From 9af8c9da52b5425e7c6b471d64c30a3f38bb8cf6 Mon Sep 17 00:00:00 2001 From: Patti Short Date: Thu, 21 Jun 2018 17:07:58 -0700 Subject: [PATCH 1/5] updated the logic for the settings --- windows/client-management/mdm/policy-csp-browser.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-browser.md b/windows/client-management/mdm/policy-csp-browser.md index 8672f1e47e..a2207e5193 100644 --- a/windows/client-management/mdm/policy-csp-browser.md +++ b/windows/client-management/mdm/policy-csp-browser.md @@ -2397,8 +2397,9 @@ ADMX Info: The following list shows the supported values: -- 0 (default) – Intranet traffic is sent to Internet Explorer. -- 1 – Intranet traffic is sent to Microsoft Edge. +- 0 (default) - Opens all websites, including intranet sites, in Microsoft Edge. +- 1 - Opens all intranet sites in Internet Explorer 11. + From aae575f8ce4f8fbac283d0ba951badc1da8ea304 Mon Sep 17 00:00:00 2001 From: Patti Short Date: Thu, 21 Jun 2018 17:09:25 -0700 Subject: [PATCH 2/5] updated the logic for the settings --- windows/client-management/mdm/policy-csp-browser.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-browser.md b/windows/client-management/mdm/policy-csp-browser.md index a2207e5193..646bb2d9c2 100644 --- a/windows/client-management/mdm/policy-csp-browser.md +++ b/windows/client-management/mdm/policy-csp-browser.md @@ -2397,8 +2397,8 @@ ADMX Info: The following list shows the supported values: -- 0 (default) - Opens all websites, including intranet sites, in Microsoft Edge. -- 1 - Opens all intranet sites in Internet Explorer 11. +- 0 (default) - Open all websites, including intranet sites, in Microsoft Edge. +- 1 - Open all intranet sites in Internet Explorer 11. From 1675efc207e4f37b11db741c28f98a677cb4bd78 Mon Sep 17 00:00:00 2001 From: Patti Short Date: Thu, 21 Jun 2018 17:13:54 -0700 Subject: [PATCH 3/5] updated the logic for the settings --- windows/client-management/mdm/policy-csp-browser.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-browser.md b/windows/client-management/mdm/policy-csp-browser.md index 646bb2d9c2..d538ab1be7 100644 --- a/windows/client-management/mdm/policy-csp-browser.md +++ b/windows/client-management/mdm/policy-csp-browser.md @@ -2381,7 +2381,7 @@ ADMX Info: > This policy is only enforced in Windows 10 for desktop and not supported in Windows 10 Mobile. -Specifies whether to send intranet traffic over to Internet Explorer. +By default, all websites, including intranet sites, open in Microsoft Edge automatically. Only enable this policy if there are known compatibility problems with Microsoft Edge. Enabling this policy loads only intranet sites in Internet Explorer 11 automatically. Most restricted value is 0. @@ -2397,8 +2397,8 @@ ADMX Info: The following list shows the supported values: -- 0 (default) - Open all websites, including intranet sites, in Microsoft Edge. -- 1 - Open all intranet sites in Internet Explorer 11. +- 0 (default) - All websites, including intranet sites, open in Microsoft Edge automatically. +- 1 - Only intranet sites open in Internet Explorer 11 automatically. From 71546ad1ec6f9a1dccaa9651fec27e83901c5495 Mon Sep 17 00:00:00 2001 From: Patti Short Date: Thu, 21 Jun 2018 17:48:13 -0700 Subject: [PATCH 4/5] updated policy descriptions --- .../mdm/policy-csp-browser.md | 39 +++++++++---------- 1 file changed, 18 insertions(+), 21 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-browser.md b/windows/client-management/mdm/policy-csp-browser.md index d538ab1be7..e4a66aaaa6 100644 --- a/windows/client-management/mdm/policy-csp-browser.md +++ b/windows/client-management/mdm/policy-csp-browser.md @@ -1,12 +1,12 @@ --- title: Policy CSP - Browser description: Policy CSP - Browser -ms.author: maricia ms.topic: article ms.prod: w10 ms.technology: windows -author: MariciaAlforque -ms.date: 05/14/2018 +author: shortpatti +ms.author: pashort +ms.date: 06/21/2018 --- # Policy CSP - Browser @@ -181,10 +181,9 @@ ms.date: 05/14/2018 -Added in Windows 10, version 1703. Specifies whether to allow the address bar drop-down functionality in Microsoft Edge. If you want to minimize network connections from Microsoft Edge to Microsoft services, we recommend disabling this functionality.  +Added in Windows 10, version 1703. -> [!NOTE] -> Disabling this setting turns off the address bar drop-down functionality. Because search suggestions are shown in the drop-down list, this setting takes precedence over the Browser/AllowSearchSuggestionsinAddressBar setting. +By default, Microsoft Edge shows the Address bar drop-down list and makes it available. When enabled (default setting), this policy takes precedence over the [Browser/AllowSearchSuggestionsinAddressBar](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowsearchsuggestionsinaddressbar) policy. If you want to minimize network connections from Microsoft Edge to Microsoft service, we recommend disabling this policy, which hides the Address bar drop-down list functionality. When disabled, Microsoft Edge also disables the _Show search and site suggestions as I type_ toggle in Settings.   Most restricted value is 0. @@ -245,7 +244,7 @@ The following list shows the supported values: -Specifies whether autofill on websites is allowed. +By default, users can choose to use Autofill for filling in form fields automatically. With this policy, you can configure Microsoft Edge, when enabled to use Autofill or, when disabled to prevent using Autofill. Most restricted value is 0. @@ -318,13 +317,10 @@ To verify AllowAutofill is set to 0 (not allowed): > [!NOTE] > This policy is only enforced in Windows 10 Mobile and not supported in Windows 10 for desktop. For desktop devices, use the [AppLocker CSP](applocker-csp.md) instead. - -Specifies whether the browser is allowed on the device. +By default, the device allows Microsoft Edge on Windows 10 Mobile. Disabling this policy disables the Microsoft Edge tile, and when clicking the tile, a message opens indicating that the administrator disabled Internet browsing. Most restricted value is 0. -When this policy is set to 0 (not allowed), the Microsoft Edge for Windows 10 Mobile tile will appear greyed out, and clicking on the tile will display a message indicating theat Internet browsing has been disabled by your administrator. - The following list shows the supported values: @@ -374,7 +370,7 @@ The following list shows the supported values: -This policy setting lets you decide whether Microsoft Edge can automatically update the configuration data for the Books Library. +By default, Microsoft Edge automatically updates the configuration data for the Books Library. Enabling this policy prevents Microsoft Edge from updating the configuration data. @@ -425,7 +421,7 @@ The following list shows the supported values: -Specifies whether cookies are allowed. +By default, Microsoft Edge allows all cookies from all websites. With this policy, however, you can configure Microsoft to block only 3rd-party cookies or block all cookies. Most restricted value is 0. @@ -443,9 +439,9 @@ ADMX Info: The following list shows the supported values: -- 0 – Block all cookies -- 1 – Block only third party cookies -- 2 - Allow cookies +- 0 – Block all cookies from all sites. +- 1 – Block only cookies from third party websites. +- 2 - Allow all cookies from all sites. @@ -501,8 +497,7 @@ To verify AllowCookies is set to 0 (not allowed): > [!NOTE] > This policy is only enforced in Windows 10 for desktop and not supported in Windows 10 Mobile. - -Specifies whether employees can use F12 Developer Tools on Microsoft Edge. Turning this setting on, or not configuring it, lets employees use F12 Developer Tools. Turning this setting off stops employees from using F12 Developer Tools. +By default, Microsoft Edge allows users to use the F12 developer tools to build and debug web pages. Disabling this policy prevents users from using the F12 developer tools. Most restricted value is 0. @@ -563,7 +558,7 @@ The following list shows the supported values: -Specifies whether Do Not Track headers are allowed. +By default, Microsoft Edge does not send Do Not Track requests to websites asking for tracking information, but users can choose to send tracking information to sites they visit. With this policy, you can configure Microsoft Edge to send or never send tracking information. Most restricted value is 1. @@ -579,8 +574,10 @@ ADMX Info: The following list shows the supported values: -- 0 (default) – Not allowed. -- 1 – Allowed. +- Blank/Null (default) Not configured - Does not send tracking information, but allow users to choose whether to send tracking information to sites they visit. +- 0 (Disabled) - Never sends tracking information. +- 1 (Enabled) - Sends tracking information, including to the third parties whose content may be hosted on the sites visited. + From cff5c0889e0122ede52430f2d7f106b68aa19ddd Mon Sep 17 00:00:00 2001 From: Patti Short Date: Mon, 25 Jun 2018 14:02:10 -0700 Subject: [PATCH 5/5] fixed a typo in an MDM policy --- browsers/edge/available-policies.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/browsers/edge/available-policies.md b/browsers/edge/available-policies.md index e93509d40f..b00dcae504 100644 --- a/browsers/edge/available-policies.md +++ b/browsers/edge/available-policies.md @@ -646,9 +646,9 @@ This policy setting specifies whether you see an additional page in Microsoft Ed **Microsoft Intune to manage your MDM settings** | | | |---|---| -|MDM name |[ShowMessageWhenOpeningInteretExplorerSites](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-showmessagewhenopeningsitesininternetexplorer) | +|MDM name |[ShowMessageWhenOpeningSitesInInternetExplorer](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-showmessagewhenopeningsitesininternetexplorer) | |Supported devices |Desktop | -|URI full path |./Vendor/MSFT/Policy/Config/Browser/ShowMessageWhenOpeningSitesInInteretExplorer | +|URI full path |./Vendor/MSFT/Policy/Config/Browser/ShowMessageWhenOpeningSitesInInternetExplorer | |Data type | Integer | |Allowed values |
  • **0 (default)** - Doesn’t show an additional page in Microsoft Edge, stating that a site has been opened using Internet Explorer 11.
  • **1** - Shows an additional page in Microsoft Edge, stating that a site has been opened using Internet Explorer 11.
|