From dcbb98e313ed86407c8af5ad1e5a335dc432d804 Mon Sep 17 00:00:00 2001 From: LizRoss Date: Tue, 3 May 2016 10:02:38 -0700 Subject: [PATCH 01/19] Updating with pre-release policies --- browsers/edge/available-policies.md | 93 +++++++++++++++++++++-------- 1 file changed, 68 insertions(+), 25 deletions(-) diff --git a/browsers/edge/available-policies.md b/browsers/edge/available-policies.md index f9b7a99dea..591b536f01 100644 --- a/browsers/edge/available-policies.md +++ b/browsers/edge/available-policies.md @@ -15,42 +15,66 @@ title: Available policies for Microsoft Edge (Microsoft Edge for IT Pros) - Windows 10 - Windows 10 Mobile +[Some information relates to pre-released product, which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.] + Microsoft Edge works with Group Policy and Microsoft Intune to help you manage your organization's computer settings. Group Policy objects (GPO's) can include registry-based Administrative Template policy settings, security settings, software deployment information, scripts, folder redirection, and preferences. By using Group Policy and Intune, you can set up a policy setting once, and then copy that setting onto many computers. For example, you can set up multiple security settings in a GPO that's linked to a domain, and then apply all of those settings to every computer in the domain.

**Note**
For more info about Group Policy, see the [Group Policy TechCenter](http://go.microsoft.com/fwlink/p/?LinkId=214514). This site provides links to the latest technical documentation, videos, and downloads for Group Policy. For more info about the tools you can use to change your Group Policy objects, see the Internet Explorer 11 topics, [Group Policy and the Group Policy Management Console (GPMC)](http://go.microsoft.com/fwlink/p/?LinkId=617921), [Group Policy and the Local Group Policy Editor](http://go.microsoft.com/fwlink/p/?LinkId=617922), [Group Policy and the Advanced Group Policy Management (AGPM)](http://go.microsoft.com/fwlink/p/?LinkId=617923), and [Group Policy and Windows Powershell](http://go.microsoft.com/fwlink/p/?LinkId=617924). -  - ## Group Policy settings - Microsoft Edge works with these Group Policy settings (`Computer Configuration\Administrative Templates\Windows Components\Microsoft Edge\`) to help you manage your company's web browser configurations: -| Policy name | Description | Options | -| -------------------------------------------- | ----------------------------- | ------------------------------------------------------- | -| Allow employees to send Do Not Track headers | Whether employees can send Do Not Track headers to websites that request tracking info. | **Enable:** Employees can send Do Not Track headers to websites requesting tracking info.

**Disable or not configured (default):** Stops employees from sending Do Not Track headers to websites requesting tracking info. | -| Turn off web content in new tab page | Decide what Microsoft Edge shows when opening a new tab. | **Enable or not configured (default):** Employees can see the new tab page with Top Sites, Top Sites with suggested content, or a blank page.

**Disable:** Employees see an empty tab and are unable to change the **Open new tabs with** setting. | -| Configure cookies | Decide how your company deals with cookies. | **Enable or not configured (default):** Lets you decide how your company treats cookies. If you use this option, you must also choose whether to

**Disable:** Allows all cookies from all websites. | -| Configure corporate Home pages | Choose which corporate Home pages should appear for domain-joined devices. | **Enable:** Configure corporate Home pages for domain-joined devices. If you use this option, you must also include site URLs.

**Example**
``````

**Note**
You must use this format and the angle brackets if you have multiple pages.

**Disable or not configured (default):** Uses the corporate Home pages and URLs specified in the App settings. | -| Configure the Enterprise Mode Site List | Whether your company uses Enterprise Mode and the Enterprise Mode Site List to address common compatibility problems with legacy apps. | **Enable:** Lets you use the Enterprise Mode Site List to address common compatibility problems with legacy apps, if it’s configured. If you use this option, you must also add the location to your site list in the **{URI}** box. When configured, any site on the list will always open in IE11.

**Disable or not configured:** You won't be able to use the Enterprise Mode Site List. | -| Configure Favorites | Decide what sites appear on the default **Favorites** list. | **Enable:** Configure the default list of **Favorite** sites for your employees. If you use this option, you must also add the actual names and URLs for the sites.

**Disable or not configured (default):** Uses the **Favorites** list names and URLs specified in the **Favorites** hub. | -| Don’t allow SmartScreen Filter warning overrides | Whether employees can override the SmartScreen Filter warnings about potentially malicious websites. | **Enable:** Stops employees from ignoring the SmartScreen Filter warnings and blocks them from visiting the site.

**Disable or not configured (default):** Lets employees ignore the SmartScreen Filter warnings about potentially malicious sites and continue to the site.

**Note**
You can also turn on the SmartScreen Filter, using the **Turn off the SmartScreen Filter** setting and stop employees from ignoring the SmartScreen Filter warnings about unverified file downloads, using the **Don’t allow SmartScreen Filter warning overrides for unverified files** setting. | -| Don’t allow SmartScreen Filter warning overrides for unverified files | Whether employees can override the SmartScreen Filter warnings about downloading unverified files. | **Enable:** Stops employees from ignoring the SmartScreen Filter warnings and stops them from downloading unverified files.

**Disable or not configured (default):** Lets employees ignore the SmartScreen Filter warnings about unverified files and lets them continue the download process.

**Note**
You can also turn on the SmartScreen Filter, using the **Turn off the SmartScreen Filter** setting and stop employees from ignoring the SmartScreen Filter warnings about potentially dangerous websites, using the **Don’t allow SmartScreen Filter warning overrides** setting. | -| Don't allow WebRTC to share the LocalHost IP address | Whether an employee’s LocalHost IP address shows while using the WebRTC protocol | **Enable:** Hides the LocalHost IP address while using the WebRTC protocol.

**Disable or not configured (default):** Shows the LocalHost IP address while using the WebRTC protocol. | -| Send all intranet sites to IE11 | Whether your intranet sites should all open using IE11.

**Important:** This setting should only be used if there are known compatibility problems with Microsoft Edge. | **Enable:** Automatically opens all intranet sites using IE11.

**Disable or not configured (default):** Automatically opens all intranet sites using Microsoft Edge. | -| Turn off **Address** bar search suggestions | Whether search suggestions should appear in the **Address** bar of Microsoft Edge. | **Enable or not configured (default):** Employees can see search suggestions in the **Address** bar of Microsoft Edge.

**Disable:** Employees can’t see search suggestions in the **Address** bar of Microsoft Edge. | -| Turn off Autofill | Whether employees can use Autofill to automatically fill in form fields while using Microsoft Edge. | **Enable or not configured (default):** Employees can use Autofill to complete form fields.

**Disable:** Employees can’t use Autofill to complete form fields. | -| Turn off Developer Tools | Whether the F12 Developer Tools are available on Microsoft Edge. | **Enable or not configured (default):** Shows the F12 Developer Tools on Microsoft Edge.

**Disable:** Hides the F12 Developer Tools on Microsoft Edge. | -| Turn off InPrivate browsing | Whether employees can browse using InPrivate website browsing. | **Enable or not configured (default):** Lets employees use InPrivate browsing while on the corporate network.

**Disable:** Stops employees from using inPrivate browsing on the corporate network. | -| Turn off Password Manager | Whether employees can save their passwords locally, using Password Manager. | **Enable or not configured (default):** Employees can use Password Manager to save passwords locally.

**Disable:** Employees can't use Password Manager to save passwords locally. | -| Turn off Pop-up Blocker | Whether to turn on Pop-up Blocker and allow pop-ups to appear in secondary windows. | **Enable or not configured (default):** Turns on Pop-up Blocker, stopping pop-up windows.

**Disable:** Turns off Pop-up Blocker, allowing pop-up windows. | -|Turn off the SmartScreen Filter | Whether to turn on SmartScreen Filter to help protect your employees from potential phishing scams and malicious software. | **Enable or not configured (default):** Turns on SmartScreen Filter, providing warning messages to your employees about potential phishing scams and malicious software.

**Disable:** Turns off SmartScreen Filter.

**Note**
You can also stop employees from ignoring the SmartScreen Filter warnings about potentially dangerous websites, using the **Don’t allow SmartScreen Filter warning overrides** setting and stop employees from ignoring the SmartScreen Filter warnings about unverified file downloads, using the **Don’t allow SmartScreen Filter warning overrides for unverified files** setting. | +| Policy name |Supported versions |Description |Options | +|-------------|------------|-------------|--------| +|Allow Developer Tools |Windows 10, Version 1511 or later |This policy setting lets you decide whether F12 Developer Tools are available on Microsoft Edge.

If you enable or don’t configure this setting, the F12 Developer Tools are available in Microsoft Edge.

If you disable this setting, the F12 Developer Tools aren’t available in Microsoft Edge. |**Enabled or not configured (default):** Shows the F12 Developer Tools on Microsoft Edge.

**Disabled:** Hides the F12 Developer Tools on Microsoft Edge. | +|Allow InPrivate browsing |Windows 10, Version 1511 or later |This policy setting lets you decide whether employees can browse using InPrivate website browsing.

If you enable or don’t configure this setting, employees can use InPrivate website browsing.

If you disable this setting, employees can’t use InPrivate website browsing. |**Enabled or not configured (default):** Lets employees use InPrivate website browsing.

**Disabled:** Stops employees from using InPrivate website browsing. | +|Allow web content on **New Tab** page |Windows 10 or later |This policy setting lets you configure what appears when Microsoft Edge opens a new tab. By default, Microsoft Edge opens the **New Tab** page.

If you enable this setting, Microsoft Edge opens a new tab with the **New Tab** page.

If you disable this setting, Microsoft Edge opens a new tab with a blank page. If you use this setting, employees can’t change it.

If you don’t configure this setting, employees can choose how new tabs appears. |**Enabled:** Employees see web content on **New Tab** page.

**Not configured (default):** Employees see web content on **New Tab** page, but can change it.

**Disabled:** Employees always see an empty new tab. | +|Always Clear Browsing Data on Exit |Windows 10, Version 1607 or later |This policy setting lets you decide whether all of an employees' browsing data is automatically erased when Microsoft Edge closes.

If you enable this setting, all browsing data is automatically erased when Microsoft Edge closes.

If you disable, or don’t configure this setting, employees can choose whether to delete their browsing data from App settings. |**Enabled:** Employee's browsing data is automatically erased every time the browser is closed.

**Disabled or not configured (default):** Employees can choose whether to delete their browsing data from App settings. | +|Always show Favorites bar |Windows 10, Version 1607 or later |This policy setting lets you decide whether to always turn on the **Favorites** bar. By default, the **Favorites** bar is turned off.

If you enable this setting, the **Favorites** bar always appears and employees can’t turn it off.

If you disable or don’t configure this setting, employees can choose whether to turn the **Favorites** bar on from the **App** settings.|**Enabled:** Turns on **Favorites** bar and employees can’t turn it off.

**Disabled or not configured (default):** The **Favorites** bar is turned off by default. Employees can choose to turn it on or keep it off.| +|Configure Autofill |Windows 10 or later |This policy setting lets you decide whether employees can use Autofill to automatically fill in form fields while using Microsoft Edge. By default, employees can choose whether to use Autofill.

If you enable this setting, employees can use Autofill to automatically fill in forms while using Microsoft Edge.

If you disable this setting, employees can’t use Autofill to automatically fill in forms while using Microsoft Edge.

If you don’t configure this setting, employees can choose whether to use Autofill to automatically fill in forms while using Microsoft Edge. |**Enabled:** Employees can use Autofill to complete form fields.

**Disabled:** Employees can’t use Autofill to complete form fields.

**Not Configured (default):** Employees can choose to turn Autofill on or off. | +|Configure Cookies |Windows 10 or later|This setting lets you configure how to work with cookies.

If you enable this setting, you must also decide whether to:

|**Enabled:** Lets you decide how your company treats cookies. If you use this option, you must also choose whether to:

**Disabled or not configured:** All cookies are allowed from all sites.| +|Configure Do Not Track |Windows 10 or later |This policy setting lets you decide whether employees can send Do Not Track requests to websites that ask for tracking info. By default, Do Not Track requests aren’t sent, but employees can choose to turn on and send requests.

If you enable this setting, Do Not Tracker requests are always sent to websites asking for tracking info.

If you disable this setting, Do Not Track requests are never sent to websites asking for tracking info.

If you don’t configure this setting, employees can choose whether to send Do Not Track requests to websites asking for tracking info. |**Enabled:** Employees can send Do Not Track requests to websites requesting tracking info.

**Disabled:** Employees can’t send Do Not Track requests to websites requesting tracking info.

**Not Configured (default):** Employees can choose to send Do Not Track headers on or off. | +|Configure Edge Extensions |Windows 10, Version 1607 or later |This policy setting lets you decide whether employees can use Edge Extensions.

If you enable or don’t configure this setting, employees can use Edge Extensions.

If you disable this setting, employees can’t use Edge Extensions. |**Enabled or not configured:** Lets employees use Edge Extensions.

**Disabled:** Stops employees from using Edge Extensions. | +|Configure **Favorites** |Windows 10, Version 1511 or later |This policy setting lets you configure the default list of **Favorites** that appear for your employees. Employees can change their **Favorites** by adding or removing items at any time.

If you enable this setting, you can configure what default **Favorites** appear for your employees. If this setting is enabled, you must also provide a list of **Favorites** in the **Options** section. This list is imported after your policy is deployed.

If you disable or don’t configure this setting, employees will see the **Favorites** that they set in the **Favorites** hub. |**Enabled:** Configure the default list of **Favorites** for your employees. If you use this option, you must also add the URLs to the sites.

**Disabled or not configured:** Uses the **Favorites** list and **URLs** specified in the **Favorites** hub. | +|Configure Flash |Windows 10, Version 1607 or later |This policy setting lets you decide whether employees can use Flash plugins in Microsoft Edge.

If you enable this setting, employees can use Flash plugins in Microsoft Edge.

If you don’t configure this setting, employees can choose whether to use Flash plugins while browsing on Microsoft Edge.

If you disable this setting employees can’t use Flash plugins when browsing on Microsoft Edge. |**Enabled:** Lets employees use Flash plugin when browsing while using Microsoft Edge.

**Not configured (default):** Employees can choose whether to use Flash plugins while browsing on Microsoft Edge. By default, Flash is turned on.

**Disabled:** Stops employees from using Flash plugin when using Microsoft Edge. | +|Configure **Home** pages |Windows 10, Version 1511 or later |This policy setting lets you configure one or more **Home** pages. for domain-joined devices. Your employees won't be able to change this after you set it.

If you enable this setting, you can configure one or more **Home** pages. If this setting is enabled, you must also include URLs to the pages, separating multiple pages by using angle brackets in this format:
``

If you disable or don’t configure this setting, your default **Home** page is the webpage specified in **App** settings. |**Enabled:** Configure your **Home** pages. If you use this option, you must also include site URLs.

**Not configured (default):** Uses the **Home** pages and **URLs** specified in the **App** settings.

**Disabled:** Uses the **Home** pages and **URLs** specified in the **App** settings. | +|Configure Password Manager |Windows 10 or later |This policy setting lets you decide whether employees can save their passwords locally, using Password Manager. By default, Password Manager is turned on.

If you enable this setting, employees can use Password Manager to save their passwords locally.

If you disable this setting, employees can’t use Password Manager to save their passwords locally.

If you don’t configure this setting, employees can choose whether to use Password Manager to save their passwords locally. |**Enabled (default):** Employees can use Password Manager to save passwords locally.

**Not configured:** Password Manager is turned on by default, but employees can choose whether to turn on it on or off.

**Disabled:** Employees can't use Password Manager to save passwords locally. | +|Configure Pop-up Blocker |Windows 10 or later |This policy setting lets you decide whether to turn on Pop-up Blocker. By default, Pop-up Blocker is turned on.

If you enable this setting, Pop-up Blocker is turned on, stopping pop-up windows from appearing.

If you disable this setting, Pop-up Blocker is turned off, letting pop-ups windows appear.

If you don’t configure this setting, employees can choose whether to use Pop-up Blocker. |**Enabled (default):** Turns on Pop-up Blocker, stopping pop-up windows.

**Not configured:** Turns on Pop-up Blocker, stopping pop-up windows.

**Disabled:** Turns off Pop-up Blocker, allowing pop-up windows. | +|Configure Search Provider |Windows 10, Version 1607 or later |This policy setting lets you configure your Search Provider for domain-joined devices.

If you enable this setting, you can configure the default Search Provider. If this setting is enabled, you must also include a link to the Open Search-formatted XML file, in this format:
`http://contoso.com/search/opensearch.xml`

If you disable or don’t configure this setting, the Search Providers are set by your employees in the **App** settings. |**Enabled:** Configure default Search Provider for domain-joined devices. If you use this option, you must also include search provider information.

**Disabled or not configured (default):** Uses the Search Providers specified in the **App** settings. | +|Configure search suggestions in Address bar |Windows 10 or later |This policy setting lets you decide whether search suggestions appear in the **Address** bar of Microsoft Edge. By default, employees can choose whether search suggestions appear in the **Address** bar of Microsoft Edge.

If you enable this setting, employees can see search suggestions in the **Address** bar of Microsoft Edge.

If you disable this setting, employees can't see search suggestions in the **Address** bar of Microsoft Edge.

If you don’t configure this setting, employees can choose whether search suggestions appear in the **Address** bar of Microsoft Edge. |**Enabled:** Employees can see search suggestions in the **Address** bar of Microsoft Edge.

**Not configured (default):** Employees can choose if search suggestions appear or not. Search suggestions appear by default.

**Disabled:** Employees can’t see search suggestions in the **Address** bar of Microsoft Edge. | +|Configure SmartScreen Filter |Windows 10 or later |This policy setting lets you configure whether to turn on SmartScreen Filter. SmartScreen Filter provides warning messages to help protect your employees from potential phishing scams and malicious software. By default, SmartScreen Filter is turned on.

If you enable this setting, SmartScreen Filter is turned on and employees can’t turn it off.

If you disable this setting, SmartScreen Filter is turned off and employees can’t turn it on.

If you don’t configure this setting, employees can choose whether to use SmartScreen Filter. |**Enabled:** Turns on SmartScreen Filter, providing warning messages to your employees about potential phishing scams and malicious software.

**Not configured (default):** Employees can turn SmartScreen on or off.

**Disabled:** Turns off SmartScreen Filter. | +|Configure the Enterprise Mode Site List |Windows 10 or later| This policy setting lets you configure whether to use Enterprise Mode and the Enterprise Mode Site List to address common compatibility problems with legacy apps.

If you enable this setting, Microsoft Edge looks for the Enterprise Mode Site List XML file. This file includes the sites and domains that need to be viewed using Internet Explorer 11 and Enterprise Mode.

If you disable or don’t configure this setting, Microsoft Edge won’t use the Enterprise Mode Site List XML file. In this case, employees might experience compatibility problems while using legacy apps. |**Enabled:** Lets you use the Enterprise Mode Site List to address common compatibility problems with legacy apps, if it’s configured. If you use this option, you must also add the location to your site list in the `{URI}` box. When configured, any site on the list will always open in Internet Explorer 11.

**Not configured (default):** You won't be able to use the Enterprise Mode site list.

**Disabled:** You won't be able to use the Enterprise Mode site list. | +|Prevent access to the **about:flags** page |Windows 10, Version 1607 or later |This policy setting lets you decide whether employees can access the **about:flags** page, which is used to change developer settings and to enable experimental features.

If you enable this policy setting, employees can’t access the **about:flags** page.

If you disable or don’t configure this setting, employees can access the **about:flags** page. |**Enabled:** Stops employees from using the **about:flags** page.

**Disabled or not configured (default):** Lets employees use the **about:flags** page. | + + + + + + + + + + + + + + + + + + + + + + + + + + -  ## Using Microsoft Intune to manage your Mobile Data Management (MDM) settings for Microsoft Edge - - If you manage your policies using Intune, you'll want to use these MDM policy settings. You can see the full list of available policies, on the [Policy CSP]( http://go.microsoft.com/fwlink/p/?LinkId=722885) page.

**Note**
The **Supports** column uses these options: @@ -63,6 +87,25 @@ If you manage your policies using Intune, you'll want to use these MDM policy se All devices must be enrolled with Intune if you want to use the Windows Custom URI Policy. + + + + + + + + + + + + + + + + + + + | Policy name | Supports | Details | | -------------------------------------------- | --------------------| ------------------------------------------------------- | | AllowAutofill | Desktop |

| From 35fef1d3f07561016cbdbc389b21c8adc5013b09 Mon Sep 17 00:00:00 2001 From: LizRoss Date: Tue, 3 May 2016 10:08:49 -0700 Subject: [PATCH 02/19] Updated --- browsers/edge/available-policies.md | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/browsers/edge/available-policies.md b/browsers/edge/available-policies.md index 591b536f01..2d514b5aed 100644 --- a/browsers/edge/available-policies.md +++ b/browsers/edge/available-policies.md @@ -46,6 +46,17 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A |Configure SmartScreen Filter |Windows 10 or later |This policy setting lets you configure whether to turn on SmartScreen Filter. SmartScreen Filter provides warning messages to help protect your employees from potential phishing scams and malicious software. By default, SmartScreen Filter is turned on.

If you enable this setting, SmartScreen Filter is turned on and employees can’t turn it off.

If you disable this setting, SmartScreen Filter is turned off and employees can’t turn it on.

If you don’t configure this setting, employees can choose whether to use SmartScreen Filter. |**Enabled:** Turns on SmartScreen Filter, providing warning messages to your employees about potential phishing scams and malicious software.

**Not configured (default):** Employees can turn SmartScreen on or off.

**Disabled:** Turns off SmartScreen Filter. | |Configure the Enterprise Mode Site List |Windows 10 or later| This policy setting lets you configure whether to use Enterprise Mode and the Enterprise Mode Site List to address common compatibility problems with legacy apps.

If you enable this setting, Microsoft Edge looks for the Enterprise Mode Site List XML file. This file includes the sites and domains that need to be viewed using Internet Explorer 11 and Enterprise Mode.

If you disable or don’t configure this setting, Microsoft Edge won’t use the Enterprise Mode Site List XML file. In this case, employees might experience compatibility problems while using legacy apps. |**Enabled:** Lets you use the Enterprise Mode Site List to address common compatibility problems with legacy apps, if it’s configured. If you use this option, you must also add the location to your site list in the `{URI}` box. When configured, any site on the list will always open in Internet Explorer 11.

**Not configured (default):** You won't be able to use the Enterprise Mode site list.

**Disabled:** You won't be able to use the Enterprise Mode site list. | |Prevent access to the **about:flags** page |Windows 10, Version 1607 or later |This policy setting lets you decide whether employees can access the **about:flags** page, which is used to change developer settings and to enable experimental features.

If you enable this policy setting, employees can’t access the **about:flags** page.

If you disable or don’t configure this setting, employees can access the **about:flags** page. |**Enabled:** Stops employees from using the **about:flags** page.

**Disabled or not configured (default):** Lets employees use the **about:flags** page. | +|Prevent bypassing SmartScreen prompts for files |Windows 10, Version 1511 or later |This policy setting lets you decide whether employees can override the SmartScreen Filter warnings about downloading unverified files. + +If you enable this setting, employees can’t ignore SmartScreen Filter warnings and they’re blocked from downloading the unverified files. + +If you disable or don’t configure this setting, employees can ignore SmartScreen Filter warnings and continue the download process. + Enabled: Stops employees from ignoring the SmartScreen Filter warnings about unverified files. + +Disabled or not configured (default): Lets employees ignore the SmartScreen Filter warnings about unverified files and lets them continue the download process. + + + From 83aa4c2c42d3bc755dd2f09ff3fe9a1de3f0ec7c Mon Sep 17 00:00:00 2001 From: LizRoss Date: Tue, 3 May 2016 13:17:01 -0700 Subject: [PATCH 03/19] Updated with pre-release content for RS1 --- browsers/edge/available-policies.md | 154 +++++++++------------------- 1 file changed, 51 insertions(+), 103 deletions(-) diff --git a/browsers/edge/available-policies.md b/browsers/edge/available-policies.md index 2d514b5aed..9798a34008 100644 --- a/browsers/edge/available-policies.md +++ b/browsers/edge/available-policies.md @@ -29,61 +29,24 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A |-------------|------------|-------------|--------| |Allow Developer Tools |Windows 10, Version 1511 or later |This policy setting lets you decide whether F12 Developer Tools are available on Microsoft Edge.

If you enable or don’t configure this setting, the F12 Developer Tools are available in Microsoft Edge.

If you disable this setting, the F12 Developer Tools aren’t available in Microsoft Edge. |**Enabled or not configured (default):** Shows the F12 Developer Tools on Microsoft Edge.

**Disabled:** Hides the F12 Developer Tools on Microsoft Edge. | |Allow InPrivate browsing |Windows 10, Version 1511 or later |This policy setting lets you decide whether employees can browse using InPrivate website browsing.

If you enable or don’t configure this setting, employees can use InPrivate website browsing.

If you disable this setting, employees can’t use InPrivate website browsing. |**Enabled or not configured (default):** Lets employees use InPrivate website browsing.

**Disabled:** Stops employees from using InPrivate website browsing. | -|Allow web content on **New Tab** page |Windows 10 or later |This policy setting lets you configure what appears when Microsoft Edge opens a new tab. By default, Microsoft Edge opens the **New Tab** page.

If you enable this setting, Microsoft Edge opens a new tab with the **New Tab** page.

If you disable this setting, Microsoft Edge opens a new tab with a blank page. If you use this setting, employees can’t change it.

If you don’t configure this setting, employees can choose how new tabs appears. |**Enabled:** Employees see web content on **New Tab** page.

**Not configured (default):** Employees see web content on **New Tab** page, but can change it.

**Disabled:** Employees always see an empty new tab. | -|Always Clear Browsing Data on Exit |Windows 10, Version 1607 or later |This policy setting lets you decide whether all of an employees' browsing data is automatically erased when Microsoft Edge closes.

If you enable this setting, all browsing data is automatically erased when Microsoft Edge closes.

If you disable, or don’t configure this setting, employees can choose whether to delete their browsing data from App settings. |**Enabled:** Employee's browsing data is automatically erased every time the browser is closed.

**Disabled or not configured (default):** Employees can choose whether to delete their browsing data from App settings. | -|Always show Favorites bar |Windows 10, Version 1607 or later |This policy setting lets you decide whether to always turn on the **Favorites** bar. By default, the **Favorites** bar is turned off.

If you enable this setting, the **Favorites** bar always appears and employees can’t turn it off.

If you disable or don’t configure this setting, employees can choose whether to turn the **Favorites** bar on from the **App** settings.|**Enabled:** Turns on **Favorites** bar and employees can’t turn it off.

**Disabled or not configured (default):** The **Favorites** bar is turned off by default. Employees can choose to turn it on or keep it off.| -|Configure Autofill |Windows 10 or later |This policy setting lets you decide whether employees can use Autofill to automatically fill in form fields while using Microsoft Edge. By default, employees can choose whether to use Autofill.

If you enable this setting, employees can use Autofill to automatically fill in forms while using Microsoft Edge.

If you disable this setting, employees can’t use Autofill to automatically fill in forms while using Microsoft Edge.

If you don’t configure this setting, employees can choose whether to use Autofill to automatically fill in forms while using Microsoft Edge. |**Enabled:** Employees can use Autofill to complete form fields.

**Disabled:** Employees can’t use Autofill to complete form fields.

**Not Configured (default):** Employees can choose to turn Autofill on or off. | -|Configure Cookies |Windows 10 or later|This setting lets you configure how to work with cookies.

If you enable this setting, you must also decide whether to:

|**Enabled:** Lets you decide how your company treats cookies. If you use this option, you must also choose whether to:

**Disabled or not configured:** All cookies are allowed from all sites.| -|Configure Do Not Track |Windows 10 or later |This policy setting lets you decide whether employees can send Do Not Track requests to websites that ask for tracking info. By default, Do Not Track requests aren’t sent, but employees can choose to turn on and send requests.

If you enable this setting, Do Not Tracker requests are always sent to websites asking for tracking info.

If you disable this setting, Do Not Track requests are never sent to websites asking for tracking info.

If you don’t configure this setting, employees can choose whether to send Do Not Track requests to websites asking for tracking info. |**Enabled:** Employees can send Do Not Track requests to websites requesting tracking info.

**Disabled:** Employees can’t send Do Not Track requests to websites requesting tracking info.

**Not Configured (default):** Employees can choose to send Do Not Track headers on or off. | -|Configure Edge Extensions |Windows 10, Version 1607 or later |This policy setting lets you decide whether employees can use Edge Extensions.

If you enable or don’t configure this setting, employees can use Edge Extensions.

If you disable this setting, employees can’t use Edge Extensions. |**Enabled or not configured:** Lets employees use Edge Extensions.

**Disabled:** Stops employees from using Edge Extensions. | +|Allow web content on **New Tab** page |Windows 10 or later |This policy setting lets you configure what appears when Microsoft Edge opens a new tab. By default, Microsoft Edge opens the **New Tab** page.

If you enable this setting, Microsoft Edge opens a new tab with the **New Tab** page.

If you don’t configure this setting, employees can choose how new tabs appears.

If you disable this setting, Microsoft Edge opens a new tab with a blank page. If you use this setting, employees can’t change it. |**Enabled:** Employees see web content on **New Tab** page.

**Not configured (default):** Employees see web content on **New Tab** page, but can change it.

**Disabled:** Employees always see an empty new tab. | +|Configure autofill |Windows 10 or later |This policy setting lets you decide whether employees can use Autofill to automatically fill in form fields while using Microsoft Edge. By default, employees can choose whether to use Autofill.

If you enable this setting, employees can use Autofill to automatically fill in forms while using Microsoft Edge.

If you don’t configure this setting, employees can choose whether to use Autofill to automatically fill in forms while using Microsoft Edge.

If you disable this setting, employees can’t use Autofill to automatically fill in forms while using Microsoft Edge. |**Enabled:** Employees can use Autofill to complete form fields.

**Disabled:** Employees can’t use Autofill to complete form fields.

**Not Configured (default):** Employees can choose to turn Autofill on or off. | +|Configure cookies |Windows 10 or later|This setting lets you configure how to work with cookies.

If you enable this setting, you must also decide whether to:

If you disable or don't configure this setting, all cookies are allowed from all sites. |**Enabled:** Lets you decide how your company treats cookies. If you use this option, you must also choose whether to:

**Disabled or not configured:** All cookies are allowed from all sites.| +|Configure Do Not Track |Windows 10 or later |This policy setting lets you decide whether employees can send Do Not Track requests to websites that ask for tracking info. By default, Do Not Track requests aren’t sent, but employees can choose to turn on and send requests.

If you enable this setting, Do Not Tracker requests are always sent to websites asking for tracking info.

If you don’t configure this setting, employees can choose whether to send Do Not Track requests to websites asking for tracking info.

If you disable this setting, Do Not Track requests are never sent to websites asking for tracking info. |**Enabled:** Employees can send Do Not Track requests to websites requesting tracking info.

**Disabled:** Employees can’t send Do Not Track requests to websites requesting tracking info.

**Not Configured (default):** Employees can choose to send Do Not Track headers on or off. | +|Configure Edge Extensions |Windows 10, Version 1607 |This policy setting lets you decide whether employees can use Edge Extensions.

If you enable or don’t configure this setting, employees can use Edge Extensions.

If you disable this setting, employees can’t use Edge Extensions. |**Enabled or not configured:** Lets employees use Edge Extensions.

**Disabled:** Stops employees from using Edge Extensions. | |Configure **Favorites** |Windows 10, Version 1511 or later |This policy setting lets you configure the default list of **Favorites** that appear for your employees. Employees can change their **Favorites** by adding or removing items at any time.

If you enable this setting, you can configure what default **Favorites** appear for your employees. If this setting is enabled, you must also provide a list of **Favorites** in the **Options** section. This list is imported after your policy is deployed.

If you disable or don’t configure this setting, employees will see the **Favorites** that they set in the **Favorites** hub. |**Enabled:** Configure the default list of **Favorites** for your employees. If you use this option, you must also add the URLs to the sites.

**Disabled or not configured:** Uses the **Favorites** list and **URLs** specified in the **Favorites** hub. | -|Configure Flash |Windows 10, Version 1607 or later |This policy setting lets you decide whether employees can use Flash plugins in Microsoft Edge.

If you enable this setting, employees can use Flash plugins in Microsoft Edge.

If you don’t configure this setting, employees can choose whether to use Flash plugins while browsing on Microsoft Edge.

If you disable this setting employees can’t use Flash plugins when browsing on Microsoft Edge. |**Enabled:** Lets employees use Flash plugin when browsing while using Microsoft Edge.

**Not configured (default):** Employees can choose whether to use Flash plugins while browsing on Microsoft Edge. By default, Flash is turned on.

**Disabled:** Stops employees from using Flash plugin when using Microsoft Edge. | |Configure **Home** pages |Windows 10, Version 1511 or later |This policy setting lets you configure one or more **Home** pages. for domain-joined devices. Your employees won't be able to change this after you set it.

If you enable this setting, you can configure one or more **Home** pages. If this setting is enabled, you must also include URLs to the pages, separating multiple pages by using angle brackets in this format:
``

If you disable or don’t configure this setting, your default **Home** page is the webpage specified in **App** settings. |**Enabled:** Configure your **Home** pages. If you use this option, you must also include site URLs.

**Not configured (default):** Uses the **Home** pages and **URLs** specified in the **App** settings.

**Disabled:** Uses the **Home** pages and **URLs** specified in the **App** settings. | -|Configure Password Manager |Windows 10 or later |This policy setting lets you decide whether employees can save their passwords locally, using Password Manager. By default, Password Manager is turned on.

If you enable this setting, employees can use Password Manager to save their passwords locally.

If you disable this setting, employees can’t use Password Manager to save their passwords locally.

If you don’t configure this setting, employees can choose whether to use Password Manager to save their passwords locally. |**Enabled (default):** Employees can use Password Manager to save passwords locally.

**Not configured:** Password Manager is turned on by default, but employees can choose whether to turn on it on or off.

**Disabled:** Employees can't use Password Manager to save passwords locally. | -|Configure Pop-up Blocker |Windows 10 or later |This policy setting lets you decide whether to turn on Pop-up Blocker. By default, Pop-up Blocker is turned on.

If you enable this setting, Pop-up Blocker is turned on, stopping pop-up windows from appearing.

If you disable this setting, Pop-up Blocker is turned off, letting pop-ups windows appear.

If you don’t configure this setting, employees can choose whether to use Pop-up Blocker. |**Enabled (default):** Turns on Pop-up Blocker, stopping pop-up windows.

**Not configured:** Turns on Pop-up Blocker, stopping pop-up windows.

**Disabled:** Turns off Pop-up Blocker, allowing pop-up windows. | -|Configure Search Provider |Windows 10, Version 1607 or later |This policy setting lets you configure your Search Provider for domain-joined devices.

If you enable this setting, you can configure the default Search Provider. If this setting is enabled, you must also include a link to the Open Search-formatted XML file, in this format:
`http://contoso.com/search/opensearch.xml`

If you disable or don’t configure this setting, the Search Providers are set by your employees in the **App** settings. |**Enabled:** Configure default Search Provider for domain-joined devices. If you use this option, you must also include search provider information.

**Disabled or not configured (default):** Uses the Search Providers specified in the **App** settings. | -|Configure search suggestions in Address bar |Windows 10 or later |This policy setting lets you decide whether search suggestions appear in the **Address** bar of Microsoft Edge. By default, employees can choose whether search suggestions appear in the **Address** bar of Microsoft Edge.

If you enable this setting, employees can see search suggestions in the **Address** bar of Microsoft Edge.

If you disable this setting, employees can't see search suggestions in the **Address** bar of Microsoft Edge.

If you don’t configure this setting, employees can choose whether search suggestions appear in the **Address** bar of Microsoft Edge. |**Enabled:** Employees can see search suggestions in the **Address** bar of Microsoft Edge.

**Not configured (default):** Employees can choose if search suggestions appear or not. Search suggestions appear by default.

**Disabled:** Employees can’t see search suggestions in the **Address** bar of Microsoft Edge. | -|Configure SmartScreen Filter |Windows 10 or later |This policy setting lets you configure whether to turn on SmartScreen Filter. SmartScreen Filter provides warning messages to help protect your employees from potential phishing scams and malicious software. By default, SmartScreen Filter is turned on.

If you enable this setting, SmartScreen Filter is turned on and employees can’t turn it off.

If you disable this setting, SmartScreen Filter is turned off and employees can’t turn it on.

If you don’t configure this setting, employees can choose whether to use SmartScreen Filter. |**Enabled:** Turns on SmartScreen Filter, providing warning messages to your employees about potential phishing scams and malicious software.

**Not configured (default):** Employees can turn SmartScreen on or off.

**Disabled:** Turns off SmartScreen Filter. | +|Configure Password Manager |Windows 10 or later |This policy setting lets you decide whether employees can save their passwords locally, using Password Manager. By default, Password Manager is turned on.

If you enable this setting, employees can use Password Manager to save their passwords locally.

If you don’t configure this setting, employees can choose whether to use Password Manager to save their passwords locally.

If you disable this setting, employees can’t use Password Manager to save their passwords locally. |**Enabled (default):** Employees can use Password Manager to save passwords locally.

**Not configured:** Password Manager is turned on by default, but employees can choose whether to turn on it on or off.

**Disabled:** Employees can't use Password Manager to save passwords locally. | +|Configure Pop-up Blocker |Windows 10 or later |This policy setting lets you decide whether to turn on Pop-up Blocker. By default, Pop-up Blocker is turned on.

If you enable this setting, Pop-up Blocker is turned on, stopping pop-up windows from appearing.

If you don’t configure this setting, employees can choose whether to use Pop-up Blocker.

If you disable this setting, Pop-up Blocker is turned off, letting pop-ups windows appear. |**Enabled (default):** Turns on Pop-up Blocker, stopping pop-up windows.

**Not configured:** Turns on Pop-up Blocker, stopping pop-up windows.

**Disabled:** Turns off Pop-up Blocker, allowing pop-up windows. | +|Configure search suggestions in Address bar |Windows 10 or later |This policy setting lets you decide whether search suggestions appear in the **Address** bar of Microsoft Edge. By default, employees can choose whether search suggestions appear in the **Address** bar of Microsoft Edge.

If you enable this setting, employees can see search suggestions in the **Address** bar of Microsoft Edge.

If you don’t configure this setting, employees can choose whether search suggestions appear in the **Address** bar of Microsoft Edge.

If you disable this setting, employees can't see search suggestions in the **Address** bar of Microsoft Edge. |**Enabled:** Employees can see search suggestions in the **Address** bar of Microsoft Edge.

**Not configured (default):** Employees can choose if search suggestions appear or not. Search suggestions appear by default.

**Disabled:** Employees can’t see search suggestions in the **Address** bar of Microsoft Edge. | +|Configure SmartScreen Filter |Windows 10 or later |This policy setting lets you configure whether to turn on SmartScreen Filter. SmartScreen Filter provides warning messages to help protect your employees from potential phishing scams and malicious software. By default, SmartScreen Filter is turned on.

If you enable this setting, SmartScreen Filter is turned on and employees can’t turn it off.

If you don’t configure this setting, employees can choose whether to use SmartScreen Filter.

If you disable this setting, SmartScreen Filter is turned off and employees can’t turn it on. |**Enabled:** Turns on SmartScreen Filter, providing warning messages to your employees about potential phishing scams and malicious software.

**Not configured (default):** Employees can turn SmartScreen on or off.

**Disabled:** Turns off SmartScreen Filter. | |Configure the Enterprise Mode Site List |Windows 10 or later| This policy setting lets you configure whether to use Enterprise Mode and the Enterprise Mode Site List to address common compatibility problems with legacy apps.

If you enable this setting, Microsoft Edge looks for the Enterprise Mode Site List XML file. This file includes the sites and domains that need to be viewed using Internet Explorer 11 and Enterprise Mode.

If you disable or don’t configure this setting, Microsoft Edge won’t use the Enterprise Mode Site List XML file. In this case, employees might experience compatibility problems while using legacy apps. |**Enabled:** Lets you use the Enterprise Mode Site List to address common compatibility problems with legacy apps, if it’s configured. If you use this option, you must also add the location to your site list in the `{URI}` box. When configured, any site on the list will always open in Internet Explorer 11.

**Not configured (default):** You won't be able to use the Enterprise Mode site list.

**Disabled:** You won't be able to use the Enterprise Mode site list. | -|Prevent access to the **about:flags** page |Windows 10, Version 1607 or later |This policy setting lets you decide whether employees can access the **about:flags** page, which is used to change developer settings and to enable experimental features.

If you enable this policy setting, employees can’t access the **about:flags** page.

If you disable or don’t configure this setting, employees can access the **about:flags** page. |**Enabled:** Stops employees from using the **about:flags** page.

**Disabled or not configured (default):** Lets employees use the **about:flags** page. | -|Prevent bypassing SmartScreen prompts for files |Windows 10, Version 1511 or later |This policy setting lets you decide whether employees can override the SmartScreen Filter warnings about downloading unverified files. - -If you enable this setting, employees can’t ignore SmartScreen Filter warnings and they’re blocked from downloading the unverified files. - -If you disable or don’t configure this setting, employees can ignore SmartScreen Filter warnings and continue the download process. - Enabled: Stops employees from ignoring the SmartScreen Filter warnings about unverified files. - -Disabled or not configured (default): Lets employees ignore the SmartScreen Filter warnings about unverified files and lets them continue the download process. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - +|Prevent access to the **about:flags** page |Windows 10, Version 1607 |This policy setting lets you decide whether employees can access the **about:flags** page, which is used to change developer settings and to enable experimental features.

If you enable this policy setting, employees can’t access the **about:flags** page.

If you disable or don’t configure this setting, employees can access the **about:flags** page. |**Enabled:** Stops employees from using the **about:flags** page.

**Disabled or not configured (default):** Lets employees use the **about:flags** page. | +|Prevent bypassing SmartScreen prompts for files |Windows 10, Version 1511 or later |This policy setting lets you decide whether employees can override the SmartScreen Filter warnings about downloading unverified files.

If you enable this setting, employees can’t ignore SmartScreen Filter warnings and they’re blocked from downloading the unverified files.

If you disable or don’t configure this setting, employees can ignore SmartScreen Filter warnings and continue the download process. |**Enabled:** Stops employees from ignoring the SmartScreen Filter warnings about unverified files.

**Disabled or not configured (default):** Lets employees ignore the SmartScreen Filter warnings about unverified files and lets them continue the download process. | +|Prevent bypassing SmartScreen prompts for sites |Windows 10, Version 1511 or later |This policy setting lets you decide whether employees can override the SmartScreen Filter warnings about potentially malicious websites.

If you enable this setting, employees can’t ignore SmartScreen Filter warnings and they’re blocked from continuing to the site.

If you disable or don’t configure this setting, employees can ignore SmartScreen Filter warnings and continue to the site. |**Enabled:** Stops employees from ignoring the SmartScreen Filter warnings about potentially malicious sites.

**Disabled or not configured (default):** Lets employees ignore the SmartScreen Filter warnings about potentially malicious sites and continue to the site. | +|Prevent using Localhost IP address for WebRTC |Windows 10, Version 1511 or later |This policy setting lets you decide whether an employee’s Localhost IP address shows while making calls using the WebRTC protocol.

If you enable this setting, Localhost IP addresses are hidden while making calls using the WebRTC protocol.

If you disable or don’t configure this setting, Localhost IP addresses are shown while making calls using the WebRTC protocol. |**Enabled:** Hides the Localhost IP address during calls using the WebRTC protocol.

**Not configured (default):** Shows the Localhost IP address during phone calls using the WebRTC protocol. Turned off by default.

**Disabled:** Shows the Localhost IP address during phone calls using the WebRTC protocol. | +|Send all intranet sites to Internet Explorer 11 |Windows 10 or later |This policy setting lets you decide whether your intranet sites should all open using Internet Explorer 11. This setting should only be used if there are known compatibility problems with Microsoft Edge.

If you enable this setting, all intranet sites are automatically opened using Internet Explorer 11.

If you disable or don’t configure this setting, all intranet sites are automatically opened using Microsoft Edge. |**Enabled:** Automatically opens all intranet sites using Internet Explorer 11.

**Disabled or not configured (default):** Automatically opens all intranet sites using Microsoft Edge. | +|Show message when opening sites in Internet Explorer |Windows 10, Version 1607 |This policy setting lets you decide whether employees see an additional page in Microsoft Edge, stating that a site has been opened using Internet Explorer 11.

If you enable this setting, employees see an additional page in Microsoft Edge, stating that a site has been opened using Internet Explorer 11.

If you disable or don’t configure this setting, the default app behavior occurs and no additional page appears. |**Enabled:** Shows an additional page in Microsoft Edge, stating that a site has been opened using Internet Explorer 11.

**Disabled or not configured (default):** Doesn’t show an additional page in Microsoft Edge, stating that a site has been opened using Internet Explorer 11. | ## Using Microsoft Intune to manage your Mobile Data Management (MDM) settings for Microsoft Edge If you manage your policies using Intune, you'll want to use these MDM policy settings. You can see the full list of available policies, on the [Policy CSP]( http://go.microsoft.com/fwlink/p/?LinkId=722885) page. @@ -98,62 +61,47 @@ If you manage your policies using Intune, you'll want to use these MDM policy se All devices must be enrolled with Intune if you want to use the Windows Custom URI Policy. +| Policy name |Supported versions |Supported device |Details | +|-------------|-------------------|-----------------|--------| +|AllowAutofill|Windows 10 or later |Desktop |

+|AllowBrowser |Windows 10 or later |Mobile || +|AllowDeveloperTools |Windows 10, Version 1511 or later |Desktop | | +|AllowDoNotTrack |Windows 10 or later |Both | | +|AllExtensions |Windows 10, Version 1607 |Desktop | | +|AllowInPrivate |Windows 10, Version 1511 or later |Both | | +|AllowPasswordManager |Windows 10 or later |Both | | +|AllowPopups |Windows 10 or later |Desktop | | +|AllowSearchSuggestionsinAddressBar |Windows 10 or later |Both | | +|AllowSmartScreen |Windows 10 or later |Both | | +|AllowWebContentOnNewTabPage |Windows 10 or later |Desktop | | +|Cookies |Windows 10 or later |Both | | +|EnterpriseModeSiteList |Windows 10 or later |Desktop | | +|Favorites |Windows 10, Version 1511 or later |Both |