mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-05-14 22:37:22 +00:00
Merge branch 'master' of https://cpubwin.visualstudio.com/_git/it-client into updatetrouble
This commit is contained in:
jaimeo
commit
056905fa04
Binary file not shown.
|
Before Width: | Height: | Size: 2.3 KiB After Width: | Height: | Size: 2.4 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 246 KiB After Width: | Height: | Size: 262 KiB |
BIN
browsers/edge/images/set-default-search-engine.png
Normal file
BIN
browsers/edge/images/set-default-search-engine.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 138 KiB |
@ -9,8 +9,8 @@
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled |0 |0 |Not allowed. Hides the Address bar drop-down functionality, which also disables the _Show search and site suggestions as I type_ toggle in Settings. | |
|
||||
|Enabled or not configured **(default)** |1 |1 |Allowed. Shows the Address bar drop-down list and makes it available. | |
|
||||
|Disabled |0 |0 |Prevented/not allowed. Hide the Address bar drop-down functionality and disable the _Show search and site suggestions as I type_ toggle in Settings. | |
|
||||
|Enabled or not configured **(default)** |1 |1 |Allowed. Show the Address bar drop-down list and make it available. | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
@ -30,7 +30,7 @@
|
||||
#### Registry settings
|
||||
- **Path:** HKLM\Software\Policies\Microsoft\MicrosoftEdge\ServiceUI
|
||||
- **Value name:** ShowOneBox
|
||||
- **Value type:** REG_
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
|
||||
### Related policies
|
||||
|
||||
@ -8,8 +8,8 @@
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled |0 |0 |Prevented/not allowed. | |
|
||||
|Enabled<br>**(default)** |1 |1 |Allowed. | |
|
||||
|Disabled |0 |0 |Prevented/not allowed | |
|
||||
|Enabled<br>**(default)** |1 |1 |Allowed | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
|
||||
@ -8,8 +8,8 @@
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled or not configured<br>**(default)** |0 |0 |Prevented, but users can configure the _Clear browsing data_ option in Settings. | |
|
||||
|Enabled |1 |1 |Allowed | |
|
||||
|Disabled or not configured<br>**(default)** |0 |0 |Prevented/not allowed. Users can configure the _Clear browsing data_ option in Settings. | |
|
||||
|Enabled |1 |1 |Allowed. Clears the browsing data upon exit automatically. | |
|
||||
---
|
||||
|
||||
|
||||
@ -30,6 +30,6 @@
|
||||
#### *Registry
|
||||
- **Path:** HLKM\\Software\\Policies\\Microsoft\\MicrosoftEdge\\Privacy
|
||||
- **Value name:** ClearBrowsingHistoryOnExit
|
||||
- **Value type:** REG_DWORD</li></ul>
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
<hr>
|
||||
@ -15,8 +15,8 @@
|
||||
### ADMX info and settings
|
||||
|
||||
#### ADMX info
|
||||
- **GP English name:**
|
||||
- **GP name:**
|
||||
- **GP English name:** Allow configuration updates for the Books Library
|
||||
- **GP name:** AllowConfigurationUpdateForBooksLibrary
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
@ -34,5 +34,5 @@
|
||||
### Related topics
|
||||
|
||||
[Manage connections from Windows operating system components to Microsoft services](https://docs.microsoft.com/en-us/windows/configuration/manage-connections-from-windows-operating-system-components-to-microsoft-services)
|
||||
|
||||
<p>
|
||||
<hr>
|
||||
|
||||
@ -8,21 +8,22 @@
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled |0 |0 |Prevented but users can still search to find items on their device. | |
|
||||
|Disabled |0 |0 |Prevented/not allowed. Users can still search to find items on their device. | |
|
||||
|Enabled<br>**(default)** |1 |1 |Allowed. | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
|
||||
#### ADMX info
|
||||
- **GP English name:**
|
||||
- **GP name:**
|
||||
- **GP English name:** Allow Cortana
|
||||
- **GP name:** AllowCortana
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Experience/[AllowCortana](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-experience#experience-allowcortana)
|
||||
- **Supported devices:** Mobile**URI full path:** ./Vendor/MSFT/Policy/Config/Experience/AllowCortana
|
||||
- **Supported devices:** Mobile
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Experience/AllowCortana
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
|
||||
@ -9,8 +9,8 @@
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled |0 |0 |Prevented/not allowed. | |
|
||||
|Enabled |1 |1 |Allowed. | |
|
||||
|Disabled |0 |0 |Prevented/not allowed | |
|
||||
|Enabled |1 |1 |Allowed | |
|
||||
---
|
||||
|
||||
|
||||
@ -23,7 +23,7 @@
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/AllowDeveloperTools
|
||||
- **MDM name:** Browser/[AllowDeveloperTools](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowdevelopertools)
|
||||
- **Supported devices:** Desktop
|
||||
- **URI full Path:** ./Vendor/MSFT/Policy/Config/Browser/AllowDeveloperTools
|
||||
- **Data type:** Integer
|
||||
|
||||
@ -8,8 +8,8 @@
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled or not configured<br>**(default)** |0 |0 |Shows the Books Library only in countries or regions where supported. | |
|
||||
|Enabled |1 |1 |Shows the Books Library, regardless of the device’s country or region. | |
|
||||
|Disabled or not configured<br>**(default)** |0 |0 |Show the Books Library only in countries or regions where supported. | |
|
||||
|Enabled |1 |1 |Show the Books Library, regardless of the device’s country or region. | |
|
||||
---
|
||||
### ADMX info and settings
|
||||
|
||||
|
||||
@ -32,10 +32,4 @@
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
|
||||
### Scenario
|
||||
|
||||
Due to current Privacy policy, the Books feature does not have the right to gather the book's unique identifier through regular events (because it could help to build a Reading history, which is not an explicit feature).
|
||||
|
||||
For Schools that are one of the target of this feature of Edge, we will propose an advanced telemetry report to the Teachers. This advanced report system will require to have the ProductId in events so IT Admin will be able to enable the propagation from the user's device to Microsoft Telemetry servers of events that contain ProductId.
|
||||
|
||||
<hr>
|
||||
@ -6,15 +6,10 @@
|
||||
|
||||
### Allowed values
|
||||
|
||||
- (0) Disabled - Prevented.
|
||||
- (1 default) Enabled – Allowed.
|
||||
|
||||
Most restricted value: None### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |
|
||||
|---|:---:|:---:|---|
|
||||
|Disabled |0 |0 |Prevented/not allowed. |
|
||||
|Enabled or not configured<br>**(default)** |1 |1 |Allowed. |
|
||||
|Disabled |0 |0 |Prevented/not allowed |
|
||||
|Enabled or not configured<br>**(default)** |1 |1 |Allowed |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
|
||||
@ -10,8 +10,8 @@
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled |0 |0 |Prevented/not allowed. | |
|
||||
|Enabled or not configured<br>**(default)** |1 |1 |Allowed. | |
|
||||
|Disabled |0 |0 |Prevented/not allowed | |
|
||||
|Enabled or not configured<br>**(default)** |1 |1 |Allowed | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
|
||||
@ -8,8 +8,8 @@
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled |0 |0 |Prevented/ignored. | |
|
||||
|Enabled or not configured<br>**(default)** |1 |1 |Allowed. | |
|
||||
|Disabled |0 |0 |Prevented/not allowed | |
|
||||
|Enabled or not configured<br>**(default)** |1 |1 |Allowed | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
|
||||
@ -8,46 +8,24 @@
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled |0 |0 |Prevented/not allowed. | |
|
||||
|Enabled or not configured<br>**(default)** |1 |1 |Allowed. | |
|
||||
|Disabled |0 |0 |Prevented/not allowed | |
|
||||
|Enabled or not configured<br>**(default)** |1 |1 |Allowed | |
|
||||
---
|
||||
|
||||
|
||||
### Configuration combinations
|
||||
|
||||
| **Set default search engine** | **Allow search engine customization** | **Configure additional search engines** | **Outcome** |
|
||||
| --- | --- | --- | --- |
|
||||
| Not configured (default) | Disabled | Disabled or not configured (default) | Default search engine specified in App settings. Users cannot make changes. |
|
||||
| Not configured (default) | Enabled or not configured (default) | Disabled or not configured (default) | Default search engine specified in App settings. Users can make changes to the default search engine at any time. |
|
||||
| Not configured (default) | Disabled | Enabled | ??? |
|
||||
| Not configured (default) | Enabled or not configured (default) | Enabled | ??? |
|
||||
| Disabled | Disabled | Disabled or not configured (default) | Users cannot add, remove, or change any of the search engines, but they can set a default search engine. |
|
||||
| Disabled | Enabled or not configured (default) | Disabled or not configured (default) | Users can add new search engines or change the default search engine, in Settings. |
|
||||
| Enabled | Disabled | Disabled or not configured (default) | Set the default search engine preventing users from making changes. |
|
||||
| Enabled | Enabled or not configured (default) | Disabled or not configured (default) | Set the default search engine and allow users to add search engines or make changes. |
|
||||
---
|
||||
|
||||
#### If you want to use the default search engine in Apps settings and prevent users from making changes.
|
||||
|
||||
|
||||
#### If you want to use the default search engine in Apps setting and let users make changes.
|
||||
|
||||
|
||||
#### ???
|
||||
|
||||
|
||||
#### ???
|
||||
|
||||
|
||||
#### If you don't want users to add, remove, or change any of the search engines, but users can set a default search engine of their own.
|
||||
|
||||
|
||||
#### If you want users to add new search engines or change the default in Settings.
|
||||
|
||||
|
||||
#### If you want to set the default search engine and prevent users from making changes.
|
||||
|
||||
|
||||
#### If you want to set the default search engine and let users make changes.
|
||||
|
||||
|
||||
|
||||
|
||||
### ADMX info and settings
|
||||
|
||||
@ -8,7 +8,7 @@
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled or not configured |0 |0 |Prevented, but does not prevent sideloading of extensions using Add-AppxPackage via PowerShell.<p>To prevent this, enable **Allows development of Windows Store apps and installing them from an integrated development environment (IDE)** policy, located at Computer Configuration \> Administrative Templates \> Windows Components \> App Package Deployment. For the MDM setting, enable **ApplicationManagement/AllowDeveloperUnlock**. | |
|
||||
|Disabled or not configured |0 |0 |Prevented/not allowed. Disabling does not prevent sideloading of extensions using Add-AppxPackage via PowerShell. To prevent this, enable **Allows development of Windows Store apps and installing them from an integrated development environment (IDE)** policy, located at Windows Components > App Package Deployment.<p>For the MDM setting, enable **ApplicationManagement/AllowDeveloperUnlock**. | |
|
||||
|Enabled<br>**(default)** |1 |1 |Allowed. | |
|
||||
---
|
||||
|
||||
@ -22,18 +22,18 @@
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[AllowSideloadingExtensions](../new-policies.md#allow-sideloading-of-extensions)
|
||||
- **Supported devices:** Desktop and Mobile
|
||||
- **Supported devices:** Desktop
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowSideloadingExtensions
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HLKM\Software\Policies\Microsoft\MicrosoftEdge\Extensions
|
||||
- **Value name:** AllowSideloadingOfExtensions
|
||||
- **Value type:** REG_SZ
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
### Related policies
|
||||
|
||||
- Allows development of Windows Store apps and installing them from an integrated development environment (IDE): When you enable this policy and the Allow all trusted apps to install policy, you allow users to develop Windows Store apps and install them directly from an IDE.
|
||||
- Allows development of Windows Store apps and installing them from an integrated development environment (IDE): When you enable this policy and the **Allow all trusted apps to install** policy, you allow users to develop Windows Store apps and install them directly from an IDE.
|
||||
|
||||
- Allow all trusted apps to install: When you enable this policy, you can manage the installation of trusted line-of-business (LOB) or developer-signed Windows Store apps.
|
||||
|
||||
|
||||
@ -1,6 +1,6 @@
|
||||
<!-- ## Allow Start and New Tab page preload (aka: AllowStartAndNewTabPagePreload)
|
||||
>*Supported versions: Microsoft Edge on Windows 10, version 1802*<br> -->
|
||||
>*Default setting: Enabled or not configured (Allow preloading)*
|
||||
>*Default setting: Enabled or not configured (Allowed)*
|
||||
|
||||
[!INCLUDE [allow-tab-preloading-shortdesc](../shortdesc/allow-tab-preloading-shortdesc.md)]
|
||||
|
||||
@ -9,7 +9,7 @@
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Enabled or not configured<br>**(default)** |0 |0 |Allowed. Preload Start and New tab pages. | |
|
||||
|Disabled |1 |1 |Prevent/not allowed. | |
|
||||
|Disabled |1 |1 |Prevented/not allowed. | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
|
||||
@ -8,11 +8,11 @@
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Not configured |Blank |Blank |Users can choose what loads in the New tab page. | |
|
||||
|Disabled |0 |0 |Load a blank page instead of the default New tab page and prevents users from changing it. | |
|
||||
|Enabled **(default)** |1 |1 |Load the default New tab page. | |
|
||||
|Group Policy |MDM |Registry |Description |
|
||||
|---|:---:|:---:|---|
|
||||
|Not configured |Blank |Blank |Users can choose what loads on the New tab page. |
|
||||
|Disabled |0 |0 |Load a blank page instead of the default New tab page and prevents users from changing it. |
|
||||
|Enabled **(default)** |1 |1 |Load the default New tab page. |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
|
||||
@ -9,8 +9,8 @@
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled or not configured<br>**(default)** |0 |0 |Shows the Books Library only in countries or regions where supported. | |
|
||||
|Enabled |1 |1 |Shows the Books Library, regardless of the device’s country or region. | |
|
||||
|Disabled or not configured<br>**(default)** |0 |0 |Show the Books Library only in countries or regions where supported. | |
|
||||
|Enabled |1 |1 |Show the Books Library, regardless of the device’s country or region. | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
|
||||
@ -1,6 +1,6 @@
|
||||
<!-- ## Configure additional search engines -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10, version 1703 or later*<br>
|
||||
>*Default setting: Disabled or not configured (Not allowed)*
|
||||
>*Default setting: Disabled or not configured (Prevented/Not allowed)*
|
||||
|
||||
[!INCLUDE [configure-additional-search-engines-shortdesc](../shortdesc/configure-additional-search-engines-shortdesc.md)]
|
||||
|
||||
@ -8,46 +8,25 @@
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled or not configured<br>**(default)** |0 |0 |If you don't configure this policy, Microsoft Edge uses the search engine specified in App settings.<p>If you enabled this policy and now you want to disable it, disabling removes all configured search engines.| |
|
||||
|Enabled |1 |1 |Add up to five additional search engines and set any one of them as the default.<p>For each search engine added you must specify a link to the OpenSearch XML file that contains, at a minimum, the short name and URL template (HTTPS) of the search engine. For more information about creating the OpenSearch XML file, see [Search provider discovery](https://developer.microsoft.com/en-us/microsoft-edge/platform/documentation/dev-guide/browser/search-provider-discovery/). | |
|
||||
|Disabled or not configured<br>**(default)** |0 |0 Prevented/not allowed. Microsoft Edge uses the search engine specified in App settings.<p>If you enabled this policy and now want to disable it, disabling removes all previously configured search engines. | |
|
||||
|Enabled |1 |1 |Allowed. Add up to five additional search engines and set any one of them as the default.
|
||||
For each search engine added you must specify a link to the OpenSearch XML file that contains, at a minimum, the short name and URL template (HTTPS) of the search engine. For more information about creating the OpenSearch XML file, see [Search provider discovery](https://developer.microsoft.com/en-us/microsoft-edge/platform/documentation/dev-guide/browser/search-provider-discovery/). | |
|
||||
---
|
||||
|
||||
|
||||
### Configuration combinations
|
||||
|
||||
| **Set default search engine** | **Allow search engine customization** | **Configure additional search engines** | **Outcome** |
|
||||
| --- | --- | --- | --- |
|
||||
| Not configured (default) | Disabled | Disabled or not configured (default) | Default search engine specified in App settings. Users cannot make changes. |
|
||||
| Not configured (default) | Enabled or not configured (default) | Disabled or not configured (default) | Default search engine specified in App settings. Users can make changes to the default search engine at any time. |
|
||||
| Not configured (default) | Disabled | Enabled | ??? |
|
||||
| Not configured (default) | Enabled or not configured (default) | Enabled | ??? |
|
||||
| Disabled | Disabled | Disabled or not configured (default) | Users cannot add, remove, or change any of the search engines, but they can set a default search engine. |
|
||||
| Disabled | Enabled or not configured (default) | Disabled or not configured (default) | Users can add new search engines or change the default search engine, in Settings. |
|
||||
| Enabled | Disabled | Disabled or not configured (default) | Set the default search engine preventing users from making changes. |
|
||||
| Enabled | Enabled or not configured (default) | Disabled or not configured (default) | Set the default search engine and allow users to add search engines or make changes. |
|
||||
---
|
||||
|
||||
#### If you want to use the default search engine in Apps settings and prevent users from making changes.
|
||||
|
||||
|
||||
#### If you want to use the default search engine in Apps setting and let users make changes.
|
||||
|
||||
|
||||
#### ???
|
||||
|
||||
|
||||
#### ???
|
||||
|
||||
|
||||
#### If you don't want users to add, remove, or change any of the search engines, but users can set a default search engine of their own.
|
||||
|
||||
|
||||
#### If you want users to add new search engines or change the default in Settings.
|
||||
|
||||
|
||||
#### If you want to set the default search engine and prevent users from making changes.
|
||||
|
||||
|
||||
#### If you want to set the default search engine and let users make changes.
|
||||
|
||||
|
||||
|
||||
|
||||
### ADMX info and settings
|
||||
|
||||
@ -8,7 +8,7 @@ You must set the Configure kiosk mode policy to enabled (1 - InPrivate public br
|
||||
|
||||
### Allowed values
|
||||
|
||||
- **0-1440 - Any integer from 1-1440 (5 minutes is the default)** – The time in minutes from the last user activity before Microsoft Edge kiosk mode resets to the default kiosk configuration. A confirmation dialog displays for the user to cancel or continue and automatically continues after 30 seconds.
|
||||
- **Any integer from 1-1440 (5 minutes is the default)** – The time in minutes from the last user activity before Microsoft Edge kiosk mode resets to the default kiosk configuration. A confirmation dialog displays for the user to cancel or continue and automatically continues after 30 seconds.
|
||||
|
||||
- **0** – No idle timer.
|
||||
|
||||
|
||||
@ -8,11 +8,11 @@
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Not configured<br>**(default)** |Blank |Blank |Hide the favorites bar but show it on the Start and New tab pages. The favorites bar toggle, in Settings, is set to Off but enabled allowing users to make changes. | |
|
||||
|Disabled |0 |0 |Hide the favorites bar on all pages. Also, the favorites bar toggle, in Settings, is set to Off and disabled preventing users from making changes. Microsoft Edge also hides the “show bar/hide bar” option in the context menu. | |
|
||||
|Enabled |1 |1 |Show the favorites bar on all pages. Also, the favorites bar toggle, in Settings, is set to On and disabled preventing users from making changes. Microsoft Edge also hides the “show bar/hide bar” option in the context menu. | |
|
||||
|Group Policy |MDM |Registry |Description |
|
||||
|---|:---:|:---:|---|
|
||||
|Not configured<br>**(default)** |Blank |Blank |Hide the favorites bar but show it on the Start and New tab pages. The favorites bar toggle, in Settings, is set to Off but enabled allowing users to make changes. |
|
||||
|Disabled |0 |0 |Hide the favorites bar on all pages. Also, the favorites bar toggle, in Settings, is set to Off and disabled preventing users from making changes. Microsoft Edge also hides the “show bar/hide bar” option in the context menu. |
|
||||
|Enabled |1 |1 |Show the favorites bar on all pages. Also, the favorites bar toggle, in Settings, is set to On and disabled preventing users from making changes. Microsoft Edge also hides the “show bar/hide bar” option in the context menu. |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
|
||||
@ -8,7 +8,7 @@
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|---|:---:|:---:|---|
|
||||
|Disabled or not configured<br>**(default)** |0 |0 |Show the home button and load the Start page. |
|
||||
|Enabled |1 |1 |Show the home button and load the New tab page. |
|
||||
|Enabled |2 |2 |Show the home button and load the custom URL defined in the Set Home Button URL policy. |
|
||||
@ -40,7 +40,7 @@ With these values, you can do any of the following configurations:
|
||||
#### Registry settings
|
||||
- **Path:** HLKM\Software\Policies\Microsoft\MicrosoftEdge\Internet Settings
|
||||
- **Value name:** ConfigureHomeButton
|
||||
- **Value type:** REG_SZ
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
### Related policies
|
||||
|
||||
|
||||
@ -11,8 +11,8 @@ For this policy to work, you must configure Microsoft Edge in assigned access; o
|
||||
|
||||
| | |
|
||||
|---|---|
|
||||
|(0) Default or not configured |<ul><li>If it’s a single app, it runs InPrivate full screen for digital signage or interactive displays.</li><li>If it’s one of many apps, Microsoft Edge runs as normal.</li></ul> |
|
||||
|(1) Enabled |<ul><li>If it’s a single app, it runs a limited multi-tab version of InPrivate and is the only app available for public browsing. Users can’t minimize, close, or open windows or customize Microsoft Edge, but can clear browsing data and downloads and restart by clicking “End session.” You can configure Microsoft Edge to restart after a period of inactivity by using the “Configure kiosk reset after idle timeout” policy.</li><li>If it’s one of many apps, it runs in a limited multi-tab version of InPrivate for public browsing with other apps. Users can minimize, close, and open multiple InPrivate windows, but they can’t customize Microsoft Edge.</li></ul> |
|
||||
|(0) Default or not configured |<ul><li>If it’s a single app, Microsoft Edge runs InPrivate full screen for digital signage or interactive displays.</li><li>If it’s one of many apps, Microsoft Edge runs as normal.</li></ul> |
|
||||
|(1) Enabled |<ul><li>• If it’s a single app, it runs a limited multi-tab version of InPrivate and is the only app available for public browsing. Users can’t minimize, close, or open windows or customize Microsoft Edge, but can clear browsing data and downloads and restart by clicking “End session.” You can configure Microsoft Edge to restart after a period of inactivity by using the “Configure kiosk reset after idle timeout” policy.<p>**_For single-app public browsing_**: If you do not configure the Configure kiosk reset after idle timeout policy and you enable this policy, Microsoft Edge kiosk resets after 5 minutes of idle time.</li><li>If it’s one of many apps, it runs in a limited multi-tab version of InPrivate for public browsing with other apps. Users can minimize, close, and open multiple InPrivate windows, but they can’t customize Microsoft Edge.</li></ul> |
|
||||
---
|
||||
|
||||
|
||||
|
||||
@ -12,7 +12,7 @@
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |
|
||||
|---|---|---|---|
|
||||
|---|:---:|:---:|---|
|
||||
|Not configured |Blank |Blank |If you don't configure this policy and you enable the Disable Lockdown of Start Pages policy, users can change or customize the Start page. |
|
||||
|Enabled |0 |0 |Loads the Start page. |
|
||||
|Enabled |1 |1 |Load the New tab page. |
|
||||
@ -35,74 +35,6 @@
|
||||
|
||||
If you want to make changes to this policy:<ol><li>Set the Disabled Lockdown of Start Pages to not configured.</li><li>Make changes to the Configure Open Microsoft With policy.</li><li>Enable the Disabled Lockdown of Start Pages.</li></ol>
|
||||
|
||||
#### Load URLs defined in the Configure Open Microsoft Edge With policy, and let users make changes.
|
||||
|
||||
1. Enable the **Configure Open Microsoft Edge With** policy. Applies to all options for this policy. <p>
|
||||
|
||||
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
|
||||
|
||||
3. Enable the **Disabled Lockdown of Start Pages** policy by selecting *All configured start pages are editable*.
|
||||
|
||||
---
|
||||
|
||||
#### Load any start page and let users make changes.
|
||||
|
||||
1. Disable or don't configure the **Configure Open Microsoft Edge With** policy.
|
||||
|
||||
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets in the following format:<p> \<support.contoso.com\>\<support.microsoft.com\>
|
||||
|
||||
3. Enable the **Disabled Lockdown of Start Pages** policy by selecting *Start pages are not editable*.
|
||||
|
||||
---
|
||||
|
||||
#### Load Start page(s) and prevent users from making changes.
|
||||
|
||||
1. Enable the **Configure Open Microsoft Edge With** policy by selecting *Start page*.<p>
|
||||
|
||||
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
|
||||
|
||||
3. Disable or don't configure the **Disabled Lockdown of Start Pages** policy.
|
||||
|
||||
---
|
||||
|
||||
#### Load New tab page and prevent users from making changes.
|
||||
|
||||
1. Enable the **Configure Open Microsoft Edge With** policy by selecting *New tab page*.<p>
|
||||
|
||||
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
|
||||
|
||||
3. Disable or don't configure the **Disabled Lockdown of Start Pages** policy.
|
||||
|
||||
---
|
||||
|
||||
#### Load previously opened pages and prevent users from making changes.
|
||||
|
||||
1. Enable the **Configure Open Microsoft Edge With** policy by selecting *Previous pages*.<p>
|
||||
|
||||
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
|
||||
|
||||
3. Disable or don't configure the **Disabled Lockdown of Start Pages** policy.
|
||||
|
||||
---
|
||||
|
||||
#### Load a specific page or pages and prevent users from making changes.
|
||||
|
||||
1. Enable the **Configure Open Microsoft Edge With** policy by selecting *A specific page or pages*.<p>
|
||||
|
||||
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
|
||||
|
||||
3. Disable or don't configure the **Disabled Lockdown of Start Pages** policy.
|
||||
|
||||
---
|
||||
|
||||
#### Load a specific page or pages and let users make changes.
|
||||
|
||||
1. Enable the **Configure Open Microsoft Edge With** policy by selecting *A specific page or pages*. <p>
|
||||
|
||||
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
|
||||
|
||||
3. Enable **Disabled Lockdown of Start Pages** by selecting *Start pages are not editable*.
|
||||
|
||||
|
||||
### ADMX info and settings
|
||||
#### ADMX info
|
||||
|
||||
@ -6,10 +6,10 @@
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled or not configured<br>**(default)** |0 |0 |Allowed/turned on. The “browser” group syncs automatically between user’s devices and lets users to make changes. | |
|
||||
|Enabled |2 |2 |Prevented/turned off. The “browser” group does not use the Sync your Settings option. | |
|
||||
|Group Policy |MDM |Registry |Description |
|
||||
|---|:---:|:---:|---|
|
||||
|Disabled or not configured<br>**(default)** |0 |0 |Allowed/turned on. The “browser” group syncs automatically between user’s devices and lets users to make changes. |
|
||||
|Enabled |2 |2 |Prevented/turned off. The “browser” group does not use the Sync your Settings option. |
|
||||
---
|
||||
|
||||
### Configuration options
|
||||
|
||||
@ -6,29 +6,29 @@
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |Description |Most restricted |
|
||||
|---|---|:---:|
|
||||
|Disabled or not configured<br>**(default)** |Provide a semi-colon delimited list of extension PFNs. For example, adding _Microsoft.OneNoteWebClipper8wekyb3d8bbwe_ or _Microsoft.OfficeOnline8wekyb3d8bbwe_ prevents a user from turning off the OneNote Web Clipper and Office Online extension. After defining the list of extensions, you deploy them through any available enterprise deployment channel, such as Microsoft Intune. Removing extensions from the list does not uninstall the extension from the user’s computer automatically. To uninstall the extension, use any available enterprise deployment channel. If you enable the Allow Developer Tools policy, then this policy does not prevent users from debugging and altering the logic on an extension. | |
|
||||
|Enabled |Allowed. Users can uninstall extensions. If you previously enabled this policy and you decide to disable it, the list of extension PFNs defined in this policy get ignored. | |
|
||||
|Group Policy |Description |
|
||||
|---|---|
|
||||
|Disabled or not configured<br>**(default)** |Provide a semi-colon delimited list of extension PFNs. For example, adding _Microsoft.OneNoteWebClipper8wekyb3d8bbwe_ or _Microsoft.OfficeOnline8wekyb3d8bbwe_ prevents a user from turning off the OneNote Web Clipper and Office Online extension. After defining the list of extensions, you deploy them through any available enterprise deployment channel, such as Microsoft Intune. Removing extensions from the list does not uninstall the extension from the user’s computer automatically. To uninstall the extension, use any available enterprise deployment channel. If you enable the Allow Developer Tools policy, then this policy does not prevent users from debugging and altering the logic on an extension. |
|
||||
|Enabled |Allowed. Users can uninstall extensions. If you previously enabled this policy and you decide to disable it, the list of extension PFNs defined in this policy get ignored. |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
#### ADMX info
|
||||
- **GP English name:** Prevent turning off required extensions
|
||||
- **GP name:** ForceEnabledExtensions
|
||||
- **GP name:** PreventTurningOffRequiredExtensions
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[PreventTurningOffRequiredExtensions](../new-policies.md#prevent-turning-off-required-extensions)
|
||||
- **Supported devices:** Desktop and Mobile
|
||||
- **Supported devices:** Desktop
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/PreventTurningOffRequiredExtensions
|
||||
- **Data type:** Integer
|
||||
- **Data type:** String
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HLKM\Software\Policies\Microsoft\MicrosoftEdge\
|
||||
- **Path:** HLKM\Software\Policies\Microsoft\MicrosoftEdge\Extensions
|
||||
- **Value name:** PreventTurningOffRequiredExtensions
|
||||
- **Value type:** REG_DWORD
|
||||
- **Value type:** REG_SZ
|
||||
|
||||
### Related policies
|
||||
[Allow Developer Tools](../available-policies.md#allow-developer-tools): [!INCLUDE [allow-developer-tools-shortdesc](../shortdesc/allow-developer-tools-shortdesc.md)]
|
||||
|
||||
@ -6,10 +6,10 @@
|
||||
[!INCLUDE [prevent-users-to-turn-on-browser-syncing-shortdesc](../shortdesc/prevent-users-to-turn-on-browser-syncing-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled |0 |0 |Allowed/turned on. Users can sync the browser settings. | |
|
||||
|Enabled or not configured<br>**(default)** |1 |1 |Prevented/turned off. | |
|
||||
|Group Policy |MDM |Registry |Description |
|
||||
|---|:---:|:---:|---|
|
||||
|Disabled |0 |0 |Allowed/turned on. Users can sync the browser settings. |
|
||||
|Enabled or not configured<br>**(default)** |1 |1 |Prevented/turned off. |
|
||||
---
|
||||
|
||||
### Configuration options
|
||||
@ -30,15 +30,11 @@
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Experience/[PreventUsersFromTurningOnBrowserSyncing]()
|
||||
- **MDM name:** Experience/[PreventUsersFromTurningOnBrowserSyncing](../new-policies.md#prevent-users-from-turning-on-browser-syncing)
|
||||
- **Supported devices:** Desktop
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Experience/PreventUsersFromTurningOnBrowserSyncing
|
||||
- **Data type:** String
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HLKM\Software\Policies\Microsoft\MicrosoftEdge
|
||||
- **Value name:**
|
||||
- **Value type:**
|
||||
|
||||
### Related policies
|
||||
[Do not sync browser settings](../available-policies.md#do-not-sync-browser-settings): [!INCLUDE [do-not-sync-browser-settings-shortdesc](../shortdesc/do-not-sync-browser-settings-shortdesc.md)].
|
||||
|
||||
@ -19,35 +19,13 @@
|
||||
| --- | --- | --- | --- |
|
||||
| Not configured (default) | Disabled | Disabled or not configured (default) | Default search engine specified in App settings. Users cannot make changes. |
|
||||
| Not configured (default) | Enabled or not configured (default) | Disabled or not configured (default) | Default search engine specified in App settings. Users can make changes to the default search engine at any time. |
|
||||
| Not configured (default) | Disabled | Enabled | ??? |
|
||||
| Not configured (default) | Enabled or not configured (default) | Enabled | ??? |
|
||||
| Disabled | Disabled | Disabled or not configured (default) | Users cannot add, remove, or change any of the search engines, but they can set a default search engine. |
|
||||
| Disabled | Enabled or not configured (default) | Disabled or not configured (default) | Users can add new search engines or change the default search engine, in Settings. |
|
||||
| Enabled | Disabled | Disabled or not configured (default) | Set the default search engine preventing users from making changes. |
|
||||
| Enabled | Enabled or not configured (default) | Disabled or not configured (default) | Set the default search engine and allow users to add search engines or make changes. |
|
||||
---
|
||||
|
||||
#### If you want to use the default search engine in Apps settings and prevent users from making changes.
|
||||
|
||||
|
||||
#### If you want to use the default search engine in Apps setting and let users make changes.
|
||||
|
||||
|
||||
#### ???
|
||||
|
||||
|
||||
#### ???
|
||||
|
||||
|
||||
#### If you don't want users to add, remove, or change any of the search engines, but users can set a default search engine of their own.
|
||||
|
||||
|
||||
#### If you want users to add new search engines or change the default in Settings.
|
||||
|
||||
|
||||
#### If you want to set the default search engine and prevent users from making changes.
|
||||
|
||||
|
||||
#### If you want to set the default search engine and let users make changes.
|
||||
|
||||
|
||||
|
||||
### ADMX info and settings
|
||||
|
||||
@ -7,7 +7,7 @@
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|---|:---:|:---:|---|
|
||||
|Disabled or not configured<br>**(default)** |Blank |Blank |Show the home button and loads the Start page and locks down the home button to prevent users from changing what page loads. |
|
||||
|Enabled - String |String |String |Enter a URL in string format, for example, https://www.msn.com. A custom URL loads when clicking the home button. You must also enable the [Configure Home Button](../new-policies.md#configure-home-button) policy and select the _Show home button & set a specific page_ option. |
|
||||
---
|
||||
@ -44,7 +44,7 @@ Enable the **Configure Home Button** policy and select the _Hide home button_ op
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HKLM\Software\Policies\Microsoft\MicrosoftEdge\Internet Settings
|
||||
- **Value name:** HomeButtonURL
|
||||
- **Value name:** ConfigureHomeButtonURL
|
||||
- **Value type:** REG_SZ
|
||||
|
||||
### Related policies
|
||||
|
||||
@ -7,9 +7,9 @@
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|---|:---:|:---:|---|
|
||||
|Disabled or not configured<br>**(default)** |Blank |Blank |Load the default New tab page. |
|
||||
|Enabled - String |String |String |Enter a URL in string format, for example, https://www.msn.com.<p>Prevent users from changing the New tab page. |
|
||||
|Enabled - String |String |String |Prevent users from changing the New tab page.<p>Enter a URL in string format, for example, https://www.msn.com. |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
|
||||
@ -22,7 +22,7 @@
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[ShowMessageWhenOpeningSitesInInternetExplorer](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-showmessagewhenopeningsitesininternetexplorer)
|
||||
- **MDM name:** Browser/[ShowMessageWhenOpeningSitesInInternetExplorer](../new-policies.md#show-message-when-opening-sites-in-internet-explorer)
|
||||
- **Supported devices:** Desktop
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ShowMessageWhenOpeningSitesInInternetExplorer
|
||||
- **Data type:** Integer
|
||||
|
||||
@ -6,10 +6,10 @@
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled or not configured<br>**(default)** |0 |0 |Lock down the home button to prevent users from making changes. | |
|
||||
|Enabled |1 |1 |Let users make changes. | |
|
||||
|Group Policy |MDM |Registry |Description |
|
||||
|---|:---:|:---:|---|
|
||||
|Disabled or not configured<br>**(default)** |0 |0 |Lock down the home button to prevent users from making changes. |
|
||||
|Enabled |1 |1 |Let users make changes. |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
|
||||
@ -15,7 +15,7 @@ ms.date: 07/18/2018
|
||||
>Applies to: Microsoft Edge on Windows 10 <br>
|
||||
>Preview build 17718
|
||||
|
||||
Microsoft Edge kiosk mode works with assigned access to allow IT, administrators, to create a tailored browsing experience designed for kiosk devices. To use Microsoft Edge kiosk mode, you must configure Microsoft Edge as an application in assigned access. Learn more about [Configuring kiosk and shared devices running Windows desktop editions](https://docs.microsoft.com/en-us/windows/configuration/kiosk-shared-pc).
|
||||
Microsoft Edge kiosk mode works with assigned access to let IT administrators create a tailored browsing experience designed for kiosk devices. To use Microsoft Edge kiosk mode, you must configure Microsoft Edge as an application in assigned access. Learn more about [Configuring kiosk and shared devices running Windows desktop editions](https://docs.microsoft.com/en-us/windows/configuration/kiosk-shared-pc).
|
||||
|
||||
When you configure Microsoft Edge kiosk mode in assigned access, you can set it up to show only a single URL in full-screen, in the case of digital/interactive signage on a single-app kiosk device. You can restrict Microsoft Edge for public browsing (on a single and multi-app kiosk device) which runs a multi-tab version of InPrivate with limited functionality. Also, you can configure a multi-app kiosk device to run a full or normal version of Microsoft Edge.
|
||||
|
||||
@ -24,8 +24,9 @@ Digital/Interactive signage and public browsing protects the user’s data by ru
|
||||
In this deployment guidance, you learn about the different Microsoft Edge kiosk mode types to help you determine what configuration is best suited for your kiosk device. You also learn how to setup your Microsoft Edge kiosk mode experience.
|
||||
|
||||
|
||||
|
||||
## Microsoft Edge kiosk types
|
||||
Microsoft Edge kiosk mode supports **four** types, depending on how a Microsoft Edge kiosk is set up in assigned access; single-app and multi-app kiosk.
|
||||
Microsoft Edge kiosk mode supports **four** types, depending on how Microsoft Edge is set up in assigned access; single-app or multi-app kiosk. Learn more about [assigned access](https://docs.microsoft.com/en-us/windows-hardware/customize/enterprise/assigned-access).
|
||||
|
||||
### Single-app kiosk
|
||||
|
||||
@ -33,9 +34,9 @@ When you set up Microsoft Edge kiosk mode in single-app assigned access, Microso
|
||||
|
||||
The single-app Microsoft Edge kiosk mode types include:
|
||||
|
||||
1. **Digital / Interactive signage** devices display a specific site in full-screen mode in which Microsoft Edge runs InPrivate mode. Examples of Digital signage are a rotating advertisement or menu. Examples of Interactive signage are an interactive museum display or restaurant order/pay station.
|
||||
1. **Digital / Interactive signage** devices display a specific site in full-screen mode in which Microsoft Edge runs InPrivate mode. Examples of Digital signage are a rotating advertisement or menu. Examples of Interactive signage are an interactive museum display and restaurant order/pay station.
|
||||
|
||||
2. **Public browsing** devices run a limited multi-tab version of InPrivate and are the only app available. Users can’t minimize, close, or open new Microsoft Edge windows or customize Microsoft Edge. Users can clear browsing data, downloads and restart Microsoft Edge by clicking “End session.” You can configure Microsoft Edge to restart after a period of inactivity by using the “Configure kiosk reset after idle timeout” policy. An example usage of this mode is an information kiosk at a public library.
|
||||
2. **Public browsing** devices run a limited multi-tab version of InPrivate and Microsoft Edge is the only app available. Users can’t minimize, close, or open new Microsoft Edge windows or customize Microsoft Edge. Users can clear browsing data, downloads and restart Microsoft Edge by clicking the “End session” button. You can configure Microsoft Edge to restart after a period of inactivity by using the “Configure kiosk reset after idle timeout” policy. A public library or hotel concierge desk are two examples of public browsing in single-app kiosk device.
|
||||
|
||||
|
||||
|
||||
@ -44,28 +45,27 @@ When you set up Microsoft Edge kiosk mode in multi-app assigned access, Microsof
|
||||
|
||||
The multi-app Microsoft Edge kiosk mode types include:
|
||||
|
||||
3. **Public browsing** (shared browsing) supports browsing the internet and runs InPrivate with minimal features available. In this configuration, Microsoft Edge can be one of many apps available. Users can, close and open multiple InPrivate windows. On a multi-app kiosk device, Microsoft Edge can interact with other applications. For example, if Internet Explorer 11 is set up in multi-app assigned access. You can enable Enterprise Mode to automatically switch users to Internet Explorer 11 for sites that need backward compatibility support automatically. Examples of public browsing include an information kiosk device at a public library or hotel concierge desk that provides access to Microsoft Edge and another app(s).
|
||||
3. **Public browsing** supports browsing the internet and runs InPrivate with minimal features available. In this configuration, Microsoft Edge can be one of many apps available. Users can close and open multiple InPrivate windows. On a multi-app kiosk device, Microsoft Edge can interact with other applications. For example, if Internet Explorer 11 is set up in multi-app assigned access. You can enable Enterprise Mode to automatically switch users to Internet Explorer 11 for sites that need backward compatibility support. Examples of public browsing include an information kiosk device at a public library or hotel concierge desk that provides access to Microsoft Edge and other app(s).
|
||||
|
||||
|
||||
|
||||
4. **Normal mode** runs a full version of Microsoft Edge, but some features may not work depending on what other apps you configured in assigned access. For example, if Internet Explorer 11 is set up in assigned access, you can enable Enterprise Mode to automatically switch users to Internet Explorer 11 for sites that need backward compatibility support.
|
||||
4. **Normal mode** mode runs a full version of Microsoft Edge, but some features may not work depending on what other apps you configured in assigned access. For example, if Internet Explorer 11 is set up in assigned access, you can enable Enterprise Mode to automatically switch users to Internet Explorer 11 for sites that need backward compatibility support.
|
||||
|
||||
|
||||
|
||||
## Let’s get started!
|
||||
|
||||
Before you can configure Microsoft Edge kiosk mode, you must set up Microsoft Edge in assigned access. You can set up Microsoft Edge kiosk mode in assigned access using:
|
||||
|
||||
- **Windows Settings.** Best for physically setting up a single device as a kiosk. With this method, you set up assigned access and configure the kiosk or digital sign device using Settings. You can configure Microsoft Edge in single-app (kiosk type – Full-screen or public browsing) and define a single URL for the Home Button, Start Page, and New Tab page. You can also set the reset after an idle timeout.
|
||||
- **Windows Settings.** Best for physically setting up a single device as a kiosk. With this method, you set up assigned access and configure the kiosk or digital sign device using Settings. You can configure Microsoft Edge in single-app (kiosk type – Full-screen or public browsing) and define a single URL for the Home button, Start page, and New tab page. You can also set the reset after an idle timeout.
|
||||
|
||||
- **Microsoft Intune or other MDM service.** Best for setting up multiple devices as a kiosk. With this method, you configure Microsoft Edge in assigned access and configure how Microsoft Edge behaves when it’s running in kiosk mode with assigned access.
|
||||
|
||||
>[!NOTE]
|
||||
>For other MDM service, check with your provider for instructions.
|
||||
|
||||
- **Windows PowerShell.** Best for setting up multiple devices as a kiosk. With this method, you can set up single-app or multi-app assigned access in PowerShell. For details, see [Set up a kiosk or digital sign using Windows PowerShell](https://docs.microsoft.com/en-us/windows/configuration/setup-kiosk-digital-signage#set-up-a-kiosk-or-digital-sign-using-windows-powershell).
|
||||
- **Windows PowerShell.** Best for setting up multiple devices as a kiosk. With this method, you can set up single-app or multi-app assigned access using a PowerShell script. For details, see For details, see [Set up a kiosk or digital sign using Windows PowerShell](https://docs.microsoft.com/en-us/windows/configuration/setup-kiosk-digital-signage#set-up-a-kiosk-or-digital-sign-using-windows-powershell).
|
||||
|
||||
- **Windows Configuration Designer.** Best for setting up multiple devices as a kiosk. Download and install both the latest version of the [Windows Assessment and Deployment Kit (ADK)](https://developer.microsoft.com/windows/hardware/windows-assessment-deployment-kit) and [Windows Configuration Manager](https://docs.microsoft.com/en-us/windows/configuration/provisioning-packages/provisioning-install-icd#install-windows-configuration-designer-1).
|
||||
- **Windows Configuration Designer.** Best for setting up multiple kiosk devices. Download and install both the latest version of the [Windows Assessment and Deployment Kit (ADK)](https://developer.microsoft.com/windows/hardware/windows-assessment-deployment-kit) and [Windows Configuration Manager](https://docs.microsoft.com/en-us/windows/configuration/provisioning-packages/provisioning-install-icd#install-windows-configuration-designer-1).
|
||||
|
||||
### Prerequisites
|
||||
|
||||
@ -104,7 +104,7 @@ Windows Settings is the simplest and easiest way to set up one or a couple of de
|
||||
>[!NOTE]
|
||||
>The URL sets the Home button, Start page, and New tab page.
|
||||
|
||||
11. Microsoft Edge in kiosk mode has a built-in timer to help keep data safe in public browsing sessions.<p>When the idle time (no user activity) meets the time limit, a confirmation message prompts the user to continue. If **Continue** is not selected, Microsoft Edge resets to the default URL. You can accept the default value of **5 minutes,** or you can choose your own idle timer value.
|
||||
11. 11. Microsoft Edge in kiosk mode has a built-in timer to help keep data safe in public browsing sessions. When the idle time (no user activity) meets the time limit, a confirmation message prompts the user to continue. If **Continue** is not selected, Microsoft Edge resets to the default URL. You can accept the default value of **5 minutes**, or you can choose your own idle timer value.
|
||||
|
||||
12. Select **Next**, and then select **Close**.
|
||||
|
||||
@ -128,7 +128,7 @@ Windows Settings is the simplest and easiest way to set up one or a couple of de
|
||||
|
||||
### Use Microsoft Intune or other MDM service
|
||||
|
||||
With this method, you can use Microsoft Intune or other MDM services to configure Microsoft Edge in assigned access and how it behaves when it’s running in assigned access.
|
||||
With this method, you can use Microsoft Intune or other MDM services to configure Microsoft Edge kiosk mode in assigned access and how it behaves on a kiosk device.
|
||||
|
||||
1. In Microsoft Intune or other MDM service, configure [AssignedAccess](https://docs.microsoft.com/windows/client-management/mdm/assignedaccess-csp) to prevent users from accessing the file system, running executables, or other apps.
|
||||
|
||||
@ -138,12 +138,12 @@ With this method, you can use Microsoft Intune or other MDM services to configur
|
||||
|---|---|
|
||||
| **[ConfigureKioskMode](new-policies.md#configure-kiosk-mode)**<p> | Configure the display mode for Microsoft Edge as a kiosk app.<p><p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskMode<p>**Data type:** Integer<p>**Allowed values:**<ul><li>**Single-app kiosk experience**<ul><li>**0** - Digital signage and interactive display</li><li>**1** - InPrivate Public browsing</li></ul></li><li>**Multi-app kiosk experience**<ul><li>**0** - Normal Microsoft Edge running in assigned access</li><li>**1** - InPrivate public browsing with other apps</li></ul></li></ul> |
|
||||
| **[ConfigureKioskResetAfterIdleTimeout](new-policies.md#configure-kiosk-reset-after-idle-timeout)**<p> | Change the time in minutes from the last user activity before Microsoft Edge kiosk mode resets to the default kiosk configuration.<p><p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskResetAfterIdleTimeout<p>**Data type:** Integer<p>**Allowed values:**<ul><li>**0** - No idle timer</li><li>**1-1440 (5 minutes is the default)** - Set reset on idle timer</li></ul> |
|
||||
| **[HomePages](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-homepages)**<p> | Set one or more start pages, URLs, to load when Microsoft Edge launches.<p><p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/HomePages<p>**Data type:** String<p>**Allowed values:**<p>Enter one or more URL, for example,<br> \<https://www.msn.com\>\<https:/www.bing.com\> |
|
||||
| **[HomePages](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-homepages)**<p> | Set one or more start pages, URLs, to load when Microsoft Edge launches.<p><p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/HomePages<p>**Data type:** String<p>**Allowed values:**<p>Enter one or more URLs, for example,<br> \<https://www.msn.com\>\<https:/www.bing.com\> |
|
||||
| **[ConfigureHomeButton](new-policies.md#configure-home-button)**<p> | Configure how the Home Button behaves.<p><p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureHomeButton<p>**Data type:** Integer<p> **Allowed values:**<ul><li>**0 (default)** - Not configured. Show home button, and load the default Start page.</li><li>**1** - Enabled. Show home button and load New tab page</li><li>**2** - Enabled. Show home button & set a specific page.</li><li>**3** - Enabled. Hide the home button.</li></ul> |
|
||||
| **[SetNewTabPageURL](new-policies.md#set-new-tab-page-url)**<p> | Set a custom URL for the New tab page.<p><p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ <p>**Data type:** String<p>**Allowed values:** Enter a URL, for example, https://www.msn.com |
|
||||
| **[SetHomeButtonURL](new-policies.md#set-home-button-url)**<p> | If you set ConfigureHomeButton to 2, configure the home button URL.<p><p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ <p>**Data type:** String<p>**Allowed values:** Enter a URL, for example, https://www.bing.com |
|
||||
---
|
||||
|
||||
<br>
|
||||
3. Restart the device and sign in using the kiosk app user account.
|
||||
|
||||
**_Congratulations!_** You’ve finished setting up a kiosk or digital signage and configuring policies for Microsoft Edge kiosk mode using Microsoft Intune or other MDM service.
|
||||
@ -152,7 +152,7 @@ With this method, you can use Microsoft Intune or other MDM services to configur
|
||||
|
||||
### Use a provisioning package
|
||||
|
||||
With this method, you can use a provisioning package to configure Microsoft Edge in assigned access. After you set up the provisioning package for configuring Microsoft Edge in assigned access, you configure how Microsoft Edge behaves when it’s running in kiosk mode with assigned access.
|
||||
With this method, you can use a provisioning package to configure Microsoft Edge kiosk mode in assigned access. After you set up the provisioning package for configuring Microsoft Edge in assigned access, you configure how Microsoft Edge behaves on a kiosk device.
|
||||
|
||||
1. Open Windows Configuration Designer to create a provisioning package and configure Microsoft Edge in assigned access.
|
||||
|
||||
@ -164,12 +164,12 @@ With this method, you can use a provisioning package to configure Microsoft Edge
|
||||
|---|---|
|
||||
| **[ConfigureKioskMode](new-policies.md#configure-kiosk-mode)**<p> | Configure the display mode for Microsoft Edge as a kiosk app.<p><p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskMode<p>**Data type:** Integer<p>**Allowed values:**<ul><li>**Single-app kiosk experience**<ul><li>**0** - Digital signage and interactive display</li><li>**1** - InPrivate Public browsing</li></ul></li><li>**Multi-app kiosk experience**<ul><li>**0** - Normal Microsoft Edge running in assigned access</li><li>**1** - InPrivate public browsing with other apps</li></ul></li></ul> |
|
||||
| **[ConfigureKioskResetAfterIdleTimeout](new-policies.md#configure-kiosk-reset-after-idle-timeout)**<p> | Change the time in minutes from the last user activity before Microsoft Edge kiosk mode resets to the default kiosk configuration.<p><p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskResetAfterIdleTimeout<p>**Data type:** Integer<p>**Allowed values:**<ul><li>**0** - No idle timer</li><li>**1-1440 (5 minutes is the default)** - Set reset on idle timer</li></ul> |
|
||||
| **[HomePages](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-homepages)**<p> | Set one or more start pages, URLs, to load when Microsoft Edge launches.<p><p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/HomePages<p>**Data type:** String<p>**Allowed values:**<p>Enter one or more URL, for example,<br> \<https://www.msn.com\>\<https:/www.bing.com\> |
|
||||
| **[HomePages](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-homepages)**<p> | Set one or more start pages, URLs, to load when Microsoft Edge launches.<p><p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/HomePages<p>**Data type:** String<p>**Allowed values:**<p>Enter one or more URLs, for example,<br> \<https://www.msn.com\>\<https:/www.bing.com\> |
|
||||
| **[ConfigureHomeButton](new-policies.md#configure-home-button)**<p> | Configure how the Home Button behaves.<p><p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureHomeButton<p>**Data type:** Integer<p> **Allowed values:**<ul><li>**0 (default)** - Not configured. Show home button, and load the default Start page.</li><li>**1** - Enabled. Show home button and load New tab page</li><li>**2** - Enabled. Show home button & set a specific page.</li><li>**3** - Enabled. Hide the home button.</li></ul> |
|
||||
| **[SetNewTabPageURL](new-policies.md#set-new-tab-page-url)**<p> | Set a custom URL for the New tab page.<p><p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ <p>**Data type:** String<p>**Allowed values:** Enter a URL, for example, https://www.msn.com |
|
||||
| **[SetHomeButtonURL](new-policies.md#set-home-button-url)**<p> | If you set ConfigureHomeButton to 2, configure the home button URL.<p><p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ <p>**Data type:** String<p>**Allowed values:** Enter a URL, for example, https://www.bing.com |
|
||||
---
|
||||
|
||||
<br>
|
||||
4. After you’ve configured the Microsoft Edge kiosk mode policies, including any of the related policies, it’s time to build the package.
|
||||
|
||||
5. Click **Finish**. The wizard closes taking you back to the Customizations page.
|
||||
@ -182,7 +182,7 @@ With this method, you can use a provisioning package to configure Microsoft Edge
|
||||
|
||||
## Related policies
|
||||
|
||||
You can use any of the following policies to enhance the kiosk experience. To learn more about these policies, see [Policy CSP - Browser](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser).
|
||||
Use any of the Microsoft Edge policies listed below to enhance the kiosk experience depending on the Microsoft Edge kiosk mode type you configure. To learn more about these policies, see [Policy CSP - Browser](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser).
|
||||
|
||||
| **MDM Setting** | **Digital /<br>Interactive signage** | **Public browsing<br>single-app** | **Public browsing<br>multi-app** | **Normal<br>mode** |
|
||||
|------------------|:---------:|:---------:|:---------:|:---------:|
|
||||
@ -281,7 +281,7 @@ You can use any of the following policies to enhance the kiosk experience. To l
|
||||
- **Expected behavior** – Microsoft Edge kiosk mode opens the URL on startup.
|
||||
- **Actual behavior** – Microsoft Edge kiosk mode may not open with the URL on startup.
|
||||
|
||||
- Bug with Microsoft Edge kiosk mode when setting up a single-app in assigned access and “Configure kiosk mode” is not set.
|
||||
- • When you set up Microsoft Edge kiosk mode on a single-app kiosk device you must set the “ConfigureKioskMode” policy because the default behavior is not honored.
|
||||
- **Expected behavior** – Microsoft Edge kiosk mode launches in full-screen mode.
|
||||
- **Actual behavior** – Normal Microsoft Edge launches.
|
||||
|
||||
@ -323,6 +323,6 @@ In the following table, we show you the features available in both Microsoft Edg
|
||||
---
|
||||
|
||||
**\*Windows Defender Firewall**<p>
|
||||
To prevent unwanted websites, use Windows Defender Firewall to configure a list of allowed websites or blocked websites or both. For more details, see [Windows Defender Firewall with Advanced Security Deployment](https://docs.microsoft.com/en-us/windows/security/identity-protection/windows-firewall/windows-firewall-with-advanced-security-deployment-guide).
|
||||
To prevent access to unwanted websites on your kiosk device, use Windows Defender Firewall to configure a list of allowed websites, blocked websites or both. For more details, see [Windows Defender Firewall with Advanced Security Deployment](https://docs.microsoft.com/en-us/windows/security/identity-protection/windows-firewall/windows-firewall-with-advanced-security-deployment-guide).
|
||||
|
||||
---
|
||||
@ -1 +1 @@
|
||||
By default, Microsoft Edge shows the Address bar drop-down list and makes it available. When enabled (default setting), this policy takes precedence over the [Configure search suggestions in Address bar](../available-policies.md#configure-search-suggestions-in-address-bar) policy. If you want to minimize network connections from Microsoft Edge to Microsoft service, we recommend disabling this policy, which hides the Address bar drop-down list functionality. When disabled, Microsoft Edge also disables the _Show search and site suggestions as I type_ toggle in Settings.
|
||||
Microsoft Edge shows the Address bar drop-down list and makes it available by default, which takes precedence over the [Configure search suggestions in Address bar](../available-policies.md#configure-search-suggestions-in-address-bar) policy. We recommend disabling this policy if you want to minimize network connections from Microsoft Edge to Microsoft service, which hides the functionality of the Address bar drop-down list. When you disable this policy, Microsoft Edge also disables the Show search and site suggestions as I type toggle in Settings.
|
||||
@ -1 +1 @@
|
||||
Adobe Flash is integrated with Microsoft Edge and updated via Windows Update. By default, Microsoft Edge runs Adobe Flash content. With this policy, you can configure Microsoft Edge to prevent running Adobe Flash content.
|
||||
Adobe Flash is integrated with Microsoft Edge and runs Adobe Flash content by default. With this policy, you can configure Microsoft Edge to prevent Adobe Flash content from running.
|
||||
@ -1 +1 @@
|
||||
By default, Microsoft Edge does not clear the browsing data on exit, but users can configure the _Clear browsing data_ option in Settings. Browsing data includes information you entered in forms, passwords, and even the websites visited. Enabling this policy clears the browsing data automatically each time Microsoft Edge closes.
|
||||
Microsoft Edge does not clear the browsing data on exit by default, but users can configure the _Clear browsing data_ option in Settings. Browsing data includes information you entered in forms, passwords, and even the websites visited. With this policy, you can configure Microsoft Edge to clear the browsing data automatically each time Microsoft Edge closes.
|
||||
@ -1 +1 @@
|
||||
By default, Microsoft Edge automatically updates the configuration data for the Books Library. Enabling this policy prevents Microsoft Edge from updating the configuration data.
|
||||
Microsoft Edge automatically updates the configuration data for the Books Library. Disabling this policy prevents Microsoft Edge from updating the configuration data.
|
||||
@ -1 +1 @@
|
||||
Since Microsoft Edge is integration with Cortana, and by default, Microsoft Edge allows users to use Cortana voice assistant. Disabling this policy prevents users from using Cortana, but they can still search to find items on their device.
|
||||
Since Microsoft Edge is integration with Cortana, Microsoft Edge allows users to use Cortana voice assistant by default. With this policy, you can configure Microsoft Edge to prevent users from using Cortana but can still search to find items on their device.
|
||||
@ -1 +1 @@
|
||||
By default, Microsoft Edge allows users to use the F12 developer tools to build and debug web pages. Disabling this policy prevents users from using the F12 developer tools.
|
||||
Microsoft Edge allows users to use the F12 developer tools to build and debug web pages by default. With this policy, you can configure Microsoft Edge to prevent users from using the F12 developer tools.
|
||||
@ -1 +1 @@
|
||||
By default, and depending on the device configuration, Microsoft Edge gathers basic diagnostic data about the books in the Books Library and sends it to Microsoft. Enabling this policy gathers and sends both basic and additional diagnostic data.
|
||||
By default, and depending on the device configuration, Microsoft Edge gathers basic diagnostic data about the books in the Books Library and sends it to Microsoft. Enabling this policy gathers and sends both basic and additional diagnostic data, such as usage data.
|
||||
@ -1 +1 @@
|
||||
By default, this policy allows users to add or personalize extensions in Microsoft Edge. Disabling this policy prevents users from adding or personalizing extensions.
|
||||
Microsoft Edge allows users to add or personalize extensions in Microsoft Edge by default. With this policy, you can configure Microsoft to prevent users from adding or personalizing extensions.
|
||||
@ -1 +1 @@
|
||||
By default, Microsoft Edge allows InPrivate browsing, and after closing all InPrivate tabs, Microsoft Edge deletes the browsing data from the device. Disabling this policy prevents InPrivate web browsing.
|
||||
By default, Microsoft Edge allows InPrivate browsing, and after closing all InPrivate tabs, Microsoft Edge deletes the browsing data from the device. With this policy, you can configure Microsoft Edge to prevent InPrivate web browsing.
|
||||
@ -1 +1 @@
|
||||
By default, during navigation, Microsoft Edge checks the Microsoft Compatibility List for websites with known compatibility issues. If found, users are prompted to use Internet Explorer, where the site loads and displays properly. Periodically during browser navigation, Microsoft Edge downloads the latest version of the list and applies the updates. You can view the compatibility list at about:compat. Disable this policy to ignore the compatibility list.
|
||||
During browser navigation, Microsoft Edge checks the Microsoft Compatibility List for websites with known compatibility issues. If found, users are prompted to use Internet Explorer, where the site loads and displays correctly. Periodically during browser navigation, Microsoft Edge downloads the latest version of the list and applies the updates. With this policy, you can configure Microsoft Edge to ignore the compatibility list. You can view the compatibility list at about:compat.
|
||||
@ -1 +1 @@
|
||||
By default, users can add new search engines or change the default search engine, in Settings, in Microsoft Edge. Disabling this policy prevents users from customizing the search engine in Microsoft Edge.
|
||||
By default, users can add new search engines or change the default search engine, in Settings. With this policy, you can prevent users from customizing the search engine in Microsoft Edge.
|
||||
@ -1 +1 @@
|
||||
By default, Microsoft Edge shows the Books Library only in countries or regions where supported. Enabling this policy shows the Books Library, regardless of the device’s country or region.
|
||||
Microsoft Edge shows the Books Library only in countries or regions where supported. With this policy you can configure Microsoft Edge to show the Books Library regardless of the device’s country or region.
|
||||
@ -1 +1 @@
|
||||
By default, users cannot add, remove, or change any of the search engines in Microsoft Edge, but they can set a default search engine. However, with this policy, you can configure up to five additional search engines and set any one of them as the default. You set the default search engine using the [Set default search engine](../available-policies.md#set-default-search-engine) policy. If you enabled this policy and now want to disable it, disabling deletes all configured search engines.
|
||||
By default, users cannot add, remove, or change any of the search engines in Microsoft Edge, but they can set a default search engine. You can set the default search engine using the [[Set default search engine]](../available-policies.md#set-default-search-engine) policy. With this policy, you can configure up to five additional search engines and set any one of them as the default. If you previously enabled this policy and now want to disable it, disabling deletes all configured search engines.
|
||||
File diff suppressed because it is too large
Load Diff
Loading…
x
Reference in New Issue
Block a user