|Disabled or not configured<br>**(default)** |0 |0 |Microsofot gathers only basic diagnostic data. | |
|Disabled or not configured<br>**(default)** |0 |0 |Gather and send only basic diagnostic data. | |
|Enabled |1 |1 |Microsoft gathers all diagnostic data. For this policy to work correctly, you must set the diagnostic data in _Settings > Diagnostics & feedback_ to **Full**. | |
|Enabled |1 |1 |Gather all diagnostic data. For this policy to work correctly, you must set the diagnostic data in _Settings > Diagnostics & feedback_ to **Full**. | |
|Not configured<br>**(default)** |Blank |Blank |Do not send tracking information but let users choose to send tracking information to sites they visit. | |
|Not configured<br>**(default)** |Blank |Blank |Do not send tracking information but let users choose to send tracking information to sites they visit. | |
|Not configured |Blank |Blank |Users can choose to use Windows Defender SmartScreen or not. | |
|Not configured |Blank |Blank |Users can choose to use Windows Defender SmartScreen. | |
|Disabled |0 |0 |Turned off. Do not protect users from potential threats and prevent users from turning it on. | |
|Disabled |0 |0 |Turned off. Do not protect users from potential threats and prevent users from turning it on. | |
|Enabled |1 |1 |Turned on. Protect users from potential threats and prevent users from turning it off. | |
|Enabled |1 |1 |Turned on. Protect users from potential threats and prevent users from turning it off. | |
---
---
To verify Windows Defender SmartScreen is turned off (disabled):
To verify Windows Defender SmartScreen is turned off (disabled):
1. In the upper-right corner of Microsoft Edge or Microsoft Edge for Windows 10 Mobile, click or tap the ellipses (**...**).
1. Click or tap **More** (…) and select **Settings** > **View Advanced settings**.
2. Click **Settings** and select **View Advanced Settings**.
2. Verify the setting **Help protect me from malicious sites and download with SmartScreen Filter** is disabled.<p>
3. At the bottom, verify that **Help protect me from malicious sites and download with SmartScreen Filter** is greyed out.<p>
|Not configured |0 |0 |Lockdown Start pages configured in either the Configure Open Microsoft Edge With policy and Configure Start Pages policy. | |
|Not configured |0 |0 |Lockdown Start pages configured in either the Configure Open Microsoft Edge With policy and Configure Start Pages policy. | |
|Enabled |1 |1 |Unlocked. Users can make changes to all configured start pages.<p><p>When you enable this policy and define a set of URLs in the Configure Start Pages policy, Microsoft Edge uses the URLs defined in the Configure Open Microsoft Edge With policy. | |
|Enabled |1 |1 |Unlocked. Users can make changes to all configured start pages.<p><p>When you enable this policy and define a set of URLs in the Configure Start Pages policy, Microsoft Edge uses the URLs defined in the Configure Open Microsoft Edge With policy. | |
- GP English name: *Allow Sideloading of extension*
- GP English name: *Allow sideloading of Extensions*
- GP name: *AllowSideloadingOfExtensions*
- GP name: *AllowSideloadingOfExtensions*
- GP path: *Windows Components/Microsoft Edge*
- GP path: *Windows Components/Microsoft Edge*
- GP ADMX file name: *MicrosoftEdge.admx*
- GP ADMX file name: *MicrosoftEdge.admx*
@ -1555,10 +1569,11 @@ ADMX Info:
<!--SupportedValues-->
<!--SupportedValues-->
Supported values:
Supported values:
- 0 - Prevented, but does not prevent sideloading of extensions using Add-AppxPackage via PowerShell. To prevent this, set the **ApplicationManagement/AllowDeveloperUnlock** policy to 1 (enabled).
- 0 - Prevented/not allowed. Disabling does not prevent sideloading of extensions using Add-AppxPackage via PowerShell. To prevent this, set the **ApplicationManagement/AllowDeveloperUnlock** policy to 1 (enabled).
- 1 (default) - Allowed.
- 1 (default) - Allowed.
Most restricted value: 0
Most restricted value: 0
<!--/SupportedValues-->
<!--/SupportedValues-->
<!--Example-->
<!--Example-->
@ -1621,19 +1636,18 @@ ADMX Info:
<!--SupportedValues-->
<!--SupportedValues-->
Supported values:
Supported values:
- Blank - Users can choose to use Windows Defender SmartScreen or not.
- Blank - Users can choose to use Windows Defender SmartScreen.
- 0 – Turned off. Do not protect users from potential threats and prevent users from turning it on.
- 0 – Turned off. Do not protect users from potential threats and prevent users from turning it on.
- 1 (default) – Turned on. Protect users from potential threats and prevent users from turning it off.
- 1 (default) – Turned on. Protect users from potential threats and prevent users from turning it off.
Most restricted value: 1
Most restricted value: 1
<!--/SupportedValues-->
<!--/SupportedValues-->
<!--Validation-->
<!--Validation-->
To verify AllowSmartScreen is set to 0 (not allowed):
To verify AllowSmartScreen is set to 0 (not allowed):
1. Open Microsoft Edge or Microsoft Edge for Windows10 Mobile.
1. Click or tap **More** (…) and select **Settings** > **View Advanced settings**.
2. In the upper-right corner of the browser, click **…**.
2. Verify the setting **Help protect me from malicious sites and download with SmartScreen Filter** is disabled.
3. Click **Settings** in the drop down list, and select **View Advanced Settings**.
4. Verify the setting **Help protect me from malicious sites and download with SmartScreen Filter** is greyed out.
<!--/Validation-->
<!--/Validation-->
<!--/Policy-->
<!--/Policy-->
@ -1694,8 +1708,8 @@ ADMX Info:
<!--SupportedValues-->
<!--SupportedValues-->
Supported values:
Supported values:
- 0 (default) - Allowed. Preload Start and New tab pages.
- 0 - Prevented/not allowed.
- 1 - Prevented/not allowed.
- 1 (default) - Allowed. Preload Start and New tab pages.
> Due to Protected Settings (aka.ms/browserpolicy), this setting will apply only on domain-joined machines or when the device is MDM-enrolled.
> Due to Protected Settings (aka.ms/browserpolicy), this setting applies only on domain-joined machines or when the device is MDM-enrolled.
<!--/Description-->
<!--/Description-->
@ -2109,7 +2126,7 @@ Supported values:
- 3 - Hide home button.
- 3 - Hide home button.
>[!TIP]
>[!TIP]
>If you want to make changes to this policy:<ol><li>Set the **UnlockHomeButton** policy to 1 (enabled).</li><li>Make changes to the **ConfigureHomeButton** policy or **SetHomeButtonURL** policy.</li><li>Set the **UnlockHomeButton** policy to 0 (disabled).</li></ol>
>If you want to make changes to this policy:<ol><li>Set **UnlockHomeButton** to 1 (enabled).</li><li>Make changes to **ConfigureHomeButton** or **SetHomeButtonURL** policy.</li><li>Set **UnlockHomeButton** 0 (disabled).</li></ol>
<!--/SupportedValues-->
<!--/SupportedValues-->
@ -2182,13 +2199,14 @@ ADMX Info:
<!--SupportedValues-->
<!--SupportedValues-->
Supported values:
Supported values:
**0 (Default or not configured)**:
**0 (Default or not configured)**:
- If it’s a single app, it runs InPrivate full screen for digital signage or interactive displays.
- If it’s a single app, it runs InPrivate full screen for digital signage or interactive displays.
- If it’s one of many apps, Microsoft Edge runs as normal.
- If it’s one of many apps, Microsoft Edge runs as normal.
**1**:
**1**:
- • If it’s a single app, it runs a limited multi-tab version of InPrivate and is the only app available for public browsing. Users can’t minimize, close, or open windows or customize Microsoft Edge, but can clear browsing data and downloads and restart by clicking “End session.” You can configure Microsoft Edge to restart after a period of inactivity by using the “Configure kiosk reset after idle timeout” policy. _**For single-app public browsing:**_ If you do not configure the Configure kiosk reset after idle timeout policy and you enable this policy, Microsoft Edge kiosk resets after 5 minutes of idle time.
- • If it’s a single app, it runs a limited multi-tab version of InPrivate and is the only app available for public browsing. Users can’t minimize, close, or open windows or customize Microsoft Edge, but can clear browsing data and downloads and restart by clicking “End session.” You can configure Microsoft Edge to restart after a period of inactivity by using the “Configure kiosk reset after idle timeout” policy. _**For single-app public browsing:**_ If you do not configure the Configure kiosk reset after idle timeout policy and you enable this policy, Microsoft Edge kiosk resets after 5 minutes of idle time.
- If it’s one of many apps, it runs in a limited multi-tab version of InPrivate for public browsing with other apps. Users can minimize, close, and open multiple InPrivate windows, but they can’t customize Microsoft Edge.
- If it’s one of many apps, it runs in a limited multi-tab version of InPrivate for public browsing with other apps. Users can minimize, close, and open multiple InPrivate windows, but they can’t customize Microsoft Edge.
You must set the Configure kiosk mode policy to enabled (1 - InPrivate public browsing) and configure Microsoft Edge as a single-app in assigned access for this policy to take effect; otherwise, Microsoft Edge ignores this setting. To learn more about assigned access and kiosk configuration, see [Configure kiosk and shared devices running Windows desktop editions](https://docs.microsoft.com/en-us/windows/configuration/kiosk-shared-pc).
You must set ConfigureKioskMode to enabled (1 - InPrivate public browsing) and configure Microsoft Edge as a single-app in assigned access for this policy to take effect; otherwise, Microsoft Edge ignores this setting. To learn more about assigned access and kiosk configuration, see [Configure kiosk and shared devices running Windows desktop editions](https://docs.microsoft.com/en-us/windows/configuration/kiosk-shared-pc).
<!--/Description-->
<!--/Description-->
<!--ADMXMapped-->
<!--ADMXMapped-->
@ -2256,9 +2274,11 @@ ADMX Info:
<!--/ADMXMapped-->
<!--/ADMXMapped-->
<!--SupportedValues-->
<!--SupportedValues-->
Supported values:
Supported values:
- **Any integer from 1-1440 (5 minutes is the default)**– The time in minutes from the last user activity before Microsoft Edge kiosk mode resets to the default kiosk configuration. A confirmation dialog displays for the user to cancel or continue and automatically continues after 30 seconds.
- **Any integer from 1-1440 (5 minutes is the default)**– The time in minutes from the last user activity before Microsoft Edge kiosk mode resets to the default kiosk configuration. A confirmation dialog displays for the user to cancel or continue and automatically continues after 30 seconds.
- **0**– No idle timer.
- **0**– No idle timer.
<!--/SupportedValues-->
<!--/SupportedValues-->
<!--Example-->
<!--Example-->
@ -2316,8 +2336,8 @@ Supported values:
If you don't want to send traffic to Microsoft, use the \<about:blank\> value, which honors both domain and non domain-joined devices when it's the only configured URL.
If you don't want to send traffic to Microsoft, use the \<about:blank\> value, which honors both domain and non domain-joined devices when it's the only configured URL.
**Version 1810**:<br>
**Next major version**:<br>
When you enable this policy and select an option, and also enable the Configure Start Pages policy, Microsoft Edge ignores the Configure Start Page policy.
When you enable this policy and select an option, and also enter the URLs of the pages you want in HomePages, Microsoft Edge ignores HomePages.
<!--/Description-->
<!--/Description-->
<!--ADMXMapped-->
<!--ADMXMapped-->
@ -2332,14 +2352,14 @@ ADMX Info:
<!--SupportedValues-->
<!--SupportedValues-->
Supported values:
Supported values:
- Blank - If you don't configure this policy and you enable the Disable Lockdown of Start Pages policy, users can change or customize the Start page.
- Blank - If you don't configure this policy and you set DisableLockdownOfStartPages to 1 (enabled), users can change or customize the Start page.
- 0 - Load the Start page.
- 0 - Load the Start page.
- 1 - Load the New tab page.
- 1 - Load the New tab page.
- 2 - Load the previous pages.
- 2 - Load the previous pages.
- 3 (default) - Load a specific page or pages.
- 3 (default) - Load a specific page or pages.
>[!TIP]
>[!TIP]
>If you want to make changes to this policy:<ol><li>Set the Disabled Lockdown of Start Pages policy to 0 (not configured).</li><li>Make changes to the Configure Open Microsoft With policy.</li><li>Set the Disabled Lockdown of Start Pages policy to 1 (enabled).</li></ol>
>If you want to make changes to this policy:<ol><li>Set DisableLockdownOfStartPages to 0 (not configured).</li><li>Make changes to ConfigureOpenEdgeWith.</li><li>Set DisableLockdownOfStartPages to 1 (enabled).</li></ol>
<!--/SupportedValues-->
<!--/SupportedValues-->
@ -2462,7 +2482,7 @@ Most restricted value: 0
<!--/Scope-->
<!--/Scope-->
<!--Description-->
<!--Description-->
>*Supported versions: Microsoft Edge on Windows 10, version 1703*
>*Supported versions: Microsoft Edge on Windows 10*
- 0 – Locked. Lockdown the Start pages configured in either the Configure Open Microsoft Edge With policy or Configure Start Pages policy.
- 0 – Lock down Start pages configured in either the ConfigureOpenEdgeWith policy and HomePages policy.
- 1 (default) – Unlocked. Users can make changes to all configured start pages.<p><p>When you enable this policy and define a set of URLs in the Configure Start Pages policy, Microsoft Edge uses the URLs defined in the ConfigureOpen Microsoft EdgeWith policy.
- 1 (default) – Unlocked. Users can make changes to all configured start pages.<p><p>When you enable this policy and define a set of URLs in the HomePages policy, Microsoft Edge uses the URLs defined in the ConfigureOpenEdgeWith policy.
Most restricted value: 0
Most restricted value: 0
<!--/SupportedValues-->
<!--/SupportedValues-->
@ -2547,8 +2567,8 @@ ADMX Info:
<!--SupportedValues-->
<!--SupportedValues-->
Supported values:
Supported values:
- 0 (default) - Gather and send only basic diagnotic data, depending on the device configuration.
- 0 (default) - Gather and send only basic diagnostic data, depending on the device configuration.
- 1 - Gather both basic and additional data, such as usage data.
- 1 - Gather all diagnostic data.
Most restricted value: 0
Most restricted value: 0
<!--/SupportedValues-->
<!--/SupportedValues-->
@ -2601,7 +2621,6 @@ Most restricted value: 0
<!--/Description-->
<!--/Description-->
<!--ADMXMapped-->
<!--ADMXMapped-->
ADMX Info:
ADMX Info:
@ -2616,7 +2635,7 @@ ADMX Info:
Supported values:
Supported values:
- 0 (default) - Turned off. Microsoft Edge does not check the Enterprise Mode Site List, and in this case, users might experience problems while using legacy apps.
- 0 (default) - Turned off. Microsoft Edge does not check the Enterprise Mode Site List, and in this case, users might experience problems while using legacy apps.
- Turned on. Microsoft Edge checks the Enterprise Mode Site List if configured. If an XML file exists in the cache container, IE11 waits 65 seconds and then checks the local cache for a new version from the server. If the server has a different version, Microsoft Edge uses the server file and stores it in the cache container. If you already use a site list, Enterprise Mode continues to work during the 65 second, but uses the existing file. To add the location to your site list, enter it in the {URI} box.
- Turned on. Microsoft Edge checks the Enterprise Mode Site List if configured. If an XML file exists in the cache container, IE11 waits 65 seconds and then checks the local cache for a new version from the server. If the server has a different version, Microsoft Edge uses the server file and stores it in the cache container. If you already use a site list, Enterprise Mode continues to work during the 65 second, but uses the existing file. To add the location to your site list, enter it in the {URI} box.<p>For details on how to configure the Enterprise Mode Site List, see [Interoperability and enterprise guidance](../../../browsers/edge/group-policies/interoperability-enterprise-guidance-gp.md).
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Patti Short