay=0&mute=0&modestbranding=0&cc_load_policy=1&playsinline=1](https://www.youtube.com/embed/1M8xNTbONZ8?feature=oembed&color=red&rel=0&controls=1&start=&end=&fs=0&iv_load_policy=0&autoplay=0&mute=0&modestbranding=0&cc_load_policy=1&playsinline=1) ## **FAQs ** #### Q: Can I block only certain users from downloading .exe files in Chrome? A: Yes. In GAT Shield, you can scope your alert rule to specific organisational units (OUs) or sub-OUs, allowing targeted enforcement. #### Q: Will users be notified when a download is blocked? A: If you choose the “Show warning” action in the alert rule, users will see a custom message explaining the block. ## Related Posts:  [Chrome Login Control Events in GAT Shield](https://gatlabs.com/knowledge/tech-tips/login-control-events/) [Alert Rules in Shield](https://gatlabs.com/knowledge/tech-tips/alert-rules-in-shield/)