I am seeing a "virus scan failed" error on Intune-managed computers when downloading files. Additionally, I found something strange... Microsoft says the Attachment Manager setting should be under Computer\HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments. I set the value there via a policy (value 1), but the computer doesn’t seem to react—as if the setting has no effect.
However, I discovered that the same setting also exists under Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Attachments. Changing the value there made file downloading work. I also checked with Procmon and saw that Edge actually reads the value from HKLM—so it seems the problem is related to how Edge handles policies.
I am using the reference from this link for the setting, but I have no idea how this setting is being added under HKLM.