deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-06-28 16:53:40 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

added links to the new group policies and kiosk mode

Browse Source
This commit is contained in:
Patti Short
2018-07-17 10:09:30 -07:00
parent 2bdefe5a1f
commit 4dfeb212a9
3 changed files with 178 additions and 286 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
browsers/edge/TOC.md
View File

@ -2,6 +2,8 @@
##[New Microsoft Edge Group Policies and MDM settings](new-policies.md) ##[New Microsoft Edge Group Policies and MDM settings](new-policies.md)
##[Deploy Microsoft Edge kiosk mode](microsoft-edge-kiosk-mode-deploy.md)
##[Change history for Microsoft Edge](change-history-for-microsoft-edge.md) ##[Change history for Microsoft Edge](change-history-for-microsoft-edge.md)
##[Enterprise guidance about using Microsoft Edge and Internet Explorer 11](enterprise-guidance-using-microsoft-edge-and-ie11.md) ##[Enterprise guidance about using Microsoft Edge and Internet Explorer 11](enterprise-guidance-using-microsoft-edge-and-ie11.md)

449
browsers/edge/microsoft-edge-kiosk-mode-deploy.md
View File

@ -14,141 +14,69 @@ ms.date: 07/18/2018
>Applies to: Microsoft Edge on Windows 10 >Applies to: Microsoft Edge on Windows 10
Microsoft Edge kiosk mode works with assigned access to restrict the browsing Microsoft Edge kiosk mode works with assigned access to allow IT, administrators, to create a tailored browsing experience designed for kiosk
experience for kiosk devices. The kiosk browsing experience includes a full devices. To use Microsoft Edge kiosk mode, you must configure Microsoft Edge as an application in assigned access. Learn more about [Configuring kiosk and shared devices running Windows desktop editions](https://docs.microsoft.com/en-us/windows/configuration/kiosk-shared-pc).
screen digital/interactive signage mode and a multi-tab browsing mode. To use
Microsoft Edge kiosk mode, you must configure Microsoft Edge with assigned
access.
When you configure Microsoft Edge kiosk mode in assigned access, you can set it When you configure Microsoft Edge kiosk mode in assigned access, you can set it up to show only a single URL in full-screen, in the case of digital/interactive signage on a single-app kiosk device. You can restrict Microsoft Edge for public browsing (on a single and multi-app kiosk device) which runs a multi-tab version of InPrivate with limited functionality. Also, you can configure a multi-app kiosk device to run a full or normal version of Microsoft Edge.
up to show only a single URL in full-screen, in the case of digital or
interactive signage on a single-app kiosk device. You can also restrict Digital/Interactive signage and public browsing protects the user’s data by running Microsoft Edge InPrivate. In single-app public browsing, there is both an idle timer and an 'End Session' button. The idle timer resets the browsing session after a specified time of user inactivity.
Microsoft Edge for public browsing (single and multi-app kiosk devices) that run
a multi-tab version of InPrivate limiting the functionality. You can also
configure a multi-app kiosk device to run a full version of Microsoft Edge.
Digital/Interactive signage, public browsing (single-app) and public browsing
(multi-app) protect user’s browsing data by running Microsoft Edge InPrivate.
Single-app public browsing provides an idle timer and an 'End session' button.
The idle timer resets the browsing session after a specified timeout, and the
'End Session' button resets the session immediately.
## Microsoft Edge kiosk types ## Microsoft Edge kiosk types
Windows 10 offers two different kiosk type experiences in assigned access for Windows 10 offers two different kiosk type experiences in assigned access for public and specialized use: single-app kiosk and multi-app kiosk. Microsoft Edge kiosk mode supports **four** types, depending on how a Microsoft Edge kiosk is set up in assigned access.
public and specialized use: single-app kiosk and multi-app kiosk. Microsoft Edge
kiosk mode supports **four** types, depending on how a Microsoft Edge kiosk is
set up in assigned access.
### Single-app kiosk ### Single-app kiosk
When you set up Microsoft Edge kiosk mode in single-app assigned access, When you set up Microsoft Edge kiosk mode in single-app assigned access, Microsoft Edge runs InPrivate either in full-screen or a limited multi-tab version for public browsing. For more details about setting up a single-app kiosk, see [Set up a kiosk or digital signage on Windows 10 Pro, Enterprise, or Education](https://docs.microsoft.com/en-us/windows/configuration/setup-kiosk-digital-signage).
Microsoft Edge runs InPrivate either in full-screen or a limited multi-tab
version.
The single-app Microsoft Edge kiosk mode types include: The single-app Microsoft Edge kiosk mode types include:
1. **Digital / Interactive signage** devices display a specific site in 1. **Digital / Interactive signage** devices display a specific site in full-screen mode where Microsoft Edge runs InPrivate mode. Examples of Digital signage are, a rotating advertisement or menu. Examples of Interactive signage are an interactive museum display or restaurant order/pay station.
full-screen mode where Microsoft Edge runs InPrivate mode. Examples of
Digital signage are, a rotating advertisement or menu. Examples of
Interactive signage are an interactive museum display or restaurant
order/pay station.
2. **Public browsing** devices run a limited multi-tab version of InPrivate and 2. **Public browsing** devices run a limited multi-tab version of InPrivate and are the only app available. Users can’t minimize, close, or open new Microsoft Edge windows or customize Microsoft Edge. Users can clear browsing data, downloads and restart Microsoft Edge by clicking “End session.” You can configure Microsoft Edge to restart after a period of inactivity by using the “Configure kiosk reset after idle timeout” policy. For example, an information kiosk at a public library.
are the only app available. Users can’t minimize, close, or open new
Microsoft Edge windows or customize Microsoft Edge. Users can clear browsing
data, downloads and restart Microsoft Edge by clicking “End session.” You
can configure Microsoft Edge to restart after a period of inactivity by
using the “Configure kiosk reset after idle timeout” policy. For example, an
information kiosk at a public library.
![single-app kiosk mode public browsing station](images/single-app-pbs.png) ![single-app kiosk mode public browsing station](images/single-app-pbs.png)
### Multi-app kiosk ### Multi-app kiosk
When you set up Microsoft Edge kiosk mode in multi-app assigned access, When you set up Microsoft Edge kiosk mode in multi-app assigned access, Microsoft Edge runs a limited multi-tab version of InPrivate or a normal
Microsoft Edge runs a limited multi-tab version of InPrivate or a normal browsing version. For more details about running a multi-app kiosk, or fixed-purpose device, see [Set up a multi-app kiosk](https://aka.ms/Ckmq4n). Here you learn how to create kiosks that run more than one app and the benefits of a multi-app kiosk, or fixed-purpose device.
browsing version. For more details about running a multi-app kiosk, or
fixed-purpose device, see Set up a multi-app kiosk. Here you learn how to create
kiosks that run more than one app and the benefits of a multi-app kiosk, or
fixed-purpose device.
The multi-app Microsoft Edge kiosk mode types include: The multi-app Microsoft Edge kiosk mode types include:
3. **Public browsing** (shared browsing) supports browsing the internet and 3. **Public browsing** (shared browsing) supports browsing the internet and runs InPrivate with minimal features available. In this configuration, Microsoft Edge can be one of many apps available. Users can minimize, close, and open multiple InPrivate windows. On a multi-app kiosk device, Microsoft Edge can interact with other applications. For example, users can install extensions from Microsoft Store if Microsoft Store is set up in assigned access. If you also have Internet Explorer 11 set up in assigned access; you can use the Enterprise Mode site list to allow users to open sites in Internet Explorer 11.
runs InPrivate with minimal features available. In this configuration,
Microsoft Edge can be one of many apps available. Users can minimize, close,
and open multiple InPrivate windows. On a multi-app kiosk device, Microsoft
Edge can interact with other applications. For example, users can install
extensions from Microsoft Store if Microsoft Store is set up in assigned
access. If you also have Internet Explorer 11 set up in assigned access; you
can use the Enterprise Mode site list to allow users to open sites in
Internet Explorer 11.
![multi-app public browsing station](images/multi-app-pbs.png) ![multi-app public browsing station](images/multi-app-pbs.png)
4. **Normal mode** runs a full version of Microsoft Edge, but some features may 4. **Normal mode** runs a full version of Microsoft Edge, but some features may not work depending on what other apps you configured in assigned access. For example, if the Microsoft Store is not set up, users cannot install extensions. If the user logs in with an MSA, their browsing data will roam with them. If you also have Internet Explorer 11 set up in assigned access; you can use the Enterprise Mode site list to open sites in Internet Explorer 11 automatically.
not work depending on what other apps you configured in assigned access. For
example, if the Microsoft Store is not set up, users cannot install
extensions. If the user logs in with an MSA, their browsing data will roam
with them. If you also have Internet Explorer 11 set up in assigned access;
you can use the Enterprise Mode site list to open sites in Internet Explorer
11 automatically.
![normal mode kiosk app](images/normal-mode.png) ![normal mode kiosk app](images/normal-mode.png)
## Let’s get started! ## Let’s get started!
Before you can configure Microsoft Edge kiosk mode, you must set up Microsoft Before you can configure Microsoft Edge kiosk mode, you must set up Microsoft Edge in assigned access. You can set up Microsoft Edge kiosk mode in assigned access using:
Edge in assigned access. You can set up Microsoft Edge kiosk mode in assigned
access using:
- **Windows Settings.** Best for physically setting up a single device as a - **Windows Settings.** Best for physically setting up a single device as a kiosk. With this method, you set up assigned access and configure the kiosk or digital sign device using Settings. You can configure Microsoft Edge in single-app (kiosk type – Full-screen or public browsing) and define a single URL for the Home Button, Start Page and New Tab page. You can also set the reset after idle timeout. an ,
kiosk. With this method, you set up assigned access and configure the kiosk
or digital sign device using Settings. You can configure Microsoft Edge in
single-app (kiosk type – Full-screen or public browsing) and define a single
URL for the Home Button, Start Page and New Tab page. You can also set the
reset after idle timeout. an ,
- **Microsoft Intune or other MDM service.** Best for setting up multiple - **Microsoft Intune or other MDM service.** Best for setting up multiple devices as a kiosk. With this method, you configure Microsoft Edge in assigned access and configure how Microsoft Edge behaves when it’s running in kiosk mode with assigned access.
devices as a kiosk. With this method, you configure Microsoft Edge in
assigned access and configure how Microsoft Edge behaves when it’s running
in kiosk mode with assigned access.
>[!NOTE] >[!NOTE]
>For other MDM service, check with your provider for instructions. >For other MDM service, check with your provider for instructions.
- **Windows PowerShell.** Best for setting up multiple devices as a kiosk. - **Windows PowerShell.** Best for setting up multiple devices as a kiosk. With this method, you set up assigned access using the [Set-AssignedAccess](https://docs.microsoft.com/en-us/powershell/module/assignedaccess/Set-AssignedAccess?view=win10-ps) cmdlet to restrict a local standard user account on a single-function device. The user cannot exit the app, sign out, or access any system settings. To configure how Microsoft Edge behaves when it’s running in kiosk mode, use Intune or other MDM service, the Group Policy Editor, or registry.
With this method, you set up assigned access using the
[Set-AssignedAccess](https://docs.microsoft.com/en-us/powershell/module/assignedaccess/Set-AssignedAccess?view=win10-ps)
cmdlet to restrict a local standard user account on a single-function
device. The user cannot exit the app, sign out, or access any system
settings. To configure how Microsoft Edge behaves when it’s running in kiosk
mode, use Intune or other MDM service, the Group Policy Editor, or registry.
- **Windows Configuration Designer.** Best for setting up multiple devices as - **Windows Configuration Designer.** Best for setting up multiple devices as a kiosk. Download and install both the latest version of the [Windows Assessment and Deployment Kit (ADK)](https://developer.microsoft.com/windows/hardware/windows-assessment-deployment-kit) and [Windows Configuration Manager](https://docs.microsoft.com/en-us/windows/configuration/provisioning-packages/provisioning-install-icd#install-windows-configuration-designer-1).
a kiosk. Download and install both the latest version of the [Windows
Assessment and Deployment Kit
(ADK)](https://developer.microsoft.com/windows/hardware/windows-assessment-deployment-kit)
and [Windows Configuration
Manager](https://docs.microsoft.com/en-us/windows/configuration/provisioning-packages/provisioning-install-icd#install-windows-configuration-designer-1).
### Prerequisites ### Prerequisites
- Microsoft Edge on Windows 10, version 1809 (Professional, Enterprise, and - Microsoft Edge on Windows 10, version 1809 (Professional, Enterprise, and Education).
Education).
- Configuration and deployment service, such as Windows PowerShell, Microsoft - Configuration and deployment service, such as Windows PowerShell, Microsoft Intune or other MDM service, or Windows Configuration Designer. With these methods, you must have the [AppUserModelID](https://docs.microsoft.com/windows-hardware/customize/enterprise/find-the-application-user-model-id-of-an-installed-app); this does not apply to the Windows Settings method.
Intune or other MDM service, or Windows Configuration Designer. With these
methods, you must have the
[AppUserModelID](https://docs.microsoft.com/windows-hardware/customize/enterprise/find-the-application-user-model-id-of-an-installed-app);
this does not apply to the Windows Settings method.
### Use Windows Settings ### Use Windows Settings
Windows Settings is the simplest and easiest way to set up one or a couple of Windows Settings is the simplest and easiest way to set up one or a couple of devices because you must perform these steps on each device. This method is ideal for mom and pop shops or small businesses.
devices because you must perform these steps on each device. This method is
ideal for mom and pop shops or small businesses.
1. In Windows Settings, select **Accounts** \> **Other people**. 1. In Windows Settings, select **Accounts** \> **Other people**.
@ -166,46 +94,32 @@ ideal for mom and pop shops or small businesses.
8. Select how Microsoft Edge displays when running in kiosk mode: 8. Select how Microsoft Edge displays when running in kiosk mode:
- **As a digital sign or interactive display,** the default URL shows in full - **As a digital sign or interactive display,** the default URL shows in full screen, without browser controls.
screen, without browser controls.
- **As a public browser,** the default URL shows in a browser view with - **As a public browser,** the default URL shows in a browser view with limited browser controls.
limited browser controls.
1. Select **Next**. 9. Select **Next**.
2. Enter the URL that you want to load when the kiosk launches. 10. Enter the URL that you want to load when the kiosk launches.
>[!NOTE] >[!NOTE]
>The URL sets the Home Button, Start page, and New Tab page. >The URL sets the Home Button, Start page, and New Tab page.
1. Microsoft Edge in kiosk mode has a built-in timer to help keep data safe in 11. Microsoft Edge in kiosk mode has a built-in timer to help keep data safe in public browsing sessions. When the idle time (no user activity) meets the time limit, a confirmation message prompts the user to continue; if **Continue** is not selected, Microsoft Edge resets to the default URL. Accept the default value of **5 minutes,** or you can choose your own idle timer value.
public browsing sessions. When the idle time (no user activity) meets the
time limit, a confirmation message prompts the user to continue; if
**Continue** is not selected, Microsoft Edge resets to the default URL.
Accept the default value of **5 minutes,** or you can choose your own idle
timer value.
2. Select **Next**, and then select **Close**. 12. Select **Next**, and then select **Close**.
3. Close **Settings** to save your choices automatically and apply them the 13. Close **Settings** to save your choices automatically and apply them the next time the user accounts logs on.
next time the user accounts logs on.
4. Configure the policies for Microsoft Edge kiosk mode. For details on the 14. Configure the policies for Microsoft Edge kiosk mode. For details on the valid kiosk policy settings, see [Related policies](#related-policies).
valid kiosk policy settings, see Related policies on page 17.
5. Validate the Microsoft Edge kiosk mode by restarting the device and signing 15. Validate the Microsoft Edge kiosk mode by restarting the device and signing in with the local kiosk account.
in with the local kiosk account.
*Congratulations!* You’ve finished setting up Microsoft Edge in assigned access **_Congratulations!_** You’ve finished setting up Microsoft Edge in assigned access and a kiosk or digital sign, and configured browser policies for Microsoft Edge kiosk mode.
and a kiosk or digital sign, and configured browser policies for Microsoft Edge
kiosk mode.
*Next steps.* **_Next steps._**
- Use your new kiosk. Sign in to the device using the user account - Use your new kiosk. Sign in to the device using the user account that you selected to run the kiosk app.
that you selected to run the kiosk app. - If you want to make changes to your kiosk, you can quickly change the display option and default URL for Microsoft Edge.
- If you want to make changes to your kiosk, you can quickly change the display
option and default URL for Microsoft Edge.
1. Go to **Start** \> **Settings** \> **Accounts** \> **Other people**. 1. Go to **Start** \> **Settings** \> **Accounts** \> **Other people**.
@ -215,213 +129,188 @@ option and default URL for Microsoft Edge.
### Use Microsoft Intune or other MDM service ### Use Microsoft Intune or other MDM service
With this method, you can use Microsoft Intune or other MDM services to With this method, you can use Microsoft Intune or other MDM services to configure Microsoft Edge in assigned access and how it behaves when it’s running in assigned access.
configure Microsoft Edge in assigned access and how it behaves when it’s running
in assigned access.
1. In Microsoft Intune or other MDM service, configure AssignedAccess to 1. In Microsoft Intune or other MDM service, configure AssignedAccess to prevent users from accessing the file system, running executables, or other apps.
prevent users from accessing the file system, running executables, or other
apps.
2. Configure the following MDM settings to control a web browser app on the 2. Configure the following MDM settings to control a web browser app on the kiosk device.
kiosk device.
| | | | | |
|---|---| |---|---|
| **ConfigureKioskMode**<p>![](images/icon-thin-line-computer.png) | Configure the display mode for Microsoft Edge as a kiosk app.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskMode<p>**Data type:** Integer<p>**Allowed values:**<ul><li>**Single-app kiosk experience**<ul><li>**0** - Digital signage and interactive display</li><li>**1** - InPrivate Public browsing</li></ul></li><li>**Multi-app kiosk experience**<ul><li>**0** - Normal Microsoft Edge running in assigned access</li><li>**1** - InPrivate public browsing with other apps</li></ul></li></ul> | | **[ConfigureKioskMode](new-policies.md#configure-kiosk-mode)**<p>![](images/icon-thin-line-computer.png) | Configure the display mode for Microsoft Edge as a kiosk app.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskMode<p>**Data type:** Integer<p>**Allowed values:**<ul><li>**Single-app kiosk experience**<ul><li>**0** - Digital signage and interactive display</li><li>**1** - InPrivate Public browsing</li></ul></li><li>**Multi-app kiosk experience**<ul><li>**0** - Normal Microsoft Edge running in assigned access</li><li>**1** - InPrivate public browsing with other apps</li></ul></li></ul> |
| **ConfigureKioskResetAfterIdleTimeout**<p>![](images/icon-thin-line-computer.png) | Change the time in minutes from the last user activity before Microsoft Edge kiosk mode resets to the default kiosk configuration.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskResetAfterIdleTimeout<p>**Data type:** Integer<p>**Allowed values:**<ul><li>**0** - No idle timer</li><li>**1-1440 (5 minutes is the default)** - Set reset on idle timer</li></ul> | | **[ConfigureKioskResetAfterIdleTimeout](new-policies.md#configure-kiosk-reset-after-idle-timeout)**<p>![](images/icon-thin-line-computer.png) | Change the time in minutes from the last user activity before Microsoft Edge kiosk mode resets to the default kiosk configuration.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskResetAfterIdleTimeout<p>**Data type:** Integer<p>**Allowed values:**<ul><li>**0** - No idle timer</li><li>**1-1440 (5 minutes is the default)** - Set reset on idle timer</li></ul> |
| **HomePages**<p>![](images/icon-thin-line-computer.png) | Set one or more start pages, URLs, to load when Microsoft Edge launches.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/HomePages<p>**Data type:** String<p>**Allowed values:**<p>Enter one or more URL, for example,<br>&nbsp;&nbsp;&nbsp;\<https://www.msn.com\>\<https:/www.bing.com\> | | **[HomePages](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-homepages)**<p>![](images/icon-thin-line-computer.png) | Set one or more start pages, URLs, to load when Microsoft Edge launches.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/HomePages<p>**Data type:** String<p>**Allowed values:**<p>Enter one or more URL, for example,<br>&nbsp;&nbsp;&nbsp;\<https://www.msn.com\>\<https:/www.bing.com\> |
| **ConfigureHomeButton**<p>![](images/icon-thin-line-computer.png) | Configure how the Home Button behaves.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureHomeButton<p>**Data type:** Integer<p> **Allowed values:**<ul><li>**0 (default)** - Not configured. Show home button, and load the default Start page.</li><li>**1** - Enabled. Show home button and load New tab page</li><li>**2** - Enabled. Show home button & set a specific page.</li><li>**3** - Enabled. Hide the home button.</li></ul> | | **[ConfigureHomeButton](new-policies.md#configure-home-button)**<p>![](images/icon-thin-line-computer.png) | Configure how the Home Button behaves.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureHomeButton<p>**Data type:** Integer<p> **Allowed values:**<ul><li>**0 (default)** - Not configured. Show home button, and load the default Start page.</li><li>**1** - Enabled. Show home button and load New tab page</li><li>**2** - Enabled. Show home button & set a specific page.</li><li>**3** - Enabled. Hide the home button.</li></ul> |
| **SetNewTabPageURL**<p>![](images/icon-thin-line-computer.png) | Set a custom URL for the New tab page.<p> **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ <p>**Data type:** String<p>**Allowed values:** Enter a URL, for example, https://www.msn.com | | ** [SetNewTabPageURL](new-policies.md#set-new-tab-page-url)**<p>![](images/icon-thin-line-computer.png) | Set a custom URL for the New tab page.<p> **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ <p>**Data type:** String<p>**Allowed values:** Enter a URL, for example, https://www.msn.com |
| **SetHomeButtonURL**<p>![](images/icon-thin-line-computer.png) | If you set ConfigureHomeButton to 2, configure the home button URL.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ <p>**Data type:** String<p>**Allowed values:** Enter a URL, for example, https://www.bing.com | | **[SetHomeButtonURL](new-policies.md#set-home-button-url)**<p>![](images/icon-thin-line-computer.png) | If you set ConfigureHomeButton to 2, configure the home button URL.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ <p>**Data type:** String<p>**Allowed values:** Enter a URL, for example, https://www.bing.com |
--- ---
3. Restart the device and sign in using the kiosk app user account. 3. Restart the device and sign in using the kiosk app user account.
*Congratulations!* You’ve finished setting up a kiosk or digital signage and **_Congratulations!_** You’ve finished setting up a kiosk or digital signage and configuring policies for Microsoft Edge kiosk mode using Microsoft Intune or other MDM service.
configuring policies for Microsoft Edge kiosk mode using Microsoft Intune or
other MDM service.
*Next steps.* Use your new kiosk. Sign in to the device using the user account **_Next steps._** Use your new kiosk. Sign in to the device using the user account that you selected to run the kiosk app.
that you selected to run the kiosk app.
### Use a provisioning package ### Use a provisioning package
With this method, you can use a provisioning package to configure Microsoft Edge With this method, you can use a provisioning package to configure Microsoft Edge in assigned access. After you set up the provisioning package for configuring Microsoft Edge in assigned access, you configure how Microsoft Edge behaves when it’s running in kiosk mode with assigned access.
in assigned access. After you set up the provisioning package for configuring
Microsoft Edge in assigned access, you configure how Microsoft Edge behaves when
it’s running in kiosk mode with assigned access.
1. Open Windows Configuration Designer to create a provisioning package and 1. Open Windows Configuration Designer to create a provisioning package and configure Microsoft Edge in assigned access.
configure Microsoft Edge in assigned access.
2. After creating the provisioning package and configuring assigned access, and 2. After creating the provisioning package and configuring assigned access, and before you build the package, switch to the advanced editor.
before you build the package, switch to the advanced editor.
3. Navigate to **Runtime settings \> Policies \> Browser** and set the 3. Navigate to **Runtime settings \> Policies \> Browser** and set the following policies:
following policies:
| | | | | |
|---|---| |---|---|
| **ConfigureKioskMode**<p>![](images/icon-thin-line-computer.png) | Configure the display mode for Microsoft Edge as a kiosk app.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskMode<p>**Data type:** Integer<p>**Allowed values:**<ul><li>**Single-app kiosk experience**<ul><li>**0** - Digital signage and interactive display</li><li>**1** - InPrivate Public browsing</li></ul></li><li>**Multi-app kiosk experience**<ul><li>**0** - Normal Microsoft Edge running in assigned access</li><li>**1** - InPrivate public browsing with other apps</li></ul></li></ul> | | **[ConfigureKioskMode](new-policies.md#configure-kiosk-mode)**<p>![](images/icon-thin-line-computer.png) | Configure the display mode for Microsoft Edge as a kiosk app.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskMode<p>**Data type:** Integer<p>**Allowed values:**<ul><li>**Single-app kiosk experience**<ul><li>**0** - Digital signage and interactive display</li><li>**1** - InPrivate Public browsing</li></ul></li><li>**Multi-app kiosk experience**<ul><li>**0** - Normal Microsoft Edge running in assigned access</li><li>**1** - InPrivate public browsing with other apps</li></ul></li></ul> |
| **ConfigureKioskResetAfterIdleTimeout**<p>![](images/icon-thin-line-computer.png) | Change the time in minutes from the last user activity before Microsoft Edge kiosk mode resets to the default kiosk configuration.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskResetAfterIdleTimeout<p>**Data type:** Integer<p>**Allowed values:**<ul><li>**0** - No idle timer</li><li>**1-1440 (5 minutes is the default)** - Set reset on idle timer</li></ul> | | **[ConfigureKioskResetAfterIdleTimeout](new-policies.md#configure-kiosk-reset-after-idle-timeout)**<p>![](images/icon-thin-line-computer.png) | Change the time in minutes from the last user activity before Microsoft Edge kiosk mode resets to the default kiosk configuration.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskResetAfterIdleTimeout<p>**Data type:** Integer<p>**Allowed values:**<ul><li>**0** - No idle timer</li><li>**1-1440 (5 minutes is the default)** - Set reset on idle timer</li></ul> |
| **HomePages**<p>![](images/icon-thin-line-computer.png) | Set one or more start pages, URLs, to load when Microsoft Edge launches.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/HomePages<p>**Data type:** String<p>**Allowed values:**<p>Enter one or more URL, for example,<br>&nbsp;&nbsp;&nbsp;\<https://www.msn.com\>\<https:/www.bing.com\> | | **[HomePages](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-homepages)**<p>![](images/icon-thin-line-computer.png) | Set one or more start pages, URLs, to load when Microsoft Edge launches.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/HomePages<p>**Data type:** String<p>**Allowed values:**<p>Enter one or more URL, for example,<br>&nbsp;&nbsp;&nbsp;\<https://www.msn.com\>\<https:/www.bing.com\> |
| **ConfigureHomeButton**<p>![](images/icon-thin-line-computer.png) | Configure how the Home Button behaves.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureHomeButton<p>**Data type:** Integer<p> **Allowed values:**<ul><li>**0 (default)** - Not configured. Show home button, and load the default Start page.</li><li>**1** - Enabled. Show home button and load New tab page</li><li>**2** - Enabled. Show home button & set a specific page.</li><li>**3** - Enabled. Hide the home button.</li></ul> | | **[ConfigureHomeButton](new-policies.md#configure-home-button)**<p>![](images/icon-thin-line-computer.png) | Configure how the Home Button behaves.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureHomeButton<p>**Data type:** Integer<p> **Allowed values:**<ul><li>**0 (default)** - Not configured. Show home button, and load the default Start page.</li><li>**1** - Enabled. Show home button and load New tab page</li><li>**2** - Enabled. Show home button & set a specific page.</li><li>**3** - Enabled. Hide the home button.</li></ul> |
| **SetNewTabPageURL**<p>![](images/icon-thin-line-computer.png) | Set a custom URL for the New tab page.<p> **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ <p>**Data type:** String<p>**Allowed values:** Enter a URL, for example, https://www.msn.com | | ** [SetNewTabPageURL](new-policies.md#set-new-tab-page-url)**<p>![](images/icon-thin-line-computer.png) | Set a custom URL for the New tab page.<p> **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ <p>**Data type:** String<p>**Allowed values:** Enter a URL, for example, https://www.msn.com |
| **SetHomeButtonURL**<p>![](images/icon-thin-line-computer.png) | If you set ConfigureHomeButton to 2, configure the home button URL.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ <p>**Data type:** String<p>**Allowed values:** Enter a URL, for example, https://www.bing.com | | **[SetHomeButtonURL](new-policies.md#set-home-button-url)**<p>![](images/icon-thin-line-computer.png) | If you set ConfigureHomeButton to 2, configure the home button URL.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ <p>**Data type:** String<p>**Allowed values:** Enter a URL, for example, https://www.bing.com |
--- ---
4. After you’ve configured the Microsoft Edge kiosk mode policies, including 4. After you’ve configured the Microsoft Edge kiosk mode policies, including any of the related policies, it’s time to build the package.
any of the related policies, it’s time to build the package.
5. Click **Finish**. The wizard closes taking you back to the Customizations 5. Click **Finish**. The wizard closes taking you back to the Customizations page.
page.
6. Apply the provisioning package to the device, which you can do during the 6. Apply the provisioning package to the device, which you can do during the first-run experience (out-of-box experience or OOBE) and after (runtime). For more details, see [Apply a provisioning package](https://docs.microsoft.com/en-us/windows/configuration/provisioning-packages/provisioning-apply-package).
first-run experience (out-of-box experience or OOBE) and after (runtime).
For more details, see Apply a provisioning package.
*Congratulations!* You’ve finished creating your provisioning package for **_Congratulations!_** You’ve finished creating your provisioning package for Microsoft Edge kiosk mode.
Microsoft Edge kiosk mode.
*Next steps.* Use your new kiosk. Sign in to the device using the user account **_Next steps._** Use your new kiosk. Sign in to the device using the user account that you selected to run the kiosk app.
that you selected to run the kiosk app.
# Feature comparison of kiosk mode and kiosk browser app ## Feature comparison of kiosk mode and kiosk browser app
In the following table, we show you the features available in both Microsoft In the following table, we show you the features available in both Microsoft Edge kiosk mode and Kiosk Browser app available in Microsoft Store. Both kiosk mode and kiosk browser app work in assigned access.
Edge kiosk mode and Kiosk Browser app available in Microsoft Store. Both kiosk
mode and kiosk browser app work in assigned access.
| **Feature** | **Microsoft Edge kiosk mode** | **Kiosk Browser** | | **Feature** | **Microsoft Edge kiosk mode** | **Kiosk Browser** |
|---------------|--------------------------------|-----------------------| |---------------|:----------------:|:---------------:|
| Print support | [Supported](images/148767.png) | [Not supported](images/148766.png) | | Print support | ![Supported](images/148767.png) | ![Not supported](images/148766.png) |
| Multi-tab support | [Supported](images/148767.png) | [Not supported](images/148766.png) | | Multi-tab support | ![Supported](images/148767.png) | ![Not supported](images/148766.png) |
| Allow URL support | [Supported](images/148767.png) <p>*\*For Microsoft Edge kiosk mode use* [Windows Defender Firewall](#_*Windows_Defender_Firewall)*. Microsoft kiosk browser has custom policy support.* | [Supported](images/148767.png) | | Allow URL support | ![Supported](images/148767.png) <p>*\*For Microsoft Edge kiosk mode use* [Windows Defender Firewall](#_*Windows_Defender_Firewall)*. Microsoft kiosk browser has custom policy support.* | ![Supported](images/148767.png) |
| Block URL support | [Supported](images/148767.png)<p>*\*For Microsoft Edge kiosk mode use* [Windows Defender Firewall](#_*Windows_Defender_Firewall)*. Microsoft kiosk browser has custom policy support.* | [Supported](images/148767.png) | | Block URL support | ![Supported](images/148767.png)<p>*\*For Microsoft Edge kiosk mode use* [Windows Defender Firewall](#_*Windows_Defender_Firewall)*. Microsoft kiosk browser has custom policy support.* | ![Supported](images/148767.png) |
| Configure Home button | [Supported](images/148767.png) | [Supported](images/148767.png) | | Configure Home button | ![Supported](images/148767.png) | ![Supported](images/148767.png) |
| Set Start page(s) URL | [Supported](images/148767.png) | [Supported](images/148767.png) <p>*Same as Home button URL* | | Set Start page(s) URL | ![Supported](images/148767.png) | ![Supported](images/148767.png) <p>*Same as Home button URL* |
| Set New Tab page URL | [Supported](images/148767.png) | [Not supported](images/148766.png) | | Set New Tab page URL | ![Supported](images/148767.png) | ![Not supported](images/148766.png) |
| Favorites management | [Supported](images/148767.png) | [Not supported](images/148766.png) | | Favorites management | ![Supported](images/148767.png) | ![Not supported](images/148766.png) |
| End session button | [Supported](images/148767.png) | [Supported](images/148767.png)<p>*In Intune, must create custom URI to enable. Dedicated UI configuration targeted for 1808.* | | End session button | ![Supported](images/148767.png) | ![Supported](images/148767.png)<p>*In Intune, must create custom URI to enable. Dedicated UI configuration targeted for 1808.* |
| Reset on inactivity | [Supported](images/148767.png) | [Supported](images/148767.png) | | Reset on inactivity | ![Supported](images/148767.png) | ![Supported](images/148767.png) |
| Internet Explorer integration (Enterprise Mode site list) | [Supported](images/148767.png)<p>*Multi-app mode only* | [Not supported](images/148766.png) | | Internet Explorer integration (Enterprise Mode site list) | ![Supported](images/148767.png)<p>*Multi-app mode only* | ![Not supported](images/148766.png) |
--- ---
## \*Windows Defender Firewall ### \*Windows Defender Firewall
To prevent unwanted websites, use Windows Defender Firewall to configure a list of allowed websites or blocked websites or both. For more details, see [Windows Defender Firewall with Advanced Security Deployment](https://docs.microsoft.com/en-us/windows/security/identity-protection/windows-firewall/windows-firewall-with-advanced-security-deployment-guide). To prevent unwanted websites, use Windows Defender Firewall to configure a list of allowed websites or blocked websites or both. For more details, see [Windows Defender Firewall with Advanced Security Deployment](https://docs.microsoft.com/en-us/windows/security/identity-protection/windows-firewall/windows-firewall-with-advanced-security-deployment-guide).
# Related policies ## Related policies
You can use any of the following policies to enhance the kiosk experience. To learn more about these policies, see [Policy CSP - Browser](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser).
| **MDM Setting** | **Digital /<br>Interactive signage** | **Public browsing<br>single-app** | **Public browsing<br>multi-app** | **Normal** | | **MDM Setting** | **Digital /<br>Interactive signage** | **Public browsing<br>single-app** | **Public browsing<br>multi-app** | **Normal** |
|------------------|--------------------------|----------------------|------------------------|--------------------------| |------------------|:---------:|:---------:|:---------:|:---------:|
| AllowAddressBarDropdown | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) | | [AllowAddressBarDropdown](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowaddressbardropdown) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) |
| AllowAutofill | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) | | [AllowAutofill](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowautofill) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) |
| AllowBrowser | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | | [AllowBrowser](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowbrowser) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) |
| AllowConfigurationUpdateForBooksLibrary | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) | | [AllowConfigurationUpdateForBooksLibrary](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowconfigurationupdateforbookslibrary) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) |
| AllowCookies | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | | [AllowCookies](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowcookies) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) |
| AllowDeveloperTools | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) | | [AllowDeveloperTools](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowdevelopertools) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) |
| AllowDoNotTrack | [Supported](images/148767.png) ? | [Supported](images/148767.png) ? | [Supported](images/148767.png) ? | [Supported](images/148767.png) | | [AllowDoNotTrack](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowdonottrack) | ![Supported](images/148767.png) ? | ![Supported](images/148767.png) ? | ![Supported](images/148767.png) ? | ![Supported](images/148767.png) |
| AllowExtensions | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) | | [AllowExtensions](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowextensions) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) |
| AllowFlash | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | | [AllowFlash](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowflash) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) |
| AllowFlashClickToRun | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | | [AllowFlashClickToRun](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowflashclicktorun) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) |
| AllowFullscreen\* | [Not supported](images/148766.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | | [AllowFullscreen](new-policies.md#allow-fullscreen-mode)\* | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) |
| AllowInPrivate | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) | | [AllowInPrivate](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowinprivate) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) |
| AllowMicrosoftCompatibilityList | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) \* | [Supported](images/148767.png) | | [AllowMicrosoftCompatibilityList](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowmicrosoftcompatibilitylist) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) \* | ![Supported](images/148767.png) |
| AllowPasswordManager | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) | | [AllowPasswordManager](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowpasswordmanager) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) |
| AllowPopups | [Not supported](images/148766.png) ? | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | | [AllowPopups](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowpopups) | ![Not supported](images/148766.png) ? | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) |
| AllowPrelaunch\* | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) | | [AllowPrelaunch](new-policies.md#allow-prelaunch)\* | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) |
| AllowPrinting\* | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | | [AllowPrinting](new-policies.md#allow-printing)\* | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) |
| AllowSavingHistory\* | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) | | [AllowSavingHistory](new-policies.md#allow-saving-history)\* | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) |
| AllowSearchEngineCustomization | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) | | AllowSearchEngineCustomization | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) |
| AllowSearchSuggestionsinAddressBar | [Not supported](images/148766.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | | [AllowSearchSuggestionsinAddressBar](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowsearchenginecustomization) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) |
| AllowSideloadingOfExtensions\* | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) | | [AllowSideloadingOfExtensions](new-policies.md#allow-sideloading-of-extensions)\* | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) |
| AllowSmartScreen | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | | [AllowSmartScreen](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowsmartscreen) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) |
| AllowSyncMySettings | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) ? | [Supported](images/148767.png) | | [AllowSyncMySettings](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-experience#experience-allowsyncmysettings) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) ? | ![Supported](images/148767.png) |
| AllowTabPreloading\* | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) | | [AllowTabPreloading](new-policies.md#allow-microsoft-edge-to-start-and-load-the-start-and-new-tab-page-at-windows-startup-and-each-time-microsoft-edge-is-closed)\* | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) |
| AllowWebContentOnNewTabPage\* | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) | | [AllowWebContentOnNewTabPage](new-policies.md#allowwebcontentonnewtabpage)\* | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) |
| AlwaysEnabledBooksLibrary | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) | | [AlwaysEnabledBooksLibrary](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-alwaysenablebookslibrary) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) |
| ClearBrowsingDataOnExit | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) | | [ClearBrowsingDataOnExit](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-clearbrowsingdataonexit) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) |
| ConfigureAdditionalSearchEngines | [Not supported](images/148766.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | | [ConfigureAdditionalSearchEngines](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-configureadditionalsearchengines) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) |
| ConfigureFavoritesBar\* | [Not supported](images/148766.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | | [ConfigureFavoritesBar](new-policies.md#configure-favorites-bar)\* | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) |
| ConfigureHomeButton\* | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | | [ConfigureHomeButton](new-policies.md#configure-home-button)\* | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) |
|  ConfigureKioskMode\* | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | |  [ConfigureKioskMode](new-policies.md#configure-kiosk-mode)\* | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) |
|  ConfigureKioskResetAfterIdleTimeout\* | [Not supported](images/148766.png) | [Supported](images/148767.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | |  [ConfigureKioskResetAfterIdleTimeout](new-policies.md#configure-kiosk-reset-after-idle-timeout)\* | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) |
| ConfigureOpenMicrosoftEdgeWith\* | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | | [ConfigureOpenMicrosoftEdgeWith](new-policies.md#configure-open-microsoft-edge-with)\* | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) |
| ConfigureTelemetryForMicrosoft365Analytics\* | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | | [ConfigureTelemetryForMicrosoft365Analytics](new-policies.md#configure-collection-of-browsing-data-for-microsoft-365-analytics)\* | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) |
| DisableLockdownOfStartPages | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) | | [DisableLockdownOfStartPages](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-disablelockdownofstartpages) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) |
| DoNotSyncBrowserSettings\* & PreventUsersFromTurningOnBrowserSyncing\* | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) ? | [Supported](images/148767.png) | | [DoNotSyncBrowserSetting](new-policies.md#donotsyncbrowsersetting)\* & [!INCLUDE [PreventUsersFromTurningOnBrowserSyncing](includes/prevent-users-to-turn-on-browser-syncing-include.md)]\* | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) ? | ![Supported](images/148767.png) |
| EnableExtendedBooksTelemetry | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) | | [EnableExtendedBooksTelemetry](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-enableextendedbookstelemetry) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) |
| EnterpriseModeSiteList | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) \* | [Supported](images/148767.png) | | [EnterpriseModeSiteList](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-enterprisemodesitelist) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) \* | ![Supported](images/148767.png) |
| FirstRunURL | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | | [FirstRunURL](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-firstrunurl) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) |
| HomePages | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | | [HomePages](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-homepages) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) |
| LockdownFavorites | [Not supported](images/148766.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | | [LockdownFavorites](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-lockdownfavorites) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) |
| PreventAccessToAboutFlagsInMicrosoftEdge | [Not supported](images/148766.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | | [PreventAccessToAboutFlagsInMicrosoftEdge](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-preventaccesstoaboutflagsinmicrosoftedge) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) |
| PreventCertErrorOverrides\* | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | | [PreventCertErrorOverrides](new-policies.md#prevent-certificate-error-overrides)\* | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) |
| PreventFirstRunPage | [Supported](images/148767.png) ? | [Supported](images/148767.png) ? | [Supported](images/148767.png) ? | [Supported](images/148767.png) | | [PreventFirstRunPage](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-preventfirstrunpage) | ![Supported](images/148767.png) ? | ![Supported](images/148767.png) ? | ![Supported](images/148767.png) ? | ![Supported](images/148767.png) |
| PreventLiveTileDataCollection | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) | | [PreventLiveTileDataCollection](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-preventlivetiledatacollection) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) |
| PreventSmartScreenPromptOverride | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | | [PreventSmartScreenPromptOverride](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-preventsmartscreenpromptoverride) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) |
| PreventSmartScreenPromptOverrideForFiles | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | | [PreventSmartScreenPromptOverrideForFiles](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-preventsmartscreenpromptoverrideforfiles) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) |
| PreventTurningOffRequiredExtensions\* | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | | [PreventTurningOffRequiredExtensions](new-policies.md#prevent-turning-off-required-extensions)\* | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) |
| PreventUsingLocalHostIPAddressForWebRTC | ? | ? | ? | [Supported](images/148767.png) | | [PreventUsingLocalHostIPAddressForWebRTC](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-preventusinglocalhostipaddressforwebrtc) | ? | ? | ? | ![Supported](images/148767.png) |
| ProvisionFavorites | [Not supported](images/148766.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | | [ProvisionFavorites](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-provisionfavorites) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) |
| SendIntranetTraffictoInternetExplorer | [Not supported](images/148766.png) | [Not supported](images/148766.png) | ?\* | [Supported](images/148767.png) | | [SendIntranetTraffictoInternetExplorer](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-sendintranettraffictointernetexplorer) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ?\* | ![Supported](images/148767.png) |
| SetDefaultSearchEngine | [Not supported](images/148766.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | | [SetDefaultSearchEngine](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-setdefaultsearchengine) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) |
| SetHomeButtonURL\* | [Not supported](images/148766.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | | [SetHomeButtonURL](new-policies.md#set-home-button-url)\* | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) |
| SetNewTabPageURL\* | [Not supported](images/148766.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | | [SetNewTabPageURL](new-policies.md#set-new-tab-page-url)\* | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) |
| ShowMessageWhenOpeningInteretExplorerSites | [Not supported](images/148766.png) | [Supported](images/148767.png) | [Supported](images/148767.png) \* | [Supported](images/148767.png) | | [ShowMessageWhenOpeningInteretExplorerSites](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-showmessagewhenopeningsitesininternetexplorer) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) | ![Supported](images/148767.png) \* | ![Supported](images/148767.png) |
| SyncFavoritesBetweenIEAndMicrosoftEdge | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) ? | [Supported](images/148767.png) | | [SyncFavoritesBetweenIEAndMicrosoftEdge](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-syncfavoritesbetweenieandmicrosoftedge) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) ? | ![Supported](images/148767.png) |
| UnlockHomeButton\* | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) | | [UnlockHomeButton](new-policies.md#unlock-home-button)\* | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) |
| UseSharedFolderForBooks | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) | | [UseSharedFolderForBooks](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-usesharedfolderforbooks) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Not supported](images/148766.png) | ![Supported](images/148767.png) |
--- ---
*\* New policy coming in the next release of Windows 10.* *\* New policy coming in the next release of Windows 10.*<p>
**\* Requires Internet Explorer 11 to be configured in multi-app assigned access.*
# Related topics ## Known issues with RS_PRERELEASE build 17718
- Bug with Microsoft Edge kiosk mode when setting up as a single-app in assigned access and “Configure kiosk mode” is not set.
- **Expected behavior** – Microsoft Edge kiosk mode launches in full-screen mode.
- **Actual behavior** – Normal Microsoft Edge launches.
- **Create a Kiosk Experience:** Learn how to set up single-function kiosk - “Configure Favorites bar” policy when setting to enabled or 1 does not show the favorites bar in Microsoft Edge kiosk mode.
devices, such as restaurant menus, and optional features for a welcome - **Expected behavior** – Microsoft Edge kiosk mode shows the favorites bar.
screen or power button availability. Also, learn how to create a multi-app - **Actual behavior** – The favorites bar is hidden.
kiosk, or fixed-purpose device, to provide an easy-to-understand experience
giving users the things they need to use.
- **Configure a Windows 10 kiosk that runs multiple apps:** Learn how to - Extensions should not be available in Public browsing multi-app kiosk.
create kiosks that run more than one app and the benefits of a multi-app - **Expected behavior** – Extensions are disabled in _Settings and more_ menu.
kiosk, or fixed-purpose device. - **Actual behavior** – Extensions are accessible in _Settings and more_ menu.
- **Kiosk apps for assigned access: Best practices:** In Windows 10, you can - Books should not be available in Public browsing multi-app kiosk.
use assigned access to create a kiosk device, which enables users to - **Expected behavior** – Books are disabled in _Settings and more_ menu.
interact with just a single Universal Windows app. Learn about the best - **Actual behavior** – Books are accessible in _Settings and more_ menu.
practices for implementing a kiosk app.
- **Guidelines for choosing an app for assigned access (kiosk mode):**
Assigned access restricts a local standard user account on the device so
that it only has access to a single-function device, like a kiosk. Learn
about the guidelines for choosing a Windows app, web browsers, and securing
your information. Also, learn about additional configurations required for
some apps before it can work properly in assigned access.
- **Other settings to lock down:** Learn how to configure a more secure kiosk ## Related topics
experience. In addition to the settings, learn how to set up **automatic
logon** for your kiosk device. For example, when the kiosk device restarts,
you can log back into the device manually or by setting up automatic logon.
- **Add apps to Microsoft Intune:** Learn about and understand a few app - **[Create a Kiosk Experience](https://docs.microsoft.com/en-us/windows-hardware/customize/enterprise/create-a-kiosk-image):** Learn how to set up single-function kiosk devices, such as restaurant menus, and optional features for a welcome screen or power button availability. Also, learn how to create a multi-app kiosk, or fixed-purpose device, to provide an easy-to-understand experience giving users the things they need to use.
fundamentals and requirements before adding them to Intune and making them
available to your users.
- **AssignedAccess configuration service provider (CSP):** The AssignedAccess - **[Configure a Windows 10 kiosk that runs multiple apps](https://aka.ms/Ckmq4n):** Learn how to create kiosks that run more than one app and the benefits of a multi-app kiosk, or fixed-purpose device.
configuration service provider (CSP) sets the device to run in kiosk mode.
Once the CSP has executed, then the next user login associated with the
kiosk mode puts the device into the kiosk mode running the application
specified in the CSP configuration.
- **Create a provisioning page for Windows 10**. Learn to use Windows - **[Kiosk apps for assigned access best practices](https://aka.ms/H1s8y4):** In Windows 10, you can use assigned access to create a kiosk device, which enables users to interact with just a single Universal Windows app. Learn about the best practices for implementing a kiosk app.
Configuration Designer (WCD) to create a provisioning package (.ppkg) for
configuring devices running Windows 10. The WCD wizard options provide a
simple interface to configure desktop, mobile, and kiosk device settings.
# Provide feedback or get support - **[Guidelines for choosing an app for assigned access (kiosk mode)](https://aka.ms/Ul7dw3):** Assigned access restricts a local standard user account on the device so that it only has access to a single-function device, like a kiosk. Learn about the guidelines for choosing a Windows app, web browsers, and securing your information. Also, learn about additional configurations required for some apps before it can work properly in assigned access.
- **[Other settings to lock down](https://docs.microsoft.com/en-us/windows/configuration/setup-kiosk-digital-signage#other-settings-to-lock-down):** Learn how to configure a more secure kiosk experience. In addition to the settings, learn how to set up **automatic logon** for your kiosk device. For example, when the kiosk device restarts, you can log back into the device manually or by setting up automatic logon.
- **[Add apps to Microsoft Intune](https://docs.microsoft.com/en-us/intune/apps-add):** Learn about and understand a few app fundamentals and requirements before adding them to Intune and making them available to your users.
- **[AssignedAccess configuration service provider (CSP)](https://docs.microsoft.com/en-us/windows/client-management/mdm/assignedaccess-csp):** The AssignedAccess configuration service provider (CSP) sets the device to run in kiosk mode. Once the CSP has executed, then the next user login associated with the kiosk mode puts the device into the kiosk mode running the application specified in the CSP configuration.
- **[Create a provisioning page for Windows 10](https://docs.microsoft.com/en-us/windows/configuration/provisioning-packages/provisioning-create-package):*. Learn to use Windows Configuration Designer (WCD) to create a provisioning package (.ppkg) for configuring devices running Windows 10. The WCD wizard options provide a simple interface to configure desktop, mobile, and kiosk device settings.
## Provide feedback or get support
To provide feedback on Microsoft Edge kiosk mode in Feedback Hub, select **Microsoft Edge** as the **Category**, and **All other issues** as the To provide feedback on Microsoft Edge kiosk mode in Feedback Hub, select **Microsoft Edge** as the **Category**, and **All other issues** as the
subcategory. subcategory.

13
browsers/edge/new-policies.md
View File

@ -15,9 +15,9 @@ ms.date: 07/18/2018
> Applies to: Microsoft Edge on Windows 10 and Windows 10 Mobile > Applies to: Microsoft Edge on Windows 10 and Windows 10 Mobile
The Microsoft Edge team introduces new Group Policies and MDM Settings for IT administrators to configure Microsoft Edge. The new policies include enabling/disabling full-screen mode, printing, favorites bar, saving history; prevent certificate error overrides; configure New Tab page, the Home button, startup options, and managing extensions.
You can find the Microsoft Edge Group Policy settings in the following location of the Group Policy Editor: You can find the Microsoft Edge Group Policy settings in the following location of the Group Policy Editor:<p>&nbsp;&nbsp;&nbsp;Computer Configuration\Administrative Templates\Windows Components\Microsoft Edge\
Computer Configuration\Administrative Templates\Windows Components\Microsoft Edge\
<!-- RS5 policies --> <!-- RS5 policies -->
@ -60,6 +60,9 @@ Computer Configuration\Administrative Templates\Windows Components\Microsoft Edg
## Prevent certificate error overrides ## Prevent certificate error overrides
[!INCLUDE [prevent-certificate-error-overrides-include.md](includes/prevent-certificate-error-overrides-include.md)] [!INCLUDE [prevent-certificate-error-overrides-include.md](includes/prevent-certificate-error-overrides-include.md)]
## Prevent users from turning on browser syncing
[!INCLUDE [prevent-users-to-turn-on-browser-syncing-include](includes/prevent-users-to-turn-on-browser-syncing-include.md)]
## Prevent turning off required extensions ## Prevent turning off required extensions
[!INCLUDE [prevent-turning-off-required-extensions-include.md](includes/prevent-turning-off-required-extensions-include.md)] [!INCLUDE [prevent-turning-off-required-extensions-include.md](includes/prevent-turning-off-required-extensions-include.md)]
@ -73,8 +76,8 @@ Computer Configuration\Administrative Templates\Windows Components\Microsoft Edg
[!INCLUDE [unlock-home-button-include.md](includes/unlock-home-button-include.md)] [!INCLUDE [unlock-home-button-include.md](includes/unlock-home-button-include.md)]
# Additional MDM policies added # MDM policies added
In addition to the 20 new group policies, we added three MDM policies to align with the existing group policies. In addition to the 20 or so new group policies, we added three MDM policies to align with the existing group policies.
## AllowWebContentOnNewTabPage ## AllowWebContentOnNewTabPage
[!INCLUDE [allow-web-content-new-tab-page-include](includes/allow-web-content-new-tab-page-include.md)] [!INCLUDE [allow-web-content-new-tab-page-include](includes/allow-web-content-new-tab-page-include.md)]
@ -82,7 +85,5 @@ In addition to the 20 new group policies, we added three MDM policies to align w
## DoNotSyncBrowserSetting ## DoNotSyncBrowserSetting
[!INCLUDE [do-not-sync-browser-settings-include](includes/do-not-sync-browser-settings-include.md)] [!INCLUDE [do-not-sync-browser-settings-include](includes/do-not-sync-browser-settings-include.md)]
We also added the DisableWebBrowserSettingSync MDM settings.
## ShowMessageWhenOpeningInteretExplorerSites ## ShowMessageWhenOpeningInteretExplorerSites
[!INCLUDE [show-message-opening-sites-ie-include](includes/show-message-opening-sites-ie-include.md)] [!INCLUDE [show-message-opening-sites-ie-include](includes/show-message-opening-sites-ie-include.md)]