diff --git a/browsers/edge/available-policies.md b/browsers/edge/available-policies.md index 2d514b5aed..9798a34008 100644 --- a/browsers/edge/available-policies.md +++ b/browsers/edge/available-policies.md @@ -29,61 +29,24 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A |-------------|------------|-------------|--------| |Allow Developer Tools |Windows 10, Version 1511 or later |This policy setting lets you decide whether F12 Developer Tools are available on Microsoft Edge.

If you enable or don’t configure this setting, the F12 Developer Tools are available in Microsoft Edge.

If you disable this setting, the F12 Developer Tools aren’t available in Microsoft Edge. |**Enabled or not configured (default):** Shows the F12 Developer Tools on Microsoft Edge.

**Disabled:** Hides the F12 Developer Tools on Microsoft Edge. | |Allow InPrivate browsing |Windows 10, Version 1511 or later |This policy setting lets you decide whether employees can browse using InPrivate website browsing.

If you enable or don’t configure this setting, employees can use InPrivate website browsing.

If you disable this setting, employees can’t use InPrivate website browsing. |**Enabled or not configured (default):** Lets employees use InPrivate website browsing.

**Disabled:** Stops employees from using InPrivate website browsing. | -|Allow web content on **New Tab** page |Windows 10 or later |This policy setting lets you configure what appears when Microsoft Edge opens a new tab. By default, Microsoft Edge opens the **New Tab** page.

If you enable this setting, Microsoft Edge opens a new tab with the **New Tab** page.

If you disable this setting, Microsoft Edge opens a new tab with a blank page. If you use this setting, employees can’t change it.

If you don’t configure this setting, employees can choose how new tabs appears. |**Enabled:** Employees see web content on **New Tab** page.

**Not configured (default):** Employees see web content on **New Tab** page, but can change it.

**Disabled:** Employees always see an empty new tab. | -|Always Clear Browsing Data on Exit |Windows 10, Version 1607 or later |This policy setting lets you decide whether all of an employees' browsing data is automatically erased when Microsoft Edge closes.

If you enable this setting, all browsing data is automatically erased when Microsoft Edge closes.

If you disable, or don’t configure this setting, employees can choose whether to delete their browsing data from App settings. |**Enabled:** Employee's browsing data is automatically erased every time the browser is closed.

**Disabled or not configured (default):** Employees can choose whether to delete their browsing data from App settings. | -|Always show Favorites bar |Windows 10, Version 1607 or later |This policy setting lets you decide whether to always turn on the **Favorites** bar. By default, the **Favorites** bar is turned off.

If you enable this setting, the **Favorites** bar always appears and employees can’t turn it off.

If you disable or don’t configure this setting, employees can choose whether to turn the **Favorites** bar on from the **App** settings.|**Enabled:** Turns on **Favorites** bar and employees can’t turn it off.

**Disabled or not configured (default):** The **Favorites** bar is turned off by default. Employees can choose to turn it on or keep it off.| -|Configure Autofill |Windows 10 or later |This policy setting lets you decide whether employees can use Autofill to automatically fill in form fields while using Microsoft Edge. By default, employees can choose whether to use Autofill.

If you enable this setting, employees can use Autofill to automatically fill in forms while using Microsoft Edge.

If you disable this setting, employees can’t use Autofill to automatically fill in forms while using Microsoft Edge.

If you don’t configure this setting, employees can choose whether to use Autofill to automatically fill in forms while using Microsoft Edge. |**Enabled:** Employees can use Autofill to complete form fields.

**Disabled:** Employees can’t use Autofill to complete form fields.

**Not Configured (default):** Employees can choose to turn Autofill on or off. | -|Configure Cookies |Windows 10 or later|This setting lets you configure how to work with cookies.

If you enable this setting, you must also decide whether to:

|**Enabled:** Lets you decide how your company treats cookies. If you use this option, you must also choose whether to:

**Disabled or not configured:** All cookies are allowed from all sites.| -|Configure Do Not Track |Windows 10 or later |This policy setting lets you decide whether employees can send Do Not Track requests to websites that ask for tracking info. By default, Do Not Track requests aren’t sent, but employees can choose to turn on and send requests.

If you enable this setting, Do Not Tracker requests are always sent to websites asking for tracking info.

If you disable this setting, Do Not Track requests are never sent to websites asking for tracking info.

If you don’t configure this setting, employees can choose whether to send Do Not Track requests to websites asking for tracking info. |**Enabled:** Employees can send Do Not Track requests to websites requesting tracking info.

**Disabled:** Employees can’t send Do Not Track requests to websites requesting tracking info.

**Not Configured (default):** Employees can choose to send Do Not Track headers on or off. | -|Configure Edge Extensions |Windows 10, Version 1607 or later |This policy setting lets you decide whether employees can use Edge Extensions.

If you enable or don’t configure this setting, employees can use Edge Extensions.

If you disable this setting, employees can’t use Edge Extensions. |**Enabled or not configured:** Lets employees use Edge Extensions.

**Disabled:** Stops employees from using Edge Extensions. | +|Allow web content on **New Tab** page |Windows 10 or later |This policy setting lets you configure what appears when Microsoft Edge opens a new tab. By default, Microsoft Edge opens the **New Tab** page.

If you enable this setting, Microsoft Edge opens a new tab with the **New Tab** page.

If you don’t configure this setting, employees can choose how new tabs appears.

If you disable this setting, Microsoft Edge opens a new tab with a blank page. If you use this setting, employees can’t change it. |**Enabled:** Employees see web content on **New Tab** page.

**Not configured (default):** Employees see web content on **New Tab** page, but can change it.

**Disabled:** Employees always see an empty new tab. | +|Configure autofill |Windows 10 or later |This policy setting lets you decide whether employees can use Autofill to automatically fill in form fields while using Microsoft Edge. By default, employees can choose whether to use Autofill.

If you enable this setting, employees can use Autofill to automatically fill in forms while using Microsoft Edge.

If you don’t configure this setting, employees can choose whether to use Autofill to automatically fill in forms while using Microsoft Edge.

If you disable this setting, employees can’t use Autofill to automatically fill in forms while using Microsoft Edge. |**Enabled:** Employees can use Autofill to complete form fields.

**Disabled:** Employees can’t use Autofill to complete form fields.

**Not Configured (default):** Employees can choose to turn Autofill on or off. | +|Configure cookies |Windows 10 or later|This setting lets you configure how to work with cookies.

If you enable this setting, you must also decide whether to:

If you disable or don't configure this setting, all cookies are allowed from all sites. |**Enabled:** Lets you decide how your company treats cookies. If you use this option, you must also choose whether to:

**Disabled or not configured:** All cookies are allowed from all sites.| +|Configure Do Not Track |Windows 10 or later |This policy setting lets you decide whether employees can send Do Not Track requests to websites that ask for tracking info. By default, Do Not Track requests aren’t sent, but employees can choose to turn on and send requests.

If you enable this setting, Do Not Tracker requests are always sent to websites asking for tracking info.

If you don’t configure this setting, employees can choose whether to send Do Not Track requests to websites asking for tracking info.

If you disable this setting, Do Not Track requests are never sent to websites asking for tracking info. |**Enabled:** Employees can send Do Not Track requests to websites requesting tracking info.

**Disabled:** Employees can’t send Do Not Track requests to websites requesting tracking info.

**Not Configured (default):** Employees can choose to send Do Not Track headers on or off. | +|Configure Edge Extensions |Windows 10, Version 1607 |This policy setting lets you decide whether employees can use Edge Extensions.

If you enable or don’t configure this setting, employees can use Edge Extensions.

If you disable this setting, employees can’t use Edge Extensions. |**Enabled or not configured:** Lets employees use Edge Extensions.

**Disabled:** Stops employees from using Edge Extensions. | |Configure **Favorites** |Windows 10, Version 1511 or later |This policy setting lets you configure the default list of **Favorites** that appear for your employees. Employees can change their **Favorites** by adding or removing items at any time.

If you enable this setting, you can configure what default **Favorites** appear for your employees. If this setting is enabled, you must also provide a list of **Favorites** in the **Options** section. This list is imported after your policy is deployed.

If you disable or don’t configure this setting, employees will see the **Favorites** that they set in the **Favorites** hub. |**Enabled:** Configure the default list of **Favorites** for your employees. If you use this option, you must also add the URLs to the sites.

**Disabled or not configured:** Uses the **Favorites** list and **URLs** specified in the **Favorites** hub. | -|Configure Flash |Windows 10, Version 1607 or later |This policy setting lets you decide whether employees can use Flash plugins in Microsoft Edge.

If you enable this setting, employees can use Flash plugins in Microsoft Edge.

If you don’t configure this setting, employees can choose whether to use Flash plugins while browsing on Microsoft Edge.

If you disable this setting employees can’t use Flash plugins when browsing on Microsoft Edge. |**Enabled:** Lets employees use Flash plugin when browsing while using Microsoft Edge.

**Not configured (default):** Employees can choose whether to use Flash plugins while browsing on Microsoft Edge. By default, Flash is turned on.

**Disabled:** Stops employees from using Flash plugin when using Microsoft Edge. | |Configure **Home** pages |Windows 10, Version 1511 or later |This policy setting lets you configure one or more **Home** pages. for domain-joined devices. Your employees won't be able to change this after you set it.

If you enable this setting, you can configure one or more **Home** pages. If this setting is enabled, you must also include URLs to the pages, separating multiple pages by using angle brackets in this format:
``

If you disable or don’t configure this setting, your default **Home** page is the webpage specified in **App** settings. |**Enabled:** Configure your **Home** pages. If you use this option, you must also include site URLs.

**Not configured (default):** Uses the **Home** pages and **URLs** specified in the **App** settings.

**Disabled:** Uses the **Home** pages and **URLs** specified in the **App** settings. | -|Configure Password Manager |Windows 10 or later |This policy setting lets you decide whether employees can save their passwords locally, using Password Manager. By default, Password Manager is turned on.

If you enable this setting, employees can use Password Manager to save their passwords locally.

If you disable this setting, employees can’t use Password Manager to save their passwords locally.

If you don’t configure this setting, employees can choose whether to use Password Manager to save their passwords locally. |**Enabled (default):** Employees can use Password Manager to save passwords locally.

**Not configured:** Password Manager is turned on by default, but employees can choose whether to turn on it on or off.

**Disabled:** Employees can't use Password Manager to save passwords locally. | -|Configure Pop-up Blocker |Windows 10 or later |This policy setting lets you decide whether to turn on Pop-up Blocker. By default, Pop-up Blocker is turned on.

If you enable this setting, Pop-up Blocker is turned on, stopping pop-up windows from appearing.

If you disable this setting, Pop-up Blocker is turned off, letting pop-ups windows appear.

If you don’t configure this setting, employees can choose whether to use Pop-up Blocker. |**Enabled (default):** Turns on Pop-up Blocker, stopping pop-up windows.

**Not configured:** Turns on Pop-up Blocker, stopping pop-up windows.

**Disabled:** Turns off Pop-up Blocker, allowing pop-up windows. | -|Configure Search Provider |Windows 10, Version 1607 or later |This policy setting lets you configure your Search Provider for domain-joined devices.

If you enable this setting, you can configure the default Search Provider. If this setting is enabled, you must also include a link to the Open Search-formatted XML file, in this format:
`http://contoso.com/search/opensearch.xml`

If you disable or don’t configure this setting, the Search Providers are set by your employees in the **App** settings. |**Enabled:** Configure default Search Provider for domain-joined devices. If you use this option, you must also include search provider information.

**Disabled or not configured (default):** Uses the Search Providers specified in the **App** settings. | -|Configure search suggestions in Address bar |Windows 10 or later |This policy setting lets you decide whether search suggestions appear in the **Address** bar of Microsoft Edge. By default, employees can choose whether search suggestions appear in the **Address** bar of Microsoft Edge.

If you enable this setting, employees can see search suggestions in the **Address** bar of Microsoft Edge.

If you disable this setting, employees can't see search suggestions in the **Address** bar of Microsoft Edge.

If you don’t configure this setting, employees can choose whether search suggestions appear in the **Address** bar of Microsoft Edge. |**Enabled:** Employees can see search suggestions in the **Address** bar of Microsoft Edge.

**Not configured (default):** Employees can choose if search suggestions appear or not. Search suggestions appear by default.

**Disabled:** Employees can’t see search suggestions in the **Address** bar of Microsoft Edge. | -|Configure SmartScreen Filter |Windows 10 or later |This policy setting lets you configure whether to turn on SmartScreen Filter. SmartScreen Filter provides warning messages to help protect your employees from potential phishing scams and malicious software. By default, SmartScreen Filter is turned on.

If you enable this setting, SmartScreen Filter is turned on and employees can’t turn it off.

If you disable this setting, SmartScreen Filter is turned off and employees can’t turn it on.

If you don’t configure this setting, employees can choose whether to use SmartScreen Filter. |**Enabled:** Turns on SmartScreen Filter, providing warning messages to your employees about potential phishing scams and malicious software.

**Not configured (default):** Employees can turn SmartScreen on or off.

**Disabled:** Turns off SmartScreen Filter. | +|Configure Password Manager |Windows 10 or later |This policy setting lets you decide whether employees can save their passwords locally, using Password Manager. By default, Password Manager is turned on.

If you enable this setting, employees can use Password Manager to save their passwords locally.

If you don’t configure this setting, employees can choose whether to use Password Manager to save their passwords locally.

If you disable this setting, employees can’t use Password Manager to save their passwords locally. |**Enabled (default):** Employees can use Password Manager to save passwords locally.

**Not configured:** Password Manager is turned on by default, but employees can choose whether to turn on it on or off.

**Disabled:** Employees can't use Password Manager to save passwords locally. | +|Configure Pop-up Blocker |Windows 10 or later |This policy setting lets you decide whether to turn on Pop-up Blocker. By default, Pop-up Blocker is turned on.

If you enable this setting, Pop-up Blocker is turned on, stopping pop-up windows from appearing.

If you don’t configure this setting, employees can choose whether to use Pop-up Blocker.

If you disable this setting, Pop-up Blocker is turned off, letting pop-ups windows appear. |**Enabled (default):** Turns on Pop-up Blocker, stopping pop-up windows.

**Not configured:** Turns on Pop-up Blocker, stopping pop-up windows.

**Disabled:** Turns off Pop-up Blocker, allowing pop-up windows. | +|Configure search suggestions in Address bar |Windows 10 or later |This policy setting lets you decide whether search suggestions appear in the **Address** bar of Microsoft Edge. By default, employees can choose whether search suggestions appear in the **Address** bar of Microsoft Edge.

If you enable this setting, employees can see search suggestions in the **Address** bar of Microsoft Edge.

If you don’t configure this setting, employees can choose whether search suggestions appear in the **Address** bar of Microsoft Edge.

If you disable this setting, employees can't see search suggestions in the **Address** bar of Microsoft Edge. |**Enabled:** Employees can see search suggestions in the **Address** bar of Microsoft Edge.

**Not configured (default):** Employees can choose if search suggestions appear or not. Search suggestions appear by default.

**Disabled:** Employees can’t see search suggestions in the **Address** bar of Microsoft Edge. | +|Configure SmartScreen Filter |Windows 10 or later |This policy setting lets you configure whether to turn on SmartScreen Filter. SmartScreen Filter provides warning messages to help protect your employees from potential phishing scams and malicious software. By default, SmartScreen Filter is turned on.

If you enable this setting, SmartScreen Filter is turned on and employees can’t turn it off.

If you don’t configure this setting, employees can choose whether to use SmartScreen Filter.

If you disable this setting, SmartScreen Filter is turned off and employees can’t turn it on. |**Enabled:** Turns on SmartScreen Filter, providing warning messages to your employees about potential phishing scams and malicious software.

**Not configured (default):** Employees can turn SmartScreen on or off.

**Disabled:** Turns off SmartScreen Filter. | |Configure the Enterprise Mode Site List |Windows 10 or later| This policy setting lets you configure whether to use Enterprise Mode and the Enterprise Mode Site List to address common compatibility problems with legacy apps.

If you enable this setting, Microsoft Edge looks for the Enterprise Mode Site List XML file. This file includes the sites and domains that need to be viewed using Internet Explorer 11 and Enterprise Mode.

If you disable or don’t configure this setting, Microsoft Edge won’t use the Enterprise Mode Site List XML file. In this case, employees might experience compatibility problems while using legacy apps. |**Enabled:** Lets you use the Enterprise Mode Site List to address common compatibility problems with legacy apps, if it’s configured. If you use this option, you must also add the location to your site list in the `{URI}` box. When configured, any site on the list will always open in Internet Explorer 11.

**Not configured (default):** You won't be able to use the Enterprise Mode site list.

**Disabled:** You won't be able to use the Enterprise Mode site list. | -|Prevent access to the **about:flags** page |Windows 10, Version 1607 or later |This policy setting lets you decide whether employees can access the **about:flags** page, which is used to change developer settings and to enable experimental features.

If you enable this policy setting, employees can’t access the **about:flags** page.

If you disable or don’t configure this setting, employees can access the **about:flags** page. |**Enabled:** Stops employees from using the **about:flags** page.

**Disabled or not configured (default):** Lets employees use the **about:flags** page. | -|Prevent bypassing SmartScreen prompts for files |Windows 10, Version 1511 or later |This policy setting lets you decide whether employees can override the SmartScreen Filter warnings about downloading unverified files. - -If you enable this setting, employees can’t ignore SmartScreen Filter warnings and they’re blocked from downloading the unverified files. - -If you disable or don’t configure this setting, employees can ignore SmartScreen Filter warnings and continue the download process. - Enabled: Stops employees from ignoring the SmartScreen Filter warnings about unverified files. - -Disabled or not configured (default): Lets employees ignore the SmartScreen Filter warnings about unverified files and lets them continue the download process. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - +|Prevent access to the **about:flags** page |Windows 10, Version 1607 |This policy setting lets you decide whether employees can access the **about:flags** page, which is used to change developer settings and to enable experimental features.

If you enable this policy setting, employees can’t access the **about:flags** page.

If you disable or don’t configure this setting, employees can access the **about:flags** page. |**Enabled:** Stops employees from using the **about:flags** page.

**Disabled or not configured (default):** Lets employees use the **about:flags** page. | +|Prevent bypassing SmartScreen prompts for files |Windows 10, Version 1511 or later |This policy setting lets you decide whether employees can override the SmartScreen Filter warnings about downloading unverified files.

If you enable this setting, employees can’t ignore SmartScreen Filter warnings and they’re blocked from downloading the unverified files.

If you disable or don’t configure this setting, employees can ignore SmartScreen Filter warnings and continue the download process. |**Enabled:** Stops employees from ignoring the SmartScreen Filter warnings about unverified files.

**Disabled or not configured (default):** Lets employees ignore the SmartScreen Filter warnings about unverified files and lets them continue the download process. | +|Prevent bypassing SmartScreen prompts for sites |Windows 10, Version 1511 or later |This policy setting lets you decide whether employees can override the SmartScreen Filter warnings about potentially malicious websites.

If you enable this setting, employees can’t ignore SmartScreen Filter warnings and they’re blocked from continuing to the site.

If you disable or don’t configure this setting, employees can ignore SmartScreen Filter warnings and continue to the site. |**Enabled:** Stops employees from ignoring the SmartScreen Filter warnings about potentially malicious sites.

**Disabled or not configured (default):** Lets employees ignore the SmartScreen Filter warnings about potentially malicious sites and continue to the site. | +|Prevent using Localhost IP address for WebRTC |Windows 10, Version 1511 or later |This policy setting lets you decide whether an employee’s Localhost IP address shows while making calls using the WebRTC protocol.

If you enable this setting, Localhost IP addresses are hidden while making calls using the WebRTC protocol.

If you disable or don’t configure this setting, Localhost IP addresses are shown while making calls using the WebRTC protocol. |**Enabled:** Hides the Localhost IP address during calls using the WebRTC protocol.

**Not configured (default):** Shows the Localhost IP address during phone calls using the WebRTC protocol. Turned off by default.

**Disabled:** Shows the Localhost IP address during phone calls using the WebRTC protocol. | +|Send all intranet sites to Internet Explorer 11 |Windows 10 or later |This policy setting lets you decide whether your intranet sites should all open using Internet Explorer 11. This setting should only be used if there are known compatibility problems with Microsoft Edge.

If you enable this setting, all intranet sites are automatically opened using Internet Explorer 11.

If you disable or don’t configure this setting, all intranet sites are automatically opened using Microsoft Edge. |**Enabled:** Automatically opens all intranet sites using Internet Explorer 11.

**Disabled or not configured (default):** Automatically opens all intranet sites using Microsoft Edge. | +|Show message when opening sites in Internet Explorer |Windows 10, Version 1607 |This policy setting lets you decide whether employees see an additional page in Microsoft Edge, stating that a site has been opened using Internet Explorer 11.

If you enable this setting, employees see an additional page in Microsoft Edge, stating that a site has been opened using Internet Explorer 11.

If you disable or don’t configure this setting, the default app behavior occurs and no additional page appears. |**Enabled:** Shows an additional page in Microsoft Edge, stating that a site has been opened using Internet Explorer 11.

**Disabled or not configured (default):** Doesn’t show an additional page in Microsoft Edge, stating that a site has been opened using Internet Explorer 11. | ## Using Microsoft Intune to manage your Mobile Data Management (MDM) settings for Microsoft Edge If you manage your policies using Intune, you'll want to use these MDM policy settings. You can see the full list of available policies, on the [Policy CSP]( http://go.microsoft.com/fwlink/p/?LinkId=722885) page. @@ -98,62 +61,47 @@ If you manage your policies using Intune, you'll want to use these MDM policy se All devices must be enrolled with Intune if you want to use the Windows Custom URI Policy. +| Policy name |Supported versions |Supported device |Details | +|-------------|-------------------|-----------------|--------| +|AllowAutofill|Windows 10 or later |Desktop |

+|AllowBrowser |Windows 10 or later |Mobile || +|AllowDeveloperTools |Windows 10, Version 1511 or later |Desktop | | +|AllowDoNotTrack |Windows 10 or later |Both | | +|AllExtensions |Windows 10, Version 1607 |Desktop | | +|AllowInPrivate |Windows 10, Version 1511 or later |Both | | +|AllowPasswordManager |Windows 10 or later |Both | | +|AllowPopups |Windows 10 or later |Desktop | | +|AllowSearchSuggestionsinAddressBar |Windows 10 or later |Both | | +|AllowSmartScreen |Windows 10 or later |Both | | +|AllowWebContentOnNewTabPage |Windows 10 or later |Desktop | | +|Cookies |Windows 10 or later |Both | | +|EnterpriseModeSiteList |Windows 10 or later |Desktop | | +|Favorites |Windows 10, Version 1511 or later |Both |