deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-15 23:07:23 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Merged PR 10320: 8/2 special Publish

Browse Source
This commit is contained in:
Huaping Yu (Beyondsoft Consulting Inc) 2018-08-02 20:55:16 +00:00
commit dad810719e
61 changed files with 1009 additions and 537 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

71
browsers/edge/Index.md
View File

@ -1,71 +0,0 @@
---
description: Overview information about Microsoft Edge, the default browser for Windows 10. This topic includes links to other Microsoft Edge topics.
ms.assetid: 70377735-b2f9-4b0b-9658-4cf7c1d745bb
author: shortpatti
ms.prod: edge
ms.mktglfcycl: general
ms.sitesec: library
title: Microsoft Edge - Deployment Guide for IT Pros (Microsoft Edge for IT Pros)
ms.localizationpriority: high
ms.date: 10/16/2017
---
# Microsoft Edge - Deployment Guide for IT Pros
**Applies to:**
- Windows 10
- Windows 10 Mobile
>Learn more about what features and functionality are supported in each Windows edition at [Compare Windows 10 Editions](https://www.microsoft.com/en-us/WindowsForBusiness/Compare).
Microsoft Edge is the new, default web browser for Windows 10, helping you to experience modern web standards, better performance, improved security, and increased reliability. Microsoft Edge also introduces new features like Web Note, Reading View, and Cortana that you can use along with your normal web browsing abilities.
Microsoft Edge lets you stay up-to-date through the Microsoft Store and to manage your enterprise through Group Policy or your mobile device management (MDM) tools.
>[!Note]
>For more information about the potential impact of using Microsoft Edge in a large organization, refer to the [Measuring the impact of Microsoft Edge](https://www.microsoft.com/itpro/microsoft-edge/technical-benefits) topic on the Microsoft Edge IT Center.
>If you are looking for Internet Explorer 11 content, please visit the [Internet Explorer 11 (IE11)](https://docs.microsoft.com/en-us/internet-explorer/) area.
## In this section
| Topic | Description |
| -----------------------| ----------------------------------- |
|[Change history for Microsoft Edge](change-history-for-microsoft-edge.md) |Lists new and updated topics in the Microsoft Edge documentation for both Windows 10 and Windows 10 Mobile. |
|[Enterprise guidance about using Microsoft Edge and Internet Explorer 11](enterprise-guidance-using-microsoft-edge-and-ie11.md) |Guidance about how to use both Microsoft Edge and Internet Explorer 11 in your enterprise.|
| [Microsoft Edge requirements and language support](hardware-and-software-requirements.md) |Microsoft Edge is pre-installed on all Windows 10-capable devices that meet the minimum system requirements and are on the supported language list.|
| [Available policies for Microsoft Edge](available-policies.md) |Microsoft Edge works with Group Policy and Microsoft Intune to help you manage your organization's computer settings.<br><br>Group Policy objects (GPO's) can include registry-based Administrative Template policy settings, security settings, software deployment information, scripts, folder redirection, and preferences. By using Group Policy and Intune, you can set up a policy setting once, and then copy that setting onto many computers. For example, you can set up multiple security settings in a GPO that's linked to a domain, and then apply all of those settings to every computer in the domain. |
| [Use Enterprise Mode to improve compatibility](emie-to-improve-compatibility.md) |If you have specific web sites and apps that you know have compatibility problems with Microsoft Edge, you can use the Enterprise Mode site list so that the web sites will automatically open using Internet Explorer 11. Additionally, if you know that your intranet sites aren't going to work properly with Microsoft Edge, you can set all intranet sites to automatically open using IE11.<br><br>Using Enterprise Mode means that you can continue to use Microsoft Edge as your default browser, while also ensuring that your apps continue working on IE11. |
|[Microsoft Edge Frequently Asked Questions (FAQs)](microsoft-edge-faq.md)|Answering frequently asked questions about Microsoft Edge features, integration, support, and potential problems.
## Interoperability goals and enterprise guidance
Our primary goal is that your modern websites work in Microsoft Edge. To that end, we've made Microsoft Edge the default browser.
However, if you're running web apps that continue to use:
* ActiveX controls
* x-ua-compatible headers
* &lt;meta&gt; tags
* Enterprise mode or compatibility view to address compatibility issues
* legacy document modes
You'll need to keep running them using IE11. If you don't have IE11 installed anymore, you can download it from the Microsoft Store or from the [Internet Explorer 11 download page](https://go.microsoft.com/fwlink/p/?linkid=290956). Alternatively, you can also use Enterprise Mode with Microsoft Edge to transition only the sites that need these technologies to load in IE11. For info about Enterprise Mode and Edge, see [Use Enterprise Mode to improve compatibility](emie-to-improve-compatibility.md).
## Related topics
- [Total Economic Impact of Microsoft Edge: Infographic](https://www.microsoft.com/download/details.aspx?id=55956)
- [Total Economic Impact of Microsoft Edge: Forrester Study](https://www.microsoft.com/download/details.aspx?id=55847)
- [Download Internet Explorer 11](https://go.microsoft.com/fwlink/p/?linkid=290956)
- [Internet Explorer 11 (IE11) - Deployment Guide for IT Pros](https://go.microsoft.com/fwlink/p/?LinkId=760644)
- [Internet Explorer Administration Kit 11 (IEAK 11) - Administrator's Guide](https://go.microsoft.com/fwlink/p/?LinkId=760646)

27
browsers/edge/TOC.md
View File

@ -1,23 +1,36 @@
#[Microsoft Edge - Deployment guidance for IT Pros](index.md)
#[Microsoft Edge deployment for IT Pros](index.yml)
##[New Microsoft Edge Group Policies and MDM settings](new-policies.md)
##[(Preview) New Microsoft Edge Group Policies and MDM settings](new-policies.md)
##[Deploy Microsoft Edge kiosk mode](microsoft-edge-kiosk-mode-deploy.md)
##[(Preview) Deploy Microsoft Edge kiosk mode](microsoft-edge-kiosk-mode-deploy.md)
##Group Policy configuration options
##[Group policies & configuration options](group-policies/index.yml)
###[All group policies](available-policies.md)
###[Address bar settings](group-policies/address-bar-settings-gp.md)
###[Adobe settings](group-policies/adobe-settings-gp.md)
###[Books Library management](group-policies/books-library-management-gp.md)
###[Browser settings management](group-policies/browser-settings-management-gp.md)
###[Developer settings](group-policies/developer-settings-gp.md)
###[Extensions management](group-policies/extensions-management-gp.md)
###[Favorites management](group-policies/favorites-management-gp.md)
###[Home button settings](group-policies/home-button-gp.md)
###[Interoperability and enterprise guidance](group-policies/interoperability-enterprise-guidance-gp.md)
###[New tab page settings](group-policies/new-tab-page-settings-gp.md)
###[Prelaunch Microsoft Edge and preload tabs](group-policies/prelaunch-preload-gp.md)
###[Search engine customization](group-policies/search-engine-customization-gp.md)
###[Security and privacy management](group-policies/security-privacy-management-gp.md)
###[Start pages settings](group-policies/start-pages-gp.md)
###[Sync browser settings](group-policies/sync-browser-settings-gp.md)
###[Interoperability and enterprise guidance](group-policies/interoperability-enterprise-guidance-gp.md)
###[Telemetry and data collection](group-policies/telemetry-management-gp.md)
##[Change history for Microsoft Edge](change-history-for-microsoft-edge.md)
##[Microsoft Edge requirements and language support](hardware-and-software-requirements.md)
##[System requirements](about-microsoft-edge.md#minimum-system-requirements)
##[Supported languages](about-microsoft-edge.md#supported-languages)
##[Available policies for Microsoft Edge](available-policies.md)
##[Use Enterprise Mode to improve compatibility](emie-to-improve-compatibility.md)

159
browsers/edge/about-microsoft-edge.md Normal file
View File

@ -0,0 +1,159 @@
---
description: Overview information about Microsoft Edge, the default browser for Windows 10. This topic includes links to other Microsoft Edge topics.
ms.assetid: 70377735-b2f9-4b0b-9658-4cf7c1d745bb
author: shortpatti
ms.prod: edge
ms.mktglfcycl: general
ms.sitesec: library
title: Microsoft Edge for IT Pros
ms.localizationpriority: high
ms.date: 07/29/2018
---
# Microsoft Edge deployment for IT Pros
>Applies to: Microsoft Edge on Windows 10 and Windows 10 Mobile
Microsoft Edge is the new, default web browser for Windows 10, helping you to experience modern web standards, better performance, improved security, and increased reliability. Microsoft Edge lets you stay up-to-date through the Microsoft Store and to manage your enterprise through Group Policy or your mobile device management (MDM) tools.
>[!IMPORTANT]
>The Long-Term Servicing Branch (LTSB) versions of Windows, including Windows Server 2016, don’t include Microsoft Edge or many other Universal Windows Platform (UWP) apps. Systems running the LTSB operating systems do not support these apps because their services get frequently updated with new functionality. For customers who require the LTSB for specialized devices, we recommend using Internet Explorer 11.
## Minimum system requirements
Some of the components might also need additional system resources. Check the component's documentation for more information.
| Item | Minimum requirements |
| ------------------ | -------------------------------------------- |
| Computer/processor | 1 gigahertz (GHz) or faster (32-bit (x86) or 64-bit (x64)) |
| Operating system | <ul><li>Windows 10 (32-bit or 64-bit)</li><li>Windows 10 Mobile</li></ul><p>**Note**<br> For specific Windows 10 Mobile requirements, see the [Minimum hardware requirements for Windows 10 Mobile](https://go.microsoft.com/fwlink/p/?LinkID=699266) topic. |
| Memory | <ul><li>Windows 10 (32-bit) - 1 GB</li><li>Windows 10 (64-bit) - 2 GB</li></ul> |
| Hard drive space | <ul><li>Windows 10 (32-bit) - 16 GB</li><li>Windows 10 (64-bit) - 20 GB</li></ul> |
| DVD drive | DVD-ROM drive (if installing from a DVD-ROM) |
| Display | Super VGA (800 x 600) or higher-resolution monitor with 256 colors |
| Graphics card | Microsoft DirectX 9 or later with Windows Display Driver Model (WDDM) 1.0 driver |
| Peripherals | Internet connection and a compatible pointing device |
 
## Supported languages
Microsoft Edge supports all of the same languages as Windows 10, including:
| Language | Country/Region | Code |
| ------------------------ | -------------- | ------ |
| Afrikaans (South Africa) | South Africa | af-ZA |
| Albanian (Albania) | Albania | sq-AL |
| Amharic | Ethiopia | am-ET |
| Arabic (Saudi Arabia) | Saudi Arabia | ar-SA |
| Armenian | Armenia | hy-AM |
| Assamese | India | as-IN |
| Azerbaijani (Latin, Azerbaijan) | Azerbaijan | az-Latn-AZ |
| Bangla (Bangladesh) | Bangladesh | bn-BD |
| Bangla (India) | India | bn-IN |
| Basque (Basque) | Spain | eu-ES |
| Belarusian (Belarus) | Belarus | be-BY |
| Bosnian (Latin) | Bosnia and Herzegovina | bs-Latn-BA |
| Bulgarian (Bulgaria) | Bulgaria | bg-BG |
| Catalan (Catalan) | Spain | ca-ES |
| Central Kurdish (Arabic) | Iraq | ku-Arab-IQ |
| Cherokee (Cherokee) | United States | chr-Cher-US |
| Chinese (Hong Kong SAR) | Hong Kong Special Administrative Region | zh-HK |
| Chinese (Simplified, China) | People's Republic of China | zh-CN |
| Chinese (Traditional, Taiwan) | Taiwan | zh-TW |
| Croatian (Croatia) | Croatia | hr-HR |
| Czech (Czech Republic) | Czech Republic | cs-CZ |
| Danish (Denmark) | Denmark | da-DK |
| Dari | Afghanistan | prs-AF |
| Dutch (Netherlands) | Netherlands | nl-NL |
| English (United Kingdom) | United Kingdom | en-GB |
| English (United States) | United States | en-US |
| Estonian (Estonia) | Estonia | et-EE |
| Filipino (Philippines) | Philippines | fil-PH |
| Finnish (Finland) | Finland | fi_FI |
| French (Canada) | Canada | fr-CA |
| French (France) | France | fr-FR |
| Galician (Galician) | Spain | gl-ES |
| Georgian | Georgia | ka-GE |
| German (Germany) | Germany | de-DE |
| Greek (Greece) | Greece | el-GR |
| Gujarati | India | gu-IN |
| Hausa (Latin, Nigeria) | Nigeria | ha-Latn-NG |
| Hebrew (Israel) | Israel | he-IL |
| Hindi (India) | India | hi-IN |
| Hungarian (Hungary) | Hungary | hu-HU |
| Icelandic | Iceland | is-IS |
| Igbo | Nigeria | ig-NG |
| Indonesian (Indonesia) | Indonesia | id-ID |
| Irish | Ireland | ga-IE |
| isiXhosa | South Africa | xh-ZA |
| isiZulu | South Africa | zu-ZA |
| Italian (Italy) | Italy | it-IT |
| Japanese (Japan) | Japan | ja-JP |
| Kannada | India | kn-IN |
| Kazakh (Kazakhstan) | Kazakhstan | kk-KZ |
| Khmer (Cambodia) | Cambodia | km-KH |
| K'iche' | Guatemala | quc-Latn-GT |
| Kinyarwanda | Rwanda | rw-RW |
| KiSwahili | Kenya, Tanzania | sw-KE |
| Konkani | India | kok-IN |
| Korean (Korea) | Korea | ko-KR |
| Kyrgyz | Kyrgyzstan | ky-KG |
| Lao (Laos) | Lao P.D.R. | lo-LA |
| Latvian (Latvia) | Latvia | lv-LV |
| Lithuanian (Lithuania) | Lithuania | lt-LT |
| Luxembourgish (Luxembourg) | Luxembourg | lb-LU |
| Macedonian (Former Yugoslav Republic of Macedonia) | Macedonia (FYROM) | mk-MK |
| Malay (Malaysia) | Malaysia, Brunei, and Singapore | ms-MY |
| Malayalam | India | ml-IN |
| Maltese | Malta | mt-MT |
| Maori | New Zealand | mi-NZ |
| Marathi | India | mr-IN |
| Mongolian (Cyrillic) | Mongolia | mn-MN |
| Nepali | Federal Democratic Republic of Nepal | ne-NP |
| Norwegian (Nynorsk) | Norway | nn-NO |
| Norwegian, Bokmål (Norway) | Norway | nb-NO |
| Odia | India | or-IN |
| Polish (Poland) | Poland | pl-PL |
| Portuguese (Brazil) | Brazil | pt-BR |
| Portuguese (Portugal) | Portugal | pt-PT |
| Punjabi | India | pa-IN |
| Punjabi (Arabic) | Pakistan | pa-Arab-PK |
| Quechua | Peru | quz-PE |
| Romanian (Romania) | Romania | ro-RO |
| Russian (Russia) | Russia | ru-RU |
| Scottish Gaelic | United Kingdom | gd-GB |
| Serbian (Cyrillic, Bosnia, and Herzegovina) | Bosnia and Herzegovina | sr-Cyrl-BA |
| Serbian (Cyrillic, Serbia) | Serbia | sr-Cyrl-RS |
| Serbian (Latin, Serbia) | Serbia | sr-Latn-RS |
| Sesotho sa Leboa | South Africa | nso-ZA |
| Setswana (South Africa) | South Africa and Botswana | tn-ZA |
| Sindhi (Arabic) | Pakistan | sd-Arab-PK |
| Sinhala | Sri Lanka | si-LK |
| Slovak (Slovakia) | Slovakia | sk-SK |
| Slovenian (Slovenia) | Slovenia | sl-SL |
| Spanish (Mexico) | Mexico | es-MX |
| Spanish (Spain, International Sort) | Spain | en-ES |
| Swedish (Sweden) | Sweden | sv-SE |
| Tajik (Cyrillic) | Tajikistan | tg-Cyrl-TJ |
| Tamil (India) | India and Sri Lanka | ta-IN |
| Tatar | Russia | tt-RU |
| Telugu | India | te-IN |
| Thai (Thailand) | Thailand | th-TH |
| Tigrinya (Ethiopia) | Ethiopia | ti-ET |
| Turkish (Turkey) | Turkey | tr-TR |
| Turkmen | Turkmenistan | tk-TM |
| Ukrainian (Ukraine) | Ukraine | uk-UA |
| Urdu | Pakistan | ur-PK |
| Uyghur | People's Republic of China | ug-CN |
| Uzbek (Latin, Uzbekistan) | Uzbekistan | uz-Latn-UZ |
| Valencian | Spain | ca-ES-valencia |
| Vietnamese | Vietnam | vi-VN |
| Welsh | United Kingdom | cy-GB |
| Wolof | Senegal | wo-SN |
| Yoruba | Nigeria | yo-NG |
---

4
browsers/edge/available-policies.md
View File

@ -16,6 +16,10 @@ ms.date: 07/20/2018
> Applies to: Windows 10, Windows 10 Mobile
Set up a policy setting once and then copy that setting onto many computers.
Microsoft Edge works with Group Policy and Microsoft Intune to help you manage your organization's computer settings. Group Policy objects (GPOs) can include registry-based Administrative Template policy settings, security settings, software deployment information, scripts, folder redirection, and preferences.
By using Group Policy and Intune, you can set up a policy setting once, and then copy that setting onto many computers. For example, you can set up multiple security settings in a GPO that is linked to a domain, and then apply all of those settings to every computer in the domain.

18
browsers/edge/change-history-for-microsoft-edge.md
View File

@ -11,9 +11,12 @@ author: shortpatti
---
# Change history for Microsoft Edge
This topic lists new and updated topics in the Microsoft Edge documentation for both Windows 10 and Windows 10 Mobile.
Discover what's new and updated in the Microsoft Edge for both Windows 10 and Windows 10 Mobile.
For a detailed feature list of what's in the current Microsoft Edge releases, the Windows Insider Preview builds, and what was introduced in previous releases, see the [Microsoft Edge changelog](https://developer.microsoft.com/microsoft-edge/platform/changelog/).
# [2017](#tab/2017)
## September 2017
|New or changed topic | Description |
@ -25,23 +28,22 @@ For a detailed feature list of what's in the current Microsoft Edge releases, th
|----------------------|-------------|
|[Available Group Policy and Mobile Device Management (MDM) settings for Microsoft Edge](available-policies.md) |Added new Group Policy and MDM settings for the Windows Insider Program. Reformatted for easier readability outside of scrolling table. |
# [2016](#tab/2016)
## November 2016
|New or changed topic | Description |
|----------------------|-------------|
|[Browser: Microsoft Edge and Internet Explorer 11](enterprise-guidance-using-microsoft-edge-and-ie11.md) |Added the infographic image and a download link.|
|[Use Enterprise Mode to improve compatibility](emie-to-improve-compatibility.md) |Added a note about the 65 second wait before checking for a newer version of the site list .XML file. |
|[Available policies for Microsoft Edge](available-policies.md) |Added notes to the Configure the Enterprise Mode Site List Group Policy and the EnterpriseModeSiteList MDM policy about the 65 second wait before checking for a newer version of the site list .XML file. |
|[Microsoft Edge - Deployment Guide for IT Pros](index.md) |Added a link to the Microsoft Edge infographic, helping you to evaluate the potential impact of using Microsoft Edge in your organization. |
|Microsoft Edge - Deployment Guide for IT Pros |Added a link to the Microsoft Edge infographic, helping you to evaluate the potential impact of using Microsoft Edge in your organization. |
|[Browser: Microsoft Edge and Internet Explorer 11](enterprise-guidance-using-microsoft-edge-and-ie11.md) |Added a link to the Microsoft Edge infographic, helping you to evaluate the potential impact of using Microsoft Edge in your organization. |
## July 2016
|New or changed topic | Description |
|----------------------|-------------|
|[Microsoft Edge requirements and language support](hardware-and-software-requirements.md)| Updated to include a note about the Long Term Servicing Branch (LTSB). |
## July 2016
|New or changed topic | Description |
|----------------------|-------------|
|[Enterprise guidance about using Microsoft Edge and Internet Explorer 11](enterprise-guidance-using-microsoft-edge-and-ie11.md) | Content moved from What's New section. |
|[Available policies for Microsoft Edge](available-policies.md) |Updated |
@ -56,3 +58,5 @@ For a detailed feature list of what's in the current Microsoft Edge releases, th
|New or changed topic | Description |
|----------------------|-------------|
|[Available Policies for Microsoft Edge](available-policies.md) | Added new policies and the Supported versions column for Windows 10 Insider Preview. |
---

10
browsers/edge/group-policies/address-bar-settings-gp.md
View File

@ -5,7 +5,7 @@ services:
keywords: Don’t add or edit keywords without consulting your SEO champ.
author: shortpatti
ms.author: pashort
ms.date: 07/25/2018
ms.date: 07/29/2018
ms.topic: article
ms.prod: edge
ms.mktglfcycl: explore
@ -15,9 +15,11 @@ ms.sitesec: library
# Address bar settings
>*Supported versions: Microsoft Edge on Windows 10*
I need a description here
[!INCLUDE [allow-address-bar-suggestions-include](../includes/allow-address-bar-suggestions-include.md)]
[!INCLUDE [configure-search-suggestions-address-bar-include](../includes/configure-search-suggestions-address-bar-include.md)]
## Allow Address bar drop-down list suggestions
[!INCLUDE [allow-address-bar-suggestions-include.md](../includes/allow-address-bar-suggestions-include.md)]
## Configure search suggestions in Address bar
[!INCLUDE [configure-search-suggestions-address-bar-include.md](../includes/configure-search-suggestions-address-bar-include.md)]

10
browsers/edge/group-policies/adobe-settings-gp.md
View File

@ -15,10 +15,12 @@ ms.sitesec: library
# Adobe settings
>*Supported versions: Microsoft Edge on Windows 10*
I need a description here, maybe with scenarios
[!INCLUDE [allow-adobe-flash-include](../includes/allow-adobe-flash-include.md)]
[!INCLUDE [configure-adobe-flash-click-to-run-include](../includes/configure-adobe-flash-click-to-run-include.md)]
## Allow Adobe Flash
[!INCLUDE [allow-adobe-flash-include.md](../includes/allow-adobe-flash-include.md)]
## Configure the Adobe Flash Click-to-Run setting
[!INCLUDE [configure-adobe-flash-click-to-run-include.md](../includes/configure-adobe-flash-click-to-run-include.md)]

14
browsers/edge/group-policies/books-library-management-gp.md
View File

@ -15,13 +15,17 @@ ms.sitesec: library
# Books Library management
>*Supported versions: Microsoft Edge on Windows 10*
I need a description here, maybe with scenarios
[!INCLUDE [allow-shared-folder-books-include](../includes/allow-shared-folder-books-include.md)]
[!INCLUDE [allow-config-updates-books-include](../includes/allow-config-updates-books-include.md)]
## Allow a shared books folder
[!INCLUDE [allow-shared-folder-books-include.md](../includes/allow-shared-folder-books-include.md)]
[!INCLUDE [allow-ext-telemetry-books-tab-include](../includes/allow-ext-telemetry-books-tab-include.md)]
## Allow configuration updates for the Books Library
[!INCLUDE [allow-config-updates-books-include.md](../includes/allow-config-updates-books-include.md)]
[!INCLUDE [always-enable-book-library-include](../includes/always-enable-book-library-include.md)]
## Allow extended telemetry for the Books tab
[!INCLUDE [allow-ext-telemetry-books-tab-include.md](../includes/allow-ext-telemetry-books-tab-include.md)]
## Always show the Books Library in Microsoft Edge
[!INCLUDE [always-enable-book-library-include.md](../includes/always-enable-book-library-include.md)]

1
browsers/edge/group-policies/bowser-settings-management-gp.md → browsers/edge/group-policies/browser-settings-management-gp.md
View File

@ -15,7 +15,6 @@ ms.sitesec: library
# Browser settings management
>*Supported versions: Microsoft Edge on Windows 10*
I need a description here, maybe with scenarios

2
browsers/edge/group-policies/developer-settings-gp.md
View File

@ -15,7 +15,7 @@ ms.sitesec: library
# Developer settings
>*Supported versions: Microsoft Edge on Windows 10*
I need a description here, maybe with scenarios
## Allow Developer Tools
[!INCLUDE [allow-dev-tools-include](../includes/allow-dev-tools-include.md)]

2
browsers/edge/group-policies/extensions-management-gp.md
View File

@ -15,7 +15,7 @@ ms.sitesec: library
# Extensions management
>*Supported versions: Microsoft Edge on Windows 10*
I need a description here, maybe with scenarios
## Allow Extensions
[!INCLUDE [allow-extensions-include](../includes/allow-extensions-include.md)]

8
browsers/edge/group-policies/favorites-management-gp.md
View File

@ -1,8 +1,8 @@
---
title: Microsoft Edge - Favorites management
description: 115-145 characters including spaces. Edit the intro para describing article intent to fit here. This abstract displays in the search result.
description:
services:
keywords: Don’t add or edit keywords without consulting your SEO champ.
keywords:
author: shortpatti
ms.author: pashort
ms.date: 07/25/2018
@ -15,7 +15,7 @@ ms.sitesec: library
# Favorites management
>*Supported versions: Microsoft Edge on Windows 10*
I need a description here, maybe with scenarios
## Configure Favorites Bar
@ -28,4 +28,4 @@ I need a description here, maybe with scenarios
[!INCLUDE [prevent-changes-to-favorites-include](../includes/prevent-changes-to-favorites-include.md)]
## Provision Favorites
[!INCLUDE [provision-favorites-shortdesc](../shortdesc/provision-favorites-shortdesc.md)]
[!INCLUDE [provision-favorites-include](../includes/provision-favorites-include.md)]

22
browsers/edge/group-policies/home-button-gp.md
View File

@ -14,12 +14,12 @@ ms.sitesec: library
Microsoft Edge shows the home button and by clicking it the Start page loads by default. You can configure the Home button to load the New tab page or a URL defined in the Set Home button URL policy. You can also configure Microsoft Edge to hide the home button.
## Policies
- [Configure Home button](../new-policies.md#configure-home-button)
- [Set Home button URL](../new-policies.md#set-home-button-url)
- [Unlock Home Button](../new-policies.md#unlock-home-button)
## Relevant group policies
- [Configure Home button](#configure-home-button)
- [Set Home button URL](#set-home-button-url)
- [Unlock Home button](#unlock-home-button)
## Configuration options
@ -29,3 +29,13 @@ Microsoft Edge shows the home button and by clicking it the Start page loads by
![Hide home button](../images/home-button-hide-v4-sm.png)
## Configure Home button
[!INCLUDE [configure-home-button-include.md](../includes/configure-home-button-include.md)]
## Set Home button URL
[!INCLUDE [set-home-button-url-include](../includes/set-home-button-url-include.md)]
## Unlock Home button
[!INCLUDE [unlock-home-button-include.md](../includes/unlock-home-button-include.md)]

205
browsers/edge/group-policies/index.md
View File

@ -1,205 +0,0 @@
### YamlMime:YamlDocument
documentType: LandingData
title: Microsoft Edge Group Policy configuration options
metadata:
document_id:
title: Microsoft Edge Group Policy configuration options
description: Learn about the different configuration options available in Microsoft Edge on Windows 10.
text: Some of the features coming to Microsoft Edge gives you the ability to set a custom URL for the New tab page or Home button. Another new feature allows you to hide or show the Favorites bar, giving you more control over the favorites bar.
keywords: Microsoft Edge, Windows 10
ms.localizationpriority: high
author: shortpatti
ms.author: pashort
ms.date: 07/23/2018
ms.topic: article
ms.devlang: na
sections:
- title: Learn about...
- items:
- type: markdown
text: Get ready to deploy Microsoft Edge.
- items:
- type: list
style: cards
className: cardsE
columns: 3
items:
- href: \browsers\edge\group-policies
html: <p>Learn about the Always On VPN deployment and where to get started.</p>
image:
src: https://docs.microsoft.com/media/common/i_get-started.svg
title: Begin your journey
- href: \windows-server\remote\remote-access\vpn\vpn-map-da
html: <p>Learn how Always On VPN has expanded the VPN functionality beyond the capabilities of DirectAccess.</p>
image:
src: https://docs.microsoft.com/media/common/i_quick-start.svg
title: DirectAccess and Always On VPN feature comparison
- href: \windows-server\remote\remote-access\vpn\always-on-vpn\always-on-vpn-enhancements
html: <p>Learn about the key improvements in integration, security, connectivity, networking control, and compatibility.</p>
image:
src: https://docs.microsoft.com/media/common/i_whats-new.svg
title: Enhancements in Always On VPN
- href: \windows-server\remote\remote-access\vpn\always-on-vpn\always-on-vpn-technology-overview
html: <p>Learch about the technologies used in the Always On VPN deployment.</p>
image:
src: https://docs.microsoft.com/media/common/i_overview.svg
title: Technology overview
- href: \windows-server\remote\remote-access\vpn\always-on-vpn\deploy\always-on-vpn-adv-options
html: <p>Learn about the advanced VPN features you can add to improve the security and availability of your VPN connection.</p>
image:
src: https://docs.microsoft.com/media/common/i_advanced.svg
title: Extend Always On VPN with advanced features
- title: Get started...
items:
- type: paragraph
text: 'Deploy Always On VPN connections for domain-joined Windows 10 client computers. You can also migrate from DirectAccess to Always On VPN and configure conditional access using Azure AD.'
- type: list
style: cards
className: cardsE
columns: 3
items:
- href: \windows-server\remote\remote-access\vpn\always-on-vpn\deploy\always-on-vpn-deploy-deployment
html: <p>Discover what's needed to deploy VPN connections.</p>
image:
src: https://docs.microsoft.com/media/common/i_architecture.svg
title: Deployment workflow and scenarios
- href: \windows-server\remote\remote-access\da-always-on-vpn-migration\da-always-on-migration-overview
html: <p>Start planning the migration from DirectAccess to Always On VPN.</p>
image:
src: https://docs.microsoft.com/media/common/i_upgrade.svg
title: Migrate from DirectAccess
- href: \windows-server\remote\remote-access\vpn\always-on-vpn\deploy\always-on-vpn-deploy-planning
html: <p>Start planning and preparing your Always On VPN deployment.</p>
image:
src: https://docs.microsoft.com/media/common/i_guidelines.svg
title: Plan the Always On VPN deployment
- href: \windows-server\remote\remote-access\vpn\always-on-vpn\deploy\vpn-deploy-server-infrastructure
html: <p>Start setting up and configuring the VPN infrastructure along with the Windows 10 client VPN connectivity.</p>
image:
src: https://docs.microsoft.com/media/common/i_setup.svg
title: Deploy the VPN infrastructure
- href: \windows-server\remote\remote-access\vpn\ad-ca-vpn-connectivity-windows10
html: <p>Fine-tune how VPN users access your resources using Azure AD conditional access.</p>
image:
src: https://docs.microsoft.com/media/common/i_setup.svg
title: Configure conditional access
- items:
- type: list
style: cards
className: cardsL
items:
- title: Troubleshoot Always On VPN
html: <p><a class="barLink" href="/windows-server/remote/remote-access/vpn/always-on-vpn/deploy/always-on-vpn-deploy-troubleshooting#vpnprofileps1-script-issues">VPN_Profile.ps1 script issues</a></p>
<p><a class="barLink" href="/windows-server/remote/remote-access/vpn/always-on-vpn/deploy/always-on-vpn-deploy-troubleshooting#always-on-vpn-client-connection-issues">Always On VPN client connection issues</a></p>
<p><a class="barLink" href="/windows-server/remote/remote-access/vpn/always-on-vpn/deploy/always-on-vpn-deploy-troubleshooting#azure-ad-conditional-access-connection-issues">Azure AD Conditional Access connection issues</a></p>
<p><a class="barLink" href="/windows-server/remote/remote-access/vpn/always-on-vpn/deploy/always-on-vpn-deploy-troubleshooting#error-codes">Error codes</a></p><br>
<p><a class="barLink" href="/windows-server/remote/remote-access/vpn/always-on-vpn/deploy/always-on-vpn-deploy-troubleshooting#logs">Log files</a></p></div>
- title: Additional resources
html: <p><a class="barLink" href="https://docs.microsoft.com/windows/access-protection/vpn/vpn-guide">Windows 10 VPN Technical Guide</a></p>
<p><a class="barLink" href="https://msdn.microsoft.com/windows/hardware/commercialize/customize/mdm/vpnv2-csp">VPNv2 CSP</a></p>
<p><a class="barLink" href="https://technet.microsoft.com/library/hh831740.aspx">Active Directory Certificate Services Overview</a></p>
<p><a class="barLink" href="https://technet.microsoft.com/library/cc730705.aspx">Certificate Templates</a></p>
<p><a class="barLink" href="https://social.technet.microsoft.com/wiki/contents/articles/2901.public-key-infrastructure-design-guidance.aspx">Public Key Infrastructure Design Guidance</a></p><p></p>
<p><a class="barLink" href="https://social.technet.microsoft.com/wiki/contents/articles/15037.ad-cs-step-by-step-guide-two-tier-pki-hierarchy-deployment.aspx">AD CS Step by Step Guide - Two Tier PKI Hierarchy Deployment</a></p>

231
browsers/edge/group-policies/index.yml Normal file
View File

@ -0,0 +1,231 @@
### YamlMime:YamlDocument
documentType: LandingData
title: Microsoft Edge group policies
metadata:
document_id:
title: Microsoft Edge group policies
description: Learn how to configure group policies in Microsoft Edge on Windows 10.
text: Some of the features coming to Microsoft Edge gives you the ability to set a custom URL for the New tab page or Home button. Another new feature allows you to hide or show the Favorites bar, giving you more control over the favorites bar.
keywords: Microsoft Edge, Windows 10
ms.localizationpriority: high
author: shortpatti
ms.author: pashort
ms.date: 07/26/2018
ms.topic: article
ms.devlang: na
sections:
- title:
- items:
- type: markdown
text: Microsoft Edge works with Group Policy and Microsoft Intune to help you manage your organization's computer settings. Group Policy objects (GPOs) can include registry-based Administrative Template policy settings, security settings, software deployment information, scripts, folder redirection, and preferences.
- items:
- type: list
style: cards
className: cardsE
columns: 3
items:
- href: https://review.docs.microsoft.com/en-us/microsoft-edge/deploy/available-policies?branch=pr-en-us-10183
html: <p>View all available group policies for Microsoft Edge on Windows 10.</p>
image:
src: https://docs.microsoft.com/media/common/i_policy.svg
title: All group policies
- href: https://review.docs.microsoft.com/en-us/microsoft-edge/deploy/group-policies/address-bar-settings-gp?branch=pr-en-us-10183
html: <p>Learn how you can configure Microsoft Edge to show search suggestions in the address bar.</p>
image:
src: https://docs.microsoft.com/media/common/i_http.svg
title: Address bar settings
- href: https://review.docs.microsoft.com/en-us/microsoft-edge/deploy/group-policies/adobe-settings-gp?branch=pr-en-us-10183
html: <p>Learn how you can configure Microsoft Edge to load Adobe Flash content automatically.</p>
image:
src: https://docs.microsoft.com/media/common/i_setup.svg
title: Adobe Flash settings
- href: https://review.docs.microsoft.com/en-us/microsoft-edge/deploy/group-policies/books-library-management-gp?branch=pr-en-us-10183
html: <p>Learn how you can set up and use the books library, such as using a shared books folder for students and teachers.</p>
image:
src: https://docs.microsoft.com/media/common/i_library.svg
title: Books library management
- href: https://review.docs.microsoft.com/en-us/microsoft-edge/deploy/group-policies/browser-settings-management-gp?branch=pr-en-us-10183
html: <p>Learn how you can customize the browser settings, such as printing and saving browsing history, plus more.</p>
image:
src: https://docs.microsoft.com/media/common/i_management.svg
title: Browser settings
- href: https://docs.microsoft.com/en-us/microsoft-edge/deploy/microsoft-edge-kiosk-mode-deploy
html: <p>Learn how Microsoft Edge kiosk mode works with assigned access to let IT administrators create a tailored browsing experience designed for kiosk devices.</p>
image:
src: https://docs.microsoft.com/media/common/i_categorize.svg
title: Deploy Microsoft Edge kiosk mode
- href: https://review.docs.microsoft.com/en-us/microsoft-edge/deploy/group-policies/developer-settings-gp?branch=pr-en-us-10183
html: <p>Learn how configure Microsoft Edge for development and testing.</p>
image:
src: https://docs.microsoft.com/media/common/i_config-tools.svg
title: Developer tools & settings
- href: https://review.docs.microsoft.com/en-us/microsoft-edge/deploy/group-policies/interoperability-enterprise-guidance-gp?branch=pr-en-us-10183
html: <p>Learn how you use Microsoft Edge and Internet Explorer together for a full browsing experience.</p>
image:
src: https://docs.microsoft.com/media/common/i_management.svg
title: Enterprise mode
- href: https://review.docs.microsoft.com/en-us/microsoft-edge/deploy/group-policies/extensions-management-gp?branch=pr-en-us-10183
html: <p>Learn how you can configure Microsoft Edge to either prevent or allow users to install and run unverified extensions.</p>
image:
src: https://docs.microsoft.com/media/common/i_extensions.svg
title: Extensions management
- href: https://review.docs.microsoft.com/en-us/microsoft-edge/deploy/group-policies/favorites-management-gp?branch=pr-en-us-10183
html: <p>Learn how you can provision a standard favorites list as well as keep the favorites lists in sync between IE11 and Microsoft Edge.</p>
image:
src: https://docs.microsoft.com/media/common/i_link.svg
title: Favorites management
- href: https://review.docs.microsoft.com/en-us/microsoft-edge/deploy/group-policies/home-button-gp?branch=pr-en-us-10183
html: <p>Learn how you can customize the home button or hide it.</p>
image:
src: https://docs.microsoft.com/media/common/i_setup.svg
title: Home button settings
- href: https://review.docs.microsoft.com/en-us/microsoft-edge/deploy/group-policies/new-tab-page-settings-gp?branch=pr-en-us-10183
html: <p>Learn how to configure the New tab page in Microsoft Edge.</p>
image:
src: https://docs.microsoft.com/media/common/i_setup.svg
title: New tab page settings
- href: https://review.docs.microsoft.com/en-us/microsoft-edge/deploy/group-policies/prelaunch-preload-gp?branch=pr-en-us-10183
html: <p>Learn how pre-launching helps the performance of Microsoft Edge and minimizes the amount of time required to start up Microsoft Edge.</p>
image:
src: https://docs.microsoft.com/media/common/i_setup.svg
title: Prelaunch Microsoft Edge and preload tabs
- href: https://review.docs.microsoft.com/en-us/microsoft-edge/deploy/group-policies/search-engine-customization-gp?branch=pr-en-us-10183
html: <p>Learn how you can set the default search engine and configure additional ones.</p>
image:
src: https://docs.microsoft.com/media/common/i_search.svg
title: Search engine management
- href: https://review.docs.microsoft.com/en-us/microsoft-edge/deploy/group-policies/security-privacy-management-gp?branch=pr-en-us-10183
html: <p>Learn how you can keep your environment and users safe from attacks.</p>
image:
src: https://docs.microsoft.com/media/common/i_security-management.svg
title: Security & privacy management
- href: https://review.docs.microsoft.com/en-us/microsoft-edge/deploy/group-policies/start-pages-gp?branch=pr-en-us-10183
html: <p>Learn how to configure the Start pages in Microsoft Edge.</p>
image:
src: https://docs.microsoft.com/media/common/i_setup.svg
title: Start page settings
- href: https://review.docs.microsoft.com/en-us/microsoft-edge/deploy/group-policies/sync-browser-settings-gp?branch=pr-en-us-10183
html: <p>Learn how to you can prevent the "browser" group from syncing and prevent users from turning on the the Sync your Settings toggle.</p>
image:
src: https://docs.microsoft.com/media/common/i_sync.svg
title: Sync browser settings
- href: https://review.docs.microsoft.com/en-us/microsoft-edge/deploy/group-policies/telemetry-management-gp?branch=pr-en-us-10183
html: <p>Learn how you can configure Microsoft Edge to collect certain data.</p>
image:
src: https://docs.microsoft.com/media/common/i_data-collection.svg
title: Telemetry and data collection

23
browsers/edge/group-policies/interoperability-enterprise-guidance-gp.md
View File

@ -12,12 +12,30 @@ ms.sitesec: library
# Interoperability and enterprise guidance
>*Supported versions: Microsoft Edge on Windows 10*
Microsoft Edge lets you continue to use IE11 for sites that are on your corporate intranet or included on your Enterprise Mode Site List. If you are running web apps that continue to use ActiveX controls, x-ua-compatible headers, or legacy document modes, you need to keep running them in IE11. IE11 offers additional security, manageability, performance, backward compatibility, and modern standards support.
>[!TIP]
> If you are running an earlier version of Internet Explorer, then we recommend upgrading to IE11, so any legacy apps continue to work correctly.
**Technology not supported by Microsoft Edge**
- ActiveX controls
- x-ua-compatible headers
- &lt;meta&gt; tags
- Legacy document modes
>[!TIP]
>You can also use Enterprise Mode with Microsoft Edge to transition only the sites that need these technologies to load in IE11. For info about Enterprise Mode and Edge, see [Use Enterprise Mode to improve compatibility](../emie-to-improve-compatibility.md).
If you have specific websites and apps that you know have compatibility problems with Microsoft Edge, you can use the Enterprise Mode site list so that the websites automatically open using Internet Explorer 11. Additionally, if you know that your intranet sites aren't going to work correctly with Microsoft Edge, you can set all intranet sites to open using IE11 automatically.
Using Enterprise Mode means that you can continue to use Microsoft Edge as your default browser, while also ensuring that your apps continue working on IE11.
**Policies**
## Relevant group policies
1. [Configure the Enterprise Mode Site List](#configure-the-enterprise-mode-site-list)
2. [Send all intranet sites to Internet Explorer 11](#send-all-intranet-sites-to-internet-explorer-11)
@ -27,7 +45,6 @@ Using Enterprise Mode means that you can continue to use Microsoft Edge as your
![Use Enterprise Mode with Microsoft Edge to improve compatibility](../images/use-enterprise-mode-with-microsoft-edge-sm.png)
## Configure the Enterprise Mode Site List
[!INCLUDE [configure-enterprise-mode-site-list-include](../includes/configure-enterprise-mode-site-list-include.md)]

17
browsers/edge/group-policies/prelaunch-preload-gp.md
View File

@ -15,11 +15,10 @@ Microsoft Edge pre-launches as a background process during Windows startup when
Additionally, Microsoft Edge preloads the Start and New tab pages during Windows sign in, which minimizes the amount of time required to start Microsoft Edge and load a new tab. You can also configure Microsoft Edge to prevent preloading of tabs.
## Policies
## Relevant group policies
- [Allow Microsoft Edge to pre-launch at Windows startup, when the system is idle, and each time Microsoft Edge is closed](../new-policies.md#allow-microsoft-edge-to-pre-launch-at-windows-startup-when-the-system-is-idle-and-each-time-microsoft-edge-is-closed)
- [Allow Microsoft Edge to start and load the Start and New Tab page at Windows startup and each time Microsoft Edge is closed](../new-policies.md#allow-microsoft-edge-to-start-and-load-the-start-and-new-tab-page-at-windows-startup-and-each-time-microsoft-edge-is-closed)
- [Allow Microsoft Edge to pre-launch at Windows startup, when the system is idle, and each time Microsoft Edge is closed](#allow-microsoft-edge-to-pre-launch-at-windows-startup-when-the-system-is-idle-and-each-time-microsoft-edge-is-closed)
- [Allow Microsoft Edge to load the Start and New Tab page at Windows startup and each time Microsoft Edge is closed](#allow-microsoft-edge-to-start-and-load-the-start-and-new-tab-page-at-windows-startup-and-each-time-microsoft-edge-is-closed)
## Configuration options
@ -28,4 +27,12 @@ Additionally, Microsoft Edge preloads the Start and New tab pages during Windows
![Prelauch Microsoft Edge and preload Start and New tab pages](../images/prelaunch-edge-and-preload-tabs-sm.png)
![Only prelaunch Microsoft Edge during Windows startup](../images/prelaunch-edge-only-sm.png)
![Only prelaunch Microsoft Edge during Windows startup](../images/prelaunch-edge-only-sm.png)
## Allow Microsoft Edge to pre-launch at Windows startup, when the system is idle, and each time Microsoft Edge is closed
[!INCLUDE [allow-prelaunch-include](../includes/allow-prelaunch-include.md)]
## Allow Microsoft Edge to load the Start and New Tab page at Windows startup and each time Microsoft Edge is closed
[!INCLUDE [allow-tab-preloading-include](../includes/allow-tab-preloading-include.md)]

2
browsers/edge/group-policies/search-engine-customization-gp.md
View File

@ -10,7 +10,7 @@ ms.date: 07/25/2018
By default, Microsoft Edge uses the default search engine specified in App settings, which lets users make changes to it. You can configure Microsoft Edge to use the policy-set search engine specified in the OpenSearch XML file. You can also prevent users from making changes to the search engine settings.
**Policies**
## Relevant group policies
- [Set default search engine](#set-default-search-engine)
- [Allow search engine customization](#allow-search-engine-customization)

28
browsers/edge/group-policies/security-privacy-management-gp.md
View File

@ -3,25 +3,18 @@ title: Microsoft Edge - Security and privacy management
description: Microsoft Edge helps to defend from increasingly sophisticated and prevalent web-based attacks against Windows. While most websites are safe, some sites have been designed to steal personal information or gain access to your system’s resources.
ms.author: pashort
author: shortpatti
ms.date: 07/25/2018
ms.date: 07/27/2018
---
# Security and privacy management
>*Supported versions: Microsoft Edge on Windows 10*
Microsoft Edge helps to defend from increasingly sophisticated and prevalent web-based attacks against Windows. While most websites are safe, some sites are malicious in nature, like stealing personal information or gain access to your system’s resources. By no longer supporting VBScript, JScript, VML, Browser Helper Objects, Toolbars, ActiveX controls, and Internet Explorer document modes, Microsoft Edge significantly reduces attacks making the browser more secure.
Microsoft Edge is designed with improved security in mind, helping to defend people from increasingly sophisticated and prevalent web-based attacks against Windows. Because Microsoft Edge is designed like a Universal Windows app, changing the browser to an app, it fundamentally changes the process model so that both the outer manager process and the different content processes all live within app container sandboxes.
Microsoft Edge runs in 64-bit not just by default, but anytime it’s running on a 64-bit operating system. Because Microsoft Edge doesn’t support legacy ActiveX controls or 3rd-party binary extensions, there’s no longer a reason to run 32-bit processes on a 64-bit system.
The value of running 64-bit all the time is that it strengthens Windows Address Space Layout Randomization (ASLR), randomizing the memory layout of the browser processes, making it much harder for attackers to hit precise memory locations. In turn, 64-bit processes make ASLR much more effective by making the address space exponentially larger and, therefore, more difficult for attackers to find sensitive memory components.
| | |
|---|---|
| **Windows Hello** | Authenticates the user and the website with asymmetric cryptography. |
| **Microsoft SmartScreen** | Defends against phishing by performing reputation checks on sites visited and blocking any site that is thought to be a phishing site. SmartScreen also helps to defend against installing malicious software or file downloads, even from trusted sites. |
| **Certificate Reputation system** | Collects data about certificates in use, detecting new certificates and flagging fraudulent certificates automatically. |
| **Microsoft EdgeHTML** | Defends against hacking through the following security standards features:<ul><li>Support for the W3C standard for Content Security Policy (CSP), which helps web developers defend their sites against cross-site scripting attacks.</li><li>Support for the HTTP Strict Transport Security (HSTS) feature, which is IETF-standard compliant, and helps to ensure that connections to sites are always secure.</li></ul> |
| **Code integrity and image loading restrictions** | Prevents malicious DLLs from loading or injecting into the content processes. Only signed images are allowed to load in Microsoft Edge. Binaries on remote devices (such as UNC or WebDAV) can&#39;t load. |
| **Memory corruption mitigations** | Defends against memory corruption weaknesses and vulnerabilities with the use of [CWE-416: Use After Free](http://cwe.mitre.org/data/definitions/416.html) (UAF). |
| **Memory Garbage Collector (MemGC) mitigation** | Replaces Memory Protector and helps to defend the browser from UAF vulnerabilities by freeing memory from the programmer and automating it, only freeing memory when the automation detects that there are no more references left pointing to a given block of memory. |
| **Control Flow Guard** | Compiles checks around code that performs indirect jumps based on a pointer, restricting those jumps to only going to function entry points with known addresses. Control Flow Guard is a Microsoft Visual Studio technology. |
## Configure cookies
@ -46,3 +39,14 @@ Microsoft Edge helps to defend from increasingly sophisticated and prevalent web
[!INCLUDE [prevent-localhost-address-for-webrtc-include](../includes/prevent-localhost-address-for-webrtc-include.md)]
| | |
|---|---|
| **[Windows Hello](http://blogs.windows.com/bloggingwindows/2015/03/17/making-windows-10-more-personal-and-more-secure-with-windows-hello/)** | Authenticates the user and the website with asymmetric cryptography technology. Microsoft Edge natively supports Windows Hello as a more personal, seamless, and secure way to authenticate on the web, powered by an early implementation of the [Web Authentication (formerly FIDO 2.0 Web API) specification](http://w3c.github.io/webauthn/). |
| **Microsoft SmartScreen** | Defends against phishing by performing reputation checks on sites visited and blocking any site that is thought to be a phishing site. SmartScreen also helps to defend against installing malicious software or file downloads, even from trusted sites. |
| **Certificate Reputation system** | Collects data about certificates in use, detecting new certificates and flagging fraudulent certificates automatically. |
| **Microsoft EdgeHTML** | Defends against hacking through the following security standards features:<ul><li>Support for the W3C standard for Content Security Policy (CSP), which helps web developers defend their sites against cross-site scripting attacks.</li><li>Support for the HTTP Strict Transport Security (HSTS) feature, which is IETF-standard compliant, and helps to ensure that connections to sites are always secure.</li></ul> |
| **Code integrity and image loading restrictions** | Prevents malicious DLLs from loading or injecting into the content processes. Only signed images are allowed to load in Microsoft Edge. Binaries on remote devices (such as UNC or WebDAV) can&#39;t load. |
| **Memory corruption mitigations** | Defends against memory corruption weaknesses and vulnerabilities with the use of [CWE-416: Use After Free](http://cwe.mitre.org/data/definitions/416.html) (UAF). |
| **Memory Garbage Collector (MemGC) mitigation** | Replaces Memory Protector and helps to defend the browser from UAF vulnerabilities by freeing memory from the programmer and automating it, only freeing memory when the automation detects that there are no more references left pointing to a given block of memory. |
| **Control Flow Guard** | Compiles checks around code that performs indirect jumps based on a pointer, restricting those jumps to only going to function entry points with known addresses. Control Flow Guard is a Microsoft Visual Studio technology. |

6
browsers/edge/group-policies/start-pages-gp.md
View File

@ -9,13 +9,13 @@ ms.mktglfcycl: explore
ms.sitesec: library
---
# Start pages
# Start pages configuration options
>*Supported versions: Microsoft Edge on Windows 10, next major update to Windows*
Microsoft Edge loads the pages specified in App settings as the default Start pages. You can configure Microsoft Edge to load either the Start page, New tab page, previously opened pages, or a specific page or pages. You can also configure Microsoft Edge to prevent users from making changes.
**Policies**
## Relevant group policies
- [Configure Open Microsoft Edge With](#configure-open-microsoft-edge-with)
- [Configure Start Pages](#configure-start-pages)
@ -35,7 +35,7 @@ Microsoft Edge loads the pages specified in App settings as the default Start pa
[!INCLUDE [disable-lockdown-of-start-pages-include](../includes/disable-lockdown-of-start-pages-include.md)]
## Configuration options
### Configuration options
| **Configure Open Microsoft Edge With** | **Configure Start Pages** | **Disabled Lockdown of Start Pages** | **Outcome** |
| --- | --- | --- | --- |

4
browsers/edge/group-policies/sync-browser-settings-gp.md
View File

@ -9,10 +9,10 @@ ms.date: 07/23/2018
# Sync browser settings options
>*Supported versions: Microsoft Edge on Windows 10, next major update to Windows*
By default, the “browser” group syncs automatically between the user’s devices, letting users make changes. The “browser” group uses the Sync your Settings option in Settings to sync information like history and favorites. You can configure Microsoft Edge to prevent the “browser” group from syncing and prevent users from turning on the Sync your Settings toggle in Settings. If you want syncing turned off by default but not disabled, select the _Allow users to turn “browser” syncing_ option in the Do not sync browser policy.
By default, the “browser” group syncs automatically between the user’s devices, letting users make changes. The “browser” group uses the Sync your Settings option in Settings to sync information like history and favorites. You can configure Microsoft Edge to prevent the “browser” group from syncing and prevent users from turning on the _Sync your Settings_ toggle in Settings. If you want syncing turned off by default but not disabled, select the _Allow users to turn “browser” syncing_ option in the Do not sync browser policy.
## Policies
## Relevant policies
- [Do not sync browser settings](../available-policies.md#do-not-sync-browser-settings)
- [Prevent users from turning on browser syncing](../new-policies.md#prevent-users-from-turning-on-browser-syncing)

27
browsers/edge/group-policies/telemetry-management-gp.md
View File

@ -0,0 +1,27 @@
---
title: Microsoft Edge - Telemetry and data collection
description:
ms.author: pashort
author: shortpatti
ms.date: 07/29/2018
---
# Telemetry and data collection
>*Supported versions: Microsoft Edge on Windows 10, next major update to Windows*
## Allow extended telemetry for the Books tab
[!INCLUDE [allow-ext-telemetry-books-tab-include.md](../includes/allow-ext-telemetry-books-tab-include.md)]
## Configure collection of browsing data for Microsoft 365 Analytics
[!INCLUDE [configure-browser-telemetry-for-m365-analytics-include](../includes/configure-browser-telemetry-for-m365-analytics-include.md)]
## Configure Do Not Track
[!INCLUDE [configure-do-not-track-include.md](../includes/configure-do-not-track-include.md)]
## Prevent Microsoft Edge from gathering Live Tile information when pinning a site to Start
[!INCLUDE [prevent-live-tile-pinning-start-include](../includes/prevent-live-tile-pinning-start-include.md)]

BIN
browsers/edge/images/prelaunch-edge-and-preload-tabs-sm.png
View File

Binary file not shown.
Side by Side Swipe Overlay

Before

Width:  |  Height:  |  Size: 97 KiB

After

Width:  |  Height:  |  Size: 96 KiB

BIN
browsers/edge/images/prelaunch-edge-and-preload-tabs.png
View File

Binary file not shown.
Side by Side Swipe Overlay

Before

Width:  |  Height:  |  Size: 113 KiB

After

Width:  |  Height:  |  Size: 110 KiB

BIN
browsers/edge/images/prelaunch-edge-only-sm.png
View File

Binary file not shown.
Side by Side Swipe Overlay

Before

Width:  |  Height:  |  Size: 96 KiB

After

Width:  |  Height:  |  Size: 94 KiB

BIN
browsers/edge/images/prelaunch-edge-only.png
View File

Binary file not shown.
Side by Side Swipe Overlay

Before

Width:  |  Height:  |  Size: 110 KiB

After

Width:  |  Height:  |  Size: 109 KiB

BIN
browsers/edge/images/preload-tabs-only-sm.png
View File

Binary file not shown.
Side by Side Swipe Overlay

Before

Width:  |  Height:  |  Size: 95 KiB

After

Width:  |  Height:  |  Size: 93 KiB

BIN
browsers/edge/images/preload-tabs-only.png
View File

Binary file not shown.
Side by Side Swipe Overlay

Before

Width:  |  Height:  |  Size: 112 KiB

After

Width:  |  Height:  |  Size: 110 KiB

BIN
browsers/edge/images/use-enterprise-mode-with-microsoft-edge-sm.png
View File

Binary file not shown.
Side by Side Swipe Overlay

Before

Width:  |  Height:  |  Size: 325 KiB

After

Width:  |  Height:  |  Size: 273 KiB

9
browsers/edge/includes/allow-address-bar-suggestions-include.md
View File

@ -7,10 +7,11 @@
### Supported values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Disabled |0 |0 |Prevented/not allowed. Hide the Address bar drop-down functionality and disable the _Show search and site suggestions as I type_ toggle in Settings. |![Most restricted value](../images/check-gn.png) |
|Enabled or not configured **(default)** |1 |1 |Allowed. Show the Address bar drop-down list and make it available. | |
>[!div class="mx-tableFixed"]
>|Group Policy |MDM |Registry |Description |Most restricted |
>|---|:---:|:---:|---|:---:|
>|Disabled |0 |0 |Prevented/not allowed. Hide the Address bar drop-down functionality and disable the _Show search and site suggestions as I type_ toggle in Settings. |![Most restricted value](../images/check-gn.png) |
>|Enabled or not configured **(default)** |1 |1 |Allowed. Show the Address bar drop-down list and make it available. | |
---
### ADMX info and settings

2
browsers/edge/includes/allow-adobe-flash-include.md
View File

@ -9,7 +9,7 @@
|Group Policy |MDM |Registry |Description |
|---|:---:|:---:|---|
|Disabled |0 |0 |Prevented/not allowed |
|Enabled<br>**(default)** |1 |1 |Allowed |
|Enabled **(default)** |1 |1 |Allowed |
---
### ADMX info and settings

9
browsers/edge/includes/allow-clearing-browsing-data-include.md
View File

@ -6,10 +6,11 @@
### Supported values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Disabled or not configured<br>**(default)** |0 |0 |Prevented/not allowed. Users can configure the _Clear browsing data_ option in Settings. | |
|Enabled |1 |1 |Allowed. Clear the browsing data upon exit automatically. |![Most restricted value](../images/check-gn.png) |
>[!div class="mx-tableFixed"]
>|Group Policy |MDM |Registry |Description |Most restricted |
>|---|:---:|:---:|---|:---:|
>|Disabled or not configured **(default)** |0 |0 |Prevented/not allowed. Users can configure the _Clear browsing data_ option in Settings. | |
>|Enabled |1 |1 |Allowed. Clear the browsing data upon exit automatically. |![Most restricted value](../images/check-gn.png) |
---

9
browsers/edge/includes/allow-tab-preloading-include.md
View File

@ -1,4 +1,4 @@
<!-- ## Allow Start and New Tab page preload (aka: AllowStartAndNewTabPagePreload) -->
<!-- ## Allow Microsoft Edge to load the Start and New Tab pages in the background at Windows startup and each time Microsoft Edge is closed (aka: AllowStartAndNewTabPagePreload) -->
>*Supported versions: Microsoft Edge on Windows 10, version 1802*<br>
>*Default setting: Enabled or not configured (Allowed)*
@ -8,10 +8,11 @@
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Enabled or not configured<br>**(default)** |0 |0 |Allowed. Preload Start and New tab pages. | |
|Disabled |1 |1 |Prevented/not allowed. |![Most restricted value](../images/check-gn.png) |
|Disabled |0 |0 |Prevented/not allowed. |![Most restricted value](../images/check-gn.png) |
|Enabled or not configured<br>**(default)** |1 |1 |Allowed. Preload Start and New tab pages. | |
---
### Configuration options
For more details about configuring the prelaunch and preload options, see [Prelaunch Microsoft Edge and preload tabs in the background](../group-policies/prelaunch-preload-gp.md).
@ -19,7 +20,7 @@ For more details about configuring the prelaunch and preload options, see [Prela
### ADMX info and settings
#### ADMX info
- **GP English name:** Allow Microsoft Edge to start and load the Start and New Tab pages in the background at Windows startup and each time Microsoft Edge is closed
- **GP English name:** Allow Microsoft Edge to load the Start and New Tab pages in the background at Windows startup and each time Microsoft Edge is closed
- **GP name:** AllowTabPreloading
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx

2
browsers/edge/includes/allow-web-content-new-tab-page-include.md
View File

@ -1,5 +1,5 @@
<!-- ## Allow web content on New Tab page -->
>*Supported versions: Microsoft Edge on Windows 10*<br>
>*Supported versions: Microsoft Edge on Windows 10*<br>
>*Default setting: Enabled (Default New tab page loads)*

12
browsers/edge/includes/configure-additional-search-engines-include.md
View File

@ -15,17 +15,7 @@
### Configuration options
| **Set default search engine** | **Allow search engine customization** | **Configure additional search engines** | **Outcome** |
| --- | --- | --- | --- |
| Not configured (default) | Disabled | Disabled or not configured (default) | Default search engine specified in App settings. Users cannot make changes. |
| Not configured (default) | Enabled or not configured (default) | Disabled or not configured (default) | Default search engine specified in App settings. Users can make changes to the default search engine at any time. |
| Disabled | Disabled | Disabled or not configured (default) | Users cannot add, remove, or change any of the search engines, but they can set a default search engine. |
| Disabled | Enabled or not configured (default) | Disabled or not configured (default) | Users can add new search engines or change the default search engine, in Settings. |
| Enabled | Disabled | Disabled or not configured (default) | Set the default search engine preventing users from making changes. |
| Enabled | Enabled or not configured (default) | Disabled or not configured (default) | Set the default search engine and allow users to add search engines or make changes. |
---
For more details about configuring the search engine, see [Search engine customization](../group-policies/search-engine-customization-gp.md).
### ADMX info and settings
#### ADMX info

5
browsers/edge/includes/configure-browser-telemetry-for-m365-analytics-include.md
View File

@ -4,6 +4,7 @@
[!INCLUDE [configure-browser-telemetry-for-m365-analytics-shortdesc](../shortdesc/configure-browser-telemetry-for-m365-analytics-shortdesc.md)]
>[!IMPORTANT]
>For this policy to work, enable the Allow Telemetry policy with the _Enhanced_ option and enable the Configure the Commercial ID policy by providing the Commercial ID.
@ -23,6 +24,8 @@
>>**_Computer Configuration\\Administrative Templates\\Windows Components\\Data Collection and Preview Builds\\_**
>><ul><li>Allow Telemetry = Enabled, _Enhanced_</li><li>Configure the Commercial ID = String of the Commercial ID</li><li>Configure collection of browsing data for Microsoft 365 Analytics</li></ul>
### ADMX info and settings
#### ADMX info
- **GP English name:** Configure collection of browsing data for Microsoft 365 Analytics
@ -44,7 +47,7 @@
- **Value type:** REG_DWORD
### Related policies
- Allow Telemetry: Determine the highest level of Windows diagnostic data sent to Microsoft. When you enable this policy, users can change their Telemetry Settings but prevent users from choosing a higher level than configured.
- Allow Telemetry: Allows Microsoft to run diagnostics on the device and troubleshoot. The default setting for Allow Telemetry is set to _Enhanced_ (2 for MDM).
- Configure the Commercial ID: Define the Commercial ID used to associate the device's telemetry data as belonging to a given organization.

62
browsers/edge/includes/configure-enterprise-mode-site-list-include.md
View File

@ -10,7 +10,7 @@
|Group Policy |MDM |Registry |Description |
|---|:---:|:---:|---|
|Disabled or not configured<br>**(default)** |0 |0 |Turned off. Microsoft Edge does not check the Enterprise Mode Site List, and in this case, users might experience problems while using legacy apps. |
|Enabled |1 |1 |Turned on. Microsoft Edge checks the Enterprise Mode Site List if configured. If an XML file exists in the cache container, IE11 waits 65 seconds and then checks the local cache for a new version from the server. If the server has a different version, Microsoft Edge uses the server file and stores it in the cache container. If you already use a site list, Enterprise Mode continues to work during the 65 second, but uses the existing file. To add the location to your site list, enter it in the **{URI}** box.<p>For details on how to configure the Enterprise Mode Site List, see the [Instructions](#instructions) section below. |
|Enabled |1 |1 |Turned on. Microsoft Edge checks the Enterprise Mode Site List if configured. If an XML file exists in the cache container, IE11 waits 65 seconds and then checks the local cache for a new version from the server. If the server has a different version, Microsoft Edge uses the server file and stores it in the cache container. If you already use a site list, Enterprise Mode continues to work during the 65 second, but uses the existing file. To add the location to your site list, enter it in the **{URI}** box.<p>For details on how to configure the Enterprise Mode Site List, see [Interoperability and enterprise guidance](../group-policies/interoperability-enterprise-guidance-gp.md). |
---
### ADMX info and settings
@ -50,66 +50,6 @@
- [Enterprise Mode and the Enterprise Mode Site List XML file](https://docs.microsoft.com/en-us/internet-explorer/ie11-deploy-guide/what-is-enterprise-mode#enterprise-mode-and-the-enterprise-mode-site-list-xml-file). The Enterprise Mode Site List is an XML document that specifies a list of sites, their compat mode, and their intended browser. Using Enterprise Mode Site List Manager (schema v.2), you can automatically start a webpage using a specific browser. In the case of IE11, the webpage can also be launched in a specific compat mode, so it always renders correctly. Your users can easily view this site list by typing about:compat in either Microsoft Edge or IE11.
### Scenarios
Certain sites or web apps still use ActiveX controls, Browser Helper Objects, VBScript, or other legacy technology, which Microsoft Edge does not support. If you have web sites or web apps that still use this technology and need IE11 to run, you must use Enterprise Mode and the Enterprise Mode Site List to address common compatibility issues with legacy apps. Enterprise Mode is a compatibility
mode that runs on Internet Explorer 11 and Microsoft Edge on Windows 10 devices.
### Instructions
You build your Enterprise Mode list with the Enterprise Mode Site List Manager and apply it with Group Policy.
<!-- work on these instructions. it seems like it doesn't flow from this policy to the Use the Enterprise Mode IE website list policy. Give me more reasons to click on the link. and why is it equivalent to the this policy? -->
To turn it on for IE 11, you enable [Use the Enterprise Mode IE website list](https://docs.microsoft.com/en-us/internet-explorer/ie11-deploy-guide/turn-on-enterprise-mode-and-use-a-site-list),
which is the equivalent to this Microsoft Edge policy.
>[!NOTE]
>We recommend that you store and download your website list from a secure web server (https://), to help protect against data tampering. After the list is downloaded, it is stored locally on your user's computer so if the centralized file location is unavailable, they can still use Enterprise Mode.
- [Step 1. Turn on Enterprise Mode](#step-1-turn-on-enterprise-mode)
- [Step 2. (Optional) Import your Enterprise Mode Site List](#step-2-optional-import-your-enterprise-mode-site-list)
- [Step 3. Add sites to your list](#step-3-add-sites-to-your-list)
- [Step 4. Send all intranet sites to Internet Explorer 11](#step-5-send-all-intranet-sites-to-internet-explorer-11)
#### Step 1. Turn on Enterprise Mode
[!INCLUDE [turn-on-enterprise-mode-and-use-a-site-list](../../enterprise-mode/turn-on-enterprise-mode-and-use-a-site-list.md)]
#### Step 2. (Optional) Import your Enterprise Mode Site List
[!INCLUDE [import-into-the-enterprise-mode-site-list-mgr-include](../../includes/import-into-the-enterprise-mode-site-list-mgr-include.md)]
#### Step 3. Add sites to your list
1. In the Enterprise Mode Site List Manager, click **Add**.
2. In the **URL** box, type or paste the URL for the website experiencing compatibility problems, like *\<domain\>*.com or *\<domain\>*.com/*\<path\>*.<p>You do not need to include the `http://` or `https://` designation. The tool automatically tries both versions during validation.
3. In the **Notes about URL**, enter any comments about the website.<p>Administrators can only see comments while they are in this tool.
4. Click in the **Open in IE** column next to the URL that should open in IE11.<p>The path within a domain can require a different compatibility mode from the domain itself. For example, the domain might look fine in the default IE11 browser, but the path might have problems and require the use of Enterprise Mode. If you added the domain previously, your original compatibility choice is still selected. However, if the domain is new, Enterprise Mode is automatically selected.
5. Click **Save** to validate your website and to add it to the site list for your enterprise.<p>If your site passes validation, it is added to the global compatibility list. If the site fails to pass validation, an error message displays explaining the problem. You can either cancel the site or ignore the validation problem and add it to your list anyway.
6. On the **File** menu, go to where you want to save the file, and then click **Save to XML**.<p>You can save the file locally or to a network share. However, you must make sure you deploy it to the location specified in your Group Policy setting.
#### Step 4. Send all intranet sites to Internet Explorer 11
Enabling the Send all intranet sites to Internet Explorer 11 policy automatically opens all intranet sites in IE11, even if the users have Microsoft Edge as their default browser.
1. In Group Policy Editor, navigate to:<p>**Computer Configuration\\Administrative Templates\\Windows Components\\File Explorer\\Set a default associations configuration file**
2. Click **Enabled** and then refresh the policy and then vew the affected sites in Microsoft Edge.<p>A message displays saying that the page needs to open in IE. At the same time, the page opens in IE11 automatically; in a new frame if it is not yet running, or in a new tab.
### Troubleshooting
- If an XML already exists, make sure it is syntactically correct.
- If an update or delete operation failed, check if the entry already exists in the site list.
- If a user is not able to sign in, the account might not have access. Check if the account is marked as active.
- Check if the Enterprise Mode Site List is loaded correctly by browsing to "about:compat" in both Microsoft Edge and Internet Explorer. Deselect the Microsoft Compatibility List to see your custom entries.
<hr>

13
browsers/edge/includes/configure-favorites-bar-include.md
View File

@ -1,5 +1,5 @@
<!-- ##Configure Favorites Bar -->
>*Supported versions: Microsoft Edge on Windows 10, new major release*<br>
>*Supported versions: Microsoft Edge on Windows 10, new major release*
>*Default setting: Not configured (Hidden)*
@ -8,11 +8,12 @@
### Supported values
|Group Policy |MDM |Registry |Description |
|---|:---:|:---:|---|
|Not configured<br>**(default)** |Blank |Blank |Hide the favorites bar but show it on the Start and New tab pages. The favorites bar toggle, in Settings, is set to Off but enabled allowing users to make changes. |
|Disabled |0 |0 |Hide the favorites bar on all pages. Also, the favorites bar toggle, in Settings, is set to Off and disabled preventing users from making changes. Microsoft Edge also hides the “show bar/hide bar” option in the context menu. |
|Enabled |1 |1 |Show the favorites bar on all pages. Also, the favorites bar toggle, in Settings, is set to On and disabled preventing users from making changes. Microsoft Edge also hides the “show bar/hide bar” option in the context menu. |
>[!div class="mx-tableFixed"]
>|Group Policy |MDM |Registry |Description |
>|---|:---:|:---:|---|
>|Not configured **(default)** |Blank |Blank |Hide the favorites bar but show it on the Start and New tab pages. The favorites bar toggle, in Settings, is set to Off but enabled allowing users to make changes. |
>|Disabled |0 |0 |Hide the favorites bar on all pages. Also, the favorites bar toggle, in Settings, is set to Off and disabled preventing users from making changes. Microsoft Edge also hides the “show bar/hide bar” option in the context menu. |
>|Enabled |1 |1 |Show the favorites bar on all pages. Also, the favorites bar toggle, in Settings, is set to On and disabled preventing users from making changes. Microsoft Edge also hides the “show bar/hide bar” option in the context menu. |
---
### ADMX info and settings

2
browsers/edge/includes/configure-home-button-include.md
View File

@ -18,7 +18,7 @@
### Configuration options
For more details about configuring the different Home button options, see [Home button](../group-policies/home-button-gp.md).
For more details about configuring the different Home button options, see [Home button configuration options](../group-policies/home-button-gp.md).
>[!TIP]
>If you want to make changes to this policy:<ol><li>Enable the **Unlock Home Button** policy.</li><li>Make changes to the **Configure Home button** policy or **Set Home button URL** policy.</li><li>Disable the **Unlock Home Button** policy.</li></ol>

2
browsers/edge/includes/configure-open-edge-with-include.md
View File

@ -22,7 +22,7 @@
### Configuration options
For more details about configuring the Start pages, see [Start pages](../group-policies/start-pages-gp.md).
For more details about configuring the Start pages, see [Start pages configuration options](../group-policies/start-pages-gp.md).
>[!TIP]

2
browsers/edge/includes/configure-start-pages-include.md
View File

@ -14,7 +14,7 @@
### Configuration options
For more details about configuring the Start pages, see [Start pages](../group-policies/start-pages-gp.md).
For more details about configuring the Start pages, see [Start pages configuration options](../group-policies/start-pages-gp.md).
### ADMX info and settings
#### ADMX info

2
browsers/edge/includes/disable-lockdown-of-start-pages-include.md
View File

@ -14,7 +14,7 @@
### Configuration options
For more details about configuring the Start pages, see [Start pages](../group-policies/start-pages-gp.md).
For more details about configuring the Start pages, see [Start pages configuration options](../group-policies/start-pages-gp.md).
### ADMX info and settings

14
browsers/edge/includes/set-default-search-engine-include.md
View File

@ -13,20 +13,10 @@
|Enabled |1 |1 |Microsoft Edge uses the policy-set search engine specified in the OpenSearch XML file. Users cannot change the default search engine.<p><p>Specify a link to the OpenSearch XML file that contains, at a minimum, the short name and the URL template (HTTPS) of the search engine. For more information about creating the OpenSearch XML file, see [Search provider discovery](https://docs.microsoft.com/en-us/microsoft-edge/dev-guide/browser/search-provider-discovery). Use this format to specify the link you want to add.<p><p>If you want users to use the default Microsoft Edge settings for each market set the string to **EDGEDEFAULT**.<p><p>If you would like users to use Microsoft Bing as the default search engine set the string to **EDGEBING**. |![Most restricted value](../images/check-gn.png) |
---
### Configuration options
| **Set default search engine** | **Allow search engine customization** | **Configure additional search engines** | **Outcome** |
| --- | --- | --- | --- |
| Not configured (default) | Disabled | Disabled or not configured (default) | Default search engine specified in App settings. Users cannot make changes. |
| Not configured (default) | Enabled or not configured (default) | Disabled or not configured (default) | Default search engine specified in App settings. Users can make changes to the default search engine at any time. |
| Disabled | Disabled | Disabled or not configured (default) | Users cannot add, remove, or change any of the search engines, but they can set a default search engine. |
| Disabled | Enabled or not configured (default) | Disabled or not configured (default) | Users can add new search engines or change the default search engine, in Settings. |
| Enabled | Disabled | Disabled or not configured (default) | Set the default search engine preventing users from making changes. |
| Enabled | Enabled or not configured (default) | Disabled or not configured (default) | Set the default search engine and allow users to add search engines or make changes. |
---
![Set default search engine configurations](../images/set-default-search-engine-v4-sm.png)
For more details about configuring the search engine, see [Search engine customization](../group-policies/search-engine-customization-gp.md).
### ADMX info and settings
#### ADMX info

2
browsers/edge/includes/set-home-button-url-include.md
View File

@ -15,7 +15,7 @@
### Configuration options
For more details about configuring the different Home button options, see [Home button](../group-policies/home-button-gp.md).
For more details about configuring the different Home button options, see [Home button configuration options](../group-policies/home-button-gp.md).
### ADMX info and settings

2
browsers/edge/includes/unlock-home-button-include.md
View File

@ -15,7 +15,7 @@
### Configuration options
For more details about configuring the different Home button options, see [Home button](../group-policies/home-button-gp.md).
For more details about configuring the different Home button options, see [Home button configuration options](../group-policies/home-button-gp.md).
### ADMX info and settings
#### ADMX info

163
browsers/edge/index.yml Normal file
View File

@ -0,0 +1,163 @@
### YamlMime:YamlDocument
documentType: LandingData
title: Microsoft Edge Group Policy configuration options
metadata:
document_id:
title: Microsoft Edge Group Policy configuration options
description:
text: Learn how to deploy and configure group policies in Microsoft Edge on Windows 10. Some of the features coming to Microsoft Edge gives you the ability to set a custom URL for the New tab page or Home button. Another new feature allows you to hide or show the Favorites bar, giving you more control over the favorites bar.
keywords: Microsoft Edge, Windows 10
ms.localizationpriority: high
author: shortpatti
ms.author: pashort
ms.date: 07/26/2018
ms.topic: article
ms.devlang: na
sections:
- title:
- items:
- type: markdown
text: Learn about interoperability goals and enterprise guidance along with system requirements, language support and frequently asked questions.
- items:
- type: list
style: cards
className: cardsE
columns: 3
items:
- href: https://review.docs.microsoft.com/en-us/microsoft-edge/deploy/about-microsoft-edge?branch=pr-en-us-10183
html: <p>Learn about Microsoft Edge, including system requirements and language support</p>
image:
src: https://docs.microsoft.com/media/common/i_overview.svg
title: Microsoft Edge overview
- href: https://docs.microsoft.com/en-us/microsoft-edge/deploy/new-policies
html: <p>Learn more about the latest group policies and features added to Microsoft Edge.</p>
image:
src: https://docs.microsoft.com/media/common/i_whats-new.svg
title: What's new
- href: https://www.microsoft.com/en-us/WindowsForBusiness/Compare
html: <p>Learn about the supported features & functionality in each Windows edition.</p>
image:
src: https://docs.microsoft.com/media/common/i_config-tools.svg
title: Compare Windows 10 Editions
- href: https://review.docs.microsoft.com/en-us/microsoft-edge/deploy/group-policies/security-privacy-management-gp?branch=pr-en-us-10183
html: <p>Learn how Microsoft Edge helps to defend from increasingly sophisticated and prevalent web-based attacks against Windows.</p>
image:
src: https://docs.microsoft.com/media/common/i_security-management.svg
title: Security & protection
- href: https://review.docs.microsoft.com/en-us/microsoft-edge/deploy/group-policies/interoperability-enterprise-guidance-gp?branch=pr-en-us-10183
html: <p>Learch how you can use the Enterprise Mode site list for websites and apps that have compatibility problems in Microsoft Edge.</p>
image:
src: https://docs.microsoft.com/media/common/i_management.svg
title: Interoperability & enterprise guidance
- href: https://review.docs.microsoft.com/en-us/microsoft-edge/deploy/group-policies/index?branch=pr-en-us-10183
html: <p>Learn about the advanced VPN features you can add to improve the security and availability of your VPN connection.</p>
image:
src: https://docs.microsoft.com/media/common/i_policy.svg
title: Group policies & configuration options
- items:
- type: list
style: cards
className: cardsL
items:
- title: Microsoft Edge resources
html: <p><a class="barLink" href="https://docs.microsoft.com/en-us/microsoft-edge/deploy/about-microsoft-edge.md#minimum-system-requirements">Minimum system requirements</a></p>
<p><a class="barLink" href="https://docs.microsoft.com/en-us/microsoft-edge/deploy/about-microsoft-edge.md#supported-languages">Supported languages</a></p>
<p><a class="barLink" href="https://docs.microsoft.com/en-us/microsoft-edge/deploy/change-history-for-microsoft-edge">Document change history</a></p>
<p><a class="barLink" href="https://www.microsoft.com/en-us/WindowsForBusiness/Compare">Compare Windows 10 Editions</a></p>
<p><a class="barLink" href="https://blogs.windows.com/msedgedev">Microsoft Edge Dev blog</a></p>
<p><a class="barLink" href="https://twitter.com/MSEdgeDev">Microsoft Edge Dev on Twitter</a></p>
<p><a class="barLink" href="hhttps://developer.microsoft.com/microsoft-edge/platform/changelog/">Microsoft Edge changelog</a></p>
<p><a class="barLink" href="https://www.microsoft.com/itpro/microsoft-edge/technical-benefits">Measuring the impact of Microsoft Edge</a></p>
- title: Internet Explorer 11 resources
html: <p><a class="barLink" href="https://go.microsoft.com/fwlink/p/?LinkId=760644">Deploy Internet Explorer 11 (IE11) - IT Pros</a></p>
<p><a class="barLink" href="https://go.microsoft.com/fwlink/p/?LinkId=760646">Internet Explorer Administration Kit 11 (IEAK 11)</a></p>
<p><a class="barLink" href="https://go.microsoft.com/fwlink/p/?linkid=290956">Download Internet Explorer 11</a></p>
- title: Additional resources
html: <p><a class="barLink" href="https://go.microsoft.com/fwlink/p/?LinkId=617921">Group Policy and the Group Policy Management Console (GPMC)</a></p>
<p><a class="barLink" href="https://go.microsoft.com/fwlink/p/?LinkId=617922">Group Policy and the Local Group Policy Editor</a></p>
<p><a class="barLink" href="https://go.microsoft.com/fwlink/p/?LinkId=617923">Group Policy and the Advanced Group Policy Management (AGPM)</a></p>
<p><a class="barLink" href="https://go.microsoft.com/fwlink/p/?LinkId=617924">Group Policy and Windows PowerShell</a></p>

3
browsers/edge/microsoft-edge-kiosk-mode-deploy.md
View File

@ -137,7 +137,7 @@ With this method, you can use Microsoft Intune or other MDM services to configur
1. In Microsoft Intune or other MDM service, configure [AssignedAccess](https://docs.microsoft.com/windows/client-management/mdm/assignedaccess-csp) to prevent users from accessing the file system, running executables, or other apps.
2. Configure the following MDM settings to control a web browser app on the kiosk device.
2. Configure the following MDM settings to control a web browser app on the kiosk device and then restart the device.
| | |
|---|---|
@ -149,7 +149,6 @@ With this method, you can use Microsoft Intune or other MDM services to configur
| **[SetHomeButtonURL](new-policies.md#set-home-button-url)**<p>![](images/icon-thin-line-computer.png) | If you set ConfigureHomeButton to 2, configure the home button URL.<p><p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/SetHomeButtonURL <p>**Data type:** String<p>**Allowed values:** Enter a URL, for example, https://www.bing.com |
---
<br>
3. Restart the device and sign in using the kiosk app user account.
**_Congratulations!_** You’ve finished setting up a kiosk or digital signage and configuring policies for Microsoft Edge kiosk mode using Microsoft Intune or other MDM service.

6
browsers/edge/new-policies.md
View File

@ -18,7 +18,7 @@ ms.date: 07/25/2018
The Microsoft Edge team introduces new Group Policies and MDM Settings for the Windows 10 Insider Preview Build 17713+. The new policies allow IT administrators to enable/disable full-screen mode, printing, favorites bar, saving history. You can also prevent certificate error overrides, and configure New tab page, Home button and startup options, as well as manage extensions.
We are discontinuing the use of the **Configure Favorites** group policy. Use the **[Provision Favorites](available-policies.md#provision-favorites)** instead.
We are discontinuing the **Configure Favorites** group policy. Use the **[Provision Favorites](available-policies.md#provision-favorites)** instead.
@ -33,7 +33,7 @@ We are discontinuing the use of the **Configure Favorites** group policy. Use th
| --- | --- | --- | --- |
| [Allow fullscreen mode](#allow-fullscreen-mode) | New | [AllowFullscreen](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowfullscreenmode) | New |
| [Allow Microsoft Edge to pre-launch at Windows startup, when the system is idle, and each time Microsoft Edge is closed](#allow-prelaunch) | New | [AllowPrelaunch](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowprelaunch) | New |
| [Allow Microsoft Edge to start and load the Start and New Tab page at Windows startup and each time Microsoft Edge is closed](#allow-microsoft-edge-to-start-and-load-the-start-and-new-tab-page-at-windows-startup-and-each-time-microsoft-edge-is-closed) | New | [AllowTabPreloading](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowtabpreloading) | New |
| [Allow Microsoft Edge to load the Start and New Tab page at Windows startup and each time Microsoft Edge is closed](#allow-microsoft-edge-to-start-and-load-the-start-and-new-tab-page-at-windows-startup-and-each-time-microsoft-edge-is-closed) | New | [AllowTabPreloading](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowtabpreloading) | New |
| [Allow printing](#allow-printing) | New | [AllowPrinting](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowprinting) | New |
| [Allow Saving History](#allow-saving-history) | New | [AllowSavingHistory](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowsavinghistory) | New |
| [Allow sideloading of Extensions](#allow-sideloading-of-extensions) | New | [AllowSideloadingExtensions](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowsideloadingofextensions) | New |
@ -63,7 +63,7 @@ We are discontinuing the use of the **Configure Favorites** group policy. Use th
## Allow Microsoft Edge to pre-launch at Windows startup, when the system is idle, and each time Microsoft Edge is closed
[!INCLUDE [allow-prelaunch-include](includes/allow-prelaunch-include.md)]
## Allow Microsoft Edge to start and load the Start and New Tab page at Windows startup and each time Microsoft Edge is closed
## Allow Microsoft Edge to load the Start and New Tab page at Windows startup and each time Microsoft Edge is closed
[!INCLUDE [allow-tab-preloading-include](includes/allow-tab-preloading-include.md)]
## Allow printing

2
browsers/edge/security-enhancements-microsoft-edge.md
View File

@ -15,7 +15,7 @@ author: shortpatti
>Applies to: Windows 10, Windows 10 Mobile
Microsoft Edge is designed with significant security improvements, helping to defend people from increasingly sophisticated and prevalent web-based attacks against Windows.
Microsoft Edge is designed with improved security in mind, helping to defend people from increasingly sophisticated and prevalent web-based attacks against Windows.
## Help to protect against web-based security threats
While most websites are safe, some sites have been designed to steal personal information or gain access to your system’s resources. Thieves by nature don’t care about rules, and will use any means to take advantage of victims, most often using trickery or hacking:

2
browsers/edge/shortdesc/allow-tab-preloading-shortdesc.md
View File

@ -1 +1 @@
Microsoft Edge allows preloading of the Start and New tab pages during Windows sign in, and each time Microsoft Edge closes by default. Preloading minimizes the amount of time required to start Microsoft Edge and load a new tab. With this policy, you can configure Microsoft Edge to prevent preloading of tabs.
Microsoft Edge allows preloading of the Start and New tab pages during Windows sign in, and each time Microsoft Edge closes by default. Preloading minimizes the amount of time required to start Microsoft Edge and load a new tab. With this policy, you can configure Microsoft Edge to prevent preloading of tabs.

37
store-for-business/acquire-apps-microsoft-store-for-business.md
View File

@ -7,7 +7,7 @@ ms.sitesec: library
ms.pagetype: store
author: TrudyHa
ms.author: TrudyHa
ms.date: 11/01/2017
ms.date: 08/01/2017
ms.topic: conceptual
ms.localizationpriority: medium
---
@ -43,22 +43,31 @@ There are a couple of things we need to know when you pay for apps. You can add
**To manage Allow users to shop setting**
1. Sign in to [Microsoft Store for Business](https://businessstore.microsoft.com) or [Microsoft Store for Education](https://educationstore.microsoft.com)
2. Click **Manage**, and then click **Settings**.
3. On **Shop**, turn on or turn off **Allow users to shop**.
2. Select **Manage**, and then select **Settings**.
3. On **Shop**, , under **Shopping behavior**, turn on or turn off **Allow users to shop**.
![manage settings to control Basic Purchaser role assignment](images/sfb-allow-shop-setting.png)
## Allow app requests
People in your org can request license for apps that they need, or that others need. When **All app requests** is turned on, app requests are sent to org admins. Admins for your tenant will receive an email with the request, and can decide about making the purchase.
**To manage All app requests**
1. Sign in to [Microsoft Store for Business](https://businessstore.microsoft.com) or [Microsoft Store for Education](https://educationstore.microsoft.com)
2. Select **Manage**, and then select **Settings**.
3. On **Shop**, under **Shopping behavior** turn on or turn off **Allow app requests**.
## Acquire apps
**To acquire an app**
1. Sign in to http://businessstore.microsoft.com
2. Click **Shop**, or use Search to find an app.
3. Click the app you want to purchase.
2. Select **Shop for my group**, or use Search to find an app.
3. Select the app you want to purchase.
4. On the product description page, choose your license type - either online or offline.
5. Free apps will be added to **Products & services**. For apps with a price, you can set the quantity you want to buy. Type the quantity and click **Next**.
6. If you don’t have a payment method saved in **Billing - Payment methods**, we will prompt you for one.
7. Add your credit card or debit card info, and click **Next**. Your card info is saved as a payment option on **Billing - Payment methods**.
5. Free apps will be added to **Products & services**. For apps with a price, you can set the quantity you want to buy. Type the quantity and select **Next**.
6. If you don’t have a payment method saved in **Billing & payments**, we will prompt you for one.
7. Add your credit card or debit card info, and select **Next**. Your card info is saved as a payment option on **Billing & payments - Payment methods**.
You’ll also need to have your business address saved on **Billing - Account profile**. The address is used to generate tax rates. For more information on taxes for apps, see [organization tax information](https://docs.microsoft.com/microsoft-store/update-microsoft-store-for-business-account-settings#organization-tax-information).
You’ll also need to have your business address saved on **My organization - Profile**. The address is used to generate tax rates. For more information on taxes for apps, see [organization tax information](https://docs.microsoft.com/microsoft-store/update-microsoft-store-for-business-account-settings#organization-tax-information).
Microsoft Store adds the app to your inventory. From **Products & services**, you can:
- Distribute the app: add to private store, or assign licenses
@ -67,12 +76,4 @@ Microsoft Store adds the app to your inventory. From **Products & services**, yo
For info on distributing apps, see [Distribute apps to your employees from the Microsoft Store for Business](distribute-apps-to-your-employees-microsoft-store-for-business.md).
For info on offline-licensed apps, see [Distribute offline apps](distribute-offline-apps.md).
## Request apps
People in your org can request additional licenses for apps that are in your organization's private store. When **Allow app requests** is turned on, people in your org can respond to a notification about app license availability. Admins for your tenant will receive an email with the request, and can decide about making the purchase.
**To manage Allow app requests**
1. Sign in to http://businessstore.microsoft.com
2. Click **Manage**, click **Settings**, and then click **Distribute**.
3. Under **Private store** turn on, or turn off **Allow app requests**.
For info on offline-licensed apps, see [Distribute offline apps](distribute-offline-apps.md).

6
store-for-business/release-history-microsoft-store-business-education.md
View File

@ -8,7 +8,7 @@ ms.pagetype: store
author: TrudyHa
ms.author: TrudyHa
ms.topic: conceptual
ms.date: 6/28/2018
ms.date: 07/31/2018
---
# Microsoft Store for Business and Education release history
@ -17,6 +17,10 @@ Microsoft Store for Business and Education regularly releases new and improved f
Looking for info on the latest release? Check out [What's new in Microsoft Store for Business and Education](whats-new-microsoft-store-business-education.md)
## June 2018
- **Change order within private store collection** - Continuing our focus on improvements for private store, now you can customize the order of products in each private store collection.
- **Performance improvements in private store** - We continue to work on performance improvements in the private store. Now, most products new to your inventory are available in your private store within 15 minutes of adding them. [Get more info](https://docs.microsoft.com/microsoft-store/manage-private-store-settings#private-store-performance)
## May 2018
- **Immersive Reader app available in Microsoft Store for Education** - This app is a free tool that uses proven techniques to improve reading and writing for people regardless of their age or ability. You can add the app to your private store, so students can easily install and use it.

18
store-for-business/whats-new-microsoft-store-business-education.md
View File

@ -8,7 +8,7 @@ ms.pagetype: store
author: TrudyHa
ms.author: TrudyHa
ms.topic: conceptual
ms.date: 6/28/2018
ms.date: 07/31/2018
---
# What's new in Microsoft Store for Business and Education
@ -17,14 +17,9 @@ Microsoft Store for Business and Education regularly releases new and improved f
## Latest updates for Store for Business and Education
**June 2018**
| | |
|--------------------------------------|---------------------------------|
| ![Private store icon](images/private-store-icon.png) |**Change order within private store collection**<br /><br /> Continuing our focus on improvements for private store, now you can customize the order of products in each private store collection. <br /><br />**Applies to**:<br /> Microsoft Store for Business <br /> Microsoft Store for Education |
| ![performance icon](images/perf-improvement-icon.png) |**Performance improvements in private store**<br /><br /> We continue to work on performance improvements in the private store. Now, most products new to your inventory are available in your private store within 15 minutes of adding them. <br /><br /> [Get more info](https://docs.microsoft.com/microsoft-store/manage-private-store-settings#private-store-performance) <br /><br />**Applies to**:<br /> Microsoft Store for Business <br /> Microsoft Store for Education |
**July 2018**
We’ve been working on bug fixes and performance improvements to provide you a better experience. Stay tuned for new feature
<!---
We’ve been working on bug fixes and performance improvements to provide you a better experience. Stay tuned for new features!
@ -38,6 +33,10 @@ We’ve been working on bug fixes and performance improvements to provide you a
## Previous releases and updates
[June 2018](release-history-microsoft-store-business-education.md#june-2018)
- Change order within private store collection
- Performance improvements in private store
[May 2018](release-history-microsoft-store-business-education.md#may-2018)
- Immersive Reading app available in Microsoft Store for Education
@ -76,5 +75,4 @@ We’ve been working on bug fixes and performance improvements to provide you a
- Manage prepaid Office 365 subscriptions
- Manage Office 365 subscriptions acquired by partners
- Edge extensions in Microsoft Store
- Search results in Microsoft Store for Business
- Search results in Microsoft Store for Business

11
windows/client-management/mdm/defender-csp.md
View File

@ -365,7 +365,7 @@ Node that can be used to perform signature updates for Windows Defender.
Supported operations are Get and Execute.
<a href="" id="offlinescan"></a>**OfflineScan**
Added in Windows 10, version 1803. OfflineScan action starts a Windows Defender offline scan on the computer where you run the command. This command causes the computer reboot and start in Windows Defender offline mode to begin the scan.
Added in Windows 10, version 1803. OfflineScan action starts a Windows Defender offline scan on the computer where you run the command. After the next OS reboot, the device will start in Windows Defender offline mode to begin the scan.
Supported operations are Get and Execute.
@ -374,12 +374,3 @@ Supported operations are Get and Execute.
[Configuration service provider reference](configuration-service-provider-reference.md)
 
 

20
windows/client-management/mdm/enterprisemodernappmanagement-csp.md
View File

@ -364,7 +364,7 @@ Added in Windows 10, next major version. Specifies if an app is nonremovable by
This setting allows the IT admin to set an app to be nonremovable, or unable to be uninstalled by a user. This is useful in enterprise and education scenarios, where the IT admin might want to ensure that everyone always has certain apps and they won't be removed accidentally. This is also useful when there are multiple users per device, and you want to ensure that one user doesn’t remove it for all users.
This setting requires admin permission. This can only be set per device, not per user. You can query the setting using AppInvetoryQuery or AppInventoryResults.
NonRemovable requires admin permission. This can only be set per device, not per user. You can query the setting using AppInventoryQuery or AppInventoryResults.
Value type is integer. Supported operations are Add, Get, Replace, and Delete.
@ -382,12 +382,12 @@ Add an app to the nonremovable app policy list
<CmdID>1</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/EnterpriseModernAppManagement/AppManagement/AppStore/Test123/NonRemovable</LocURI>
<LocURI>./Device/Vendor/MSFT/EnterpriseModernAppManagement/AppManagement/AppStore/PackageFamilyName/NonRemovable</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">int</Format>
</Meta>
<Data>0</Data>
<Data>1</Data>
</Item>
</Add>
<Final/>
@ -403,7 +403,7 @@ Delete an app from the nonremovable app policy list
<CmdID>1</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/EnterpriseModernAppManagement/AppManagement/AppStore/Test123/NonRemovable</LocURI>
<LocURI>./Device/Vendor/MSFT/EnterpriseModernAppManagement/AppManagement/AppStore/PackageFamilyName/NonRemovable</LocURI>
</Target>
</Item>
</Delete>
@ -412,7 +412,7 @@ Delete an app from the nonremovable app policy list
</SyncML>
```
Get list of apps in the nonremovable app policy list
Get the status for a particular app
```
<SyncML xmlns="SYNCML:SYNCML1.2">
<SyncBody>
@ -420,7 +420,7 @@ Get list of apps in the nonremovable app policy list
<CmdID>1</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/EnterpriseModernAppManagement/AppManagement/AppStore/Test123/NonRemovable</LocURI>
<LocURI>./Device/Vendor/MSFT/EnterpriseModernAppManagement/AppManagement/AppStore/PackageFamilyName/NonRemovable</LocURI>
</Target>
</Item>
</Get>
@ -429,9 +429,9 @@ Get list of apps in the nonremovable app policy list
</SyncML>
```
Replace an app in the nonremovable app policy list
Data 0 = app is not in the app policy list
Data 1 = app is in the app policy list
Replace an app in the nonremovable app policy list
Data 0 = app is not in the app policy list
Data 1 = app is in the app policy list
```
<SyncML xmlns="SYNCML:SYNCML1.2">
<SyncBody>
@ -439,7 +439,7 @@ Data 1 = app is in the app policy list
<CmdID>1</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/EnterpriseModernAppManagement/AppManagement/AppStore/Test123/NonRemovable</LocURI>
<LocURI>./Device/Vendor/MSFT/EnterpriseModernAppManagement/AppManagement/AppStore/PackageFamilyName/NonRemovable</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">int</Format>

BIN
windows/client-management/mdm/images/provisioning-csp-windowsdefenderapplicationguard.png
View File

Binary file not shown.
Side by Side Swipe Overlay

Before

Width:  |  Height:  |  Size: 22 KiB

After

Width:  |  Height:  |  Size: 31 KiB

74
windows/client-management/mdm/windowsdefenderapplicationguard-csp.md
View File

@ -6,11 +6,13 @@ ms.topic: article
ms.prod: w10
ms.technology: windows
author: MariciaAlforque
ms.date: 03/22/2018
ms.date: 08/02/2018
---
# WindowsDefenderApplicationGuard CSP
> [!WARNING]
> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.
The WindowsDefenderApplicationGuard configuration service provider (CSP) is used by the enterprise to configure the settings in the Application Guard. This CSP was added in Windows 10, version 1709.
@ -19,20 +21,19 @@ The following diagram shows the WindowsDefenderApplicationGuard configuration se
![windowsdefenderapplicationguard csp](images/provisioning-csp-windowsdefenderapplicationguard.png)
<a href="" id="windowsdefenderapplicationguard"></a>**./Device/Vendor/MSFT/WindowsDefenderApplicationGuard**
<p style="margin-left: 20px">Root node. Supported operation is Get.</p>
<p style="margin-left: 20px"></p>
Root node. Supported operation is Get.
<a href="" id="settings"></a>**Settings**
<p style="margin-left: 20px">Interior node. Supported operation is Get.</p>
Interior node. Supported operation is Get.
<a href="" id="allowwindowsdefenderapplicationguard"></a>**Settings/AllowWindowsDefenderApplicationGuard**
<p style="margin-left: 20px">Turn on Windows Defender Application Guard in Enterprise Mode. Value type is integer. Supported operations are Add, Get, Replace, and Delete.</p>
Turn on Windows Defender Application Guard in Enterprise Mode. Value type is integer. Supported operations are Add, Get, Replace, and Delete.
- 0 - Stops Application Guard in Enterprise Mode. Trying to access non-enterprise domains on the host will not automatically get transferred into the insolated environment.
- 1 - Enables Application Guard in Enterprise Mode. Trying to access non-enterprise websites on the host will automatically get transferred into the container.
<a href="" id="clipboardfiletype"></a>**Settings/ClipboardFileType**
<p style="margin-left: 20px">Determines the type of content that can be copied from the host to Application Guard environment and vice versa. Value type is integer. Supported operations are Add, Get, Replace, and Delete.</p>
Determines the type of content that can be copied from the host to Application Guard environment and vice versa. Value type is integer. Supported operations are Add, Get, Replace, and Delete.
- 0 - Disables content copying.
- 1 - Allow text copying.
@ -40,7 +41,7 @@ The following diagram shows the WindowsDefenderApplicationGuard configuration se
- 3 - Allow text and image copying.
<a href="" id="clipboardsettings"></a>**Settings/ClipboardSettings**
<p style="margin-left: 20px">This policy setting allows you to decide how the clipboard behaves while in Application Guard. Value type is integer. Supported operations are Add, Get, Replace, and Delete</p>
This policy setting allows you to decide how the clipboard behaves while in Application Guard. Value type is integer. Supported operations are Add, Get, Replace, and Delete
- 0 (default) - Completely turns Off the clipboard functionality for the Application Guard.
- 1 - Turns On clipboard operation from an isolated session to the host
@ -51,7 +52,7 @@ The following diagram shows the WindowsDefenderApplicationGuard configuration se
> Allowing copied content to go from Microsoft Edge into Application Guard can cause potential security risks and isn't recommended.
<a href="" id="printingsettings"></a>**Settings/PrintingSettings**
<p style="margin-left: 20px">This policy setting allows you to decide how the print functionality behaves while in Application Guard. Value type is integer. Supported operations are Add, Get, Replace, and Delete.</p>
This policy setting allows you to decide how the print functionality behaves while in Application Guard. Value type is integer. Supported operations are Add, Get, Replace, and Delete.
- 0 - Disables all print functionality (default)
- 1 - Enables only XPS printing
@ -70,13 +71,13 @@ The following diagram shows the WindowsDefenderApplicationGuard configuration se
- 15 - Enables all printing
<a href="" id="blocknonenterprisecontent"></a>**Settings/BlockNonEnterpriseContent**
<p style="margin-left: 20px">This policy setting allows you to decide whether websites can load non-enterprise content in Microsoft Edge and Internet Explorer. Value type is integer. Supported operations are Add, Get, Replace, and Delete.</p>
This policy setting allows you to decide whether websites can load non-enterprise content in Microsoft Edge and Internet Explorer. Value type is integer. Supported operations are Add, Get, Replace, and Delete.
- 0 - Non-enterprise content embedded on enterprise sites are stopped from opening in Internet Explorer or Microsoft Edge outside of Windows Defender Application Guard.
- 1 (default) - Non-enterprise sites can open outside of the Windows Defender Application Guard container, directly in Internet Explorer and Microsoft Edge.
- 0 (default) - Non-enterprise content embedded in enterprise sites is allowed to open outside of the Windows Defender Application Guard container, directly in Internet Explorer and Microsoft Edge..
- 1 - Non-enterprise content embedded on enterprise sites are stopped from opening in Internet Explorer or Microsoft Edge outside of Windows Defender Application Guard.
<a href="" id="allowpersistence"></a>**Settings/AllowPersistence**
<p style="margin-left: 20px">This policy setting allows you to decide whether data should persist across different sessions in Application Guard. Value type is integer. Supported operations are Add, Get, Replace, and Delete.</p>
This policy setting allows you to decide whether data should persist across different sessions in Application Guard. Value type is integer. Supported operations are Add, Get, Replace, and Delete.
- 0 - Application Guard discards user-downloaded files and other items (such as, cookies, Favorites, and so on) during machine restart or user log-off.
- 1 - Application Guard saves user-downloaded files and other items (such as, cookies, Favorites, and so on) for use in future Application Guard sessions.
@ -93,29 +94,62 @@ Added in Windows 10, version 1803. This policy setting allows you to determine w
- 0 (default) - The user cannot download files from Edge in the container to the host file system. When the policy is not configured, it is the same as disabled (0).
- 1 - Turns on the functionality to allow users to download files from Edge in the container to the host file system.
<a href="" id="status"></a>**Status**
<p style="margin-left: 20px">Returns bitmask that indicates status of Application Guard installation and pre-requisites on the device. Value type is integer. Supported operation is Get.
<a href="" id="filetrustcriteria"></a>**Settings/FileTrustCriteria**
Placeholder for future use. Do not use in production code.
Bit 0 - Set to 1 when WDAG is enabled into enterprise manage mode
<a href="" id="filetrustoriginremovablemedia"></a>**Settings/FileTrustOriginRemovableMedia**
Placeholder for future use. Do not use in production code.
<a href="" id="filetrustoriginnetworkshare"></a>**Settings/FileTrustOriginNetworkShare**
Placeholder for future use. Do not use in production code.
<a href="" id="filetrustoriginmarkoftheweb"></a>**Settings/FileTrustOriginMarkOfTheWeb**
Placeholder for future use. Do not use in production code.
<a href="" id="certificatethumbprints"></a>**Settings/CertificateThumbprints**
Added in Windows 10, next major version. This policy setting allows certain Root Certificates to be shared with the Windows Defender Application Guard container.
Value type is string. Supported operations are Add, Get, Replace, and Delete.
If you enable this setting, certificates with a thumbprint matching the ones specified will be transferred into the container. You can specify multiple certificates using a comma to separate the thumbprints for each certificate you want to transfer.
Example: b4e72779a8a362c860c36a6461f31e3aa7e58c14,1b1d49f06d2a697a544a1059bd59a7b058cda924
If you disable or don’t configure this setting, certificates are not shared with the Windows Defender Application Guard container.
<a href="" id="allowcameramicrophoneredirection"></a>**Settings/AllowCameraMicrophoneRedirection**
Added in Windows 10, next major version. The policy allows you to determine whether applications inside Windows Defender Application Guard can access the device’s camera and microphone when these settings are enabled on the user’s device.
Value type is integer. Supported operations are Add, Get, Replace, and Delete.
If you enable this policy, applications inside Windows Defender Application Guard will be able to access the camera and microphone on the user’s device.
If you disable or don't configure this policy, applications inside Windows Defender Application Guard will be unable to access the camera and microphone on the user’s device.
> [!Important]
> If you turn on this policy, a compromised container could bypass camera and microphone permissions and access the camera and microphone without the user's knowledge. To prevent unauthorized access, we recommend that camera and microphone privacy settings be turned off on the user's device when they are not needed.
<a href="" id="status"></a>**Status**
Returns bitmask that indicates status of Application Guard installation and pre-requisites on the device. Value type is integer. Supported operation is Get.
Bit 0 - Set to 1 when WDAG is enabled into enterprise manage mode
Bit 1 - Set to 1 when the client machine is Hyper-V capable
Bit 2 - Set to 1 when the client machine has a valid OS license and SKU
Bit 3 - Set to 1 when WDAG installed on the client machine
Bit 4 - Set to 1 when required Network Isolation Policies are configured
Bit 5 - Set to 1 when the client machine meets minimum hardware requirements
</p>
<a href="" id="installwindowsdefenderapplicationguard"></a>**InstallWindowsDefenderApplicationGuard**
<p style="margin-left: 20px">Initiates remote installation of Application Guard feature. Supported operations are Get and Execute.</p>
Initiates remote installation of Application Guard feature. Supported operations are Get and Execute.
- Install - Will initiate feature install
- Uninstall - Will initiate feature uninstall
<a href="" id="audit"></a>**Audit**
<p style="margin-left: 20px">Interior node. Supported operation is Get</p>
Interior node. Supported operation is Get
<a href="" id="auditapplicationguard"></a>**Audit/AuditApplicationGuard**
<p style="margin-left: 20px">This policy setting allows you to decide whether auditing events can be collected from Application Guard. Value type in integer. Supported operations are Add, Get, Replace, and Delete.</p>
This policy setting allows you to decide whether auditing events can be collected from Application Guard. Value type in integer. Supported operations are Add, Get, Replace, and Delete.
- 0 (default) - - Audit event logs aren't collected for Application Guard.
- 1 - Application Guard inherits its auditing policies from Microsoft Edge and starts to audit system events specifically for Application Guard.

149
windows/client-management/mdm/windowsdefenderapplicationguard-ddf-file.md
View File

@ -6,17 +6,19 @@ ms.topic: article
ms.prod: w10
ms.technology: windows
author: MariciaAlforque
ms.date: 03/22/2018
ms.date: 08/02/2018
---
# WindowsDefenderApplicationGuard DDF file
> [!WARNING]
> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.
This topic shows the OMA DM device description framework (DDF) for the **WindowsDefenderApplicationGuard** configuration service provider.
Looking for the DDF XML files? See [CSP DDF files download](configuration-service-provider-reference.md#csp-ddf-files-download).
This XML is for Windows 10, version 1803.
This XML is for Windows 10, next major version.
``` syntax
<?xml version="1.0" encoding="UTF-8"?>
@ -42,7 +44,7 @@ This XML is for Windows 10, version 1803.
<Permanent />
</Scope>
<DFType>
<MIME>com.microsoft/1.2/MDM/WindowsDefenderApplicationGuard</MIME>
<MIME>com.microsoft/1.3/MDM/WindowsDefenderApplicationGuard</MIME>
</DFType>
</DFProperties>
<Node>
@ -248,6 +250,147 @@ This XML is for Windows 10, version 1803.
</DFType>
</DFProperties>
</Node>
<Node>
<NodeName>FileTrustCriteria</NodeName>
<DFProperties>
<AccessType>
<Get />
<Add />
<Delete />
<Replace />
</AccessType>
<DFFormat>
<int />
</DFFormat>
<Occurrence>
<One />
</Occurrence>
<Scope>
<Dynamic />
</Scope>
<DFType>
<MIME>text/plain</MIME>
</DFType>
</DFProperties>
</Node>
<Node>
<NodeName>FileTrustOriginRemovableMedia</NodeName>
<DFProperties>
<AccessType>
<Get />
<Add />
<Delete />
<Replace />
</AccessType>
<DFFormat>
<int />
</DFFormat>
<Occurrence>
<One />
</Occurrence>
<Scope>
<Dynamic />
</Scope>
<DFType>
<MIME>text/plain</MIME>
</DFType>
</DFProperties>
</Node>
<Node>
<NodeName>FileTrustOriginNetworkShare</NodeName>
<DFProperties>
<AccessType>
<Get />
<Add />
<Delete />
<Replace />
</AccessType>
<DFFormat>
<int />
</DFFormat>
<Occurrence>
<One />
</Occurrence>
<Scope>
<Dynamic />
</Scope>
<DFType>
<MIME>text/plain</MIME>
</DFType>
</DFProperties>
</Node>
<Node>
<NodeName>FileTrustOriginMarkOfTheWeb</NodeName>
<DFProperties>
<AccessType>
<Get />
<Add />
<Delete />
<Replace />
</AccessType>
<DFFormat>
<int />
</DFFormat>
<Occurrence>
<One />
</Occurrence>
<Scope>
<Dynamic />
</Scope>
<DFType>
<MIME>text/plain</MIME>
</DFType>
</DFProperties>
</Node>
<Node>
<NodeName>CertificateThumbprints</NodeName>
<DFProperties>
<AccessType>
<Get />
<Add />
<Delete />
<Replace />
</AccessType>
<DFFormat>
<chr />
</DFFormat>
<Occurrence>
<One />
</Occurrence>
<Scope>
<Dynamic />
</Scope>
<CaseSense>
<CIS />
</CaseSense>
<DFType>
<MIME>text/plain</MIME>
</DFType>
</DFProperties>
</Node>
<Node>
<NodeName>AllowCameraMicrophoneRedirection</NodeName>
<DFProperties>
<AccessType>
<Get />
<Add />
<Delete />
<Replace />
</AccessType>
<DFFormat>
<int />
</DFFormat>
<Occurrence>
<One />
</Occurrence>
<Scope>
<Dynamic />
</Scope>
<DFType>
<MIME>text/plain</MIME>
</DFType>
</DFProperties>
</Node>
</Node>
<Node>
<NodeName>Status</NodeName>

6
windows/deployment/update/windows-analytics-get-started.md
View File

@ -8,7 +8,7 @@ ms.sitesec: library
ms.pagetype: deploy
author: jaimeo
ms.author: jaimeo
ms.date: 07/18/2018
ms.date: 08/01/2018
ms.localizationpriority: medium
---
@ -52,9 +52,9 @@ To enable data sharing, configure your proxy sever to whitelist the following en
| `http://adl.windows.com` | Allows the compatibility update to receive the latest compatibility data from Microsoft. |
| `https://watson.telemetry.microsoft.com` | Windows Error Reporting (WER); required for Device Health and Update Compliance AV reports. Not used by Upgrade Readiness. |
| `https://oca.telemetry.microsoft.com` | Online Crash Analysis; required for Device Health and Update Compliance AV reports. Not used by Upgrade Readiness. |
| `https://login.live.com` | Windows Error Reporting (WER); required by Device Health for device tickets. |
| `https://login.live.com` | Windows Error Reporting (WER); required by Device Health. **Note:** WER does *not* use login.live.com to access Microsoft Account consumer services such as Xbox Live. WER uses an anti-spoofing API at that address to enhance the integrity of error reports. |
| `https://www.msftncsi.com` | Windows Error Reporting (WER); required for Device Health to check connectivity. |
| `https://www.msftconnecttest.com` | Windows Error Reporting (WER); required for Device Health to check connectivity. **Note:** In this context login.live.com is *not* used for access to Microsoft Account consumer services. The endpoint is used only as part of the WIndows Error Reporting protocol to enhance the integrity of error reports. |
| `https://www.msftconnecttest.com` | Windows Error Reporting (WER); required for Device Health to check connectivity. |
>[!NOTE]

6
windows/security/identity-protection/how-hardware-based-containers-help-protect-windows.md
View File

@ -32,7 +32,7 @@ After successful verification and startup of the device’s firmware and Windows
This is where Windows Defender System Guard protection begins with its ability to ensure that only properly signed and secure Windows files and drivers, including third party, can start on the device. At the end of the Windows boot process, System Guard will start the system’s antimalware solution, which scans all third party drivers, at which point the system boot process is completed. In the end, Windows Defender System Guard helps ensure that the system securely boots with integrity and that it hasn’t been compromised before the remainder of your system defenses start.
![Boot time integrity](images/windows-defender-system-guard-boot-time-integrity.png)
![Boot time integrity](../hardware-protection/images/windows-defender-system-guard-boot-time-integrity.png)
## Maintaining integrity of the system after it’s running (run time)
@ -48,5 +48,9 @@ While Windows Defender System Guard provides advanced protection that will help
As Windows 10 boots, a series of integrity measurements are taken by Windows Defender System Guard using the device’s Trusted Platform Module 2.0 (TPM 2.0). This process and data are hardware-isolated away from Windows to help ensure that the measurement data is not subject to the type of tampering that could happen if the platform was compromised. From here, the measurements can be used to determine the integrity of the device’s firmware, hardware configuration state, and Windows boot-related components, just to name a few. After the system boots, Windows Defender System Guard signs and seals these measurements using the TPM. Upon request, a management system like Intune or System Center Configuration Manager can acquire them for remote analysis. If Windows Defender System Guard indicates that the device lacks integrity, the management system can take a series of actions, such as denying the device access to resources.
<<<<<<< HEAD
![Windows Defender System Guard](../hardware-protection/images/windows-defender-system-guard-validate-system-integrity.png)
=======
![Windows Defender System Guard](images/windows-defender-system-guard-validate-system-integrity.png)
>>>>>>> 7baf18acbf0bb4554c3ba195434e88bd8b347db2

3
windows/security/threat-protection/windows-defender-application-control/applocker/delete-an-applocker-rule.md
View File

@ -7,7 +7,7 @@ ms.mktglfcycl: deploy
ms.sitesec: library
ms.pagetype: security
author: brianlic-msft
ms.date: 09/21/2017
ms.date: 08/02/2018
---
# Delete an AppLocker rule
@ -43,6 +43,7 @@ Use the Set-AppLockerPolicy cmdlet with the -XMLPolicy parameter, using an .XML
  <RuleCollection Type="Msi" EnforcementMode="NotConfigured" />
  <RuleCollection Type="Script" EnforcementMode="NotConfigured" />
  <RuleCollection Type="Dll" EnforcementMode="NotConfigured" />
<RuleCollection Type="Appx" EnforcementMode="NotConfigured" />
</AppLockerPolicy>
To use the Set-AppLockerPolicy cmdlet, first import the Applocker modules: