From e1d3cdf540b6629f18ec2136b69457735b51210a Mon Sep 17 00:00:00 2001 From: LizRoss Date: Mon, 6 Mar 2017 11:28:23 -0800 Subject: [PATCH 01/13] Changing formatting --- browsers/edge/available-policies.md | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) diff --git a/browsers/edge/available-policies.md b/browsers/edge/available-policies.md index 110429fbf6..351950b7bc 100644 --- a/browsers/edge/available-policies.md +++ b/browsers/edge/available-policies.md @@ -29,6 +29,30 @@ By using Group Policy and Intune, you can set up a policy setting once, and then ## Group Policy settings Microsoft Edge works with these Group Policy settings (`Computer Configuration\Administrative Templates\Windows Components\Microsoft Edge\`) to help you manage your company's web browser configurations: + + + + + + + + + + + + + + + + + + + +
Policy nameSupported versionsDescriptionOptions
Allow Address bar drop-down list suggestionsWindows 10, Windows Insider ProgramThis policy setting lets you decide whether the Address bar drop-down functionality is available in Microsoft Edge. We recommend disabling this setting if you want to minimize network connections from Microsoft Edge to Microsoft services.

Note
Disabling this setting turns off the Address bar drop-down functionality. Therefore, because search suggestions are shown in the drop-down, this setting takes precedence over the "Configure search suggestions in Address bar" setting.

If you enable or don't configure this setting, employees can see the Address bar drop-down functionality in Microsoft Edge.

If you disable this setting, employees won't see the Address bar drop-down functionality in Microsoft Edge. This setting also disables the user-defined setting, "Show search and site suggestions as I type".

Enabled or not configured (default): Employees can see the Address bar drop-down functionality in Microsoft Edge.

Disabled: Employees won't see the Address bar drop-down functionality in Microsoft Edge. This setting also disables the user-defined setting, "Show search and site suggestions as I type".

Allow Adobe FlashWindows 10 or laterThis setting lets you decide whether employees can run Adobe Flash in Microsoft Edge.

If you enable or don't configure this setting, employees can use Adobe Flash.

If you disable this setting, employees can't use Adobe Flash.

Enabled or not configured (default): Employees use Adobe Flash in Microsoft Edge.

Disabled: Employees can’t use Adobe Flash.

+ + + + |Policy name|Supported versions|Description|Options| |-------------|------------|-------------|--------| |Allow Address bar drop-down list suggestions|Windows 10, Windows Insider Program|This policy setting lets you decide whether the Address bar drop-down functionality is available in Microsoft Edge. We recommend disabling this setting if you want to minimize network connections from Microsoft Edge to Microsoft services.

**Note**
Disabling this setting turns off the Address bar drop-down functionality. Therefore, because search suggestions are shown in the drop-down, this setting takes precedence over the "Configure search suggestions in Address bar" setting.

If you enable or don't configure this setting, employees can see the Address bar drop-down functionality in Microsoft Edge.

If you disable this setting, employees won't see the Address bar drop-down functionality in Microsoft Edge. This setting also disables the user-defined setting, "Show search and site suggestions as I type".|**Enabled or not configured (default):** Employees can see the Address bar drop-down functionality in Microsoft Edge.

**Disabled:** Employees won't see the Address bar drop-down functionality in Microsoft Edge. This setting also disables the user-defined setting, "Show search and site suggestions as I type".| From 3a5956519d62393ebd651c3beb1969b6dfce2921 Mon Sep 17 00:00:00 2001 From: LizRoss Date: Mon, 6 Mar 2017 11:37:16 -0800 Subject: [PATCH 02/13] Changing formatting --- browsers/edge/available-policies.md | 29 +++++++++++++++++++++++++++++ 1 file changed, 29 insertions(+) diff --git a/browsers/edge/available-policies.md b/browsers/edge/available-policies.md index 351950b7bc..61f8b42505 100644 --- a/browsers/edge/available-policies.md +++ b/browsers/edge/available-policies.md @@ -50,6 +50,35 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A +### Allow Address bar drop-down list suggestions +**Supported versions:** Windows 10, Windows Insider Program + +**Description:** This policy setting lets you decide whether the Address bar drop-down functionality is available in Microsoft Edge. We recommend disabling this setting if you want to minimize network connections from Microsoft Edge to Microsoft services. + +- If you enable or don't configure this setting, employees can see the Address bar drop-down functionality in Microsoft Edge. + +- If you disable this setting, employees won't see the Address bar drop-down functionality in Microsoft Edge. This setting also disables the user-defined setting, "Show search and site suggestions as I type". + + >[!Note] + >Disabling this setting turns off the Address bar drop-down functionality. Therefore, because search suggestions are shown in the drop-down, this setting takes precedence over the "Configure search suggestions in Address bar" setting. + +**Options:** +- **Enabled or not configured (default).** Employees can see the Address bar drop-down functionality in Microsoft Edge. +- **Disabled.** Employees won't see the Address bar drop-down functionality in Microsoft Edge. This setting also disables the user-defined setting, "Show search and site suggestions as I type". + + + + + + + + + + + + + + From ce081d57d3bc7ea46268b1af6cb1aa5f647d5d7f Mon Sep 17 00:00:00 2001 From: LizRoss Date: Mon, 6 Mar 2017 12:58:40 -0800 Subject: [PATCH 03/13] Changing formatting --- browsers/edge/available-policies.md | 362 ++++++++++++++++++++++------ 1 file changed, 290 insertions(+), 72 deletions(-) diff --git a/browsers/edge/available-policies.md b/browsers/edge/available-policies.md index 61f8b42505..69525233c6 100644 --- a/browsers/edge/available-policies.md +++ b/browsers/edge/available-policies.md @@ -29,89 +29,307 @@ By using Group Policy and Intune, you can set up a policy setting once, and then ## Group Policy settings Microsoft Edge works with these Group Policy settings (`Computer Configuration\Administrative Templates\Windows Components\Microsoft Edge\`) to help you manage your company's web browser configurations: - - - - - - - - - - - - - - - - - - - -
Policy nameSupported versionsDescriptionOptions
Allow Address bar drop-down list suggestionsWindows 10, Windows Insider ProgramThis policy setting lets you decide whether the Address bar drop-down functionality is available in Microsoft Edge. We recommend disabling this setting if you want to minimize network connections from Microsoft Edge to Microsoft services.

Note
Disabling this setting turns off the Address bar drop-down functionality. Therefore, because search suggestions are shown in the drop-down, this setting takes precedence over the "Configure search suggestions in Address bar" setting.

If you enable or don't configure this setting, employees can see the Address bar drop-down functionality in Microsoft Edge.

If you disable this setting, employees won't see the Address bar drop-down functionality in Microsoft Edge. This setting also disables the user-defined setting, "Show search and site suggestions as I type".

Enabled or not configured (default): Employees can see the Address bar drop-down functionality in Microsoft Edge.

Disabled: Employees won't see the Address bar drop-down functionality in Microsoft Edge. This setting also disables the user-defined setting, "Show search and site suggestions as I type".

Allow Adobe FlashWindows 10 or laterThis setting lets you decide whether employees can run Adobe Flash in Microsoft Edge.

If you enable or don't configure this setting, employees can use Adobe Flash.

If you disable this setting, employees can't use Adobe Flash.

Enabled or not configured (default): Employees use Adobe Flash in Microsoft Edge.

Disabled: Employees can’t use Adobe Flash.

- ### Allow Address bar drop-down list suggestions -**Supported versions:** Windows 10, Windows Insider Program +- **Supported versions:** Windows 10, Windows Insider Program -**Description:** This policy setting lets you decide whether the Address bar drop-down functionality is available in Microsoft Edge. We recommend disabling this setting if you want to minimize network connections from Microsoft Edge to Microsoft services. +- **Description:** This policy setting lets you decide whether the Address bar drop-down functionality is available in Microsoft Edge. We recommend disabling this setting if you want to minimize network connections from Microsoft Edge to Microsoft services. -- If you enable or don't configure this setting, employees can see the Address bar drop-down functionality in Microsoft Edge. + - If you enable or don't configure this setting (default), employees can see the Address bar drop-down functionality in Microsoft Edge. -- If you disable this setting, employees won't see the Address bar drop-down functionality in Microsoft Edge. This setting also disables the user-defined setting, "Show search and site suggestions as I type". + - If you disable this setting, employees won't see the Address bar drop-down functionality in Microsoft Edge. This setting also disables the user-defined setting, "Show search and site suggestions as I type". + + >[!Note] + >Disabling this setting turns off the Address bar drop-down functionality. Therefore, because search suggestions are shown in the drop-down, this setting takes precedence over the "Configure search suggestions in Address bar" setting. + +### Allow Adobe Flash +- **Supported versions:** Windows 10 or later + +- **Description:** This setting lets you decide whether employees can run Adobe Flash in Microsoft Edge. + + - If you enable or don't configure this setting (default), employees can use Adobe Flash. + + - If you disable this setting, employees can't use Adobe Flash. + +### Allow clearing browsing data on exit +- **Supported versions:** Windows 10, Windows Insider Program + +- **Description:** This policy setting allows the automatic clearing of browsing data when Microsoft Edge closes. + + - If you enable this policy setting, clearing browsing history on exit is turned on. + + - If you disable or don't configure this policy setting (default), it can be turned on and configured by the employee in the Clear browsing data options area, under Settings. + +### Allow Developer Tools +- **Supported versions:** Windows 10, Version 1511 or later + +- **Description:** This policy setting lets you decide whether F12 Developer Tools are available on Microsoft Edge. + - If you enable or don’t configure this setting (default), the F12 Developer Tools are available in Microsoft Edge. + + - If you disable this setting, the F12 Developer Tools aren’t available in Microsoft Edge. + +### Allow Extensions +- **Supported versions:** Windows 10, Version 1607 or later + +- **Description:** This policy setting lets you decide whether employees can use Edge Extensions. + + - If you enable or don’t configure this setting, employees can use Edge Extensions. + + - If you disable this setting, employees can’t use Edge Extensions. + +### Allow InPrivate browsing +- **Supported versions:** Windows 10, Version 1511 or later + +- **Description:** This policy setting lets you decide whether employees can browse using InPrivate website browsing. + + - If you enable or don’t configure this setting (default), employees can use InPrivate website browsing. + + - If you disable this setting, employees can’t use InPrivate website browsing. + +### Allow Microsoft Compatibility List +- **Supported versions:** Windows 10, Version 1607 or later + +- **Description:** This policy setting lets you decide whether to use the Microsoft Compatibility List (a Microsoft-provided list that helps sites with known compatibility issues to display properly) in Microsoft Edge. By default, the Microsoft Compatibility List is enabled and can be viewed by visiting about:compat. + + - If you enable or don’t configure this setting (default), Microsoft Edge periodically downloads the latest version of the list from Microsoft, applying the updates during browser navigation. Visiting any site on the Microsoft Compatibility List prompts the employee to use Internet Explorer 11, where the site is automatically rendered as though it’s in whatever version of IE is necessary for it to appear properly. + + - If you disable this setting, the Microsoft Compatibility List isn’t used during browser navigation. + +### Allow search engine customization +- **Supported versions:** Windows 10, Windows Insider Program + +- **Description:** This policy setting lets you decide whether users can change their search engine. + + >[!Important] + >This setting can only be used with domain-joined or MDM-enrolled devices. For more info, see the Microsoft browser extension policy (aka.ms/browserpolicy). + + - If you enable or don't configure this policy (default), users can add new search engines and change the default used in the Address bar from within Microsoft Edge Settings. + + - If you disable this setting, users can't add search engines or change the default used in the address bar. + +### Allow web content on New Tab page +- **Supported versions:** Windows 10 or later + +- **Description:** This policy setting lets you configure what appears when Microsoft Edge opens a new tab. By default, Microsoft Edge opens the New Tab page. If you use this setting, employees can’t change it. + + - If you enable this setting, Microsoft Edge opens a new tab with the New Tab page. + + - If you disable this setting, Microsoft Edge opens a new tab with a blank page. + + - If you don’t configure this setting (default), employees can choose how new tabs appears. + +### Configure additional search engines +- **Supported versions:** Windows 10, Windows Insider Program + +- **Description:** This policy setting lets you add up to 5 additional search engines, which can't be removed by your employees, but can be made a personal default engine. This setting doesn't set the default search engine. For that, you must use the "Set default search engine" setting. + + >[!Important] + >This setting can only be used with domain-joined or MDM-enrolled devices. For more info, see the Microsoft browser extension policy (aka.ms/browserpolicy). + + - If you enable this setting, you can add up to 5 additional search engines. For each additional engine, you must also add a link to your OpenSearch XML file, including at least the short name and https: URL of the search engine, using this format: + + `https://www.contoso.com/opensearch.xml` + + For more info about creating the OpenSearch XML file, see the [Understanding OpenSearch Standards](https://msdn.microsoft.com/en-us/library/dd163546.aspx) topic. + + - If you disable this setting (default), any added search engines are removed from your employee's devices. + + - If you don't configure this setting, the search engine list is set to what is specified in App settings. + +### Configure Autofill +- **Supported versions:** Windows 10 or later + +- **Description:** This policy setting lets you decide whether employees can use Autofill to automatically fill in form fields while using Microsoft Edge. By default, employees can choose whether to use Autofill. + + - If you enable this setting, employees can use Autofill to automatically fill in forms while using Microsoft Edge. + + - If you disable this setting, employees can’t use Autofill to automatically fill in forms while using Microsoft Edge. + + - If you don’t configure this setting (default), employees can choose whether to use Autofill to automatically fill in forms while using Microsoft Edge. + +### Configure cookies +- **Supported versions:** Windows 10 or later + +- **Description:** This setting lets you configure how to work with cookies. + + - If you enable this setting, you must also decide whether to: + - **Allow all cookies (default):** Allows all cookies from all websites. + + - **Block all cookies:** Blocks all cookies from all websites. + + - **Block only 3rd-party cookies:** Blocks only cookies from 3rd-party websites. + + - If you disable or don't configure this setting, all cookies are allowed from all sites. + +### Configure Do Not Track +- **Supported versions:** Windows 10 or later + +- **Description:** This policy setting lets you decide whether employees can send Do Not Track requests to websites that ask for tracking info. By default, Do Not Track requests aren’t sent, but employees can choose to turn on and send requests. + + - If you enable this setting, Do Not Track requests are always sent to websites asking for tracking info. + + - If you disable this setting, Do Not Track requests are never sent to websites asking for tracking info. + + - If you don’t configure this setting (default), employees can choose whether to send Do Not Track requests to websites asking for tracking info. + +### Configure Favorites +- **Supported versions:** Windows 10, Version 1511 or later + +- **Description:** This policy setting lets you configure the default list of Favorites that appear for your employees. Employees can change their Favorites by adding or removing items at any time. + + - If you enable this setting, you can configure what default Favorites appear for your employees. If this setting is enabled, you must also provide a list of Favorites in the Options section. This list is imported after your policy is deployed. + + - If you disable or don’t configure this setting, employees will see the Favorites that they set in the Favorites hub. + +### Configure Password Manager +- **Supported versions:** Windows 10 or later + +- **Description:** This policy setting lets you decide whether employees can save their passwords locally, using Password Manager. By default, Password Manager is turned on. + + - If you enable this setting (default), employees can use Password Manager to save their passwords locally. + + - If you disable this setting, employees can’t use Password Manager to save their passwords locally. + + - If you don’t configure this setting, employees can choose whether to use Password Manager to save their passwords locally. + +### Configure Pop-up Blocker +- **Supported versions:** Windows 10 or later + +- **Description:** This policy setting lets you decide whether to turn on Pop-up Blocker. By default, Pop-up Blocker is turned on. + + - If you enable this setting (default), Pop-up Blocker is turned on, stopping pop-up windows from appearing. + + - If you disable this setting, Pop-up Blocker is turned off, letting pop-ups windows appear. + + - If you don’t configure this setting, employees can choose whether to use Pop-up Blocker. + +### Configure search suggestions in Address bar +- **Supported versions:** Windows 10 or later + +- **Description:** This policy setting lets you decide whether search suggestions appear in the Address bar of Microsoft Edge. By default, employees can choose whether search suggestions appear in the Address bar of Microsoft Edge. + + - If you enable this setting, employees can see search suggestions in the Address bar of Microsoft Edge. + + - If you disable this setting, employees can't see search suggestions in the Address bar of Microsoft Edge. + + - If you don’t configure this setting (default), employees can choose whether search suggestions appear in the Address bar of Microsoft Edge. + +### Configure Start pages +- **Supported versions:** Windows 10, Version 1511 or later + +- **Description:** This policy setting lets you configure one or more Start pages, for domain-joined devices. Your employees won't be able to change this after you set it. + + - If you enable this setting, you can configure one or more Start pages. If this setting is enabled, you must also include URLs to the pages, separating multiple pages by using angle brackets in this format: + + `` + + - If you disable or don’t configure this setting (default), your default Start page is the webpage specified in App settings. + +### Configure the Adobe Flash Click-to-Run setting +- **Supported versions:** Windows 10, Windows Insider Program + +- **Description:** This policy setting lets you decide whether employees must take an action, such as clicking the content or a Click-to-Run button, before seeing content in Adobe Flash. + + >[!Important] + >Sites are put on the auto-allowed list based on how frequently employees load and run the content. + + - If you enable or don’t configure the Adobe Flash Click-to-Run setting, an employee must click the content, click a Click-to-Run button, or have the site appear on an auto-allow list before Microsoft Edge loads and runs Adobe Flash content. + + - If you disable this setting, Adobe Flash content is automatically loaded and run by Microsoft Edge. + +### Configure the Enterprise Mode Site List +- **Supported versions:** Windows 10 or later + +- **Description:** This policy setting lets you configure whether to use Enterprise Mode and the Enterprise Mode Site List to address common compatibility problems with legacy apps. + + - If you enable this setting, Microsoft Edge looks for the Enterprise Mode Site List XML file, which includes the sites and domains that need to be viewed using Internet Explorer 11 and Enterprise Mode. If you use this option, you must also add the location to your site list in the **{URI}** box. When configured, any site on the list will always open in Internet Explorer 11. + + - If you disable or don’t configure this setting (default), Microsoft Edge won’t use the Enterprise Mode Site List XML file. In this case, employees might experience compatibility problems while using legacy apps. >[!Note] - >Disabling this setting turns off the Address bar drop-down functionality. Therefore, because search suggestions are shown in the drop-down, this setting takes precedence over the "Configure search suggestions in Address bar" setting. + >If there’s an .xml file in the cache container, IE waits 65 seconds and then checks the local cache for a newer version of the file from the server, based on standard caching rules. If the server file has a different version number than the version in the cache container, the server file is used and stored in the cache container.

+ >If you’re already using a site list, enterprise mode continues to work during the 65 second wait; it just uses your existing site list instead of your new one. -**Options:** -- **Enabled or not configured (default).** Employees can see the Address bar drop-down functionality in Microsoft Edge. -- **Disabled.** Employees won't see the Address bar drop-down functionality in Microsoft Edge. This setting also disables the user-defined setting, "Show search and site suggestions as I type". +### Configure Windows Defender SmartScreen +- **Supported versions:** Windows 10 or later + +- **Description:** This policy setting lets you configure whether to turn on Windows Defender SmartScreen. Windows Defender SmartScreen provides warning messages to help protect your employees from potential phishing scams and malicious software. By default, Windows Defender SmartScreen is turned on. + + - If you enable this setting, Windows Defender SmartScreen is turned on and employees can’t turn it off. + + - If you disable this setting, Windows Defender SmartScreen is turned off and employees can’t turn it on. + + - If you don’t configure this setting (default), employees can choose whether to use Windows Defender SmartScreen. + +### Disable lockdown of Start pages +- **Supported versions:** Windows 10, Windows Insider Program + +- **Description:** This policy setting lets you disable the lock down of Start pages, letting employees modify the Start pages when the "Configure Start pages" setting is in effect. + + >[!Important] + >This setting only applies when you're using the “Configure Start pages" setting and can only be used with domain-joined or MDM-enrolled devices. For more info, see the Microsoft browser extension policy (aka.ms/browserpolicy). + + - If you enable this setting, you can't lock down any Start pages that are configured using the "Configure Start pages" setting, which means that employees can modify them. + + - If you disable or don't configure this setting (default), employees can't change any Start pages configured using the "Configure Start pages" setting, thereby locking down the Start pages. + +### Keep favorites in sync between Internet Explorer and Microsoft Edge +- **Supported versions:** Windows 10, Windows Insider Program + +- **Description:** This setting lets you decide whether people can sync their favorites between Internet Explorer and Microsoft Edge. + + - If you enable this setting, employees can sync their favorites between Internet Explorer and Microsoft Edge. + + - If you disable or don't configure this setting (default), employees can’t sync their favorites between Internet Explorer and Microsoft Edge. + +### Prevent access to the about:flags page +- **Supported versions:** Windows 10, Version 1607 or later + +- **Description:** This policy setting lets you decide whether employees can access the about:flags page, which is used to change developer settings and to enable experimental features. + + - If you enable this policy setting, employees can’t access the about:flags page. + + - If you disable or don’t configure this setting (default), employees can access the about:flags page. + +### Prevent bypassing Windows Defender SmartScreen prompts for files +- **Supported versions:** Windows 10, Version 1511 or later + +- **Description:** This policy setting lets you decide whether employees can override the Windows Defender SmartScreen warnings about downloading unverified files. + + - If you enable this setting, employees can’t ignore Windows Defender SmartScreen warnings and they’re blocked from downloading the unverified files. + + - If you disable or don’t configure this setting (default), employees can ignore Windows Defender SmartScreen warnings and continue the download process. + +### Prevent bypassing Windows Defender SmartScreen prompts for sites +- **Supported versions:** Windows 10, Version 1511 or later + +- **Description:** This policy setting lets you decide whether employees can override the Windows Defender SmartScreen warnings about potentially malicious websites. + + - If you enable this setting, employees can’t ignore Windows Defender SmartScreen warnings and they’re blocked from continuing to the site. + + - If you disable or don’t configure this setting (default), employees can ignore Windows Defender SmartScreen warnings and continue to the site. + +### Prevent Microsoft Edge from gathering Live Tile information when pinning a site to Start +- **Supported versions:** Windows 10, Windows Insider Program + +- **Description:** This policy lets you decide whether Microsoft Edge can gather Live Tile metadata from the ieonline.microsoft.com service to provide a better experience while pinning a Live Tile to the Start menu. + + - If you enable this setting, Microsoft Edge won't gather the Live Tile metadata, providing a minimal experience when a user pins a Live Tile to the Start menu. + + - If you disable or don't configure this setting (default), Microsoft Edge gathers the Live Tile metadata, providing a fuller and more complete experience when a user pins a Live Tile to the Start menu. + +### Prevent the First Run webpage from opening on Microsoft Edge +- **Supported versions:** Windows 10, Windows Insider Program + +- **Description:** This policy setting lets you decide whether employees see Microsoft's First Run webpage when opening Microsoft Edge for the first time. + + - If you enable this setting, employees won't see the First Run page when opening Microsoft Edge for the first time. + + - If you disable or don't configure this setting (default), employees will see the First Run page when opening Microsoft Edge for the first time. - - - - - - - - - - - - - -|Policy name|Supported versions|Description|Options| -|-------------|------------|-------------|--------| -|Allow Address bar drop-down list suggestions|Windows 10, Windows Insider Program|This policy setting lets you decide whether the Address bar drop-down functionality is available in Microsoft Edge. We recommend disabling this setting if you want to minimize network connections from Microsoft Edge to Microsoft services.

**Note**
Disabling this setting turns off the Address bar drop-down functionality. Therefore, because search suggestions are shown in the drop-down, this setting takes precedence over the "Configure search suggestions in Address bar" setting.

If you enable or don't configure this setting, employees can see the Address bar drop-down functionality in Microsoft Edge.

If you disable this setting, employees won't see the Address bar drop-down functionality in Microsoft Edge. This setting also disables the user-defined setting, "Show search and site suggestions as I type".|**Enabled or not configured (default):** Employees can see the Address bar drop-down functionality in Microsoft Edge.

**Disabled:** Employees won't see the Address bar drop-down functionality in Microsoft Edge. This setting also disables the user-defined setting, "Show search and site suggestions as I type".| -|Allow Adobe Flash|Windows 10 or later|This setting lets you decide whether employees can run Adobe Flash in Microsoft Edge.

If you enable or don't configure this setting, employees can use Adobe Flash.

If you disable this setting, employees can't use Adobe Flash.|**Enabled or not configured (default):** Employees use Adobe Flash in Microsoft Edge.

**Disabled:** Employees can’t use Adobe Flash.| -|Allow clearing browsing data on exit|Windows 10, Windows Insider Program|This policy setting allows the automatic clearing of browsing data when Microsoft Edge closes.

If you enable this policy setting, clearing browsing history on exit is turned on.

If you disable or don't configure this policy setting, it can be turned on and configured by the employee in the Clear browsing data options area, under Settings.|**Enabled:** Turns on the automatic clearing of browsing data when Microsoft Edge closes.

**Disabled or not configured (default):** Employees can turn on and configure whether to automatically clear browsing data when Microsoft Edge closes in the Clear browsing data options area under Settings.| -|Allow Developer Tools|Windows 10, Version 1511 or later|This policy setting lets you decide whether F12 Developer Tools are available on Microsoft Edge.

If you enable or don’t configure this setting, the F12 Developer Tools are available in Microsoft Edge.

If you disable this setting, the F12 Developer Tools aren’t available in Microsoft Edge.|**Enabled or not configured (default):** Shows the F12 Developer Tools on Microsoft Edge.

**Disabled:** Hides the F12 Developer Tools on Microsoft Edge.| -|Allow Extensions|Windows 10, Version 1607 or later|This policy setting lets you decide whether employees can use Edge Extensions.

If you enable or don’t configure this setting, employees can use Edge Extensions.

If you disable this setting, employees can’t use Edge Extensions.|**Enabled or not configured:** Lets employees use Edge Extensions.

**Disabled:** Stops employees from using Edge Extensions.| -|Allow InPrivate browsing|Windows 10, Version 1511 or later|This policy setting lets you decide whether employees can browse using InPrivate website browsing.

If you enable or don’t configure this setting, employees can use InPrivate website browsing.

If you disable this setting, employees can’t use InPrivate website browsing.|**Enabled or not configured (default):** Lets employees use InPrivate website browsing.

**Disabled:** Stops employees from using InPrivate website browsing.| -|Allow Microsoft Compatibility List|Windows 10, Version 1607 or later|This policy setting lets you decide whether to use the Microsoft Compatibility List (a Microsoft-provided list that helps sites with known compatibility issues to display properly) in Microsoft Edge. By default, the Microsoft Compatibility List is enabled and can be viewed by visiting about:compat.

If you enable or don’t configure this setting, Microsoft Edge periodically downloads the latest version of the list from Microsoft, applying the updates during browser navigation. Visiting any site on the Microsoft Compatibility List prompts the employee to use Internet Explorer 11, where the site is automatically rendered as though it’s in whatever version of IE is necessary for it to appear properly.

If you disable this setting, the Microsoft Compatibility List isn’t used during browser navigation.|**Enabled or not configured (default):** Microsoft Edge periodically downloads the latest version of the list from Microsoft, applying the updates during browser navigation. Visiting any site on the Microsoft Compatibility List prompts the employee to use Internet Explorer 11, where the site is automatically rendered as though it’s in whatever version of IE is necessary for it to appear properly.

**Disabled:** Microsoft Edge doesn’t use the Microsoft Compatibility List during browser navigation.| -|Allow search engine customization|Windows 10, Windows Insider Program|This policy setting lets you decide whether users can change their search engine.

**Important**
This setting can only be used with domain-joined or MDM-enrolled devices. For more info, see the Microsoft browser extension policy (aka.ms/browserpolicy).

If you enable or don't configure this policy, users can add new search engines and change the default used in the Address bar from within Microsoft Edge Settings.

If you disable this setting, users can't add search engines or change the default used in the address bar.|**Enabled or not configured (default):** Employees can add new search engines and change the default used in the Address bar from within Microsoft Edge Settings.

**Disabled:** Employees can't add search engines or change the default used in the Address bar.| -|Allow web content on New Tab page|Windows 10 or later|This policy setting lets you configure what appears when Microsoft Edge opens a new tab. By default, Microsoft Edge opens the New Tab page. If you use this setting, employees can’t change it.

If you enable this setting, Microsoft Edge opens a new tab with the New Tab page.

If you disable this setting, Microsoft Edge opens a new tab with a blank page.

If you don’t configure this setting, employees can choose how new tabs appears.|**Not configured (default):** Employees see web content on New Tab page, but can change it.

**Enabled:** Employees see web content on New Tab page.

**Disabled:** Employees always see an empty new tab.| -|Configure additional search engines|Windows 10, Windows Insider Program|This policy setting lets you add up to 5 additional search engines, which can't be removed by your employees, but can be made a personal default engine. This setting doesn't set the default search engine. For that, you must use the "Set default search engine" setting.

**Important**
This setting can only be used with domain-joined or MDM-enrolled devices. For more info, see the Microsoft browser extension policy (aka.ms/browserpolicy).

If you enable this setting, you can add up to 5 additional search engines. For each additional engine, you must also add a link to your OpenSearch XML file, including at least the short name and https: URL of the search engine. For more info about creating the OpenSearch XML file, see the [Understanding OpenSearch Standards](https://msdn.microsoft.com/en-us/library/dd163546.aspx) topic. Use this format to specify the link(s) you wish to add:
`https://www.contoso.com/opensearch.xml`

If you disable this setting, any added search engines are removed from your employee's devices.

If you don't configure this setting, the search engine list is set to what is specified in App settings.|**Enabled:** Add up to 5 additional search engines. For each additional engine, you must also add a link to your OpenSearch XML file, including at least the short name and https: URL of the search engine.

**Disabled (default):** Any additional search engines are removed from your employee's devices.

**Not configured:** Search engine list is set to what is specified in App settings.| -|Configure Autofill|Windows 10 or later|This policy setting lets you decide whether employees can use Autofill to automatically fill in form fields while using Microsoft Edge. By default, employees can choose whether to use Autofill.

If you enable this setting, employees can use Autofill to automatically fill in forms while using Microsoft Edge.

If you disable this setting, employees can’t use Autofill to automatically fill in forms while using Microsoft Edge.

If you don’t configure this setting, employees can choose whether to use Autofill to automatically fill in forms while using Microsoft Edge.|**Not configured (default):** Employees can choose to turn Autofill on or off.

**Enabled:** Employees can use Autofill to complete form fields.

**Disabled:** Employees can’t use Autofill to complete form fields.| -|Configure cookies|Windows 10 or later|This setting lets you configure how to work with cookies.

If you enable this setting, you must also decide whether to:

If you disable or don't configure this setting, all cookies are allowed from all sites.|**Enabled:** Lets you decide how your company treats cookies.
If you use this option, you must also choose whether to:

**Disabled or not configured:** All cookies are allowed from all sites.| -|Configure Do Not Track|Windows 10 or later|This policy setting lets you decide whether employees can send Do Not Track requests to websites that ask for tracking info. By default, Do Not Track requests aren’t sent, but employees can choose to turn on and send requests.

If you enable this setting, Do Not Track requests are always sent to websites asking for tracking info.

If you disable this setting, Do Not Track requests are never sent to websites asking for tracking info.

If you don’t configure this setting, employees can choose whether to send Do Not Track requests to websites asking for tracking info.|**Not configured (default):** Employees can choose to send Do Not Track headers on or off.

**Enabled:** Employees can send Do Not Track requests to websites requesting tracking info.

**Disabled:** Employees can’t send Do Not Track requests to websites requesting tracking info.| -|Configure Favorites|Windows 10, Version 1511 or later|This policy setting lets you configure the default list of Favorites that appear for your employees. Employees can change their Favorites by adding or removing items at any time.

If you enable this setting, you can configure what default Favorites appear for your employees. If this setting is enabled, you must also provide a list of Favorites in the Options section. This list is imported after your policy is deployed.

If you disable or don’t configure this setting, employees will see the Favorites that they set in the Favorites hub.|**Enabled:** Configure the default list of Favorites for your employees. If you use this option, you must also add the URLs to the sites.

**Disabled or not configured:** Uses the Favorites list and URLs specified in the Favorites hub.| -|Configure Password Manager|Windows 10 or later|This policy setting lets you decide whether employees can save their passwords locally, using Password Manager. By default, Password Manager is turned on.

If you enable this setting, employees can use Password Manager to save their passwords locally.

If you disable this setting, employees can’t use Password Manager to save their passwords locally.

If you don’t configure this setting, employees can choose whether to use Password Manager to save their passwords locally.|**Not configured:** Employees can choose whether to use Password Manager.

**Enabled (default):** Employees can use Password Manager to save passwords locally.

**Disabled:** Employees can't use Password Manager to save passwords locally.| -|Configure Pop-up Blocker|Windows 10 or later|This policy setting lets you decide whether to turn on Pop-up Blocker. By default, Pop-up Blocker is turned on.

If you enable this setting, Pop-up Blocker is turned on, stopping pop-up windows from appearing.

If you disable this setting, Pop-up Blocker is turned off, letting pop-ups windows appear.

If you don’t configure this setting, employees can choose whether to use Pop-up Blocker.|**Enabled or not configured (default):** Turns on Pop-up Blocker, stopping pop-up windows.

**Disabled:** Turns off Pop-up Blocker, allowing pop-up windows.| -|Configure search suggestions in Address bar|Windows 10 or later|This policy setting lets you decide whether search suggestions appear in the Address bar of Microsoft Edge. By default, employees can choose whether search suggestions appear in the Address bar of Microsoft Edge.

If you enable this setting, employees can see search suggestions in the Address bar of Microsoft Edge.

If you disable this setting, employees can't see search suggestions in the Address bar of Microsoft Edge.

If you don’t configure this setting, employees can choose whether search suggestions appear in the Address bar of Microsoft Edge.|**Not configured (default):** Employees can choose whether search suggestions appear in the Address bar of Microsoft Edge.

**Enabled:** Employees can see search suggestions in the Address bar of Microsoft Edge.

**Disabled:** Employees can’t see search suggestions in the Address bar of Microsoft Edge.| -|Configure Start pages|Windows 10, Version 1511 or later|This policy setting lets you configure one or more Start pages, for domain-joined devices. Your employees won't be able to change this after you set it.

If you enable this setting, you can configure one or more Start pages. If this setting is enabled, you must also include URLs to the pages, separating multiple pages by using angle brackets in this format:
``

If you disable or don’t configure this setting, your default Start page is the webpage specified in App settings.|**Enabled:** Configure your Start pages. If you use this option, you must also include site URLs.

**Disabled or not configured (default):** Uses the Home pages and URLs specified in the App settings.| -|Configure the Adobe Flash Click-to-Run setting|Windows 10, Windows Insider Program|This policy setting lets you decide whether employees must take an action, such as clicking the content or a Click-to-Run button, before seeing content in Adobe Flash.

If you enable or don’t configure the Adobe Flash Click-to-Run setting, an employee must click the content, click a Click-to-Run button, or have the site appear on an auto-allow list before Microsoft Edge loads and runs Adobe Flash content.

**Important**
Sites are put on the auto-allowed list based on how frequently employees load and run the content.

If you disable this setting, Adobe Flash content is automatically loaded and run by Microsoft Edge.|**Enabled or not configured:** An employee must click the content, click a Click-to-Run button, or have the site appear on an auto-allow list before Microsoft Edge loads and runs Adobe Flash content.

**Disabled:** Adobe Flash content is automatically loaded and run by Microsoft Edge.| -|Configure the Enterprise Mode Site List|Windows 10 or later|This policy setting lets you configure whether to use Enterprise Mode and the Enterprise Mode Site List to address common compatibility problems with legacy apps.

If you enable this setting, Microsoft Edge looks for the Enterprise Mode Site List XML file. This file includes the sites and domains that need to be viewed using Internet Explorer 11 and Enterprise Mode.

If you disable or don’t configure this setting, Microsoft Edge won’t use the Enterprise Mode Site List XML file. In this case, employees might experience compatibility problems while using legacy apps.

**Note**
If there’s an .xml file in the cache container, IE waits 65 seconds and then checks the local cache for a newer version of the file from the server, based on standard caching rules. If the server file has a different version number than the version in the cache container, the server file is used and stored in the cache container.

If you’re already using a site list, enterprise mode continues to work during the 65 second wait; it just uses your existing site list instead of your new one.|**Enabled:** Lets you use the Enterprise Mode Site List to address common compatibility problems with legacy apps, if it’s configured.

If you use this option, you must also add the location to your site list in the `{URI}` box. When configured, any site on the list will always open in Internet Explorer 11.

**Disabled or not configured (default):** You won't be able to use the Enterprise Mode Site List.| -|Configure Windows Defender SmartScreen|Windows 10 or later|This policy setting lets you configure whether to turn on Windows Defender SmartScreen. Windows Defender SmartScreen provides warning messages to help protect your employees from potential phishing scams and malicious software. By default, Windows Defender SmartScreen is turned on.

If you enable this setting, Windows Defender SmartScreen is turned on and employees can’t turn it off.

If you disable this setting, Windows Defender SmartScreen is turned off and employees can’t turn it on.

If you don’t configure this setting, employees can choose whether to use Windows Defender SmartScreen.|**Not configured (default):** Employees can choose whether to use Windows Defender SmartScreen.

**Enabled:** Turns on SmartScreen Filter, providing warning messages to your employees about potential phishing scams and malicious software.

**Disabled:** Turns off Windows Defender SmartScreen.| -|Disable lockdown of Start pages|Windows 10, Windows Insider Program|This policy setting lets you disable the lock down of Start pages, letting employees modify the Start pages when the "Configure Start pages" setting is in effect.

**Note**
This setting only applies when you're using the “Configure Start pages" setting.

**Important**
This setting can only be used with domain-joined or MDM-enrolled devices. For more info, see the Microsoft browser extension policy (aka.ms/browserpolicy).

If you enable this setting, you can't lock down any Start pages that are configured using the "Configure Start pages" setting, which means that employees can modify them.

If you disable or don't configure this setting, employees can't change any Start pages configured using the "Configure Start pages" setting, thereby locking down the Start pages.|**Enabled:** You’re unable to lock down any Start pages that are configured using the "Configure Start pages" setting, which means that your employees can modify them.

**Disabled or not configured (default):** Employees can't change any Start pages configured using the "Configure Start pages" setting.| -|Keep favorites in sync between Internet Explorer and Microsoft Edge|Windows 10, Windows Insider Program|This setting lets you decide whether people can sync their favorites between Internet Explorer and Microsoft Edge.

If you enable this setting, employees can sync their favorites between Internet Explorer and Microsoft Edge.

If you disable or don't configure this setting, employees can’t sync their favorites between Internet Explorer and Microsoft Edge.|**Enabled:** Employees can sync their Favorites between Internet Explorer and Microsoft Edge.

**Disabled or not configured (default):** Employees can’t sync their Favorites between Internet Explorer and Microsoft Edge.| -|Prevent access to the about:flags page|Windows 10, Version 1607 or later|This policy setting lets you decide whether employees can access the about:flags page, which is used to change developer settings and to enable experimental features.

If you enable this policy setting, employees can’t access the about:flags page.

If you disable or don’t configure this setting, employees can access the about:flags page.|**Enabled:** Stops employees from using the about:flags page.

**Disabled or not configured (default):** Lets employees use the about:flags page.| -|Prevent bypassing Windows Defender SmartScreen prompts for files|Windows 10, Version 1511 or later |This policy setting lets you decide whether employees can override the Windows Defender SmartScreen warnings about downloading unverified files.

If you enable this setting, employees can’t ignore Windows Defender SmartScreen warnings and they’re blocked from downloading the unverified files.

If you disable or don’t configure this setting, employees can ignore Windows Defender SmartScreen warnings and continue the download process.|**Enabled:** Stops employees from ignoring the Windows Defender SmartScreen warnings about unverified files.

**Disabled or not configured (default):** Lets employees ignore the Windows Defender SmartScreen warnings about unverified files and lets them continue the download process.| -|Prevent bypassing Windows Defender SmartScreen prompts for sites|Windows 10, Version 1511 or later|This policy setting lets you decide whether employees can override the Windows Defender SmartScreen warnings about potentially malicious websites.

If you enable this setting, employees can’t ignore Windows Defender SmartScreen warnings and they’re blocked from continuing to the site.

If you disable or don’t configure this setting, employees can ignore Windows Defender SmartScreen warnings and continue to the site.|**Enabled:** Stops employees from ignoring the Windows Defender SmartScreen warnings about potentially malicious sites.

**Disabled or not configured (default):** Lets employees ignore the Windows Defender SmartScreen warnings about potentially malicious sites and continue to the site.| -|Prevent Microsoft Edge from gathering Live Tile information when pinning a site to Start|Windows 10, Windows Insider Program|This policy lets you decide whether Microsoft Edge can gather Live Tile metadata from the ieonline.microsoft.com service to provide a better experience while pinning a Live Tile to the Start menu.

If you enable this setting, Microsoft Edge won't gather the Live Tile metadata, providing a minimal experience when a user pins a Live Tile to the Start menu.

If you disable or don't configure this setting, Microsoft Edge gathers the Live Tile metadata, providing a fuller and more complete experience when a user pins a Live Tile to the Start menu.|**Enabled:** Microsoft Edge won't gather the Live Tile metadata, providing a minimal experience when a user pins a Live Tile to the Start menu.

**Disabled or not configured (default):** Microsoft Edge gathers the Live Tile metadata, providing a fuller and more complete experience when a user pins a Live Tile to the Start menu.| -|Prevent the First Run webpage from opening on Microsoft Edge|Windows 10, Windows Insider Program|This policy setting lets you decide whether employees see Microsoft's First Run webpage when opening Microsoft Edge for the first time.

If you enable this setting, employees won't see the First Run page when opening Microsoft Edge for the first time.

If you disable or don't configure this setting, employees will see the First Run page when opening Microsoft Edge for the first time.|**Enabled:** Employees won't see the First Run page when opening Microsoft Edge for the first time.

**Disabled or not configured (default):** Employees will see the First Run page when opening Microsoft Edge for the first time.| +|||| |Prevent using Localhost IP address for WebRTC|Windows 10, Version 1511 or later|This policy setting lets you decide whether an employee’s Localhost IP address shows while making calls using the WebRTC protocol. By default, this setting is turned off.

If you enable this setting, Localhost IP addresses are hidden while making calls using the WebRTC protocol.

If you disable or don’t configure this setting, Localhost IP addresses are shown while making calls using the WebRTC protocol.|**Enabled:** Hides the Localhost IP address during calls using the WebRTC protocol.

**Disabled or not configured (default):** Shows the Localhost IP address during phone calls using the WebRTC protocol.| |Send all intranet sites to Internet Explorer 11|Windows 10 or later|This policy setting lets you decide whether your intranet sites should all open using Internet Explorer 11. This setting should only be used if there are known compatibility problems with Microsoft Edge.

If you enable this setting, all intranet sites are automatically opened using Internet Explorer 11.

If you disable or don’t configure this setting, all websites, including intranet sites, are automatically opened using Microsoft Edge.|**Enabled:** Automatically opens all intranet sites using Internet Explorer 11.

**Disabled or not configured (default):** Automatically opens all websites, including intranet sites, using Microsoft Edge.| |Set default search engine|Windows 10, Windows Insider Program|This policy setting lets you configure the default search engine for your employees. Employees can change the default search engine at any time unless you disable the "Allow search engine customization" setting, which restricts any changes.

**Important**
This setting can only be used with domain-joined or MDM-enrolled devices. For more info, see the Microsoft browser extension policy (aka.ms/browserpolicy).

If you enable this setting, you can choose a default search engine for your employees. If this setting is enabled, you must also add the default engine to the “Set default search engine” setting, by adding a link to your OpenSearch XML file, including at least the short name and https: URL of the search engine. For more info about creating the OpenSearch XML file, see the [Understanding OpenSearch Standards](https://msdn.microsoft.com/en-us/library/dd163546.aspx) topic. Use this format to specify the link you wish to add:
`https://fabrikam.com/opensearch.xml`

**Note**
If you'd like your employees to use the default Microsoft Edge settings for each market, you can set the string to EDGEDEFAULT. If you'd like your employees to use Microsoft Bing as the default search engine, you can set the string to EDGEBING.

If you disable this setting, the policy-set default search engine is removed. If this is also the current in-use default, the engine changes to the Microsoft Edge specified engine for the market.

If you don't configure this setting, the default search engine is set to the one specified in App settings.|**Enabled:** You can choose a default search engine for your employees.

**Disabled:** The policy-set default search engine is removed. If this is also the current in-use default, the engine changes to the Microsoft Edge specified engine for the market.

**Not configured (default):** The default search engine is set to the one specified in App settings.| From 4f0cb893bb8a1eed1e5089a88138c5d7cc189d3a Mon Sep 17 00:00:00 2001 From: LizRoss Date: Mon, 6 Mar 2017 13:12:55 -0800 Subject: [PATCH 04/13] Updating formatting --- browsers/edge/available-policies.md | 45 +++++++++++++++++++++++++---- 1 file changed, 40 insertions(+), 5 deletions(-) diff --git a/browsers/edge/available-policies.md b/browsers/edge/available-policies.md index 69525233c6..815a44a832 100644 --- a/browsers/edge/available-policies.md +++ b/browsers/edge/available-policies.md @@ -326,14 +326,49 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you disable or don't configure this setting (default), employees will see the First Run page when opening Microsoft Edge for the first time. +### Prevent using Localhost IP address for WebRTC +- **Supported versions:** Windows 10, Version 1511 or later +- **Description:** This policy setting lets you decide whether an employee’s Localhost IP address shows while making calls using the WebRTC protocol. By default, this setting is turned off. + - If you enable this setting, Localhost IP addresses are hidden while making calls using the WebRTC protocol. + + - If you disable or don’t configure this setting (default), Localhost IP addresses are shown while making calls using the WebRTC protocol. -|||| -|Prevent using Localhost IP address for WebRTC|Windows 10, Version 1511 or later|This policy setting lets you decide whether an employee’s Localhost IP address shows while making calls using the WebRTC protocol. By default, this setting is turned off.

If you enable this setting, Localhost IP addresses are hidden while making calls using the WebRTC protocol.

If you disable or don’t configure this setting, Localhost IP addresses are shown while making calls using the WebRTC protocol.|**Enabled:** Hides the Localhost IP address during calls using the WebRTC protocol.

**Disabled or not configured (default):** Shows the Localhost IP address during phone calls using the WebRTC protocol.| -|Send all intranet sites to Internet Explorer 11|Windows 10 or later|This policy setting lets you decide whether your intranet sites should all open using Internet Explorer 11. This setting should only be used if there are known compatibility problems with Microsoft Edge.

If you enable this setting, all intranet sites are automatically opened using Internet Explorer 11.

If you disable or don’t configure this setting, all websites, including intranet sites, are automatically opened using Microsoft Edge.|**Enabled:** Automatically opens all intranet sites using Internet Explorer 11.

**Disabled or not configured (default):** Automatically opens all websites, including intranet sites, using Microsoft Edge.| -|Set default search engine|Windows 10, Windows Insider Program|This policy setting lets you configure the default search engine for your employees. Employees can change the default search engine at any time unless you disable the "Allow search engine customization" setting, which restricts any changes.

**Important**
This setting can only be used with domain-joined or MDM-enrolled devices. For more info, see the Microsoft browser extension policy (aka.ms/browserpolicy).

If you enable this setting, you can choose a default search engine for your employees. If this setting is enabled, you must also add the default engine to the “Set default search engine” setting, by adding a link to your OpenSearch XML file, including at least the short name and https: URL of the search engine. For more info about creating the OpenSearch XML file, see the [Understanding OpenSearch Standards](https://msdn.microsoft.com/en-us/library/dd163546.aspx) topic. Use this format to specify the link you wish to add:
`https://fabrikam.com/opensearch.xml`

**Note**
If you'd like your employees to use the default Microsoft Edge settings for each market, you can set the string to EDGEDEFAULT. If you'd like your employees to use Microsoft Bing as the default search engine, you can set the string to EDGEBING.

If you disable this setting, the policy-set default search engine is removed. If this is also the current in-use default, the engine changes to the Microsoft Edge specified engine for the market.

If you don't configure this setting, the default search engine is set to the one specified in App settings.|**Enabled:** You can choose a default search engine for your employees.

**Disabled:** The policy-set default search engine is removed. If this is also the current in-use default, the engine changes to the Microsoft Edge specified engine for the market.

**Not configured (default):** The default search engine is set to the one specified in App settings.| -|Show message when opening sites in Internet Explorer|Windows 10, Version 1607 and later|This policy setting lets you decide whether employees see an additional page in Microsoft Edge, stating that a site has been opened using Internet Explorer 11.

If you enable this setting, employees see an additional page in Microsoft Edge, stating that a site has been opened using Internet Explorer 11.

If you disable or don’t configure this setting, the default app behavior occurs and no additional page appears.|**Enabled:** Shows an additional page in Microsoft Edge, stating that a site has been opened using Internet Explorer 11.

**Disabled or not configured (default):** Doesn’t show an additional page in Microsoft Edge, stating that a site has been opened using Internet Explorer 11.| +### Send all intranet sites to Internet Explorer 11 +- **Supported versions:** Windows 10 or later + +- **Description:** This policy setting lets you decide whether your intranet sites should all open using Internet Explorer 11. This setting should only be used if there are known compatibility problems with Microsoft Edge. + + - If you enable this setting, all intranet sites are automatically opened using Internet Explorer 11. + + - If you disable or don’t configure this setting (default), all websites, including intranet sites, are automatically opened using Microsoft Edge. + +### Set default search engine +- **Supported versions:** Windows 10, Windows Insider Program + +- **Description:** This policy setting lets you configure the default search engine for your employees. Employees can change the default search engine at any time unless you disable the "Allow search engine customization" setting, which restricts any changes. + + >[!Important] + >This setting can only be used with domain-joined or MDM-enrolled devices. For more info, see the Microsoft browser extension policy (aka.ms/browserpolicy).

+ >If you'd like your employees to use the default Microsoft Edge settings for each market, you can set the string to EDGEDEFAULT. If you'd like your employees to use Microsoft Bing as the default search engine, you can set the string to EDGEBING. + + - If you enable this setting, you can choose a default search engine for your employees. To choose the default engine, you must add a link to your OpenSearch XML file, including at least the short name and https: URL of the search engine, using this format: + + `https://fabrikam.com/opensearch.xml` + + - If you disable this setting, the policy-set default search engine is removed. If this is also the current in-use default, the engine changes to the Microsoft Edge specified engine for the market.

If you don't configure this setting, the default search engine is set to the one specified in App settings. + + - If you don't configure this setting (default), the default search engine is set to the one specified in App settings. + +### Show message when opening sites in Internet Explorer +- **Supported versions:** Windows 10, Version 1607 and later + +- **Description:** This policy setting lets you decide whether employees see an additional page in Microsoft Edge, stating that a site has been opened using Internet Explorer 11. + + - If you enable this setting, employees see an additional page in Microsoft Edge, stating that a site has been opened using Internet Explorer 11. + + - If you disable or don’t configure this setting (default), the default app behavior occurs and no additional page appears. ## Using Microsoft Intune to manage your Mobile Data Management (MDM) settings for Microsoft Edge If you manage your policies using Intune, you'll want to use these MDM policy settings. You can see the full list of available policies, on the [Policy CSP]( https://go.microsoft.com/fwlink/p/?LinkId=722885) page. From 8944c9b87fa16aba925c17124f7c43f12e541903 Mon Sep 17 00:00:00 2001 From: LizRoss Date: Mon, 6 Mar 2017 13:14:37 -0800 Subject: [PATCH 05/13] Updating formatting --- browsers/edge/available-policies.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/browsers/edge/available-policies.md b/browsers/edge/available-policies.md index 815a44a832..eab74497e1 100644 --- a/browsers/edge/available-policies.md +++ b/browsers/edge/available-policies.md @@ -29,7 +29,7 @@ By using Group Policy and Intune, you can set up a policy setting once, and then ## Group Policy settings Microsoft Edge works with these Group Policy settings (`Computer Configuration\Administrative Templates\Windows Components\Microsoft Edge\`) to help you manage your company's web browser configurations: -### Allow Address bar drop-down list suggestions +##### Allow Address bar drop-down list suggestions - **Supported versions:** Windows 10, Windows Insider Program - **Description:** This policy setting lets you decide whether the Address bar drop-down functionality is available in Microsoft Edge. We recommend disabling this setting if you want to minimize network connections from Microsoft Edge to Microsoft services. @@ -41,7 +41,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A >[!Note] >Disabling this setting turns off the Address bar drop-down functionality. Therefore, because search suggestions are shown in the drop-down, this setting takes precedence over the "Configure search suggestions in Address bar" setting. -### Allow Adobe Flash +##### Allow Adobe Flash - **Supported versions:** Windows 10 or later - **Description:** This setting lets you decide whether employees can run Adobe Flash in Microsoft Edge. @@ -50,7 +50,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you disable this setting, employees can't use Adobe Flash. -### Allow clearing browsing data on exit +##### Allow clearing browsing data on exit - **Supported versions:** Windows 10, Windows Insider Program - **Description:** This policy setting allows the automatic clearing of browsing data when Microsoft Edge closes. From 48817b28b787dbd70abfd369d3fd680949a3f1cd Mon Sep 17 00:00:00 2001 From: LizRoss Date: Mon, 6 Mar 2017 13:23:52 -0800 Subject: [PATCH 06/13] Updating formatting --- browsers/edge/available-policies.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/browsers/edge/available-policies.md b/browsers/edge/available-policies.md index eab74497e1..31d5c9e19e 100644 --- a/browsers/edge/available-policies.md +++ b/browsers/edge/available-policies.md @@ -29,7 +29,7 @@ By using Group Policy and Intune, you can set up a policy setting once, and then ## Group Policy settings Microsoft Edge works with these Group Policy settings (`Computer Configuration\Administrative Templates\Windows Components\Microsoft Edge\`) to help you manage your company's web browser configurations: -##### Allow Address bar drop-down list suggestions +#### **Allow Address bar drop-down list suggestions** - **Supported versions:** Windows 10, Windows Insider Program - **Description:** This policy setting lets you decide whether the Address bar drop-down functionality is available in Microsoft Edge. We recommend disabling this setting if you want to minimize network connections from Microsoft Edge to Microsoft services. @@ -41,7 +41,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A >[!Note] >Disabling this setting turns off the Address bar drop-down functionality. Therefore, because search suggestions are shown in the drop-down, this setting takes precedence over the "Configure search suggestions in Address bar" setting. -##### Allow Adobe Flash +#### **Allow Adobe Flash** - **Supported versions:** Windows 10 or later - **Description:** This setting lets you decide whether employees can run Adobe Flash in Microsoft Edge. @@ -50,7 +50,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you disable this setting, employees can't use Adobe Flash. -##### Allow clearing browsing data on exit +#### **Allow clearing browsing data on exit** - **Supported versions:** Windows 10, Windows Insider Program - **Description:** This policy setting allows the automatic clearing of browsing data when Microsoft Edge closes. From 1f2bd83dc033782e0c6364e2ea4cc5f8da75f01c Mon Sep 17 00:00:00 2001 From: LizRoss Date: Mon, 6 Mar 2017 13:31:19 -0800 Subject: [PATCH 07/13] Updating formatting --- browsers/edge/available-policies.md | 58 ++++++++++++++--------------- 1 file changed, 29 insertions(+), 29 deletions(-) diff --git a/browsers/edge/available-policies.md b/browsers/edge/available-policies.md index 31d5c9e19e..83b2d741a9 100644 --- a/browsers/edge/available-policies.md +++ b/browsers/edge/available-policies.md @@ -59,7 +59,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you disable or don't configure this policy setting (default), it can be turned on and configured by the employee in the Clear browsing data options area, under Settings. -### Allow Developer Tools +#### **Allow Developer Tools** - **Supported versions:** Windows 10, Version 1511 or later - **Description:** This policy setting lets you decide whether F12 Developer Tools are available on Microsoft Edge. @@ -67,7 +67,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you disable this setting, the F12 Developer Tools aren’t available in Microsoft Edge. -### Allow Extensions +#### **Allow Extensions** - **Supported versions:** Windows 10, Version 1607 or later - **Description:** This policy setting lets you decide whether employees can use Edge Extensions. @@ -76,7 +76,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you disable this setting, employees can’t use Edge Extensions. -### Allow InPrivate browsing +#### **Allow InPrivate browsing** - **Supported versions:** Windows 10, Version 1511 or later - **Description:** This policy setting lets you decide whether employees can browse using InPrivate website browsing. @@ -85,7 +85,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you disable this setting, employees can’t use InPrivate website browsing. -### Allow Microsoft Compatibility List +#### **Allow Microsoft Compatibility List** - **Supported versions:** Windows 10, Version 1607 or later - **Description:** This policy setting lets you decide whether to use the Microsoft Compatibility List (a Microsoft-provided list that helps sites with known compatibility issues to display properly) in Microsoft Edge. By default, the Microsoft Compatibility List is enabled and can be viewed by visiting about:compat. @@ -94,7 +94,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you disable this setting, the Microsoft Compatibility List isn’t used during browser navigation. -### Allow search engine customization +#### **Allow search engine customization** - **Supported versions:** Windows 10, Windows Insider Program - **Description:** This policy setting lets you decide whether users can change their search engine. @@ -106,7 +106,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you disable this setting, users can't add search engines or change the default used in the address bar. -### Allow web content on New Tab page +#### **Allow web content on New Tab page** - **Supported versions:** Windows 10 or later - **Description:** This policy setting lets you configure what appears when Microsoft Edge opens a new tab. By default, Microsoft Edge opens the New Tab page. If you use this setting, employees can’t change it. @@ -117,7 +117,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you don’t configure this setting (default), employees can choose how new tabs appears. -### Configure additional search engines +#### **Configure additional search engines** - **Supported versions:** Windows 10, Windows Insider Program - **Description:** This policy setting lets you add up to 5 additional search engines, which can't be removed by your employees, but can be made a personal default engine. This setting doesn't set the default search engine. For that, you must use the "Set default search engine" setting. @@ -135,7 +135,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you don't configure this setting, the search engine list is set to what is specified in App settings. -### Configure Autofill +#### **Configure Autofill** - **Supported versions:** Windows 10 or later - **Description:** This policy setting lets you decide whether employees can use Autofill to automatically fill in form fields while using Microsoft Edge. By default, employees can choose whether to use Autofill. @@ -146,7 +146,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you don’t configure this setting (default), employees can choose whether to use Autofill to automatically fill in forms while using Microsoft Edge. -### Configure cookies +#### **Configure cookies** - **Supported versions:** Windows 10 or later - **Description:** This setting lets you configure how to work with cookies. @@ -160,7 +160,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you disable or don't configure this setting, all cookies are allowed from all sites. -### Configure Do Not Track +#### **Configure Do Not Track** - **Supported versions:** Windows 10 or later - **Description:** This policy setting lets you decide whether employees can send Do Not Track requests to websites that ask for tracking info. By default, Do Not Track requests aren’t sent, but employees can choose to turn on and send requests. @@ -171,7 +171,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you don’t configure this setting (default), employees can choose whether to send Do Not Track requests to websites asking for tracking info. -### Configure Favorites +#### **Configure Favorites** - **Supported versions:** Windows 10, Version 1511 or later - **Description:** This policy setting lets you configure the default list of Favorites that appear for your employees. Employees can change their Favorites by adding or removing items at any time. @@ -180,7 +180,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you disable or don’t configure this setting, employees will see the Favorites that they set in the Favorites hub. -### Configure Password Manager +#### **Configure Password Manager** - **Supported versions:** Windows 10 or later - **Description:** This policy setting lets you decide whether employees can save their passwords locally, using Password Manager. By default, Password Manager is turned on. @@ -191,7 +191,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you don’t configure this setting, employees can choose whether to use Password Manager to save their passwords locally. -### Configure Pop-up Blocker +#### **Configure Pop-up Blocker** - **Supported versions:** Windows 10 or later - **Description:** This policy setting lets you decide whether to turn on Pop-up Blocker. By default, Pop-up Blocker is turned on. @@ -202,7 +202,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you don’t configure this setting, employees can choose whether to use Pop-up Blocker. -### Configure search suggestions in Address bar +#### **Configure search suggestions in Address bar** - **Supported versions:** Windows 10 or later - **Description:** This policy setting lets you decide whether search suggestions appear in the Address bar of Microsoft Edge. By default, employees can choose whether search suggestions appear in the Address bar of Microsoft Edge. @@ -213,7 +213,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you don’t configure this setting (default), employees can choose whether search suggestions appear in the Address bar of Microsoft Edge. -### Configure Start pages +#### **Configure Start pages** - **Supported versions:** Windows 10, Version 1511 or later - **Description:** This policy setting lets you configure one or more Start pages, for domain-joined devices. Your employees won't be able to change this after you set it. @@ -224,7 +224,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you disable or don’t configure this setting (default), your default Start page is the webpage specified in App settings. -### Configure the Adobe Flash Click-to-Run setting +#### **Configure the Adobe Flash Click-to-Run setting** - **Supported versions:** Windows 10, Windows Insider Program - **Description:** This policy setting lets you decide whether employees must take an action, such as clicking the content or a Click-to-Run button, before seeing content in Adobe Flash. @@ -236,7 +236,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you disable this setting, Adobe Flash content is automatically loaded and run by Microsoft Edge. -### Configure the Enterprise Mode Site List +#### **Configure the Enterprise Mode Site List** - **Supported versions:** Windows 10 or later - **Description:** This policy setting lets you configure whether to use Enterprise Mode and the Enterprise Mode Site List to address common compatibility problems with legacy apps. @@ -249,7 +249,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A >If there’s an .xml file in the cache container, IE waits 65 seconds and then checks the local cache for a newer version of the file from the server, based on standard caching rules. If the server file has a different version number than the version in the cache container, the server file is used and stored in the cache container.

>If you’re already using a site list, enterprise mode continues to work during the 65 second wait; it just uses your existing site list instead of your new one. -### Configure Windows Defender SmartScreen +#### **Configure Windows Defender SmartScreen** - **Supported versions:** Windows 10 or later - **Description:** This policy setting lets you configure whether to turn on Windows Defender SmartScreen. Windows Defender SmartScreen provides warning messages to help protect your employees from potential phishing scams and malicious software. By default, Windows Defender SmartScreen is turned on. @@ -260,7 +260,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you don’t configure this setting (default), employees can choose whether to use Windows Defender SmartScreen. -### Disable lockdown of Start pages +#### **Disable lockdown of Start pages** - **Supported versions:** Windows 10, Windows Insider Program - **Description:** This policy setting lets you disable the lock down of Start pages, letting employees modify the Start pages when the "Configure Start pages" setting is in effect. @@ -272,7 +272,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you disable or don't configure this setting (default), employees can't change any Start pages configured using the "Configure Start pages" setting, thereby locking down the Start pages. -### Keep favorites in sync between Internet Explorer and Microsoft Edge +#### **Keep favorites in sync between Internet Explorer and Microsoft Edge** - **Supported versions:** Windows 10, Windows Insider Program - **Description:** This setting lets you decide whether people can sync their favorites between Internet Explorer and Microsoft Edge. @@ -281,7 +281,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you disable or don't configure this setting (default), employees can’t sync their favorites between Internet Explorer and Microsoft Edge. -### Prevent access to the about:flags page +#### **Prevent access to the about:flags page** - **Supported versions:** Windows 10, Version 1607 or later - **Description:** This policy setting lets you decide whether employees can access the about:flags page, which is used to change developer settings and to enable experimental features. @@ -290,7 +290,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you disable or don’t configure this setting (default), employees can access the about:flags page. -### Prevent bypassing Windows Defender SmartScreen prompts for files +#### **Prevent bypassing Windows Defender SmartScreen prompts for files** - **Supported versions:** Windows 10, Version 1511 or later - **Description:** This policy setting lets you decide whether employees can override the Windows Defender SmartScreen warnings about downloading unverified files. @@ -299,7 +299,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you disable or don’t configure this setting (default), employees can ignore Windows Defender SmartScreen warnings and continue the download process. -### Prevent bypassing Windows Defender SmartScreen prompts for sites +#### **Prevent bypassing Windows Defender SmartScreen prompts for sites** - **Supported versions:** Windows 10, Version 1511 or later - **Description:** This policy setting lets you decide whether employees can override the Windows Defender SmartScreen warnings about potentially malicious websites. @@ -308,7 +308,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you disable or don’t configure this setting (default), employees can ignore Windows Defender SmartScreen warnings and continue to the site. -### Prevent Microsoft Edge from gathering Live Tile information when pinning a site to Start +#### **Prevent Microsoft Edge from gathering Live Tile information when pinning a site to Start** - **Supported versions:** Windows 10, Windows Insider Program - **Description:** This policy lets you decide whether Microsoft Edge can gather Live Tile metadata from the ieonline.microsoft.com service to provide a better experience while pinning a Live Tile to the Start menu. @@ -317,7 +317,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you disable or don't configure this setting (default), Microsoft Edge gathers the Live Tile metadata, providing a fuller and more complete experience when a user pins a Live Tile to the Start menu. -### Prevent the First Run webpage from opening on Microsoft Edge +#### **Prevent the First Run webpage from opening on Microsoft Edge** - **Supported versions:** Windows 10, Windows Insider Program - **Description:** This policy setting lets you decide whether employees see Microsoft's First Run webpage when opening Microsoft Edge for the first time. @@ -326,7 +326,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you disable or don't configure this setting (default), employees will see the First Run page when opening Microsoft Edge for the first time. -### Prevent using Localhost IP address for WebRTC +#### **Prevent using Localhost IP address for WebRTC** - **Supported versions:** Windows 10, Version 1511 or later - **Description:** This policy setting lets you decide whether an employee’s Localhost IP address shows while making calls using the WebRTC protocol. By default, this setting is turned off. @@ -335,7 +335,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you disable or don’t configure this setting (default), Localhost IP addresses are shown while making calls using the WebRTC protocol. -### Send all intranet sites to Internet Explorer 11 +#### **Send all intranet sites to Internet Explorer 11** - **Supported versions:** Windows 10 or later - **Description:** This policy setting lets you decide whether your intranet sites should all open using Internet Explorer 11. This setting should only be used if there are known compatibility problems with Microsoft Edge. @@ -344,7 +344,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you disable or don’t configure this setting (default), all websites, including intranet sites, are automatically opened using Microsoft Edge. -### Set default search engine +#### **Set default search engine** - **Supported versions:** Windows 10, Windows Insider Program - **Description:** This policy setting lets you configure the default search engine for your employees. Employees can change the default search engine at any time unless you disable the "Allow search engine customization" setting, which restricts any changes. @@ -361,7 +361,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you don't configure this setting (default), the default search engine is set to the one specified in App settings. -### Show message when opening sites in Internet Explorer +#### **Show message when opening sites in Internet Explorer** - **Supported versions:** Windows 10, Version 1607 and later - **Description:** This policy setting lets you decide whether employees see an additional page in Microsoft Edge, stating that a site has been opened using Internet Explorer 11. From c484a004dab68961a5a60c2658d3dd390f560360 Mon Sep 17 00:00:00 2001 From: LizRoss Date: Mon, 6 Mar 2017 13:36:37 -0800 Subject: [PATCH 08/13] Updating formatting --- browsers/edge/available-policies.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/browsers/edge/available-policies.md b/browsers/edge/available-policies.md index 83b2d741a9..e1a7d516ee 100644 --- a/browsers/edge/available-policies.md +++ b/browsers/edge/available-policies.md @@ -38,8 +38,8 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you disable this setting, employees won't see the Address bar drop-down functionality in Microsoft Edge. This setting also disables the user-defined setting, "Show search and site suggestions as I type". - >[!Note] - >Disabling this setting turns off the Address bar drop-down functionality. Therefore, because search suggestions are shown in the drop-down, this setting takes precedence over the "Configure search suggestions in Address bar" setting. + > [!Note] + > Disabling this setting turns off the Address bar drop-down functionality. Therefore, because search suggestions are shown in the drop-down, this setting takes precedence over the "Configure search suggestions in Address bar" setting. #### **Allow Adobe Flash** - **Supported versions:** Windows 10 or later @@ -122,8 +122,8 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - **Description:** This policy setting lets you add up to 5 additional search engines, which can't be removed by your employees, but can be made a personal default engine. This setting doesn't set the default search engine. For that, you must use the "Set default search engine" setting. - >[!Important] - >This setting can only be used with domain-joined or MDM-enrolled devices. For more info, see the Microsoft browser extension policy (aka.ms/browserpolicy). + > [!Important] + > This setting can only be used with domain-joined or MDM-enrolled devices. For more info, see the Microsoft browser extension policy (aka.ms/browserpolicy). - If you enable this setting, you can add up to 5 additional search engines. For each additional engine, you must also add a link to your OpenSearch XML file, including at least the short name and https: URL of the search engine, using this format: From 0aa48d9c7e2c92be8dd5f9b19acf4d07ad39e15f Mon Sep 17 00:00:00 2001 From: LizRoss Date: Mon, 6 Mar 2017 14:09:58 -0800 Subject: [PATCH 09/13] Updating formatting --- browsers/edge/available-policies.md | 218 +++++++++++++++++++++++----- 1 file changed, 178 insertions(+), 40 deletions(-) diff --git a/browsers/edge/available-policies.md b/browsers/edge/available-policies.md index e1a7d516ee..149180b50d 100644 --- a/browsers/edge/available-policies.md +++ b/browsers/edge/available-policies.md @@ -29,7 +29,7 @@ By using Group Policy and Intune, you can set up a policy setting once, and then ## Group Policy settings Microsoft Edge works with these Group Policy settings (`Computer Configuration\Administrative Templates\Windows Components\Microsoft Edge\`) to help you manage your company's web browser configurations: -#### **Allow Address bar drop-down list suggestions** +### Allow Address bar drop-down list suggestions - **Supported versions:** Windows 10, Windows Insider Program - **Description:** This policy setting lets you decide whether the Address bar drop-down functionality is available in Microsoft Edge. We recommend disabling this setting if you want to minimize network connections from Microsoft Edge to Microsoft services. @@ -41,7 +41,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A > [!Note] > Disabling this setting turns off the Address bar drop-down functionality. Therefore, because search suggestions are shown in the drop-down, this setting takes precedence over the "Configure search suggestions in Address bar" setting. -#### **Allow Adobe Flash** +### Allow Adobe Flash - **Supported versions:** Windows 10 or later - **Description:** This setting lets you decide whether employees can run Adobe Flash in Microsoft Edge. @@ -50,7 +50,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you disable this setting, employees can't use Adobe Flash. -#### **Allow clearing browsing data on exit** +### Allow clearing browsing data on exit - **Supported versions:** Windows 10, Windows Insider Program - **Description:** This policy setting allows the automatic clearing of browsing data when Microsoft Edge closes. @@ -59,7 +59,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you disable or don't configure this policy setting (default), it can be turned on and configured by the employee in the Clear browsing data options area, under Settings. -#### **Allow Developer Tools** +### Allow Developer Tools - **Supported versions:** Windows 10, Version 1511 or later - **Description:** This policy setting lets you decide whether F12 Developer Tools are available on Microsoft Edge. @@ -67,7 +67,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you disable this setting, the F12 Developer Tools aren’t available in Microsoft Edge. -#### **Allow Extensions** +### Allow Extensions - **Supported versions:** Windows 10, Version 1607 or later - **Description:** This policy setting lets you decide whether employees can use Edge Extensions. @@ -76,7 +76,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you disable this setting, employees can’t use Edge Extensions. -#### **Allow InPrivate browsing** +### Allow InPrivate browsing - **Supported versions:** Windows 10, Version 1511 or later - **Description:** This policy setting lets you decide whether employees can browse using InPrivate website browsing. @@ -85,7 +85,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you disable this setting, employees can’t use InPrivate website browsing. -#### **Allow Microsoft Compatibility List** +### Allow Microsoft Compatibility List - **Supported versions:** Windows 10, Version 1607 or later - **Description:** This policy setting lets you decide whether to use the Microsoft Compatibility List (a Microsoft-provided list that helps sites with known compatibility issues to display properly) in Microsoft Edge. By default, the Microsoft Compatibility List is enabled and can be viewed by visiting about:compat. @@ -94,7 +94,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you disable this setting, the Microsoft Compatibility List isn’t used during browser navigation. -#### **Allow search engine customization** +### Allow search engine customization - **Supported versions:** Windows 10, Windows Insider Program - **Description:** This policy setting lets you decide whether users can change their search engine. @@ -106,7 +106,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you disable this setting, users can't add search engines or change the default used in the address bar. -#### **Allow web content on New Tab page** +### Allow web content on New Tab page - **Supported versions:** Windows 10 or later - **Description:** This policy setting lets you configure what appears when Microsoft Edge opens a new tab. By default, Microsoft Edge opens the New Tab page. If you use this setting, employees can’t change it. @@ -117,7 +117,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you don’t configure this setting (default), employees can choose how new tabs appears. -#### **Configure additional search engines** +### Configure additional search engines - **Supported versions:** Windows 10, Windows Insider Program - **Description:** This policy setting lets you add up to 5 additional search engines, which can't be removed by your employees, but can be made a personal default engine. This setting doesn't set the default search engine. For that, you must use the "Set default search engine" setting. @@ -135,7 +135,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you don't configure this setting, the search engine list is set to what is specified in App settings. -#### **Configure Autofill** +### Configure Autofill - **Supported versions:** Windows 10 or later - **Description:** This policy setting lets you decide whether employees can use Autofill to automatically fill in form fields while using Microsoft Edge. By default, employees can choose whether to use Autofill. @@ -146,7 +146,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you don’t configure this setting (default), employees can choose whether to use Autofill to automatically fill in forms while using Microsoft Edge. -#### **Configure cookies** +### Configure cookies - **Supported versions:** Windows 10 or later - **Description:** This setting lets you configure how to work with cookies. @@ -160,7 +160,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you disable or don't configure this setting, all cookies are allowed from all sites. -#### **Configure Do Not Track** +### Configure Do Not Track - **Supported versions:** Windows 10 or later - **Description:** This policy setting lets you decide whether employees can send Do Not Track requests to websites that ask for tracking info. By default, Do Not Track requests aren’t sent, but employees can choose to turn on and send requests. @@ -171,7 +171,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you don’t configure this setting (default), employees can choose whether to send Do Not Track requests to websites asking for tracking info. -#### **Configure Favorites** +### Configure Favorites - **Supported versions:** Windows 10, Version 1511 or later - **Description:** This policy setting lets you configure the default list of Favorites that appear for your employees. Employees can change their Favorites by adding or removing items at any time. @@ -180,7 +180,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you disable or don’t configure this setting, employees will see the Favorites that they set in the Favorites hub. -#### **Configure Password Manager** +### Configure Password Manager - **Supported versions:** Windows 10 or later - **Description:** This policy setting lets you decide whether employees can save their passwords locally, using Password Manager. By default, Password Manager is turned on. @@ -191,7 +191,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you don’t configure this setting, employees can choose whether to use Password Manager to save their passwords locally. -#### **Configure Pop-up Blocker** +### Configure Pop-up Blocker - **Supported versions:** Windows 10 or later - **Description:** This policy setting lets you decide whether to turn on Pop-up Blocker. By default, Pop-up Blocker is turned on. @@ -202,7 +202,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you don’t configure this setting, employees can choose whether to use Pop-up Blocker. -#### **Configure search suggestions in Address bar** +### Configure search suggestions in Address bar - **Supported versions:** Windows 10 or later - **Description:** This policy setting lets you decide whether search suggestions appear in the Address bar of Microsoft Edge. By default, employees can choose whether search suggestions appear in the Address bar of Microsoft Edge. @@ -213,7 +213,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you don’t configure this setting (default), employees can choose whether search suggestions appear in the Address bar of Microsoft Edge. -#### **Configure Start pages** +### Configure Start pages - **Supported versions:** Windows 10, Version 1511 or later - **Description:** This policy setting lets you configure one or more Start pages, for domain-joined devices. Your employees won't be able to change this after you set it. @@ -224,7 +224,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you disable or don’t configure this setting (default), your default Start page is the webpage specified in App settings. -#### **Configure the Adobe Flash Click-to-Run setting** +### Configure the Adobe Flash Click-to-Run setting - **Supported versions:** Windows 10, Windows Insider Program - **Description:** This policy setting lets you decide whether employees must take an action, such as clicking the content or a Click-to-Run button, before seeing content in Adobe Flash. @@ -236,7 +236,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you disable this setting, Adobe Flash content is automatically loaded and run by Microsoft Edge. -#### **Configure the Enterprise Mode Site List** +### Configure the Enterprise Mode Site List - **Supported versions:** Windows 10 or later - **Description:** This policy setting lets you configure whether to use Enterprise Mode and the Enterprise Mode Site List to address common compatibility problems with legacy apps. @@ -249,7 +249,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A >If there’s an .xml file in the cache container, IE waits 65 seconds and then checks the local cache for a newer version of the file from the server, based on standard caching rules. If the server file has a different version number than the version in the cache container, the server file is used and stored in the cache container.

>If you’re already using a site list, enterprise mode continues to work during the 65 second wait; it just uses your existing site list instead of your new one. -#### **Configure Windows Defender SmartScreen** +### Configure Windows Defender SmartScreen - **Supported versions:** Windows 10 or later - **Description:** This policy setting lets you configure whether to turn on Windows Defender SmartScreen. Windows Defender SmartScreen provides warning messages to help protect your employees from potential phishing scams and malicious software. By default, Windows Defender SmartScreen is turned on. @@ -260,7 +260,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you don’t configure this setting (default), employees can choose whether to use Windows Defender SmartScreen. -#### **Disable lockdown of Start pages** +### Disable lockdown of Start pages - **Supported versions:** Windows 10, Windows Insider Program - **Description:** This policy setting lets you disable the lock down of Start pages, letting employees modify the Start pages when the "Configure Start pages" setting is in effect. @@ -272,7 +272,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you disable or don't configure this setting (default), employees can't change any Start pages configured using the "Configure Start pages" setting, thereby locking down the Start pages. -#### **Keep favorites in sync between Internet Explorer and Microsoft Edge** +### Keep favorites in sync between Internet Explorer and Microsoft Edge - **Supported versions:** Windows 10, Windows Insider Program - **Description:** This setting lets you decide whether people can sync their favorites between Internet Explorer and Microsoft Edge. @@ -281,7 +281,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you disable or don't configure this setting (default), employees can’t sync their favorites between Internet Explorer and Microsoft Edge. -#### **Prevent access to the about:flags page** +### Prevent access to the about:flags page - **Supported versions:** Windows 10, Version 1607 or later - **Description:** This policy setting lets you decide whether employees can access the about:flags page, which is used to change developer settings and to enable experimental features. @@ -290,7 +290,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you disable or don’t configure this setting (default), employees can access the about:flags page. -#### **Prevent bypassing Windows Defender SmartScreen prompts for files** +### Prevent bypassing Windows Defender SmartScreen prompts for files - **Supported versions:** Windows 10, Version 1511 or later - **Description:** This policy setting lets you decide whether employees can override the Windows Defender SmartScreen warnings about downloading unverified files. @@ -299,7 +299,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you disable or don’t configure this setting (default), employees can ignore Windows Defender SmartScreen warnings and continue the download process. -#### **Prevent bypassing Windows Defender SmartScreen prompts for sites** +### Prevent bypassing Windows Defender SmartScreen prompts for sites - **Supported versions:** Windows 10, Version 1511 or later - **Description:** This policy setting lets you decide whether employees can override the Windows Defender SmartScreen warnings about potentially malicious websites. @@ -308,7 +308,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you disable or don’t configure this setting (default), employees can ignore Windows Defender SmartScreen warnings and continue to the site. -#### **Prevent Microsoft Edge from gathering Live Tile information when pinning a site to Start** +### Prevent Microsoft Edge from gathering Live Tile information when pinning a site to Start - **Supported versions:** Windows 10, Windows Insider Program - **Description:** This policy lets you decide whether Microsoft Edge can gather Live Tile metadata from the ieonline.microsoft.com service to provide a better experience while pinning a Live Tile to the Start menu. @@ -317,7 +317,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you disable or don't configure this setting (default), Microsoft Edge gathers the Live Tile metadata, providing a fuller and more complete experience when a user pins a Live Tile to the Start menu. -#### **Prevent the First Run webpage from opening on Microsoft Edge** +### Prevent the First Run webpage from opening on Microsoft Edge - **Supported versions:** Windows 10, Windows Insider Program - **Description:** This policy setting lets you decide whether employees see Microsoft's First Run webpage when opening Microsoft Edge for the first time. @@ -326,7 +326,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you disable or don't configure this setting (default), employees will see the First Run page when opening Microsoft Edge for the first time. -#### **Prevent using Localhost IP address for WebRTC** +### Prevent using Localhost IP address for WebRTC - **Supported versions:** Windows 10, Version 1511 or later - **Description:** This policy setting lets you decide whether an employee’s Localhost IP address shows while making calls using the WebRTC protocol. By default, this setting is turned off. @@ -335,7 +335,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you disable or don’t configure this setting (default), Localhost IP addresses are shown while making calls using the WebRTC protocol. -#### **Send all intranet sites to Internet Explorer 11** +### Send all intranet sites to Internet Explorer 11 - **Supported versions:** Windows 10 or later - **Description:** This policy setting lets you decide whether your intranet sites should all open using Internet Explorer 11. This setting should only be used if there are known compatibility problems with Microsoft Edge. @@ -344,7 +344,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you disable or don’t configure this setting (default), all websites, including intranet sites, are automatically opened using Microsoft Edge. -#### **Set default search engine** +### Set default search engine - **Supported versions:** Windows 10, Windows Insider Program - **Description:** This policy setting lets you configure the default search engine for your employees. Employees can change the default search engine at any time unless you disable the "Allow search engine customization" setting, which restricts any changes. @@ -361,7 +361,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A - If you don't configure this setting (default), the default search engine is set to the one specified in App settings. -#### **Show message when opening sites in Internet Explorer** +### Show message when opening sites in Internet Explorer - **Supported versions:** Windows 10, Version 1607 and later - **Description:** This policy setting lets you decide whether employees see an additional page in Microsoft Edge, stating that a site has been opened using Internet Explorer 11. @@ -374,20 +374,158 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A If you manage your policies using Intune, you'll want to use these MDM policy settings. You can see the full list of available policies, on the [Policy CSP]( https://go.microsoft.com/fwlink/p/?LinkId=722885) page. > [!NOTE] -> The **Supports** column uses these options: +> **Supported Devices** uses these options: > - **Desktop.** Supports Windows 10 Pro and Windows 10 Enterprise computers that are enrolled with Intune only. > - **Mobile.** Supports Windows 10 Mobile devices only. > - **Both.** Supports both desktop and mobile devices. All devices must be enrolled with Intune if you want to use the Windows Custom URI Policy. -|Policy name|Supported versions|Supported device|Details| -|-------------|-------------------|-----------------|--------| -|AllowAddressBarDropdown|Windows 10, Windows Insider Program|Desktop|

| -|AllowAutofill|Windows 10 or later|Desktop|| -|AllowBrowser|Windows 10 or later|Mobile|| -|AllowCookies|Windows 10 or later|Both|| -|AllowDeveloperTools|Windows 10, Version 1511 or later|Desktop|| +### AllowAddressBarDropdown +- **Supported versions:** Windows 10, Windows Insider Program + +- **Supported devices:** Desktop + +- **Details:** + + - **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowAddressBarDropdown + + - **Data type:** Integer + + - **Allowed values:** + + - **0.** Not allowed. Address bar drop-down is disabled, which also disables the user-defined setting, "Show search and site suggestions as I type." + + - **1 (default).** Allowed. Address bar drop-down is enabled. + +### AllowAutofill +- **Supported versions:** Windows 10 or later + +- **Supported devices:** Desktop + +- **Details:** + + - **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowAutofill + + - **Data type:** Integer + + - **Allowed values:** + + - **0.** Employees can’t use Autofill to complete form fields. + + - **1 (default).** Employees can use Autofill to complete form fields. + +### Allow Browser +- **Supported versions:** Windows 10 or later + +- **Supported devices:** Mobile + +- **Details:** + + - **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowBrowser + + - **Data type:** Integer + + - **Allowed values:** + + - **0.** Employees can’t use Microsoft Edge. + + - **1 (default).** Employees can use Microsoft Edge. + +### AllowCookies +- **Supported versions:** Windows 10 or later + +- **Supported devices:** Both + +- **Details:** + + - **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowCookies + + - **Data type:** Integer + + - **Allowed values:** + + - **0 (default).** Allows all cookies from all sites. + + - **1.** Blocks only cookies from 3rd party websites. + + - **2.** Blocks all cookies from all sites. + +### AllowDeveloperTools +- **Supported versions:** Windows 10, Version 1511 or later + +- **Supported devices:** Desktop + +- **Details:** + + - **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowDeveloperTools + + - **Data type:** Integer + + - **Allowed values:** + + - **0.** Employees can't use the F12 Developer Tools. + + - **1 (default).** Employees can use the F12 Developer Tools. + +### Text +- **Supported versions:** + +- **Supported devices:** + +- **Details:** + + - **URI full path:** + + - **Data type:** + + - **Allowed values:** + +### Text +- **Supported versions:** + +- **Supported devices:** + +- **Details:** + + - **URI full path:** + + - **Data type:** + + - **Allowed values:** + +### Text +- **Supported versions:** + +- **Supported devices:** + +- **Details:** + + - **URI full path:** + + - **Data type:** + + - **Allowed values:** + +### Text +- **Supported versions:** + +- **Supported devices:** + +- **Details:** + + - **URI full path:** + + - **Data type:** + + - **Allowed values:** + + + + + + + |AllowDoNotTrack|Windows 10 or later|Both|| |AllowExtensions|Windows 10, Version 1607 and later|Desktop|| |AllowFlash|Windows 10 or later|Desktop|| From 50a055530a97d2c3b485669fb17b37c1db6c9ce2 Mon Sep 17 00:00:00 2001 From: LizRoss Date: Mon, 6 Mar 2017 14:51:19 -0800 Subject: [PATCH 10/13] Updating formatting --- browsers/edge/available-policies.md | 205 ++++++++++++++++++++++++++-- 1 file changed, 192 insertions(+), 13 deletions(-) diff --git a/browsers/edge/available-policies.md b/browsers/edge/available-policies.md index 149180b50d..a10866f11d 100644 --- a/browsers/edge/available-policies.md +++ b/browsers/edge/available-policies.md @@ -415,7 +415,7 @@ All devices must be enrolled with Intune if you want to use the Windows Custom U - **1 (default).** Employees can use Autofill to complete form fields. -### Allow Browser +### AllowBrowser - **Supported versions:** Windows 10 or later - **Supported devices:** Mobile @@ -468,18 +468,56 @@ All devices must be enrolled with Intune if you want to use the Windows Custom U - **1 (default).** Employees can use the F12 Developer Tools. -### Text -- **Supported versions:** +### AllowDoNotTrack +- **Supported versions:** Windows 10 or later -- **Supported devices:** +- **Supported devices:** Both - **Details:** - - **URI full path:** + - **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowDoNotTrack - - **Data type:** + - **Data type:** Integer - - **Allowed values:** + - **Allowed values:** + + - **0 (default).** Stops employees from sending Do Not Track headers to websites requesting tracking info. + + - **1.** Employees can send Do Not Track headers to websites requesting tracking info. + +### AllowExtensions +- **Supported versions:** Windows 10, Version 1607 and later + +- **Supported devices:** Desktop + +- **Details:** + + - **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowExtensions + + - **Data type:** Integer + + - **Allowed values:** + + - **0.** Employees can’t use Edge Extensions. + + - **1 (default).** Employees can use Edge Extensions. + +### AllowFlash +- **Supported versions:** Windows 10 or later + +- **Supported devices:** Desktop + +- **Details:** + + - **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowFlash + + - **Data type:** Integer + + - **Allowed values:** + + - **0.** Not allowed. Employees can’t use Adobe Flash. + + - **1 (default).** Allowed. Employees can use Adobe Flash. ### Text - **Supported versions:** @@ -492,7 +530,9 @@ All devices must be enrolled with Intune if you want to use the Windows Custom U - **Data type:** - - **Allowed values:** + - **Allowed values:** + + - ### Text - **Supported versions:** @@ -505,7 +545,9 @@ All devices must be enrolled with Intune if you want to use the Windows Custom U - **Data type:** - - **Allowed values:** + - **Allowed values:** + + - ### Text - **Supported versions:** @@ -518,7 +560,147 @@ All devices must be enrolled with Intune if you want to use the Windows Custom U - **Data type:** - - **Allowed values:** + - **Allowed values:** + + - + +### Text +- **Supported versions:** + +- **Supported devices:** + +- **Details:** + + - **URI full path:** + + - **Data type:** + + - **Allowed values:** + + - + +### Text +- **Supported versions:** + +- **Supported devices:** + +- **Details:** + + - **URI full path:** + + - **Data type:** + + - **Allowed values:** + + - + +### Text +- **Supported versions:** + +- **Supported devices:** + +- **Details:** + + - **URI full path:** + + - **Data type:** + + - **Allowed values:** + + - + +### Text +- **Supported versions:** + +- **Supported devices:** + +- **Details:** + + - **URI full path:** + + - **Data type:** + + - **Allowed values:** + + - + +### Text +- **Supported versions:** + +- **Supported devices:** + +- **Details:** + + - **URI full path:** + + - **Data type:** + + - **Allowed values:** + + - + +### Text +- **Supported versions:** + +- **Supported devices:** + +- **Details:** + + - **URI full path:** + + - **Data type:** + + - **Allowed values:** + + - + +### Text +- **Supported versions:** + +- **Supported devices:** + +- **Details:** + + - **URI full path:** + + - **Data type:** + + - **Allowed values:** + + - + +### Text +- **Supported versions:** + +- **Supported devices:** + +- **Details:** + + - **URI full path:** + + - **Data type:** + + - **Allowed values:** + + - + +### Text +- **Supported versions:** + +- **Supported devices:** + +- **Details:** + + - **URI full path:** + + - **Data type:** + + - **Allowed values:** + + - + + + @@ -526,9 +708,6 @@ All devices must be enrolled with Intune if you want to use the Windows Custom U -|AllowDoNotTrack|Windows 10 or later|Both|| -|AllowExtensions|Windows 10, Version 1607 and later|Desktop|| -|AllowFlash|Windows 10 or later|Desktop|| |AllowFlashClickToRun|Windows 10, Windows Insider Program|Desktop|| |AllowInPrivate|Windows 10, Version 1511 or later|Both|| |AllowMicrosoftCompatibilityList|Windows 10, Windows Insider Program|Both|| From 3c59e980aa104a48e63f5902fcf97133f7c1ac11 Mon Sep 17 00:00:00 2001 From: LizRoss Date: Tue, 7 Mar 2017 08:44:07 -0800 Subject: [PATCH 11/13] Updating formatting --- browsers/edge/available-policies.md | 483 ++++++++++++++++++++++------ 1 file changed, 376 insertions(+), 107 deletions(-) diff --git a/browsers/edge/available-policies.md b/browsers/edge/available-policies.md index a10866f11d..04f361671f 100644 --- a/browsers/edge/available-policies.md +++ b/browsers/edge/available-policies.md @@ -519,238 +519,507 @@ All devices must be enrolled with Intune if you want to use the Windows Custom U - **1 (default).** Allowed. Employees can use Adobe Flash. -### Text -- **Supported versions:** +### AllowFlashClickToRun +- **Supported versions:** Windows 10, Windows Insider Program -- **Supported devices:** +- **Supported devices:** Desktop| - **Details:** - - **URI full path:** + - **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowFlashClickToRun - - **Data type:** + - **Data type:** Integer - **Allowed values:** - - + - **0.** Adobe Flash content is automatically loaded and run by Microsoft Edge + + - **1 (default).** An employee must click the content, click a Click-to-Run button, or have the site appear on an auto-allow list before Microsoft Edge loads and runs Adobe Flash content. -### Text -- **Supported versions:** +### AllowInPrivate +- **Supported versions:** Windows 10, Version 1511 or later -- **Supported devices:** +- **Supported devices:** Both - **Details:** - - **URI full path:** + - **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowInPrivate - - **Data type:** + - **Data type:** Integer - **Allowed values:** - - + - **0.** Employees can’t use InPrivate browsing. + + - **1 (default).** Employees can use InPrivate browsing. -### Text -- **Supported versions:** +### AllowMicrosoftCompatibilityList +- **Supported versions:** Windows 10, Windows Insider Program -- **Supported devices:** +- **Supported devices:** Both - **Details:** - - **URI full path:** + - **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowMicrosoftCompatibilityList - - **Data type:** + - **Data type:** Integer - - **Allowed values:** + - **Allowed values:** - - + - **0.** Additional search engines aren't allowed and the default can’t be changed in the Address bar. + + - **1 (default).** Additional search engines are allowed and the default can be changed in the Address bar. -### Text -- **Supported versions:** +### AllowPasswordManager +- **Supported versions:** Windows 10 or later -- **Supported devices:** +- **Supported devices:** Both - **Details:** - - **URI full path:** + - **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowPasswordManager - - **Data type:** + - **Data type:** Integer - **Allowed values:** - - + - **0 (default).** Employees can't use Password Manager to save passwords locally. + + - **1.** Employees can use Password Manager to save passwords locally. -### Text -- **Supported versions:** +### AllowPopups +- **Supported versions:** Windows 10 or later -- **Supported devices:** +- **Supported devices:** Desktop - **Details:** - - **URI full path:** + - **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowPopups - - **Data type:** + - **Data type:** Integer - **Allowed values:** - - + - **0 (default).** Turns off Pop-up Blocker, allowing pop-up windows. + + - **1.** Turns on Pop-up Blocker, stopping pop-up windows. -### Text -- **Supported versions:** +### AllowSearchEngineCustomization +- **Supported versions:** Windows 10, Windows Insider Program -- **Supported devices:** +- **Supported devices:** Both - **Details:** - - **URI full path:** + - **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowSearchEngineCustomization - - **Data type:** + - **Data type:** Integer - **Allowed values:** - - + - **0.** Additional search engines are not allowed and the default can’t be changed in the Address bar. + + - **1 (default).** Additional search engines are allowed and the default can be changed in the Address bar. -### Text -- **Supported versions:** -- **Supported devices:** +### AllowSearchSuggestionsinAddressBar +- **Supported versions:** Windows 10 or later + +- **Supported devices:** Both - **Details:** - - **URI full path:** + - **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowSearchSuggestionsinAddressBar - - **Data type:** + - **Data type:** Integer - **Allowed values:** - - + - **0 (default).** Employees can’t see search suggestions in the Address bar of Microsoft Edge. + + - **1.** Employees can see search suggestions in the Address bar of Microsoft Edge. -### Text -- **Supported versions:** +### AllowSmartScreen +- **Supported versions:** Windows 10 or later -- **Supported devices:** +- **Supported devices:** Both - **Details:** - - **URI full path:** + - **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowSmartScreen - - **Data type:** + - **Data type:** Integer - **Allowed values:** - - + - **0 (default).** Turns off Windows Defender SmartScreen. + + - **1.** Turns on Windows Defender SmartScreen, providing warning messages to your employees about potential phishing scams and malicious software. -### Text -- **Supported versions:** +### ClearBrowsingDataOnExit +- **Supported versions:** Windows 10, Windows Insider Program -- **Supported devices:** +- **Supported devices:** Both - **Details:** - - **URI full path:** + - **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ClearBrowsingDataOnExit - - **Data type:** + - **Data type:** Integer - **Allowed values:** - - + - **0 (default).** Browsing data is not cleared on exit. The type of browsing data to clear can be configured by the employee in the Clear browsing data options under Settings. + + - **1.** Browsing data is cleared on exit. -### Text -- **Supported versions:** +### ConfigureAdditionalSearchEngines +- **Supported versions:** Windows 10, Windows Insider Program -- **Supported devices:** +- **Supported devices:** Both - **Details:** - - **URI full path:** + - **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureAdditionalSearchEngines - - **Data type:** + - **Data type:** Integer - **Allowed values:** - - + - **0 (default).** Additional search engines are not allowed. + + - **1.** Additional search engines are allowed. -### Text -- **Supported versions:** +### DisableLockdownOfStartPages +- **Supported versions:** Windows 10, Windows Insider Program -- **Supported devices:** +- **Supported devices:** Desktop - **Details:** - - **URI full path:** + - **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/DisableLockdownOfStartPages - - **Data type:** + - **Data type:** Integer - **Allowed values:** - - + - **0 (default).** Enable lockdown of the Start pages according to the settings specified in the Browser/HomePages policy. Users cannot change the Start pages. + + - **1.** Disable lockdown of the Start pages and allow users to modify them. -### Text -- **Supported versions:** +### EnterpriseModeSiteList +- **Supported versions:** Windows 10 or later -- **Supported devices:** +- **Supported devices:** Desktop - **Details:** - - **URI full path:** + - **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/EnterpriseModeSiteList - - **Data type:** + - **Data type:** String - **Allowed values:** - - + - Not configured. + - **1 (default).** Use the Enterprise Mode Site List, if configured. + + - **2.** Specify the location to the site list. + >[!NOTE] + >If there’s an .xml file in the cache container, IE waits 65 seconds and then checks the local cache for a newer version of the file from the server, based on standard caching rules. If the server file has a different version number than the version in the cache container, the server file is used and stored in the cache container.

If you’re already using a site list, enterprise mode continues to work during the 65 second wait; it just uses your existing site list instead of your new one. +### Favorites +- **Supported versions:** Windows 10, Version 1511 or later +- **Supported devices:** Both +- **Details:** + - **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/Favorites + - **Data type:** String + - **Allowed values:** + - Configure the **Favorite** URLs for your employees. + + **Example:** + + + + + URLs must be on separate lines and aren't shared between Microsoft Edge and Internet Explorer 11. -|AllowFlashClickToRun|Windows 10, Windows Insider Program|Desktop|

  • **URI full path.** ./Vendor/MSFT/Policy/Config/Browser/AllowFlashClickToRun
  • **Data type.** Integer
  • **Allowed values:**
    • **0.** Adobe Flash content is automatically loaded and run by Microsoft Edge
    • **1 (default).** An employee must click the content, click a Click-to-Run button, or have the site appear on an auto-allow list before Microsoft Edge loads and runs Adobe Flash content.
| -|AllowInPrivate|Windows 10, Version 1511 or later|Both|
  • **URI full path.** ./Vendor/MSFT/Policy/Config/Browser/AllowInPrivate
  • **Data type.** Integer
  • **Allowed values:**
    • **0.** Employees can’t use InPrivate browsing.
    • **1 (default).** Employees can use InPrivate browsing.
| -|AllowMicrosoftCompatibilityList|Windows 10, Windows Insider Program|Both|
  • **URI full path.** ./Vendor/MSFT/Policy/Config/Browser/AllowMicrosoftCompatibilityList
  • **Data type.** Integer
  • **Allowed values:**
    • **0.** Additional search engines aren't allowed and the default can’t be changed in the Address bar.
    • **1 (default).** Additional search engines are allowed and the default can be changed in the Address bar.
| -|AllowPasswordManager|Windows 10 or later|Both|
  • **URI full path.** ./Vendor/MSFT/Policy/Config/Browser/AllowPasswordManager
  • **Data type.** Integer
  • **Allowed values:**
    • **0 (default).** Employees can't use Password Manager to save passwords locally.
    • **1.** Employees can use Password Manager to save passwords locally.
| -|AllowPopups|Windows 10 or later|Desktop|
  • **URI full path.** ./Vendor/MSFT/Policy/Config/Browser/AllowPopups
  • **Data type.** Integer
  • **Allowed values:**
    • **0 (default).** Turns off Pop-up Blocker, allowing pop-up windows.
    • **1.** Turns on Pop-up Blocker, stopping pop-up windows.
| -|AllowSearchEngineCustomization|Windows 10, Windows Insider Program|Both|
  • **URI full path.** ./Vendor/MSFT/Policy/Config/Browser/AllowSearchEngineCustomization
  • **Data type.** Integer
  • **Allowed values:**
    • **0.** Additional search engines are not allowed and the default can’t be changed in the Address bar.
    • **1 (default).** Additional search engines are allowed and the default can be changed in the Address bar.
| -|AllowSearchSuggestions
inAddressBar|Windows 10 or later|Both|
  • **URI full path.** ./Vendor/MSFT/Policy/Config/Browser/AllowSearchSuggestionsinAddressBar
  • **Data type.** Integer
  • **Allowed values:**
    • **0 (default).** Employees can’t see search suggestions in the Address bar of Microsoft Edge.
    • **1.** Employees can see search suggestions in the Address bar of Microsoft Edge.
| -|AllowSmartScreen|Windows 10 or later|Both|
  • **URI full path.** ./Vendor/MSFT/Policy/Config/Browser/AllowSmartScreen
  • **Data type.** Integer
  • **Allowed values:**
    • **0 (default).** Turns off Windows Defender SmartScreen.
    • **1.** Turns on Windows Defender SmartScreen, providing warning messages to your employees about potential phishing scams and malicious software.
| -|ClearBrowsingDataOnExit|Windows 10, Windows Insider Program|Both|
  • **URI full path.** ./Vendor/MSFT/Policy/Config/Browser/ClearBrowsingDataOnExit
  • **Data type.** Integer
  • **Allowed values:**
    • **0 (default).** Browsing data is not cleared on exit. The type of browsing data to clear can be configured by the employee in the Clear browsing data options under Settings.
    • **1.** Browsing data is cleared on exit.
| -|ConfigureAdditionalSearchEngines|Windows 10, Windows Insider Program|Both|
  • **URI full path.** ./Vendor/MSFT/Policy/Config/Browser/ConfigureAdditionalSearchEngines
  • **Data type.** Integer
  • **Allowed values:**
    • **0 (default).** Additional search engines are not allowed.
    • **1.** Additional search engines are allowed.
| -|DisableLockdownOfStartPages|Windows 10, Windows Insider Program|Desktop|
  • **URI full path.** ./Vendor/MSFT/Policy/Config/Browser/DisableLockdownOfStartPages
  • **Data type.** Integer
  • **Allowed values:**
    • **0 (default).** Enable lockdown of the Start pages according to the settings specified in the Browser/HomePages policy. Users cannot change the Start pages.
    • **1.** Disable lockdown of the Start pages and allow users to modify them.
| -|EnterpriseModeSiteList|Windows 10 or later|Desktop|
  • **URI full path.** ./Vendor/MSFT/Policy/Config/Browser/EnterpriseModeSiteList
  • **Data type.** String
  • **Allowed values:**
    • Not configured.
    • **1 (default).** Use the Enterprise Mode Site List, if configured.
    • **2.** Specify the location to the site list.

    **Note**
    If there’s an .xml file in the cache container, IE waits 65 seconds and then checks the local cache for a newer version of the file from the server, based on standard caching rules. If the server file has a different version number than the version in the cache container, the server file is used and stored in the cache container.

    If you’re already using a site list, enterprise mode continues to work during the 65 second wait; it just uses your existing site list instead of your new one.

| -|Favorites|Windows 10, Version 1511 or later|Both|
  • **URI full path.** ./Vendor/MSFT/Policy/Config/Browser/Favorites
  • **Data type.** String
  • **Allowed values:**
    • Configure the **Favorite** URLs for your employees.

      **Example:**
      ``
      ``

      **Note**
      URLs must be on separate lines and aren't shared between Microsoft Edge and Internet Explorer 11.

    | -|FirstRunURL|Windows 10, Version 1511 or later|Mobile|
    • **URI full path.** ./Vendor/MSFT/Policy/Config/Browser/FirstRunURL
    • **Data type.** String
    • **Allowed values:**
      • Configure the first run URL for your employees.

        **Example:**
        ``

    | -|HomePages|Windows 10, Version 1511 or later|Desktop|
    • **URI full path.** ./Vendor/MSFT/Policy/Config/Browser/HomePages
    • **Data type.** String
    • **Allowed values:**
      • Configure the Start page (previously known as Home page) URLs for your employees.

        **Example:**
        ``

    | -|PreventAccessToAbout
    FlagsInMicrosoftEdge|Windows 10, Version 1607 and later|Desktop|
    • **URI full path.** ./Vendor/MSFT/Policy/Config/Browser/PreventAccessToAboutFlagsInMicrosoftEdge
    • **Data type.** Integer
    • **Allowed values:**
      • **0 (default).** Employees can access the about:flags page in Microsoft Edge.
      • **1.** Employees can't access the about:flags page in Microsoft Edge.
    | -|PreventFirstRunPage|Windows 10, Windows Insider Program|Both|
    • **URI full path.** ./Vendor/MSFT/Policy/Config/Browser/PreventFirstRunPage
    • **Data type.** Integer
    • **Allowed values:**
      • **0 (default).** Employees see the First Run webpage.
      • **1.** Employees don't see the First Run webpage.
    | -|PreventLiveTileDataCollection|Windows 10, Windows Insider Program|Both|
    • **URI full path.** ./Vendor/MSFT/Policy/Config/Browser/PreventLiveTileDataCollection
    • **Data type.** Integer
    • **Allowed values:**
      • **0 (default).** Microsoft servers will be contacted if a site is pinned to Start from Microsoft Edge.
      • **1.** Microsoft servers will not be contacted if a site is pinned to Start from Microsoft Edge.
    | -|PreventSmartScreenPromptOverride|Windows 10, Version 1511 or later|Both|
    • **URI full path.** ./Vendor/MSFT/Policy/Config/Browser/PreventSmartscreenPromptOverride
    • **Data type.** Integer
    • **Allowed values:**
      • **0 (default).** Turns off Windows Defender SmartScreen.
      • **1.** Turns on Windows Defender SmartScreen.
    | -|PreventSmartScreenPromptOverrideForFiles|Windows 10, Version 1511 or later|Both|
    • **URI full path.** ./Vendor/MSFT/Policy/Config/Browser/PreventSmartScreenPromptOverrideForFiles
    • **Data type.** Integer
    • **Allowed values:**
      • **0 (default).** Lets employees ignore the Windows Defender SmartScreen warnings about unverified files and lets them continue the download process.
      • **1.** Stops employees from ignoring the Windows Defender SmartScreen warnings about unverified files.
    | -|PreventUsingLocalHost
    IPAddressForWebRTC|Windows 10, Version 1511 or later|Desktop|
    • **URI full path.** ./Vendor/MSFT/Policy/Config/Browser/PreventUsingLocalHostIPAddressForWebRTC
    • **Data type.** Integer
    • **Allowed values:**
      • **0 (default).** Shows an employee's LocalHost IP address while using the WebRTC protocol.
      • **1.** Doesn't show an employee's LocalHost IP address while using the WebRTC protocol.
    | -|SendIntranetTraffic
    toInternetExplorer|Windows 10 or later|Desktop|
    • **URI full path.** ./Vendor/MSFT/Policy/Config/Browser/SendIntranetTraffictoInternetExplorer
    • **Data type.** Integer
    • **Allowed values:**
      • **0 (default).** Automatically opens all websites, including intranet sites, using Microsoft Edge.
      • **1.** Automatically opens all intranet sites using Internet Explorer 11.
    | -|SetDefaultSearchEngine|Windows 10, Windows Insider Program|Both|
    • **URI full path.** ./Vendor/MSFT/Policy/Config/Browser/SetDefaultSearchEngine
    • **Data type.** Integer
    • **Allowed values:**
      • **0 (default).** The default search engine is set to the one specified in App settings.
      • **1.** Allows you to configure the default search engine for your employees.
    | -|ShowMessageWhen
    OpeningInteretExplorer
    Sites|Windows 10, Version 1607 and later|Desktop|
    • **URI full path.** ./Vendor/MSFT/Policy/Config/Browser/ShowMessageWhenOpeningSitesInInteretExplorer
    • **Data type.** Integer
    • **Allowed values:**
      • **0 (default).** Doesn’t show an additional page in Microsoft Edge, stating that a site has been opened using Internet Explorer 11.
      • **1.** Shows an additional page in Microsoft Edge, stating that a site has been opened using Internet Explorer 11.
    | -|SyncFavoritesBetweenIEAndMicrosoftEdge|Windows 10, Windows Insider Program|Desktop|
    • **URI full path.** ./Vendor/MSFT/Policy/Config/Browser/SyncFavoritesBetweenIEAndMicrosoftEdge
    • **Data type.** Integer
    • **Allowed values:**
      • **0 (default).** Synchronization is turned off.
      • **1.** Synchronization is turned on.
    | +### FirstRunURL +- **Supported versions:** Windows 10, Version 1511 or later + +- **Supported devices:** Mobile + +- **Details:** + + - **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/FirstRunURL + + - **Data type:** String + + - **Allowed values:** + + - Configure the first run URL for your employees. + + **Example:** + + + +### HomePages +- **Supported versions:** Windows 10, Version 1511 or later + +- **Supported devices:** Desktop + +- **Details:** + + - **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/HomePages + + - **Data type:** String + + - **Allowed values:** + + - Configure the Start page (previously known as Home page) URLs for your employees. + + **Example:** + + + +### PreventAccessToAboutFlagsInMicrosoftEdge +- **Supported versions:** Windows 10, Version 1607 and later + +- **Supported devices:** Desktop + +- **Details:** + + - **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/PreventAccessToAboutFlagsInMicrosoftEdge + + - **Data type:** Integer + + - **Allowed values:** + + - **0 (default).** Employees can access the about:flags page in Microsoft Edge. + + - **1.** Employees can't access the about:flags page in Microsoft Edge. + +### PreventFirstRunPage +- **Supported versions:** Windows 10, Windows Insider Program + +- **Supported devices:** Both + +- **Details:** + + - **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/PreventFirstRunPage + + - **Data type:** Integer + + - **Allowed values:** + + - **0 (default).** Employees see the First Run webpage. + + - **1.** Employees don't see the First Run webpage. + +### PreventLiveTileDataCollection +- **Supported versions:** Windows 10, Windows Insider Program + +- **Supported devices:** Both + +- **Details:** + + - **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/PreventLiveTileDataCollection + + - **Data type:** Integer + + - **Allowed values:** + + - **0 (default).** Microsoft servers will be contacted if a site is pinned to Start from Microsoft Edge. + + - **1.** Microsoft servers will not be contacted if a site is pinned to Start from Microsoft Edge. + +### PreventSmartScreenPromptOverride +- **Supported versions:** Windows 10, Version 1511 or later + +- **Supported devices:** Both + +- **Details:** + + - **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/PreventSmartscreenPromptOverride + + - **Data type:** Integer + + - **Allowed values:** + + - **0 (default).** Turns off Windows Defender SmartScreen. + + - **1.** Turns on Windows Defender SmartScreen. + +### PreventSmartScreenPromptOverrideForFiles +- **Supported versions:** Windows 10, Version 1511 or later + +- **Supported devices:** Both + +- **Details:** + + - **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/PreventSmartScreenPromptOverrideForFiles + + - **Data type:** Integer + + - **Allowed values:** + + - **0 (default).** Lets employees ignore the Windows Defender SmartScreen warnings about unverified files and lets them continue the download process. + + - **1.** Stops employees from ignoring the Windows Defender SmartScreen warnings about unverified files. + +### PreventUsingLocalHostIPAddressForWebRTC +- **Supported versions:** Windows 10, Version 1511 or later + +- **Supported devices:** Desktop + +- **Details:** + + - **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/PreventUsingLocalHostIPAddressForWebRTC + + - **Data type:** Integer + + - **Allowed values:** + + - **0 (default).** Shows an employee's LocalHost IP address while using the WebRTC protocol. + + - **1.** Doesn't show an employee's LocalHost IP address while using the WebRTC protocol. + +### SendIntranetTraffictoInternetExplorer +- **Supported versions:** Windows 10 or later + +- **Supported devices:** Desktop + +- **Details:** + + - **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/SendIntranetTraffictoInternetExplorer + + - **Data type:** Integer + + - **Allowed values:** + + - **0 (default).** Automatically opens all websites, including intranet sites, using Microsoft Edge. + + - **1.** Automatically opens all intranet sites using Internet Explorer 11. + +### SetDefaultSearchEngine +- **Supported versions:** Windows 10, Windows Insider Program + +- **Supported devices:** Both + +- **Details:** + + - **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/SetDefaultSearchEngine + + - **Data type:** Integer + + - **Allowed values:** + + - **0 (default).** The default search engine is set to the one specified in App settings. + + - **1.** Allows you to configure the default search engine for your employees. + +### ShowMessageWhenOpeningInteretExplorerSites +- **Supported versions:** Windows 10, Version 1607 and later + +- **Supported devices:** Desktop + +- **Details:** + + - **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ShowMessageWhenOpeningSitesInInteretExplorer + + - **Data type:** Integer + + - **Allowed values:** + + - **0 (default).** Doesn’t show an additional page in Microsoft Edge, stating that a site has been opened using Internet Explorer 11. + + - **1.** Shows an additional page in Microsoft Edge, stating that a site has been opened using Internet Explorer 11. + +### SyncFavoritesBetweenIEAndMicrosoftEdge +- **Supported versions:** Windows 10, Windows Insider Program + +- **Supported devices:** Desktop + +- **Details:** + + - **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/SyncFavoritesBetweenIEAndMicrosoftEdge + + - **Data type:** Integer + + - **Allowed values:** + + - **0 (default).** Synchronization is turned off. + + - **1.** Synchronization is turned on. ## Microsoft Edge and Windows 10-specific Group Policy settings These are additional Windows 10-specific Group Policy settings that work with Microsoft Edge. -|Group Policy setting|Description|Options| -|--------------------|--------------|---------| -|Computer Configuration\Administrative Templates\Windows Components\Search\Allow Cortana|Whether employees can use Cortana.|**Enabled or not configured:** Employees can use Cortana on their devices.

    **Disabled:** Stops employees from using Cortana on their devices.

    **Note** Employees can still perform searches even with Cortana turned off.| -|Computer Configuration\Administrative Templates\Windows Components\sync your settings\Do not sync|Whether employees can use the **Sync your Settings** options to sync their settings to and from their device.|**Enabled:** Turns off the **Sync your Settings** options and none of the **Sync your Setting** groups are synced on the device. You can use the **Allow users to turn syncing on** option to turn the feature off by default, but to let the employee change this setting.

    **Disabled or not configured (default):** Turns on the **Sync your Settings** area by default, letting employees pick what can sync on their device.| -|Computer Configuration\Administrative Templates\Windows Components\sync your settings\Do not sync browser settings|Whether a browser group can use the **Sync your Settings** options to sync their info to and from their device. This includes settings and info like **History** and Favorites.|**Enabled:** Turns off the **Sync your Settings** options so that browser groups are unable to sync their settings and info. You can use the **Allow users to turn browser syncing on** option to turn the feature off by default, but to let the employee change this setting.

    **Disabled or not configured (default):** Turns on the **Sync your Settings** area by default, letting browser groups pick what can sync on their device.| +### Computer Configuration\Administrative Templates\Windows Components\Search\Allow Cortana +- **Description:** This policy settings lets you decide whether employees can use Cortana. + + - If you enable or don't configure this setting, employees can use Cortana on their devices. + + - If you disable this setting, employees won't be able to use Cortana on their devices. + + >[!Note] + >Employees can still perform searches even with Cortana turned off. + +### Computer Configuration\Administrative Templates\Windows Components\sync your settings\Do not sync +- **Description:** This policy settings lets you decide whether employees can use the Sync your Settings options to sync their settings to and from their device. + + - If you enable this setting, the Sync your Settings options are turned off and none of the Sync your Setting groups are synced on the device. You can use the Allow users to turn syncing on option to turn the feature off by default, but to let the employee change this setting. + + - If you disable or don't configure this setting (default), the Sync your Settings options are turned on, letting employees pick what can sync on their device. + +### Computer Configuration\Administrative Templates\Windows Components\sync your settings\Do not sync browser settings +- **Description:** This policy settings lets you decide whether a browser group can use the Sync your Settings options to sync their info to and from their device. This includes settings and info like History and Favorites. + + - If you enable this setting, the Sync your Settings options are turned off so that browser groups are unable to sync their settings and info. You can use the Allow users to turn browser syncing on option to turn the feature off by default, but to let the employee change this setting. + + - If you disable or don't configure this setting (default), the Sync your Settings options are turned on, letting browser groups pick what can sync on their device. + ## Microsoft Edge and Windows 10-specific MDM policy settings These are additional Windows 10-specific MDM policy settings that work with Microsoft Edge. -|MDM Policy name|Supports|Details| -|----------------|--------------|-------------------| -|AllowCortana|Both|

    • **URI full path.** ./Vendor/MSFT/Policy/Config/Experience/AllowCortana
    • **Data type.** Integer
    • **Allowed values:**
      • **0.** Employees can’t use Cortana on their devices.
      • **1 (default).** Employees can use Cortana on their devices.
    | -|AllowSyncMySettings|Desktop|
    • **URI full path.** ./Vendor/MSFT/Policy/Config/Experience/AllowSyncMySettings
    • **Data type.** Integer
    • **Allowed values:**
      • **0.** Employees can’t sync settings between PCs.
      • **1 (default).** Employees can sync between PCs.
    | +### AllowCortana +- **Supported devices:** Both + +- **Details:** + + - **URI full path:** ./Vendor/MSFT/Policy/Config/Experience/AllowCortana + + - **Data type:** Integer + + - **Allowed values:** + + - **0.** Employees can’t use Cortana on their devices. + + - **1 (default).** Employees can use Cortana on their devices. + +### AllowSyncMySettings +- **Supported devices:** Desktop + +- **Details:** + + - **URI full path:** ./Vendor/MSFT/Policy/Config/Experience/AllowSyncMySettings + + - **Data type:** Integer + + - **Allowed values:** + + - **0.** Employees can’t sync settings between PCs. + + - **1 (default).** Employees can sync between PCs. ## Related topics * [Group Policy TechCenter](https://go.microsoft.com/fwlink/p/?LinkId=214514) From 8b312040cd7319eba8a963c0499a33a939b9da45 Mon Sep 17 00:00:00 2001 From: LizRoss Date: Tue, 7 Mar 2017 08:45:39 -0800 Subject: [PATCH 12/13] Added content --- browsers/edge/change-history-for-microsoft-edge.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/browsers/edge/change-history-for-microsoft-edge.md b/browsers/edge/change-history-for-microsoft-edge.md index 9501635fa9..ce750be2f7 100644 --- a/browsers/edge/change-history-for-microsoft-edge.md +++ b/browsers/edge/change-history-for-microsoft-edge.md @@ -15,7 +15,7 @@ For a detailed feature list of what's in the current Microsoft Edge releases, th ## February 2017 |New or changed topic | Description | |----------------------|-------------| -|[Available Group Policy and Mobile Data Management (MDM) settings for Microsoft Edge](available-policies.md) |Added new Group Policy and MDM settings for the Windows Insider Program. | +|[Available Group Policy and Mobile Data Management (MDM) settings for Microsoft Edge](available-policies.md) |Added new Group Policy and MDM settings for the Windows Insider Program. Reformatted for easier readability outside of scrolling table. | ## November 2016 |New or changed topic | Description | From ea5f7b04997cfdbf5f2f531f2cd643a4ee8bd6e1 Mon Sep 17 00:00:00 2001 From: LizRoss Date: Tue, 7 Mar 2017 08:59:08 -0800 Subject: [PATCH 13/13] Adding content --- browsers/edge/available-policies.md | 12 +++++++++--- 1 file changed, 9 insertions(+), 3 deletions(-) diff --git a/browsers/edge/available-policies.md b/browsers/edge/available-policies.md index 04f361671f..cdb17ac81f 100644 --- a/browsers/edge/available-policies.md +++ b/browsers/edge/available-policies.md @@ -963,7 +963,9 @@ All devices must be enrolled with Intune if you want to use the Windows Custom U ## Microsoft Edge and Windows 10-specific Group Policy settings These are additional Windows 10-specific Group Policy settings that work with Microsoft Edge. -### Computer Configuration\Administrative Templates\Windows Components\Search\Allow Cortana +### Allow Cortana +- **Location:** Computer Configuration\Administrative Templates\Windows Components\Search\Allow Cortana + - **Description:** This policy settings lets you decide whether employees can use Cortana. - If you enable or don't configure this setting, employees can use Cortana on their devices. @@ -973,14 +975,18 @@ These are additional Windows 10-specific Group Policy settings that work with M >[!Note] >Employees can still perform searches even with Cortana turned off. -### Computer Configuration\Administrative Templates\Windows Components\sync your settings\Do not sync +### Do not sync +- **Location:** Computer Configuration\Administrative Templates\Windows Components\sync your settings\Do not sync + - **Description:** This policy settings lets you decide whether employees can use the Sync your Settings options to sync their settings to and from their device. - If you enable this setting, the Sync your Settings options are turned off and none of the Sync your Setting groups are synced on the device. You can use the Allow users to turn syncing on option to turn the feature off by default, but to let the employee change this setting. - If you disable or don't configure this setting (default), the Sync your Settings options are turned on, letting employees pick what can sync on their device. -### Computer Configuration\Administrative Templates\Windows Components\sync your settings\Do not sync browser settings +### Do not sync browser settings +- **Location:** Computer Configuration\Administrative Templates\Windows Components\sync your settings\Do not sync browser settings + - **Description:** This policy settings lets you decide whether a browser group can use the Sync your Settings options to sync their info to and from their device. This includes settings and info like History and Favorites. - If you enable this setting, the Sync your Settings options are turned off so that browser groups are unable to sync their settings and info. You can use the Allow users to turn browser syncing on option to turn the feature off by default, but to let the employee change this setting.