Security

Zone.Identifier

Zone.Identifier is the NTFS alternate data stream where Windows stores a file's Mark of the Web. Its ZoneId value records the source zone, with 3 meaning Internet and 4 meaning Restricted sites.

Deep dive

Learn Article

What Is Mark of the Web? How Windows Tags Downloads

What is Mark of the Web? It is the zone tag Windows writes on downloaded files so Office, SmartScreen and Protected View know to warn or block.

beginner 5 min read

Back to glossary