mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-22 22:03:46 +00:00
adding links for the preview document
This commit is contained in:
Patti Short
@ -11,8 +11,8 @@
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Not configured |Blank |Blank |Users can choose what loads in the New tab page. | |
|
||||
|Disabled |0 |0 |A blank page loads instead of the default New tab page and prevent users from changing it. | |
|
||||
|Enabled **(default)** |1 |1 |Default New tab page loads. | |
|
||||
|Disabled |0 |0 |Load a blank page instead of the default New tab page and prevents users from changing it. | |
|
||||
|Enabled **(default)** |1 |1 |Load the default New tab page. | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
@ -24,7 +24,7 @@
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[AllowWebContentOnNewTabPage]()
|
||||
- **MDM name:** Browser/[AllowWebContentOnNewTabPage](../new-policies.md#allowwebcontentonnewtabpage)
|
||||
- **Supported devices:** Desktop
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowWebContentOnNewTabPage
|
||||
- **Data type:** Integer
|
||||
|
||||
@ -14,25 +14,96 @@
|
||||
|Group Policy |MDM |Registry |Description |
|
||||
|---|---|---|---|
|
||||
|Not configured |Blank |Blank |If you don't configure this policy and you enable the Disable Lockdown of Start Pages policy, users can change or customize the Start page. |
|
||||
|Enabled |0 |0 |Loads Start page. |
|
||||
|Enabled |1 |1 |Loads New tab page. |
|
||||
|Enabled |2 |2 |Loads previous pages. |
|
||||
|Enabled<br>**(default)** |3 |3 |Loads a specific page or pages. |
|
||||
|Enabled |0 |0 |Loads the Start page. |
|
||||
|Enabled |1 |1 |Load the New tab page. |
|
||||
|Enabled |2 |2 |Load the previous pages. |
|
||||
|Enabled<br>**(default)** |3 |3 |Load a specific page or pages. |
|
||||
---
|
||||
|
||||
### Configuration combinations
|
||||
| **Configure Open Microsoft Edge With** | **Configure Start Pages** | **Disabled Lockdown of Start Pages** | **Results** |
|
||||
| --- | --- | --- | --- |
|
||||
| Enabled (applies to all options) | Enabled – String | Enabled (all configured start pages are editable) | [\#1: Load URLs defined in the Configure Open Microsoft Edge With policy, and allow users to edit all configured start pages.](#1-load-the-urls-defined-in-the-configure-open-microsoft-edge-with-policy-and-allow-users-to-edit-all-configured-start-pages) |
|
||||
| Disabled or not configured | Enabled – String | Enabled (any Start page configured in the Configured Start Pages policy) | [\#2: Load any start page and allow users to edit their Start pages.](#2-load-any-start-page-configured-using-the-configured-start-pages-policy-and-allow-users-to-edit-their-start-pages) |
|
||||
| Enabled (Start page) | Enabled – String | Blank or not configured | [\#3: Load Start page(s) and prevent users from changing it.](#3-load-the-start-pages-and-prevent-users-from-making-changes) |
|
||||
| Enabled (New tab page) | Enabled – String | Blank or not configured | [\#4: Load New tab page and prevent users from changing it.](#4-load-the-new-tab-page-and-prevent-users-from-making-changes) |
|
||||
| Enabled (Previous pages) | Enabled – String | Blank or not configured | [\#5: Load previously opened pages and prevent users from changing it.](#5-load-the-previously-opened-pages-that-were-opened-when-microsoft-edge-last-closed-and-prevent-users-from-making-changes) |
|
||||
| Enabled (A specific page or pages) | Enabled – String | Blank or not configured | [\#6: Load a specific page or pages and prevent users from changing it.](#6-load-a-specific-page-or-pages-defined-in-the-configure-start-pages-policy-and-prevent-users-from-making-changes) |
|
||||
| Enabled (A specific page or pages) | Enabled – String | Enabled (any Start page configured in Configure Start Pages policy) | [\#7: Load a specific page or pages and allow users to make changes to their Start page.](#7-load-a-specific-page-or-pages-defined-in-the-configure-start-pages-policy-and-allow-users-to-make-changes-to-their-start-page) |
|
||||
| N/A | Blank or not configured | N/A | Microsoft Edge loads the pages specified in App settings as the default Start pages. |
|
||||
| Enabled (applies to all options) | Enabled – String | Enabled (all configured start pages are editable) | Load URLs defined in the Configure Open Microsoft Edge With policy, and allow users to make changes. |
|
||||
| Disabled or not configured | Enabled – String | Enabled (any Start page configured in the Configured Start Pages policy) | Load any start page and let users make changes .|
|
||||
| Enabled (Start page) | Enabled – String | Blank or not configured | Load Start page(s) and prevent users from making changes. |
|
||||
| Enabled (New tab page) | Enabled – String | Blank or not configured | Load New tab page and prevent users from making changes. |
|
||||
| Enabled (Previous pages) | Enabled – String | Blank or not configured | Load previously opened pages and prevent users from making changes. |
|
||||
| Enabled (A specific page or pages) | Enabled – String | Blank or not configured | Load a specific page or pages and prevent users from making changes. |
|
||||
| Enabled (A specific page or pages) | Enabled – String | Enabled (any Start page configured in Configure Start Pages policy) | Load a specific page or pages and let users make changes. |
|
||||
| N/A | Blank or not configured | N/A | Load the pages specified in App settings as the default Start pages. |
|
||||
---
|
||||
If you want to make changes to this policy:<ol><li>Set the Disabled Lockdown of Start Pages to not configured.</li><li>Make changes to the Configure Open Microsoft With policy.</li><li>Enable the Disabled Lockdown of Start Pages.</li></ol>
|
||||
|
||||
#### Load URLs defined in the Configure Open Microsoft Edge With policy, and let users make changes.
|
||||
|
||||
1. Enable the **Configure Open Microsoft Edge With** policy. Applies to all options for this policy. <p>
|
||||
|
||||
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
|
||||
|
||||
3. Enable the **Disabled Lockdown of Start Pages** policy by selecting *All configured start pages are editable*.
|
||||
|
||||
---
|
||||
|
||||
#### Load any start page and let users make changes.
|
||||
|
||||
1. Disable or don't configure the **Configure Open Microsoft Edge With** policy.
|
||||
|
||||
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets in the following format:<p> \<support.contoso.com\>\<support.microsoft.com\>
|
||||
|
||||
3. Enable the **Disabled Lockdown of Start Pages** policy by selecting *Start pages are not editable*.
|
||||
|
||||
---
|
||||
|
||||
#### Load Start page(s) and prevent users from making changes.
|
||||
|
||||
1. Enable the **Configure Open Microsoft Edge With** policy by selecting *Start page*.<p>
|
||||
|
||||
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
|
||||
|
||||
3. Disable or don't configure the **Disabled Lockdown of Start Pages** policy.
|
||||
|
||||
---
|
||||
|
||||
#### Load New tab page and prevent users from making changes.
|
||||
|
||||
1. Enable the **Configure Open Microsoft Edge With** policy by selecting *New tab page*.<p>
|
||||
|
||||
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
|
||||
|
||||
3. Disable or don't configure the **Disabled Lockdown of Start Pages** policy.
|
||||
|
||||
---
|
||||
|
||||
|
||||
#### Load previously opened pages and prevent users from making changes.
|
||||
|
||||
1. Enable the **Configure Open Microsoft Edge With** policy by selecting *Previous pages*.<p>
|
||||
|
||||
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
|
||||
|
||||
3. Disable or don't configure the **Disabled Lockdown of Start Pages** policy.
|
||||
|
||||
---
|
||||
|
||||
|
||||
#### Load a specific page or pages and prevent users from making changes.
|
||||
|
||||
1. Enable the **Configure Open Microsoft Edge With** policy by selecting *A specific page or pages*.<p>
|
||||
|
||||
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
|
||||
|
||||
3. Disable or don't configure the **Disabled Lockdown of Start Pages** policy.
|
||||
|
||||
---
|
||||
|
||||
|
||||
#### Load a specific page or pages and let users make changes.
|
||||
|
||||
1. Enable the **Configure Open Microsoft Edge With** policy by selecting *A specific page or pages*. <p>
|
||||
|
||||
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
|
||||
|
||||
3. Enable **Disabled Lockdown of Start Pages** by selecting *Start pages are not editable*.
|
||||
### ADMX info and settings
|
||||
#### ADMX info
|
||||
- **GP English name:** Configure Open Microsoft Edge With
|
||||
@ -59,77 +130,6 @@
|
||||
|
||||
### Scenarios
|
||||
|
||||
If you want to make changes to this policy:<ol><li>Set the Disabled Lockdown of Start Pages to not configured.</li><li>Make changes to the Configure Open Microsoft With policy.</li><li>Enable the Disabled Lockdown of Start Pages.</li></ol>
|
||||
|
||||
#### \#1: Load URLs defined in the Configure Open Microsoft Edge With policy, and allow users to edit all configured start pages.
|
||||
|
||||
1. Enable the **Configure Open Microsoft Edge With** policy. Applies to all options for this policy. <p>
|
||||
|
||||
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
|
||||
|
||||
3. Enable the **Disabled Lockdown of Start Pages** policy by selecting *All configured start pages are editable*.
|
||||
|
||||
---
|
||||
|
||||
#### \#2: Load any start page and allow users to edit their Start pages.
|
||||
|
||||
1. Disable or don't configure the **Configure Open Microsoft Edge With** policy.
|
||||
|
||||
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets in the following format:<p> \<support.contoso.com\>\<support.microsoft.com\>
|
||||
|
||||
3. Enable the **Disabled Lockdown of Start Pages** policy by selecting *Start pages are not editable*.
|
||||
|
||||
---
|
||||
|
||||
#### \#3: Load Start page(s) and prevent users from changing it.
|
||||
|
||||
1. Enable the **Configure Open Microsoft Edge With** policy by selecting *Start page*.<p>
|
||||
|
||||
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
|
||||
|
||||
3. Disable or don't configure the **Disabled Lockdown of Start Pages** policy.
|
||||
|
||||
---
|
||||
|
||||
#### \#4: Load New tab page and prevent users from changing it..
|
||||
|
||||
1. Enable the **Configure Open Microsoft Edge With** policy by selecting *New tab page*.<p>
|
||||
|
||||
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
|
||||
|
||||
3. Disable or don't configure the **Disabled Lockdown of Start Pages** policy.
|
||||
|
||||
---
|
||||
|
||||
|
||||
#### \#5: Load previously opened pages and prevent users from changing it.
|
||||
|
||||
1. Enable the **Configure Open Microsoft Edge With** policy by selecting *Previous pages*.<p>
|
||||
|
||||
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
|
||||
|
||||
3. Disable or don't configure the **Disabled Lockdown of Start Pages** policy.
|
||||
|
||||
---
|
||||
|
||||
|
||||
#### \#6: Load a specific page or pages and prevent users from changing it.
|
||||
|
||||
1. Enable the **Configure Open Microsoft Edge With** policy by selecting *A specific page or pages*.<p>
|
||||
|
||||
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
|
||||
|
||||
3. Disable or don't configure the **Disabled Lockdown of Start Pages** policy.
|
||||
|
||||
---
|
||||
|
||||
|
||||
#### \#7: Load a specific page or pages and allow users to make changes to their Start page.
|
||||
|
||||
1. Enable the **Configure Open Microsoft Edge With** policy by selecting *A specific page or pages*. <p>
|
||||
|
||||
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
|
||||
|
||||
3. Enable **Disabled Lockdown of Start Pages** by selecting *Start pages are not editable*.
|
||||
|
||||
---
|
||||
@ -8,8 +8,8 @@
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled or not configured<br>**(default)** |0 |0 |Allowed/turned on. The “browser” group syncs automatically between user’s devices and lets users to make changes. | |
|
||||
|Enabled |2 |2 |Prevents (turned off) the “browser” group from using the Sync your Settings option. | |
|
||||
|Disabled or not configured<br>**(default)** |0 |0 |Allowed/turned on. The “browser” group syncs automatically between user’s devices and lets users to make changes. | |
|
||||
|Enabled |2 |2 |Prevented/turned off. The “browser” group does not use the Sync your Settings option. | |
|
||||
---
|
||||
|
||||
### Configuration options
|
||||
@ -22,18 +22,18 @@
|
||||
| 0/disabled or not configured (default) – Turned on; users can make changes | N/A | Turn on Sync your Settings option by default and allow users to make changes. |
|
||||
---
|
||||
|
||||
#### If you want Microsoft Edge to sync the browser settings automatically:
|
||||
#### Sync the browser settings automatically:
|
||||
Disable both the Do not sync browser settings Prevent users from turning on browser syncing policies.
|
||||
|
||||
#### If you want to prevent syncing of browser settings and prevent users from turning it on:
|
||||
#### Prevent syncing of browser settings and prevent users from turning it on:
|
||||
1. Enable the Do not sync browser settings policy.
|
||||
2. Enable or don’t configure this policy (Prevented/turned off).
|
||||
|
||||
#### If you want to prevent syncing of browser settings and give users a choice to turn on syncing:
|
||||
#### Prevent syncing of browser settings and give users a choice to turn on syncing:
|
||||
1. Enable the Do not sync browser settings policy.
|
||||
2. Disable this policy (Allowed/turned on).
|
||||
|
||||
#### If you want syncing turned off by default but not disabled:
|
||||
#### Syncing turned off by default but not disabled:
|
||||
1. Enable the Do not sync browser setting policy.
|
||||
2. Select the _Allow users to turn “browser” syncing_ option.
|
||||
|
||||
@ -52,7 +52,7 @@ To verify if syncing is turned on or off:
|
||||
- **GP ADMX file name:** SettingSync.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Experience/[Experience/DoNotSyncBrowserSetting]()
|
||||
- **MDM name:** Experience/[Experience/DoNotSyncBrowserSetting](../new-policies.md#donotsyncbrowsersetting)
|
||||
- **Supported devices:** Desktop
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Experience/DoNotSyncBrowserSetting
|
||||
- **Data type:** Integer
|
||||
@ -65,7 +65,7 @@ To verify if syncing is turned on or off:
|
||||
|
||||
### Related policies
|
||||
|
||||
Prevent users from turning on browser syncing: [!INCLUDE [prevent-users-to-turn-on-browser-syncing-shortdesc](../shortdesc/prevent-users-to-turn-on-browser-syncing-shortdesc.md)]
|
||||
[Prevent users from turning on browser syncing](../new-policies.md#prevent-users-from-turning-on-browser-syncing): [!INCLUDE [prevent-users-to-turn-on-browser-syncing-shortdesc](../shortdesc/prevent-users-to-turn-on-browser-syncing-shortdesc.md)]
|
||||
|
||||
### Related topics
|
||||
|
||||
|
||||
@ -1,12 +1,12 @@
|
||||
<!-- ## Prevent certificate error overrides -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10, version 1810*<br>
|
||||
>*Supported versions: Microsoft Edge on Windows 10, next major version*<br>
|
||||
>*Default setting: Disabled or not configured (Allowed/turned off)*
|
||||
|
||||
[!INCLUDE [prevent-certificate-error-overrides-shortdesc](../shortdesc/prevent-certificate-error-overrides-shortdesc.md)]
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled or not configured<br>**(default)** |0 |0 |Allowed/turned on. Overrides the security warning to sites that have SSL errors. | |
|
||||
|Disabled or not configured<br>**(default)** |0 |0 |Allowed/turned on. Override the security warning to sites that have SSL errors. | |
|
||||
|Enabled |1 |1 |Prevented/turned on. | |
|
||||
---
|
||||
|
||||
@ -18,7 +18,7 @@
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[PreventCertErrorOverrides]()
|
||||
- **MDM name:** Browser/[PreventCertErrorOverrides](../new-policies.md#prevent-certificate-error-overrides)
|
||||
- **Supported devices:** Desktop and Mobile
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/PreventCertErrorOverrides
|
||||
- **Data type:** Integer
|
||||
|
||||
@ -9,7 +9,7 @@
|
||||
|Group Policy |Description |Most restricted |
|
||||
|---|---|:---:|
|
||||
|Disabled or not configured<br>**(default)** |Provide a semi-colon delimited list of extension PFNs. For example, adding _Microsoft.OneNoteWebClipper8wekyb3d8bbwe_ or _Microsoft.OfficeOnline8wekyb3d8bbwe_ prevents a user from turning off the OneNote Web Clipper and Office Online extension. After defining the list of extensions, you deploy them through any available enterprise deployment channel, such as Microsoft Intune. Removing extensions from the list does not uninstall the extension from the user’s computer automatically. To uninstall the extension, use any available enterprise deployment channel. If you enable the Allow Developer Tools policy, then this policy does not prevent users from debugging and altering the logic on an extension. | |
|
||||
|Enabled |Allowed. Users can uninstall extensions. If you previously enabled this policy and you decide to disable it, the list of extension PFNs defined in this policy get ignored. | |
|
||||
|Enabled |Allowed. Users can uninstall extensions. If you previously enabled this policy and you decide to disable it, the list of extension PFNs defined in this policy get ignored. | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
@ -20,7 +20,7 @@
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[PreventTurningOffRequiredExtensions]()
|
||||
- **MDM name:** Browser/[PreventTurningOffRequiredExtensions](../new-policies.md#prevent-turning-off-required-extensions)
|
||||
- **Supported devices:** Desktop and Mobile
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/PreventTurningOffRequiredExtensions
|
||||
- **Data type:** Integer
|
||||
|
||||
@ -18,29 +18,29 @@
|
||||
| --- | --- | --- |
|
||||
| 0/disabled or not configured (default) – Turned on; users can make changes | 0/disabled (default) | Microsoft Edge syncs browser settings automatically. |
|
||||
| 0/disabled or not configured (default) – Turned on; users can make changes | 1/enabled or not configured | Microsoft Edge syncs browser settings automatically. |
|
||||
| 2/enabled – Prevented/turned off | 0/disabled (default) | Prevents syncing of browser setting, but gives users the choice to turn it on. |
|
||||
| 2/enabled – Turned off | 1/enabled or not configured | Prevents browser setting sync and prevents users from turning on syncing. |
|
||||
| 2/enabled – Prevented/turned off | 0/disabled (default) | Prevent syncing of browser setting but gives users the choice to turn it on. |
|
||||
| 2/enabled – Turned off | 1/enabled or not configured | Prevent browser setting sync and prevents users from turning on syncing. |
|
||||
| 0/disabled or not configured (default) – Turned on; users can make changes | N/A | Turn on Sync your Settings option by default and allow users to make changes. |
|
||||
---
|
||||
|
||||
#### If you want to prevent syncing of browser settings and prevent users from turning it on:
|
||||
#### Prevent syncing of browser settings and prevent users from turning it on:
|
||||
1. Enable the Do not sync browser settings policy.
|
||||
2. Enable or don’t configure this policy (Prevented/turned off).
|
||||
|
||||
#### If you want to prevent syncing of browser settings and give users a choice to turn on syncing:
|
||||
#### Prevent syncing of browser settings and give users a choice to turn on syncing:
|
||||
1. Enable the Do not sync browser settings policy.
|
||||
2. Disable this policy (Allowed/turned on).
|
||||
|
||||
#### If you want syncing turned off by default but not disabled:
|
||||
#### Turn off syncing by default but do not disable:
|
||||
1. Enable the Do not sync browser setting policy.
|
||||
2. Select the _Allow users to turn “browser” syncing_ option.
|
||||
|
||||
### ADMX info and settings
|
||||
#### ADMX info
|
||||
- **GP English name:** Prevent users from turning on browser syncing
|
||||
- **GP name:** ???
|
||||
- **GP name:** PreventUsersFromTurningOnBrowserSyncing
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** ???.admx
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Experience/[PreventUsersFromTurningOnBrowserSyncing]()
|
||||
@ -49,9 +49,9 @@
|
||||
- **Data type:** String
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HLKM\Software\Policies\Microsoft\???
|
||||
- **Value name:** ???
|
||||
- **Value type:** REG_SZ
|
||||
- **Path:** HLKM\Software\Policies\Microsoft\MicrosoftEdge
|
||||
- **Value name:**
|
||||
- **Value type:**
|
||||
|
||||
### Related policies
|
||||
[Do not sync browser settings](../available-policies.md#do-not-sync-browser-settings): [!INCLUDE [do-not-sync-browser-settings-shortdesc](../shortdesc/do-not-sync-browser-settings-shortdesc.md)].
|
||||
|
||||
@ -8,7 +8,7 @@
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled or not configured<br>**(default)** |Blank |Blank |Microsoft Edge shows the home button and loads the Start page, and locks down the home button to prevent users from changing what page loads. | |
|
||||
|Disabled or not configured<br>**(default)** |Blank |Blank |Show the home button and loads the Start page and locks down the home button to prevent users from changing what page loads. | |
|
||||
|Enabled - String |String |String |Enter a URL in string format, for example, https://www.msn.com. A custom URL loads when clicking the home button. You must also enable the [Configure Home Button](../new-policies.md#configure-home-button) policy and select the _Show home button & set a specific page_ option. | |
|
||||
---
|
||||
|
||||
@ -39,7 +39,7 @@ Enable the **Configure Home Button** policy and select the _Hide home button_ op
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[SetHomeButtonURL]()
|
||||
- **MDM name:** Browser/[SetHomeButtonURL](../new-policies.md#set-home-button-url)
|
||||
- **Supported devices:** Desktop and Mobile
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/SetHomeButtonURL
|
||||
- **Data type:** Integer
|
||||
|
||||
@ -8,21 +8,11 @@
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled or not configured<br>**(default)** |Blank |Blank |Microsoft Edge loads the default New tab page. | |
|
||||
|Enabled - String |String |String |Enter a URL in string format, for example, https://www.msn.com. A custom URL loads for the New tab page. When you enable this policy and disable the Allow web content on New tab page policy, Microsoft Edge opens about:blank. | |
|
||||
|Disabled or not configured<br>**(default)** |Blank |Blank |Load the default New tab page. | |
|
||||
|Enabled - String |String |String |Enter a URL in string format, for example, https://www.msn.com.<p>Prevent users from changing the New tab page.
|
||||
| |
|
||||
---
|
||||
|
||||
### Configuration combinations
|
||||
|
||||
| **Set New Tab page URL** | **Allow web content on New tab page** | **Results** |
|
||||
| --- | --- | --- |
|
||||
| Enabled – String | Enabled (default) | |
|
||||
| Enabled – String | Disabled | A blank page loads instead of the default New tab page. |
|
||||
| Enabled – String | Not configured | |
|
||||
| Disabled or not configured (default) | Enabled (default) | |
|
||||
| Disabled or not configured (default) | Disabled | |
|
||||
| Disabled or not configured (default) | Not configured | |
|
||||
|
||||
### ADMX info and settings
|
||||
#### ADMX info
|
||||
- **GP English name:** Set New Tab page URL
|
||||
@ -31,7 +21,7 @@
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[SetNewTabPageURL]()
|
||||
- **MDM name:** Browser/[SetNewTabPageURL](../new-policies.md#set-new-tab-page-url)
|
||||
- **Supported devices:** Desktop
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/SetNewTabPageURL
|
||||
- **Data type:** String
|
||||
@ -44,6 +34,7 @@
|
||||
|
||||
### Related policies
|
||||
|
||||
[Allow web content on New Tab page](https://docs.microsoft.com/en-us/microsoft-edge/deploy/available-policies#allow-web-content-on-new-tab-page): [!INCLUDE [allow-web-content-on-new-tab-page-shortdesc](../shortdesc/allow-web-content-on-new-tab-page-shortdesc.md)]
|
||||
[Allow web content on New Tab page](../new-policies.md#allowwebcontentonnewtabpage): [!INCLUDE [allow-web-content-on-new-tab-page-shortdesc](../shortdesc/allow-web-content-on-new-tab-page-shortdesc.md)]
|
||||
|
||||
|
||||
<hr>
|
||||
@ -10,29 +10,10 @@
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled or not configured<br>**(default)** |0 |0 |No additional message displays. | |
|
||||
|Enabled |1 |1 |Shows an additional message stating that a site has opened in IE11. | |
|
||||
|Enabled |2 |2 |Shows an additional message with a "Keep going in Microsoft Edge" link. | |
|
||||
|Enabled |1 |1 |Show an additional message stating that a site has opened in IE11. | |
|
||||
|Enabled |2 |2 |Show an additional message with a "Keep going in Microsoft Edge" link. | |
|
||||
---
|
||||
|
||||
### Configuration combinations
|
||||
|
||||
| **Show message when opening sites in Internet Explorer** | **Configure the Enterprise Mode Site List** | **Send all intranet sites to Internet Explorer, or both.** | **Results** |
|
||||
| --- | --- | --- | --- |
|
||||
| Disabled or not configured (default) | Disabled or not configured (default) | Disabled or not configured (default) | |
|
||||
| Disabled or not configured | Disabled or not configured (default) | Enabled (only intranet sites open in IE11) | |
|
||||
| Disabled or not configured | Enabled (turned on) | Disabled or not configured (default) | |
|
||||
| Disabled or not configured | Enabled (turned on) | Enabled (only intranet sites open in IE11) | |
|
||||
| Enabled (shows an additional message) | Disabled or not configured (default) | Disabled or not configured (default) | |
|
||||
| Enabled (shows an additional message) | Enabled (turned on) | Disabled or not configured (default) | |
|
||||
| Enabled (shows an additional message) | Enabled (turned on) | Enabled (only intranet sites open in IE11) | |
|
||||
| Enabled (shows an additional message) | Disabled or not configured (default) | Enabled (only intranet sites open in IE11) | |
|
||||
| Enabled (shows the Keep going link) | Disabled or not configured (default) | Disabled or not configured (default) | |
|
||||
| Enabled (shows the Keep going link) | Enabled (turned on) | Disabled or not configured (default) | |
|
||||
| Enabled (shows the Keep going link) | Enabled (turned on) | Enabled (only intranet sites open in IE11) | |
|
||||
| Enabled (shows the Keep going link) | Disabled or not configured (default) | Enabled (only intranet sites open in IE11) | |
|
||||
---
|
||||
|
||||
|
||||
### ADMX info and settings
|
||||
#### ADMX info
|
||||
- **GP English name:** Show message when opening sites in Internet Explorer
|
||||
@ -53,18 +34,9 @@
|
||||
|
||||
### Related policies
|
||||
|
||||
- [Configure the Enterprise Mode Site List](../available-policies.md#configure-the-enterprise-mode-site-list): [!INCLUDE [configure-enterprise-mode-site-list-shortdesc](../shortdesc/configure-enterprise-mode-site-list-shortdesc.md)]
|
||||
- [Configure the Enterprise Mode Site List](../available-policies.md#configure-the-enterprise-mode-site-list): [!INCLUDE [configure-enterprise-mode-site-list-shortdesc](../shortdesc/configure-enterprise-mode-site-list-shortdesc.md)]
|
||||
|
||||
- [Send all intranet sites to Internet Explorer 11](../available-policies.md#send-all-intranet-sites-to-internet-explorer-11): [!INCLUDE [send-all-intranet-sites-to-ie-shortdesc](../shortdesc/send-all-intranet-sites-to-ie-shortdesc.md)]
|
||||
|
||||
### Scenarios
|
||||
|
||||
Customer has all Intranet sites redirect from Edge to IE, and as website owners find their sites no longer require IE, they override the setting for that specific site to no longer redirect it to IE.
|
||||
|
||||
As part of this, we have a GPO in place for our website owners to not hide the page Edge displays saying they were redirected. Before the Fall Creators Update, that page looked something like this:
|
||||
|
||||
Note the option to “Keep going in Microsoft Edge” at the bottom which would allow our website owners to be able to continue to their site in Edge to test.
|
||||
|
||||
Meaning that our website owners can no longer test their websites in Edge due to our GPO redirecting all internal sites to IE. So now they can’t test to let us know if their site will work in Edge. Is this by design? If so, is there a work around that Microsoft would suggest for our users?
|
||||
|
||||
<hr>
|
||||
@ -14,25 +14,9 @@
|
||||
|
||||
With these values, you can do any of the following configurations:
|
||||
|
||||
#### If you want to show the home button, load the New tab page, and prevent users from making changes to the settings.
|
||||
1. **Configure Home Button:** Enable and select the _Show home button & set to New tab page_ option.
|
||||
2. **Set Home Button URL:** Leave blank or not configured.
|
||||
3. **Unlock Home Button:** Leave disabled or not configured.
|
||||
|
||||
|
||||
#### If you want to show the home button, load the New tab page, and let users make changes:
|
||||
1. **Configure Home Button:** Enable and select the _Show home button & set to New tab page_ option.
|
||||
2. **Set Home Button URL:** Leave blank or not configured.
|
||||
3. **Unlock Home Button:** Enable to let users make changes.
|
||||
|
||||
#### If you want to show the home button, load a custom URL, and prevent users from making changes:
|
||||
1. **Configure Home Button:** Enable and select the _Show the home button & set a specific page_ option.
|
||||
2. **Set Home Button URL:** Enter a URL in string format, for example, https://www.bing.com.
|
||||
3. **Unlock Home Button:** Leave disabled or not configured.
|
||||
|
||||
#### If you want to show the home button, load a custom URL, and let users make changes:
|
||||
1. **Configure Home Button:** Enable and select the _Show the home button & set a specific page_ option.
|
||||
2. **Set Home Button URL:** Enter a URL in string format, for example, https://www.bing.com.
|
||||
3. **Unlock Home Button:** Enable to let users make changes.
|
||||
|
||||
|
||||
|
||||
### ADMX info and settings
|
||||
@ -43,7 +27,7 @@ With these values, you can do any of the following configurations:
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[UnlockHomeButton]()
|
||||
- **MDM name:** Browser/[UnlockHomeButton](../new-policies.md#unlock-home-button)
|
||||
- **Supported devices:** Desktop
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/UnlockHomeButton
|
||||
- **Data type:** Integer
|
||||
@ -55,8 +39,8 @@ With these values, you can do any of the following configurations:
|
||||
|
||||
### Related policies
|
||||
|
||||
- [Configure Home Button](#configure-home-button-include): [!INCLUDE [configure-home-button-shortdesc](../shortdesc/configure-home-button-shortdesc.md)]
|
||||
- [Configure Home Button](../new-policies.md#configure-home-button-include): [!INCLUDE [configure-home-button-shortdesc](../shortdesc/configure-home-button-shortdesc.md)]
|
||||
|
||||
- [Set Home Button URL](#set-home-button-url-include): [!INCLUDE [set-home-button-url-shortdesc](../shortdesc/set-home-button-url-shortdesc.md)]
|
||||
- [Set Home Button URL](../new-policies.md#set-home-button-url-include): [!INCLUDE [set-home-button-url-shortdesc](../shortdesc/set-home-button-url-shortdesc.md)]
|
||||
|
||||
<hr>
|
||||
@ -17,14 +17,15 @@ ms.date: 07/18/2018
|
||||
Microsoft Edge kiosk mode works with assigned access to allow IT, administrators, to create a tailored browsing experience designed for kiosk
|
||||
devices. To use Microsoft Edge kiosk mode, you must configure Microsoft Edge as an application in assigned access. Learn more about [Configuring kiosk and shared devices running Windows desktop editions](https://docs.microsoft.com/en-us/windows/configuration/kiosk-shared-pc).
|
||||
|
||||
When you configure Microsoft Edge kiosk mode in assigned access, you can set it up to show only a single URL in full-screen, in the case of digital/interactive signage on a single-app kiosk device. You can restrict Microsoft Edge for public browsing (on a single and multi-app kiosk device) which runs a multi-tab version of InPrivate with limited functionality. Also, you can configure a multi-app kiosk device to run a full or normal version of Microsoft Edge.
|
||||
When you configure Microsoft Edge kiosk mode in assigned access, you can set it up to show only a single URL in full-screen, in the case of digital/interactive signage on a single-app kiosk device. You can restrict Microsoft Edge for public browsing (on a single and multi-app kiosk device) which runs a multi-tab version of InPrivate with limited functionality. Also, you can configure a multi-app kiosk device to run a full or normal version of Microsoft Edge.
|
||||
|
||||
Digital/Interactive signage and public browsing protects the user’s data by running Microsoft Edge InPrivate. In single-app public browsing, there is both an idle timer and an 'End Session' button. The idle timer resets the browsing session after a specified time of user inactivity.
|
||||
|
||||
In this deployment guidance, you learn about the different Microsoft Edge kiosk mode types to help you determine what configuration is best suited for your kiosk device. You also learn how to setup your Microsoft Edge kiosk mode experience.
|
||||
|
||||
|
||||
## Microsoft Edge kiosk types
|
||||
|
||||
Windows 10 offers two different kiosk type experiences in assigned access for public and specialized use: single-app kiosk and multi-app kiosk. Microsoft Edge kiosk mode supports **four** types, depending on how a Microsoft Edge kiosk is set up in assigned access.
|
||||
Microsoft Edge kiosk mode supports **four** types, depending on how a Microsoft Edge kiosk is set up in assigned access; single-app and multi-app kiosk.
|
||||
|
||||
### Single-app kiosk
|
||||
|
||||
@ -32,24 +33,22 @@ When you set up Microsoft Edge kiosk mode in single-app assigned access, Microso
|
||||
|
||||
The single-app Microsoft Edge kiosk mode types include:
|
||||
|
||||
1. **Digital / Interactive signage** devices display a specific site in full-screen mode where Microsoft Edge runs InPrivate mode. Examples of Digital signage are, a rotating advertisement or menu. Examples of Interactive signage are an interactive museum display or restaurant order/pay station.
|
||||
1. **Digital / Interactive signage** devices display a specific site in full-screen mode in which Microsoft Edge runs InPrivate mode. Examples of Digital signage are a rotating advertisement or menu. Examples of Interactive signage are an interactive museum display or restaurant order/pay station.
|
||||
|
||||
2. **Public browsing** devices run a limited multi-tab version of InPrivate and are the only app available. Users can’t minimize, close, or open new Microsoft Edge windows or customize Microsoft Edge. Users can clear browsing data, downloads and restart Microsoft Edge by clicking “End session.” You can configure Microsoft Edge to restart after a period of inactivity by using the “Configure kiosk reset after idle timeout” policy. For example, an information kiosk at a public library.
|
||||
2. **Public browsing** devices run a limited multi-tab version of InPrivate and are the only app available. Users can’t minimize, close, or open new Microsoft Edge windows or customize Microsoft Edge. Users can clear browsing data, downloads and restart Microsoft Edge by clicking “End session.” You can configure Microsoft Edge to restart after a period of inactivity by using the “Configure kiosk reset after idle timeout” policy. An example usage of this mode is an information kiosk at a public library.
|
||||
|
||||
|
||||
|
||||
### Multi-app kiosk
|
||||
|
||||
When you set up Microsoft Edge kiosk mode in multi-app assigned access, Microsoft Edge runs a limited multi-tab version of InPrivate or a normal
|
||||
browsing version. For more details about running a multi-app kiosk, or fixed-purpose device, see [Set up a multi-app kiosk](https://aka.ms/Ckmq4n). Here you learn how to create kiosks that run more than one app and the benefits of a multi-app kiosk, or fixed-purpose device.
|
||||
When you set up Microsoft Edge kiosk mode in multi-app assigned access, Microsoft Edge runs a limited multi-tab version of InPrivate or a normal browsing version. For more details about running a multi-app kiosk, or fixed-purpose device, see [Create a Windows 10 kiosk that runs multiple apps](https://docs.microsoft.com/en-us/windows/configuration/lock-down-windows-10-to-specific-apps). Here you learn how to create kiosks that run more than one app and the benefits of a multi-app kiosk, or fixed-purpose device.
|
||||
|
||||
The multi-app Microsoft Edge kiosk mode types include:
|
||||
|
||||
3. **Public browsing** (shared browsing) supports browsing the internet and runs InPrivate with minimal features available. In this configuration, Microsoft Edge can be one of many apps available. Users can minimize, close, and open multiple InPrivate windows. On a multi-app kiosk device, Microsoft Edge can interact with other applications. For example, users can install extensions from Microsoft Store if Microsoft Store is set up in assigned access. You can enable Enterprise Mode to automatically switch users to Internet Explorer 11 for sites that need backward compatibility support.
|
||||
3. **Public browsing** (shared browsing) supports browsing the internet and runs InPrivate with minimal features available. In this configuration, Microsoft Edge can be one of many apps available. Users can, close and open multiple InPrivate windows. On a multi-app kiosk device, Microsoft Edge can interact with other applications. For example, users can install extensions from Microsoft Store if Microsoft Store is set up in assigned access. You can enable Enterprise Mode to automatically switch users to Internet Explorer 11 for sites that need backward compatibility support.
|
||||
|
||||
|
||||
|
||||
4. **Normal mode** runs a full version of Microsoft Edge, but some features may not work depending on what other apps you configured in assigned access. For example, if the Microsoft Store is not set up, users cannot install extensions. If the user logs in with an MSA, their browsing data will roam with them. If you also have Internet Explorer 11 set up in assigned access; you can enable Enterprise Mode to automatically switch users to Internet Explorer 11 for sites that need backward compatibility support.
|
||||
4. **Normal mode** mode runs a full version of Microsoft Edge, but some features may not work depending on what other apps you configured in assigned access. For example, if the Microsoft Store is not set up, users cannot install extensions. If you also have Internet Explorer 11 set up in assigned access, you can enable Enterprise Mode to automatically switch users to Internet Explorer 11 for sites that need backward compatibility support.
|
||||
|
||||
|
||||
|
||||
@ -57,7 +56,7 @@ The multi-app Microsoft Edge kiosk mode types include:
|
||||
|
||||
Before you can configure Microsoft Edge kiosk mode, you must set up Microsoft Edge in assigned access. You can set up Microsoft Edge kiosk mode in assigned access using:
|
||||
|
||||
- **Windows Settings.** Best for physically setting up a single device as a kiosk. With this method, you set up assigned access and configure the kiosk or digital sign device using Settings. You can configure Microsoft Edge in single-app (kiosk type – Full-screen or public browsing) and define a single URL for the Home Button, Start Page and New Tab page. You can also set the reset after idle timeout.
|
||||
- **Windows Settings.** Best for physically setting up a single device as a kiosk. With this method, you set up assigned access and configure the kiosk or digital sign device using Settings. You can configure Microsoft Edge in single-app (kiosk type – Full-screen or public browsing) and define a single URL for the Home Button, Start Page and New Tab page. You can also set the reset after idle timeout.
|
||||
|
||||
- **Microsoft Intune or other MDM service.** Best for setting up multiple devices as a kiosk. With this method, you configure Microsoft Edge in assigned access and configure how Microsoft Edge behaves when it’s running in kiosk mode with assigned access.
|
||||
|
||||
@ -94,9 +93,9 @@ Windows Settings is the simplest and easiest way to set up one or a couple of de
|
||||
|
||||
8. Select how Microsoft Edge displays when running in kiosk mode:
|
||||
|
||||
- **As a digital sign or interactive display,** the default URL shows in full screen, without browser controls.
|
||||
- **As a digital sign or interactive display**, the default URL shows in full screen, without browser controls.
|
||||
|
||||
- **As a public browser,** the default URL shows in a browser view with limited browser controls.
|
||||
- **As a public browser**, the default URL shows in a browser view with limited browser controls.
|
||||
|
||||
9. Select **Next**.
|
||||
|
||||
@ -105,11 +104,11 @@ Windows Settings is the simplest and easiest way to set up one or a couple of de
|
||||
>[!NOTE]
|
||||
>The URL sets the Home button, Start page, and New tab page.
|
||||
|
||||
11. Microsoft Edge in kiosk mode has a built-in timer to help keep data safe in public browsing sessions.<p>When the idle time (no user activity) meets the time limit, a confirmation message prompts the user to continue; if **Continue** is not selected, Microsoft Edge resets to the default URL. Accept the default value of **5 minutes,** or you can choose your own idle timer value.
|
||||
11. Microsoft Edge in kiosk mode has a built-in timer to help keep data safe in public browsing sessions.<p>When the idle time (no user activity) meets the time limit, a confirmation message prompts the user to continue. If **Continue** is not selected, Microsoft Edge resets to the default URL. You can accept the default value of **5 minutes,** or you can choose your own idle timer value.
|
||||
|
||||
12. Select **Next**, and then select **Close**.
|
||||
|
||||
13. Close **Settings** to save your choices automatically and apply them the next time the user accounts logs on.
|
||||
13. Close **Settings** to save your choices automatically and apply them the next time the user account logs on.
|
||||
|
||||
14. Configure the policies for Microsoft Edge kiosk mode. For details on the valid kiosk policy settings, see [Related policies](#related-policies).
|
||||
|
||||
@ -129,20 +128,20 @@ Windows Settings is the simplest and easiest way to set up one or a couple of de
|
||||
|
||||
### Use Microsoft Intune or other MDM service
|
||||
|
||||
With this method, you can use Microsoft Intune or other MDM services to configure Microsoft Edge in assigned access and how it behaves when it’s running in assigned access.
|
||||
With this method, you can use Microsoft Intune or other MDM services to configure Microsoft Edge in assigned access and how it behaves when it’s running in assigned access.
|
||||
|
||||
1. In Microsoft Intune or other MDM service, configure AssignedAccess to prevent users from accessing the file system, running executables, or other apps.
|
||||
1. In Microsoft Intune or other MDM service, configure [AssignedAccess](https://docs.microsoft.com/windows/client-management/mdm/assignedaccess-csp) to prevent users from accessing the file system, running executables, or other apps.
|
||||
|
||||
2. Configure the following MDM settings to control a web browser app on the kiosk device.
|
||||
|
||||
| | |
|
||||
|---|---|
|
||||
| **[ConfigureKioskMode](new-policies.md#configure-kiosk-mode)**<p> | Configure the display mode for Microsoft Edge as a kiosk app.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskMode<p>**Data type:** Integer<p>**Allowed values:**<ul><li>**Single-app kiosk experience**<ul><li>**0** - Digital signage and interactive display</li><li>**1** - InPrivate Public browsing</li></ul></li><li>**Multi-app kiosk experience**<ul><li>**0** - Normal Microsoft Edge running in assigned access</li><li>**1** - InPrivate public browsing with other apps</li></ul></li></ul> |
|
||||
| **[ConfigureKioskResetAfterIdleTimeout](new-policies.md#configure-kiosk-reset-after-idle-timeout)**<p> | Change the time in minutes from the last user activity before Microsoft Edge kiosk mode resets to the default kiosk configuration.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskResetAfterIdleTimeout<p>**Data type:** Integer<p>**Allowed values:**<ul><li>**0** - No idle timer</li><li>**1-1440 (5 minutes is the default)** - Set reset on idle timer</li></ul> |
|
||||
| **[HomePages](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-homepages)**<p> | Set one or more start pages, URLs, to load when Microsoft Edge launches.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/HomePages<p>**Data type:** String<p>**Allowed values:**<p>Enter one or more URL, for example,<br> \<https://www.msn.com\>\<https:/www.bing.com\> |
|
||||
| **[ConfigureHomeButton](new-policies.md#configure-home-button)**<p> | Configure how the Home Button behaves.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureHomeButton<p>**Data type:** Integer<p> **Allowed values:**<ul><li>**0 (default)** - Not configured. Show home button, and load the default Start page.</li><li>**1** - Enabled. Show home button and load New tab page</li><li>**2** - Enabled. Show home button & set a specific page.</li><li>**3** - Enabled. Hide the home button.</li></ul> |
|
||||
| ** [SetNewTabPageURL](new-policies.md#set-new-tab-page-url)**<p> | Set a custom URL for the New tab page.<p> **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ <p>**Data type:** String<p>**Allowed values:** Enter a URL, for example, https://www.msn.com |
|
||||
| **[SetHomeButtonURL](new-policies.md#set-home-button-url)**<p> | If you set ConfigureHomeButton to 2, configure the home button URL.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ <p>**Data type:** String<p>**Allowed values:** Enter a URL, for example, https://www.bing.com |
|
||||
| **[ConfigureKioskMode](new-policies.md#configure-kiosk-mode)**<p> | Configure the display mode for Microsoft Edge as a kiosk app.<p><p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskMode<p>**Data type:** Integer<p>**Allowed values:**<ul><li>**Single-app kiosk experience**<ul><li>**0** - Digital signage and interactive display</li><li>**1** - InPrivate Public browsing</li></ul></li><li>**Multi-app kiosk experience**<ul><li>**0** - Normal Microsoft Edge running in assigned access</li><li>**1** - InPrivate public browsing with other apps</li></ul></li></ul> |
|
||||
| **[ConfigureKioskResetAfterIdleTimeout](new-policies.md#configure-kiosk-reset-after-idle-timeout)**<p> | Change the time in minutes from the last user activity before Microsoft Edge kiosk mode resets to the default kiosk configuration.<p><p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskResetAfterIdleTimeout<p>**Data type:** Integer<p>**Allowed values:**<ul><li>**0** - No idle timer</li><li>**1-1440 (5 minutes is the default)** - Set reset on idle timer</li></ul> |
|
||||
| **[HomePages](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-homepages)**<p> | Set one or more start pages, URLs, to load when Microsoft Edge launches.<p><p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/HomePages<p>**Data type:** String<p>**Allowed values:**<p>Enter one or more URL, for example,<br> \<https://www.msn.com\>\<https:/www.bing.com\> |
|
||||
| **[ConfigureHomeButton](new-policies.md#configure-home-button)**<p> | Configure how the Home Button behaves.<p><p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureHomeButton<p>**Data type:** Integer<p> **Allowed values:**<ul><li>**0 (default)** - Not configured. Show home button, and load the default Start page.</li><li>**1** - Enabled. Show home button and load New tab page</li><li>**2** - Enabled. Show home button & set a specific page.</li><li>**3** - Enabled. Hide the home button.</li></ul> |
|
||||
| ** [SetNewTabPageURL](new-policies.md#set-new-tab-page-url)**<p> | Set a custom URL for the New tab page.<p><p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ <p>**Data type:** String<p>**Allowed values:** Enter a URL, for example, https://www.msn.com |
|
||||
| **[SetHomeButtonURL](new-policies.md#set-home-button-url)**<p> | If you set ConfigureHomeButton to 2, configure the home button URL.<p><p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ <p>**Data type:** String<p>**Allowed values:** Enter a URL, for example, https://www.bing.com |
|
||||
---
|
||||
|
||||
3. Restart the device and sign in using the kiosk app user account.
|
||||
@ -153,7 +152,7 @@ With this method, you can use Microsoft Intune or other MDM services to configur
|
||||
|
||||
### Use a provisioning package
|
||||
|
||||
With this method, you can use a provisioning package to configure Microsoft Edge in assigned access. After you set up the provisioning package for configuring Microsoft Edge in assigned access, you configure how Microsoft Edge behaves when it’s running in kiosk mode with assigned access.
|
||||
With this method, you can use a provisioning package to configure Microsoft Edge in assigned access. After you set up the provisioning package for configuring Microsoft Edge in assigned access, you configure how Microsoft Edge behaves when it’s running in kiosk mode with assigned access.
|
||||
|
||||
1. Open Windows Configuration Designer to create a provisioning package and configure Microsoft Edge in assigned access.
|
||||
|
||||
@ -163,12 +162,12 @@ With this method, you can use a provisioning package to configure Microsoft Edge
|
||||
|
||||
| | |
|
||||
|---|---|
|
||||
| **[ConfigureKioskMode](new-policies.md#configure-kiosk-mode)**<p> | Configure the display mode for Microsoft Edge as a kiosk app.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskMode<p>**Data type:** Integer<p>**Allowed values:**<ul><li>**Single-app kiosk experience**<ul><li>**0** - Digital signage and interactive display</li><li>**1** - InPrivate Public browsing</li></ul></li><li>**Multi-app kiosk experience**<ul><li>**0** - Normal Microsoft Edge running in assigned access</li><li>**1** - InPrivate public browsing with other apps</li></ul></li></ul> |
|
||||
| **[ConfigureKioskResetAfterIdleTimeout](new-policies.md#configure-kiosk-reset-after-idle-timeout)**<p> | Change the time in minutes from the last user activity before Microsoft Edge kiosk mode resets to the default kiosk configuration.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskResetAfterIdleTimeout<p>**Data type:** Integer<p>**Allowed values:**<ul><li>**0** - No idle timer</li><li>**1-1440 (5 minutes is the default)** - Set reset on idle timer</li></ul> |
|
||||
| **[HomePages](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-homepages)**<p> | Set one or more start pages, URLs, to load when Microsoft Edge launches.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/HomePages<p>**Data type:** String<p>**Allowed values:**<p>Enter one or more URL, for example,<br> \<https://www.msn.com\>\<https:/www.bing.com\> |
|
||||
| **[ConfigureHomeButton](new-policies.md#configure-home-button)**<p> | Configure how the Home Button behaves.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureHomeButton<p>**Data type:** Integer<p> **Allowed values:**<ul><li>**0 (default)** - Not configured. Show home button, and load the default Start page.</li><li>**1** - Enabled. Show home button and load New tab page</li><li>**2** - Enabled. Show home button & set a specific page.</li><li>**3** - Enabled. Hide the home button.</li></ul> |
|
||||
| **[SetNewTabPageURL](new-policies.md#set-new-tab-page-url)**<p> | Set a custom URL for the New tab page.<p> **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ <p>**Data type:** String<p>**Allowed values:** Enter a URL, for example, https://www.msn.com |
|
||||
| **[SetHomeButtonURL](new-policies.md#set-home-button-url)**<p> | If you set ConfigureHomeButton to 2, configure the home button URL.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ <p>**Data type:** String<p>**Allowed values:** Enter a URL, for example, https://www.bing.com |
|
||||
| **[ConfigureKioskMode](new-policies.md#configure-kiosk-mode)**<p> | Configure the display mode for Microsoft Edge as a kiosk app.<p><p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskMode<p>**Data type:** Integer<p>**Allowed values:**<ul><li>**Single-app kiosk experience**<ul><li>**0** - Digital signage and interactive display</li><li>**1** - InPrivate Public browsing</li></ul></li><li>**Multi-app kiosk experience**<ul><li>**0** - Normal Microsoft Edge running in assigned access</li><li>**1** - InPrivate public browsing with other apps</li></ul></li></ul> |
|
||||
| **[ConfigureKioskResetAfterIdleTimeout](new-policies.md#configure-kiosk-reset-after-idle-timeout)**<p> | Change the time in minutes from the last user activity before Microsoft Edge kiosk mode resets to the default kiosk configuration.<p><p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskResetAfterIdleTimeout<p>**Data type:** Integer<p>**Allowed values:**<ul><li>**0** - No idle timer</li><li>**1-1440 (5 minutes is the default)** - Set reset on idle timer</li></ul> |
|
||||
| **[HomePages](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-homepages)**<p> | Set one or more start pages, URLs, to load when Microsoft Edge launches.<p><p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/HomePages<p>**Data type:** String<p>**Allowed values:**<p>Enter one or more URL, for example,<br> \<https://www.msn.com\>\<https:/www.bing.com\> |
|
||||
| **[ConfigureHomeButton](new-policies.md#configure-home-button)**<p> | Configure how the Home Button behaves.<p><p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureHomeButton<p>**Data type:** Integer<p> **Allowed values:**<ul><li>**0 (default)** - Not configured. Show home button, and load the default Start page.</li><li>**1** - Enabled. Show home button and load New tab page</li><li>**2** - Enabled. Show home button & set a specific page.</li><li>**3** - Enabled. Hide the home button.</li></ul> |
|
||||
| ** [SetNewTabPageURL](new-policies.md#set-new-tab-page-url)**<p> | Set a custom URL for the New tab page.<p><p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ <p>**Data type:** String<p>**Allowed values:** Enter a URL, for example, https://www.msn.com |
|
||||
| **[SetHomeButtonURL](new-policies.md#set-home-button-url)**<p> | If you set ConfigureHomeButton to 2, configure the home button URL.<p><p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ <p>**Data type:** String<p>**Allowed values:** Enter a URL, for example, https://www.bing.com |
|
||||
---
|
||||
|
||||
4. After you’ve configured the Microsoft Edge kiosk mode policies, including any of the related policies, it’s time to build the package.
|
||||
@ -181,33 +180,11 @@ With this method, you can use a provisioning package to configure Microsoft Edge
|
||||
|
||||
**_Next steps._** Use your new kiosk. Sign in to the device using the user account that you selected to run the kiosk app.
|
||||
|
||||
## Feature comparison of kiosk mode and kiosk browser app
|
||||
|
||||
In the following table, we show you the features available in both Microsoft Edge kiosk mode and Kiosk Browser app available in Microsoft Store. Both kiosk mode and kiosk browser app work in assigned access.
|
||||
|
||||
| **Feature** | **Microsoft Edge kiosk mode** | **Kiosk Browser** |
|
||||
|---------------|:----------------:|:---------------:|
|
||||
| Print support |  |  |
|
||||
| Multi-tab support |  |  |
|
||||
| Allow URL support |  <p>*\*For Microsoft Edge kiosk mode use* [Windows Defender Firewall](#_*Windows_Defender_Firewall)*. Microsoft kiosk browser has custom policy support.* |  |
|
||||
| Block URL support | <p>*\*For Microsoft Edge kiosk mode use* [Windows Defender Firewall](#_*Windows_Defender_Firewall)*. Microsoft kiosk browser has custom policy support.* |  |
|
||||
| Configure Home button |  |  |
|
||||
| Set Start page(s) URL |  |  <p>*Same as Home button URL* |
|
||||
| Set New Tab page URL |  |  |
|
||||
| Favorites management |  |  |
|
||||
| End session button |  | <p>*In Intune, must create custom URI to enable. Dedicated UI configuration targeted for 1808.* |
|
||||
| Reset on inactivity |  |  |
|
||||
| Internet Explorer integration (Enterprise Mode site list) | <p>*Multi-app mode only* |  |
|
||||
---
|
||||
|
||||
### \*Windows Defender Firewall
|
||||
To prevent unwanted websites, use Windows Defender Firewall to configure a list of allowed websites or blocked websites or both. For more details, see [Windows Defender Firewall with Advanced Security Deployment](https://docs.microsoft.com/en-us/windows/security/identity-protection/windows-firewall/windows-firewall-with-advanced-security-deployment-guide).
|
||||
|
||||
## Related policies
|
||||
|
||||
You can use any of the following policies to enhance the kiosk experience. To learn more about these policies, see [Policy CSP - Browser](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser).
|
||||
|
||||
| **MDM Setting** | **Digital /<br>Interactive signage** | **Public browsing<br>single-app** | **Public browsing<br>multi-app** | **Normal** |
|
||||
| **MDM Setting** | **Digital /<br>Interactive signage** | **Public browsing<br>single-app** | **Public browsing<br>multi-app** | **Normal<br>mode** |
|
||||
|------------------|:---------:|:---------:|:---------:|:---------:|
|
||||
| [AllowAddressBarDropdown](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowaddressbardropdown) |  |  |  |  |
|
||||
| [AllowAutofill](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowautofill) |  |  |  |  |
|
||||
@ -221,13 +198,13 @@ You can use any of the following policies to enhance the kiosk experience. To l
|
||||
| [AllowFlashClickToRun](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowflashclicktorun) |  |  |  |  |
|
||||
| [AllowFullscreen](new-policies.md#allow-fullscreen-mode)\* |  |  |  |  |
|
||||
| [AllowInPrivate](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowinprivate) |  |  |  |  |
|
||||
| [AllowMicrosoftCompatibilityList](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowmicrosoftcompatibilitylist) |  |  |  \* |  |
|
||||
| [AllowMicrosoftCompatibilityList](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowmicrosoftcompatibilitylist) |  |  | \** |  |
|
||||
| [AllowPasswordManager](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowpasswordmanager) |  |  |  |  |
|
||||
| [AllowPopups](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowpopups) |  ? |  |  |  |
|
||||
| [AllowPrelaunch](new-policies.md#allow-prelaunch)\* |  |  |  |  |
|
||||
| [AllowPrinting](new-policies.md#allow-printing)\* |  |  |  |  |
|
||||
| [AllowSavingHistory](new-policies.md#allow-saving-history)\* |  |  |  |  |
|
||||
| AllowSearchEngineCustomization |  |  |  |  |
|
||||
| [AllowSearchEngineCustomization](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowsearchenginecustomization) |  |  |  |  |
|
||||
| [AllowSearchSuggestionsinAddressBar](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowsearchenginecustomization) |  |  |  |  |
|
||||
| [AllowSideloadingOfExtensions](new-policies.md#allow-sideloading-of-extensions)\* |  |  |  |  |
|
||||
| [AllowSmartScreen](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowsmartscreen) |  |  |  |  |
|
||||
@ -244,9 +221,9 @@ You can use any of the following policies to enhance the kiosk experience. To l
|
||||
| [ConfigureOpenMicrosoftEdgeWith](new-policies.md#configure-open-microsoft-edge-with)\* |  |  |  |  |
|
||||
| [ConfigureTelemetryForMicrosoft365Analytics](new-policies.md#configure-collection-of-browsing-data-for-microsoft-365-analytics)\* |  |  |  |  |
|
||||
| [DisableLockdownOfStartPages](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-disablelockdownofstartpages) |  |  |  |  |
|
||||
| [DoNotSyncBrowserSetting](new-policies.md#donotsyncbrowsersetting)\* & [!INCLUDE [PreventUsersFromTurningOnBrowserSyncing](includes/prevent-users-to-turn-on-browser-syncing-include.md)]\* |  |  |  ? |  |
|
||||
| [DoNotSyncBrowserSetting](new-policies.md#donotsyncbrowsersetting)\* and [PreventUsersFromTurningOnBrowserSyncing](new-policies.md#prevent-users-from-turning-on-browser-syncing)\* |  |  |  ? |  |
|
||||
| [EnableExtendedBooksTelemetry](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-enableextendedbookstelemetry) |  |  |  |  |
|
||||
| [EnterpriseModeSiteList](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-enterprisemodesitelist) |  |  |  \* |  |
|
||||
| [EnterpriseModeSiteList](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-enterprisemodesitelist) |  |  | \** |  |
|
||||
| [FirstRunURL](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-firstrunurl) |  |  |  |  |
|
||||
| [HomePages](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-homepages) |  |  |  |  |
|
||||
| [LockdownFavorites](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-lockdownfavorites) |  |  |  |  |
|
||||
@ -259,12 +236,12 @@ You can use any of the following policies to enhance the kiosk experience. To l
|
||||
| [PreventTurningOffRequiredExtensions](new-policies.md#prevent-turning-off-required-extensions)\* |  |  |  |  |
|
||||
| [PreventUsingLocalHostIPAddressForWebRTC](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-preventusinglocalhostipaddressforwebrtc) | ? | ? | ? |  |
|
||||
| [ProvisionFavorites](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-provisionfavorites) |  |  |  |  |
|
||||
| [SendIntranetTraffictoInternetExplorer](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-sendintranettraffictointernetexplorer) |  |  | ?\* |  |
|
||||
| [SendIntranetTraffictoInternetExplorer](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-sendintranettraffictointernetexplorer) |  |  | \** |  |
|
||||
| [SetDefaultSearchEngine](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-setdefaultsearchengine) |  |  |  |  |
|
||||
| [SetHomeButtonURL](new-policies.md#set-home-button-url)\* |  |  |  |  |
|
||||
| [SetNewTabPageURL](new-policies.md#set-new-tab-page-url)\* |  |  |  |  |
|
||||
| [ShowMessageWhenOpeningInteretExplorerSites](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-showmessagewhenopeningsitesininternetexplorer) |  |  |  \* |  |
|
||||
| [SyncFavoritesBetweenIEAndMicrosoftEdge](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-syncfavoritesbetweenieandmicrosoftedge) |  |  |  ? |  |
|
||||
| [ShowMessageWhenOpeningInteretExplorerSites](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-showmessagewhenopeningsitesininternetexplorer) |  |  | \** |  |
|
||||
| [SyncFavoritesBetweenIEAndMicrosoftEdge](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-syncfavoritesbetweenieandmicrosoftedge) |  |  | \** |  |
|
||||
| [UnlockHomeButton](new-policies.md#unlock-home-button)\* |  |  |  |  |
|
||||
| [UseSharedFolderForBooks](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-usesharedfolderforbooks) |  |  |  |  |
|
||||
---
|
||||
@ -290,6 +267,13 @@ You can use any of the following policies to enhance the kiosk experience. To l
|
||||
- **Actual behavior** – Books are accessible in _Settings and more_ menu.
|
||||
|
||||
|
||||
## Provide feedback or get support
|
||||
|
||||
To provide feedback on Microsoft Edge kiosk mode in Feedback Hub, select **Microsoft Edge** as the **Category**, and **All other issues** as the
|
||||
subcategory.
|
||||
|
||||
**_For multi-app kiosk only._** If you have set up the Feedback Hub in assigned access, you can you submit the feedback from the device running Microsoft Edge in kiosk mode in which you can include diagnostic logs. In the Feedback Hub, select **Microsoft Edge** as the **Category**, and **All other issues** as the subcategory.
|
||||
|
||||
## Related topics
|
||||
|
||||
- **[Create a Kiosk Experience](https://docs.microsoft.com/en-us/windows-hardware/customize/enterprise/create-a-kiosk-image):** Learn how to set up single-function kiosk devices, such as restaurant menus, and optional features for a welcome screen or power button availability. Also, learn how to create a multi-app kiosk, or fixed-purpose device, to provide an easy-to-understand experience giving users the things they need to use.
|
||||
@ -308,14 +292,26 @@ You can use any of the following policies to enhance the kiosk experience. To l
|
||||
|
||||
- **[Create a provisioning page for Windows 10](https://docs.microsoft.com/en-us/windows/configuration/provisioning-packages/provisioning-create-package):*. Learn to use Windows Configuration Designer (WCD) to create a provisioning package (.ppkg) for configuring devices running Windows 10. The WCD wizard options provide a simple interface to configure desktop, mobile, and kiosk device settings.
|
||||
|
||||
## Feature comparison of kiosk mode and kiosk browser app
|
||||
|
||||
In the following table, we show you the features available in both Microsoft Edge kiosk mode and Kiosk Browser app available in Microsoft Store. Both kiosk mode and kiosk browser app work in assigned access.
|
||||
|
||||
## Provide feedback or get support
|
||||
| **Feature** | **Microsoft Edge kiosk mode** | **Kiosk Browser** |
|
||||
|---------------|:----------------:|:---------------:|
|
||||
| Print support |  |  |
|
||||
| Multi-tab support |  |  |
|
||||
| Allow URL support |  <p>*\*For Microsoft Edge kiosk mode use* [Windows Defender Firewall](#_*Windows_Defender_Firewall)*. Microsoft kiosk browser has custom policy support.* |  |
|
||||
| Block URL support | <p>*\*For Microsoft Edge kiosk mode use* [Windows Defender Firewall](#_*Windows_Defender_Firewall)*. Microsoft kiosk browser has custom policy support.* |  |
|
||||
| Configure Home button |  |  |
|
||||
| Set Start page(s) URL |  |  <p>*Same as Home button URL* |
|
||||
| Set New Tab page URL |  |  |
|
||||
| Favorites management |  |  |
|
||||
| End session button |  | <p>*In Intune, must create custom URI to enable. Dedicated UI configuration targeted for 1808.* |
|
||||
| Reset on inactivity |  |  |
|
||||
| Internet Explorer integration (Enterprise Mode site list) | <p>*Multi-app mode only* |  |
|
||||
---
|
||||
|
||||
To provide feedback on Microsoft Edge kiosk mode in Feedback Hub, select **Microsoft Edge** as the **Category**, and **All other issues** as the
|
||||
subcategory.
|
||||
|
||||
*For multi-app kiosk only.* If you have set up the Feedback Hub in assigned access, you can you submit the feedback from the device running Microsoft Edge in kiosk mode in which you can include diagnostic logs. In the Feedback Hub, select **Microsoft Edge** as the **Category**, and **All other issues** as the
|
||||
subcategory.
|
||||
### \*Windows Defender Firewall
|
||||
To prevent unwanted websites, use Windows Defender Firewall to configure a list of allowed websites or blocked websites or both. For more details, see [Windows Defender Firewall with Advanced Security Deployment](https://docs.microsoft.com/en-us/windows/security/identity-protection/windows-firewall/windows-firewall-with-advanced-security-deployment-guide).
|
||||
|
||||
---
|
||||
@ -60,9 +60,6 @@ You can find the Microsoft Edge Group Policy settings in the following location
|
||||
## Prevent certificate error overrides
|
||||
[!INCLUDE [prevent-certificate-error-overrides-include.md](includes/prevent-certificate-error-overrides-include.md)]
|
||||
|
||||
## Prevent users from turning on browser syncing
|
||||
[!INCLUDE [prevent-users-to-turn-on-browser-syncing-include](includes/prevent-users-to-turn-on-browser-syncing-include.md)]
|
||||
|
||||
## Prevent turning off required extensions
|
||||
[!INCLUDE [prevent-turning-off-required-extensions-include.md](includes/prevent-turning-off-required-extensions-include.md)]
|
||||
|
||||
@ -85,5 +82,8 @@ In addition to the 20 or so new group policies, we added three MDM policies to a
|
||||
## DoNotSyncBrowserSetting
|
||||
[!INCLUDE [do-not-sync-browser-settings-include](includes/do-not-sync-browser-settings-include.md)]
|
||||
|
||||
## PreventUsersFromTurningOnBrowserSyncing
|
||||
[!INCLUDE [prevent-users-to-turn-on-browser-syncing-include](includes/prevent-users-to-turn-on-browser-syncing-include.md)]
|
||||
|
||||
## ShowMessageWhenOpeningInteretExplorerSites
|
||||
[!INCLUDE [show-message-opening-sites-ie-include](includes/show-message-opening-sites-ie-include.md)]
|
||||
@ -1 +1 @@
|
||||
By default, Microsoft Edge loads the default New tab page. Disabling this policy loads a blank page instead of the New tab page and prevents users from changing it. Not configuring this policy lets users choose how the New tab page appears.
|
||||
Microsoft Edge loads the default New tab page by default. Disabling this policy loads a blank page instead of the New tab page and prevents users from changing it. Not configuring this policy lets users choose how the New tab page appears.
|
||||
@ -1 +1 @@
|
||||
By default, the “browser” group syncs automatically between user’s devices and allowing users to choose to make changes. The “browser” group uses the Sync your Settings option in Settings to sync information like history and favorites. Enabling this policy prevents the “browser” group from using the Sync your Settings option. If you want syncing turned off by default but not disabled, select the _Allow users to turn “browser” syncing_ option.
|
||||
By default, the “browser” group syncs automatically between user’s devices and allowing users to choose to make changes. The “browser” group uses the _Sync your Settings_ option in Settings to sync information like history and favorites. Enabling this policy prevents the “browser” group from using the Sync your Settings option. If you want syncing turned off by default but not disabled, select the _Allow users to turn “browser” syncing_ option.
|
||||
@ -1 +1 @@
|
||||
Web security certificates are used to ensure a site that users go to is legitimate, and in some circumstances, encrypts the data. By default, Microsoft Edge allows overriding of the security warnings to sites that have SSL errors, bypassing or ignoring certificate errors. With this policy, you can configure Microsoft Edge to prevent overriding of the security warnings.
|
||||
Web security certificates are used to ensure a site that users go to is legitimate, and in some circumstances, encrypts the data. By default, Microsoft Edge allows overriding of the security warnings to sites that have SSL errors, bypassing or ignoring certificate errors. Enabling this policy prevents overriding of the security warnings.
|
||||
@ -1 +1 @@
|
||||
By default, Microsoft Edge allows users to uninstall extensions. Enabling this policy prevents users from uninstalling extensions, but lets them configure options for extensions defined in this policy, such as allowing InPrivate browsing. Any additional permissions requested by future updates of the extension gets granted automatically. If you previously enabled this policy and you decide to disable it, the list of extension package family names (PFNs) defined in this policy get ignored.
|
||||
Microsoft Edge allows users to uninstall extensions by default. Enabling this policy prevents users from uninstalling extensions but lets them configure options for extensions defined in this policy, such as allowing InPrivate browsing. Any additional permissions requested by future updates of the extension gets granted automatically. If you enabled this policy and now you want to disable it, the list of extension package family names (PFNs) defined in this policy get ignored after disabling this policy.
|
||||
@ -1 +1 @@
|
||||
This policy only works with the Do not sync browser policy, and for this policy to work correctly, you must enable the Do not sync browser policy. By default, browser settings sync automatically. Enabling this policy prevents syncing of browser settings and prevents users from turning on the Sync your Settings toggle in Settings. If you want syncing turned off by default but not disabled, select the _Allow users to turn browser syncing_ option in the Do not sync browser policy.
|
||||
By default, the “browser” group syncs automatically between the user’s devices, letting users make changes. With this policy, though, you can prevent the “browser” group from syncing and prevent users from turning on the _Sync your Settings_ toggle in Settings. If you want syncing turned off by default but not disabled, select the _Allow users to turn “browser” syncing_ option in the Do not sync browser policy. For this policy to work correctly, you must enable the Do not sync browser policy.
|
||||
@ -1 +1 @@
|
||||
By default, Microsoft Edge loads the default New tab page. Enabling this policy lets you set a New tab page URL in Microsoft Edge, preventing users from changing it. When you enable this policy, and you disable the Allow web content on New tab page policy, Microsoft Edge ignores any URL specified in this policy and opens about:blank.
|
||||
Microsoft Edge loads the default New tab page by default. Enabling this policy lets you set a New tab page URL in Microsoft Edge, preventing users from changing it. When you enable this policy, and you disable the Allow web content on New tab page policy, Microsoft Edge ignores any URL specified in this policy and opens about:blank.
|
||||
@ -1 +1 @@
|
||||
By default, Microsoft Edge does not show a notification before opening sites in Internet Explorer 11. However, with this policy, you can configure Microsoft Edge to display a notification before a site opens in IE11 or let users continue in Microsoft Edge. If you want users to continue in Microsoft Edge, enable this policy to show the “Keep going in Microsoft Edge” link in the notification. For this policy to work correctly, you must also enable the Configure the Enterprise Mode Site List or Send all intranet sites to Internet Explorer 11, or both.
|
||||
Microsoft Edge does not show a notification before opening sites in Internet Explorer 11. However, with this policy, you can configure Microsoft Edge to display a notification before a site opens in IE11 or let users continue in Microsoft Edge. If you want users to continue in Microsoft Edge, enable this policy to show the “Keep going in Microsoft Edge” link in the notification. For this policy to work correctly, you must also enable the Configure the Enterprise Mode Site List or Send all intranet sites to Internet Explorer 11, or both.
|
||||
Reference in New Issue
Block a user