add the microsoft edge kiosk mode deployment preview content
BIN
browsers/edge/images/148766.png
Normal file
After Width: | Height: | Size: 2.5 KiB |
BIN
browsers/edge/images/148767.png
Normal file
After Width: | Height: | Size: 2.5 KiB |
BIN
browsers/edge/images/allow-smart-screen-validation.PNG
Normal file
After Width: | Height: | Size: 14 KiB |
BIN
browsers/edge/images/check-gn.png
Normal file
After Width: | Height: | Size: 4.6 KiB |
BIN
browsers/edge/images/config-open-me-with-scenarios-tab.PNG
Normal file
After Width: | Height: | Size: 51 KiB |
BIN
browsers/edge/images/icon-thin-line-computer.png
Normal file
After Width: | Height: | Size: 2.3 KiB |
BIN
browsers/edge/images/kiosk-mode-types.png
Normal file
After Width: | Height: | Size: 305 KiB |
BIN
browsers/edge/images/multi-app-kiosk-mode.PNG
Normal file
After Width: | Height: | Size: 35 KiB |
BIN
browsers/edge/images/multi-app-pbs.png
Normal file
After Width: | Height: | Size: 398 KiB |
BIN
browsers/edge/images/normal-mode.png
Normal file
After Width: | Height: | Size: 428 KiB |
BIN
browsers/edge/images/single-app-kiosk-mode.PNG
Normal file
After Width: | Height: | Size: 29 KiB |
BIN
browsers/edge/images/single-app-pbs.png
Normal file
After Width: | Height: | Size: 204 KiB |
BIN
browsers/edge/images/sync-settings.PNG
Normal file
After Width: | Height: | Size: 14 KiB |
@ -0,0 +1,40 @@
|
||||
<!-- ## Allow Address bar drop-down list suggestions -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10, version 1703 or later*<br>
|
||||
>*Default setting: Enabled or not configured (Allowed)*
|
||||
|
||||
[!INCLUDE [allow-address-bar-drop-down-shortdesc](../shortdesc/allow-address-bar-drop-down-shortdesc.md)]
|
||||
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled |0 |0 |Not allowed. Hides the Address bar drop-down functionality, which also disables the _Show search and site suggestions as I type_ toggle in Settings. | |
|
||||
|Enabled or not configured **(default)** |1 |1 |Allowed. Shows the Address bar drop-down list and makes it available. | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
|
||||
#### ADMX info
|
||||
- **GP English name:** Allow Address bar drop-down list suggestions
|
||||
- **GP name:** AllowAddressBarDropdown
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[AllowAddressBarDropdown](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser\#browser-allowaddressbardropdown)
|
||||
- **Supported devices:** Desktop
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowAddressBarDropdown
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HKLM\Software\Policies\Microsoft\MicrosoftEdge\ServiceUI
|
||||
- **Value name:** ShowOneBox
|
||||
- **Value type:** REG_
|
||||
|
||||
|
||||
### Related policies
|
||||
|
||||
[Configure search suggestions in Address bar](../available-policies.md#configure-search-suggestions-in-address-bar): [!INCLUDE [configure-additional-search-engines-shortdesc](../shortdesc/configure-additional-search-engines-shortdesc.md)]
|
||||
|
||||
<hr>
|
34
browsers/edge/includes/allow-adobe-flash-include.md
Normal file
@ -0,0 +1,34 @@
|
||||
<!-- ## Allow Adobe Flash -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10*<br>
|
||||
>*Default setting: Enabled or not configured (Allowed)*
|
||||
|
||||
[!INCLUDE [allow-adobe-flash-shortdesc](../shortdesc/allow-adobe-flash-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled |0 |0 |Prevented/not allowed. | |
|
||||
|Enabled<br>**(default)** |1 |1 |Allowed. | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
|
||||
#### ADMX info
|
||||
- **GP English name:** Allow Adobe Flash
|
||||
- **GP name:** AllowFlash
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[AllowFlash](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser\#browser-allowflash)
|
||||
- **Supported devices:** Desktop
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowAdobeFlash
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HLKM\Software\Policies\Microsoft\MicrosoftEdge\Addons
|
||||
- **Value name:** FlashPlayerEnabled
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
<hr>
|
@ -0,0 +1,35 @@
|
||||
<!-- ## Allow clearing browsing data on exit -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10, version 1703 or later*<br>
|
||||
>*Default setting: Disabled or not configured (Prevented)*
|
||||
|
||||
[!INCLUDE [allow-clearing-browsing-data-on-exit-shortdesc](../shortdesc/allow-clearing-browsing-data-on-exit-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled or not configured<br>**(default)** |0 |0 |Prevented, but users can configure the _Clear browsing data_ option in Settings. | |
|
||||
|Enabled |1 |1 |Allowed | |
|
||||
---
|
||||
|
||||
|
||||
### ADMX info and settings
|
||||
|
||||
#### ADMX info
|
||||
- **GP English name:** Allow clearing browsing data on exit
|
||||
- **GP name:** AllowClearingBrowsingDataOnExit
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[ClearBrowsingDataOnExit](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser\#browser-clearbrowsingdataonexit)
|
||||
- **Supported devices:** Desktop
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ClearBrowsingDataOnExit
|
||||
- **Data type:** Integer
|
||||
|
||||
#### *Registry
|
||||
- **Path:** HLKM\\Software\\Policies\\Microsoft\\MicrosoftEdge\\Privacy
|
||||
- **Value name:** ClearBrowsingHistoryOnExit
|
||||
- **Value type:** REG_DWORD</li></ul>
|
||||
|
||||
<hr>
|
38
browsers/edge/includes/allow-config-updates-books-include.md
Normal file
@ -0,0 +1,38 @@
|
||||
<!-- ## Allow configuration updates for the Books Library -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10, version 1802 or later*<br>
|
||||
>*Default setting: Enabled or not configured (Allowed)*
|
||||
|
||||
[!INCLUDE [allow-configuration-updates-for-books-library-shortdesc](../shortdesc/allow-configuration-updates-for-books-library-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled |0 |0 |Prevented/not allowed. | |
|
||||
|Enabled or not configured<br>**(default)** |1 |1 |Allowed. Microsoft Edge updates the configuration data for the Books Library automatically. | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
|
||||
#### ADMX info
|
||||
- **GP English name:**
|
||||
- **GP name:**
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[AllowConfigurationUpdateForBooksLibrary](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowconfigurationupdateforbookslibrary)
|
||||
- **Supported devices:** Desktop
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowConfigurationUpdateForBooksLibrary
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HKLM\Software\Policies\Microsoft\MicrosoftEdge\BooksLibrary
|
||||
- **Value name:** AllowConfigurationUpdateForBooksLibrary
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
### Related documents
|
||||
|
||||
[Manage connections from Windows operating system components to Microsoft services](https://docs.microsoft.com/en-us/windows/configuration/manage-connections-from-windows-operating-system-components-to-microsoft-services)
|
||||
|
||||
<hr>
|
34
browsers/edge/includes/allow-cortana-include.md
Normal file
@ -0,0 +1,34 @@
|
||||
<!-- ## Allow Cortana -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10*<br>
|
||||
>*Default setting: Enabled (Allowed)*
|
||||
|
||||
[!INCLUDE [allow-cortana-shortdesc](../shortdesc/allow-cortana-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled |0 |0 |Prevented but users can still search to find items on their device. | |
|
||||
|Enabled<br>**(default)** |1 |1 |Allowed. | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
|
||||
#### ADMX info
|
||||
- **GP English name:**
|
||||
- **GP name:**
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Experience/[AllowCortana](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-experience#experience-allowcortana)
|
||||
- **Supported devices:** Mobile**URI full path:** ./Vendor/MSFT/Policy/Config/Experience/AllowCortana
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HKLM\Software\Policies\Microsoft\Windows\Windows Search
|
||||
- **Value name:** AllowCortana
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
<hr>
|
||||
|
36
browsers/edge/includes/allow-dev-tools-include.md
Normal file
@ -0,0 +1,36 @@
|
||||
<!-- ## Allow Developer Tools -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10, version 1511 or later*<br>
|
||||
>*Default setting: Enabled (Allowed)*
|
||||
|
||||
[!INCLUDE [allow-developer-tools-shortdesc](../shortdesc/allow-developer-tools-shortdesc.md)]
|
||||
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled |0 |0 |Prevented/not allowed. | |
|
||||
|Enabled |1 |1 |Allowed. | |
|
||||
---
|
||||
|
||||
|
||||
### ADMX info and settings
|
||||
|
||||
#### ADMX info
|
||||
- **GP English name:** Allow Developer Tools
|
||||
- **GP name:** AllowDeveloperTools
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/AllowDeveloperTools
|
||||
- **Supported devices:** Desktop
|
||||
- **URI full Path:** ./Vendor/MSFT/Policy/Config/Browser/AllowDeveloperTools
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HKLM\Software\Policies\Microsoft\MicrosoftEdge\F12
|
||||
- **Value name:** AllowDeveloperTools
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
<hr>
|
33
browsers/edge/includes/allow-enable-book-library-include.md
Normal file
@ -0,0 +1,33 @@
|
||||
<!-- ## Always show the Books Library in Microsoft Edge -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10, version 1709 or later*<br>
|
||||
>*Default setting: Disabled or not configured*
|
||||
|
||||
[!INCLUDE [always-show-books-library-shortdesc](../shortdesc/always-show-books-library-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled or not configured<br>**(default)** |0 |0 |Shows the Books Library only in countries or regions where supported. | |
|
||||
|Enabled |1 |1 |Shows the Books Library, regardless of the device’s country or region. | |
|
||||
---
|
||||
### ADMX info and settings
|
||||
|
||||
#### ADMX info
|
||||
- **GP English name:** Always show the Books Library in Microsoft Edge
|
||||
- **GP name:** AlwaysEnableBooksLibrary
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[Browser/AlwaysEnableBooksLibrary](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-alwaysenablebookslibrary)
|
||||
- **Supported devices:** Desktop and Mobile
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AlwaysEnableBooksLibrary
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Main
|
||||
- **Value name:** AlwaysEnableBooksLibrary
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
<hr>
|
@ -0,0 +1,41 @@
|
||||
<!-- ## Allow extended telemetry for the Books tab -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10, version 1802 or later*<br>
|
||||
>*Default setting: Disabled or not configured (Gather and send only basic diagnostic data)*
|
||||
|
||||
[!INCLUDE [allow-extended-telemetry-for-books-tab-shortdesc](../shortdesc/allow-extended-telemetry-for-books-tab-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled or not configured<br>**(default)** |0 |0 |Depending on the device configuration, Microsoft Edge gathers only basic diagnostic data. | |
|
||||
|Enabled |1 |1 |Microsoft Edge gathers both basic and additional diagnostic data. | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
|
||||
#### ADMX info
|
||||
- **GP English name:** Allow extended telemetry for the Books tab
|
||||
- **GP name:** EnableExtendedBooksTelemetry
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[Browser/EnableExtendedBooksTelemetry](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-enableextendedbookstelemetry)
|
||||
- **Supported devices:** Desktop and Mobile
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/EnableExtendedBooksTelemetry
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HLKM\\Software\\Policies\\Microsoft\\MicrosoftEdge\\BooksLibrary
|
||||
- **Value name:** EnableExtendedBooksTelemetry
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
|
||||
### Scenario
|
||||
|
||||
Due to current Privacy policy, the Books feature does not have the right to gather the book's unique identifier through regular events (because it could help to build a Reading history, which is not an explicit feature).
|
||||
|
||||
For Schools that are one of the target of this feature of Edge, we will propose an advanced telemetry report to the Teachers. This advanced report system will require to have the ProductId in events so IT Admin will be able to enable the propagation from the user's device to Microsoft Telemetry servers of events that contain ProductId.
|
||||
|
||||
<hr>
|
44
browsers/edge/includes/allow-extensions-include.md
Normal file
@ -0,0 +1,44 @@
|
||||
<!-- ## Allow Extensions -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10, version 1607 or later*<br>
|
||||
>*Default setting: Enabled or not configured (Allowed)*
|
||||
|
||||
[!INCLUDE [allow-extensions-shortdesc](../shortdesc/allow-extensions-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
- (0) Disabled - Prevented.
|
||||
- (1 default) Enabled – Allowed.
|
||||
|
||||
Most restricted value: None### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |
|
||||
|---|:---:|:---:|---|
|
||||
|Disabled |0 |0 |Prevented/not allowed. |
|
||||
|Enabled or not configured<br>**(default)** |1 |1 |Allowed. |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
|
||||
#### ADMX info
|
||||
- **GP English name:** Allow Extensions
|
||||
- **GP name:** AllowExtensions
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[AllowExtensions](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowextensions)
|
||||
- **Supported devices:** Desktop
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowExtensions
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HLKM\\Software\\Policies\\Microsoft\\MicrosoftEdge\\Extensions
|
||||
- **Value name:** ExtensionsEnabled
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
### Related documents
|
||||
|
||||
[Microsoft browser extension policy](https://docs.microsoft.com/en-us/legal/windows/agreements/microsoft-browser-extension-policy):
|
||||
This document describes the supported mechanisms for extending or modifying the behavior or user experience of Microsoft Edge and Internet Explorer, or the content displayed by these browsers. Any technique not explicitly listed in this document is considered **unsupported**.
|
||||
|
||||
<hr>
|
35
browsers/edge/includes/allow-full-screen-include.md
Normal file
@ -0,0 +1,35 @@
|
||||
<!-- ## Allow fullscreen mode -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10, version 1810*<br>
|
||||
>*Default setting: Enabled or not configured (Allowed)*
|
||||
|
||||
|
||||
[!INCLUDE [allow-fullscreen-mode-shortdesc](../shortdesc/allow-fullscreen-mode-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled |0 |0 |Prevented/not allowed. | |
|
||||
|Enabled<br>**(default)** |1 |1 |Allowed. | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
|
||||
#### ADMX info
|
||||
- **GP English name:** Allow fullscreen mode
|
||||
- **GP name:** AllowFullScreenMode
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[AllowFullscreen]()
|
||||
- **Supported devices:** Desktop
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowFullscreen
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HLKM\Software\Policies\Microsoft\MicrosoftEdge\Main
|
||||
- **Value name:** AllowFullScreenMode
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
<hr>
|
36
browsers/edge/includes/allow-inprivate-browsing-include.md
Normal file
@ -0,0 +1,36 @@
|
||||
<!-- ## Allow InPrivate browsing -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10, version 1511 or later*<br>
|
||||
>*Default setting: Enabled or not configured (Allowed)*
|
||||
|
||||
|
||||
[!INCLUDE [allow-inprivate-browsing-shortdesc](../shortdesc/allow-inprivate-browsing-shortdesc.md)]
|
||||
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled |0 |0 |Prevented/not allowed. | |
|
||||
|Enabled or not configured<br>**(default)** |1 |1 |Allowed. | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
|
||||
#### ADMX info
|
||||
- **GP English name:** Allow InPrivate browsing
|
||||
- **GP name:** AllowInPrivate
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[AllowInPrivate](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowinprivate)
|
||||
- **Supported devices:** Desktop and Mobile
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowInPrivate
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HLKM\\Software\\Policies\\Microsoft\\MicrosoftEdge\\Main
|
||||
- **Value name:** AllowInPrivate
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
<hr>
|
@ -0,0 +1,34 @@
|
||||
<!-- ## Allow Microsoft Compatibility List -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10, version 1607 or later*<br>
|
||||
>*Default setting: Enabled or not configured (Allowed)*
|
||||
|
||||
[!INCLUDE [allow-microsoft-compatibility-list-shortdesc](../shortdesc/allow-microsoft-compatibility-list-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled |0 |0 |Prevented/ignored. | |
|
||||
|Enabled or not configured<br>**(default)** |1 |1 |Allowed. | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
|
||||
#### ADMX info
|
||||
- **GP English name:** Allow Microsoft Compatibility List
|
||||
- **GP name:** AllowCVList
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[AllowMicrosoftCompatibilityList](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowmicrosoftcompatibilitylist)
|
||||
- **Supported devices:** Desktop and Mobile
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowMicrosoftCompatibilityList
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HLKM\\Software\\Policies\\Microsoft\\MicrosoftEdge\\BrowserEmulation
|
||||
- **Value name:** MSCompatibilityMode
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
<hr>
|
35
browsers/edge/includes/allow-prelaunch-include.md
Normal file
@ -0,0 +1,35 @@
|
||||
|
||||
<!-- Allow Prelaunch -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10, version 1810*<br>
|
||||
>*Default setting: Enabled or not configured (Allowed)*
|
||||
|
||||
[!INCLUDE [allow-prelaunch-shortdesc](../shortdesc/allow-prelaunch-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled |0 |0 |Prevented/not allowed. | |
|
||||
|Enabled or not configured<br>**(default)** |1 |1 |Allowed. | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
|
||||
#### ADMX info
|
||||
- **GP English name:**
|
||||
- **GP name:**
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[AllowPrelaunch]()
|
||||
- **Supported devices:** Desktop
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowPrelaunch
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HLKM\Software\Policies\Microsoft\MicrosoftEdge\
|
||||
- **Value name:**
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
<hr>
|
34
browsers/edge/includes/allow-printing-include.md
Normal file
@ -0,0 +1,34 @@
|
||||
<!-- ## Allow printing -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10, Version 1810*<br>
|
||||
>*Default setting: Enabled or not configured (Allowed)*
|
||||
|
||||
[!INCLUDE [allow-printing-shortdesc](../shortdesc/allow-printing-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled |0 |0 |Prevented/not allowed. | |
|
||||
|Enabled<br>**(default)** |1 |1 |Allowed | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
|
||||
#### ADMX info
|
||||
- **GP English name:** Allow printing
|
||||
- **GP name:** AllowPrinting
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[AllowPrinting]()
|
||||
- **Supported devices:** Desktop
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowPrinting
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HLKM\\Software\\Policies\\Microsoft\\MicrosoftEdge\\Main
|
||||
- **Value name:** AllowPrinting
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
<hr>
|
35
browsers/edge/includes/allow-saving-history-include.md
Normal file
@ -0,0 +1,35 @@
|
||||
<!-- ## Allow Saving History -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10, version 1810*<br>
|
||||
>*Default setting: Enabled or not configured (Allowed)*
|
||||
|
||||
[!INCLUDE [allow-saving-history-shortdesc](../shortdesc/allow-saving-history-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled |0 |0 |Prevented/not allowed. | |
|
||||
|Enabled or not configured<br>**(default)** |1 |1 |Allowed. | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
|
||||
#### ADMX info
|
||||
- **GP English name:** Allow saving history
|
||||
- **GP name:** AllowSavingHistory
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[AllowSavingHistory]()
|
||||
- **Supported devices:** Desktop
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowSavingHistory
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HLKM\\Software\\Policies\\Microsoft\\MicrosoftEdge\\Main
|
||||
- **Value name:** AllowSavingHistory
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
|
||||
<hr>
|
@ -0,0 +1,85 @@
|
||||
<!-- ## Allow search engine customization -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10, version 1703 or later*<br>
|
||||
>*Default setting: Enabled or not configured (Allowed)*
|
||||
|
||||
[!INCLUDE [allow-search-engine-customization-shortdesc](../shortdesc/allow-search-engine-customization-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled |0 |0 |Prevented/not allowed. | |
|
||||
|Enabled or not configured<br>**(default)** |1 |1 |Allowed. | |
|
||||
---
|
||||
|
||||
### Configuration combinations
|
||||
|
||||
| **Set default search engine** | **Allow search engine customization** | **Configure additional search engines** | **Results** |
|
||||
| --- | --- | --- | --- |
|
||||
| Not configured (default) | Disabled | Disabled or not configured (default) | Default search engine specified in App settings. Users cannot make changes. |
|
||||
| Not configured (default) | Enabled or not configured (default) | Disabled or not configured (default) | Default search engine specified in App settings. Users can make changes to the default search engine at any time. |
|
||||
| Not configured (default) | Disabled | Enabled | ??? |
|
||||
| Not configured (default) | Enabled or not configured (default) | Enabled | ??? |
|
||||
| Disabled | Disabled | Disabled or not configured (default) | Users cannot add, remove, or change any of the search engines, but they can set a default search engine. |
|
||||
| Disabled | Enabled or not configured (default) | Disabled or not configured (default) | Users can add new search engines or change the default search engine, in Settings. |
|
||||
| Enabled | Disabled | Disabled or not configured (default) | Set the default search engine preventing users from making changes. |
|
||||
| Enabled | Enabled or not configured (default) | Disabled or not configured (default) | Set the default search engine and allow users to add search engines or make changes. |
|
||||
|
||||
#### If you want to use the default search engine in Apps settings and prevent users from making changes.
|
||||
|
||||
|
||||
#### If you want to use the default search engine in Apps setting and let users make changes.
|
||||
|
||||
|
||||
#### ???
|
||||
|
||||
|
||||
#### ???
|
||||
|
||||
|
||||
#### If you don't want users to add, remove, or change any of the search engines, but users can set a default search engine of their own.
|
||||
|
||||
|
||||
#### If you want users to add new search engines or change the default in Settings.
|
||||
|
||||
|
||||
#### If you want to set the default search engine and prevent users from making changes.
|
||||
|
||||
|
||||
#### If you want to set the default search engine and let users make changes.
|
||||
|
||||
|
||||
|
||||
### ADMX info and settings
|
||||
|
||||
##### ADMX info
|
||||
- **GP English name:** Allow search engine customization
|
||||
- **GP name:** AllowSearchEngineCustomization
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[AllowSearchEngineCustomization](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowsearchenginecustomization)
|
||||
- **Supported devices:** Desktop and Mobile
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowSearchEngineCustomization
|
||||
- **Data type:** Integer
|
||||
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HLKM\\Software\\Policies\\Microsoft\\MicrosoftEdge\\Protected
|
||||
- **Value name:** AllowSearchEngineCustomization
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
|
||||
### Related policies
|
||||
|
||||
- [Set default search engine](../available-policies.md#set-default-search-engine): [!INCLUDE [set-default-search-engine-shortdesc](../shortdesc/set-default-search-engine-shortdesc.md)]
|
||||
|
||||
- [Configure additional search engines](../available-policies.md#configure-additional-search-engines): [!INCLUDE [configure-additional-search-engines-shortdesc](../shortdesc/configure-additional-search-engines-shortdesc.md)]
|
||||
|
||||
### Related documents
|
||||
- [Microsoft browser extension policy](https://docs.microsoft.com/en-us/legal/windows/agreements/microsoft-browser-extension-policy): This document describes the supported mechanisms for extending or modifying the behavior or user experience of Microsoft Edge and Internet Explorer, or the content displayed by these browsers. Any technique not explicitly listed in this document is considered **unsupported**.
|
||||
|
||||
- [Search provider discovery](https://docs.microsoft.com/en-us/microsoft-edge/dev-guide/browser/search-provider-discovery): Rich search integration is built into the Microsoft Edge address bar, including search suggestions, results from the web, your browsing history, and favorites.
|
||||
|
||||
<hr>
|
37
browsers/edge/includes/allow-shared-folder-books-include.md
Normal file
@ -0,0 +1,37 @@
|
||||
<!-- ## Allow a shared books folder -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10, version 1803*<br>
|
||||
>*Default setting: Disabled or not configured (Not allowed)*
|
||||
|
||||
[!INCLUDE [allow-a-shared-books-folder-shortdesc](../shortdesc/allow-a-shared-books-folder-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled or not configured<br>**(default)** |0 |0 |Prevented/not allowed, but Microsoft Edge downloads book files to a per-user folder for each user. | |
|
||||
|Enabled |1 |1 |Allowed. | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
|
||||
#### ADMX info
|
||||
- **GP English name:** Allow a shared Books folder
|
||||
- **GP name:** UseSharedFolderForBooks
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[UseSharedFolderForBooks](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-usesharedfolderforbooks)
|
||||
- **Supported devices:** Desktop
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/UseSharedFolderForBooks
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HLKM\\Software\\Policies\\Microsoft\\MicrosoftEdge\\BooksLibrary
|
||||
- **Value name:** UseSharedFolderForBooks
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
### Scenarios
|
||||
|
||||
Some schools may use a Shared Cart (a physical cart), to store some devices. For example, at the beginning of the lessons, each student picks up a device and returns their device at the end of the of lessons.
|
||||
|
||||
<hr>
|
@ -0,0 +1,44 @@
|
||||
<!-- ## Allow sideloading of Extensions -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10, version 1810*<br>
|
||||
>*Default setting: Enabled (Allowed)*
|
||||
|
||||
[!INCLUDE [allow-sideloading-of-extensions-shortdesc](../shortdesc/allow-sideloading-of-extensions-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled or not configured |0 |0 |Prevented, but does not prevent sideloading of extensions using Add-AppxPackage via PowerShell.<p>To prevent this, enable **Allows development of Windows Store apps and installing them from an integrated development environment (IDE)** policy, located at Computer Configuration \> Administrative Templates \> Windows Components \> App Package Deployment. For the MDM setting, enable **ApplicationManagement/AllowDeveloperUnlock**. | |
|
||||
|Enabled<br>**(default)** |1 |1 |Allowed | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
|
||||
#### ADMX info
|
||||
- **GP English name:** Allow sideloading of Extensions
|
||||
- **GP name:** AllowSideloadingOfExtensions
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[AllowSideloadingExtensions]()
|
||||
- **Supported devices:** Desktop and Mobile
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowSideloadingExtensions
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HLKM\Software\Policies\Microsoft\MicrosoftEdge\Extensions
|
||||
- **Value name:** AllowSideloadingOfExtensions
|
||||
- **Value type:** REG_SZ
|
||||
|
||||
### Related policies
|
||||
|
||||
- Allows development of Windows Store apps and installing them from an integrated development environment (IDE): When you enable this policy and the Allow all trusted apps to install policy, you allow users to develop Windows Store apps and install them directly from an IDE.
|
||||
|
||||
- Allow all trusted apps to install: When you enable this policy, you can manage the installation of trusted line-of-business (LOB) or developer-signed Windows Store apps.
|
||||
|
||||
### Related Documents
|
||||
|
||||
[Enable your device for development](https://docs.microsoft.com/en-us/windows/uwp/get-started/enable-your-device-for-development): Configure your Windows 10 device for development and debugging.
|
||||
|
||||
<hr>
|
34
browsers/edge/includes/allow-tab-preloading-include.md
Normal file
@ -0,0 +1,34 @@
|
||||
<!-- ## Allow Start and New Tab page preload (aka: AllowStartAndNewTabPagePreload) -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10, version 1802*<br>
|
||||
>*Default setting: Enabled or not configured (Allow preloading)*
|
||||
|
||||
[!INCLUDE [allow-tab-preloading-shortdesc](../shortdesc/allow-tab-preloading-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Enabled or not configured<br>**(default)** |0 |0 |Allow preloading of the Start and New Tab page. | |
|
||||
|Disabled |1 |1 |Prevent/not allowed. | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
|
||||
#### ADMX info
|
||||
- **GP English name:** Allow Start and New Tab page preload
|
||||
- **GP name:** AllowTabPreloading
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[AllowTabPreloading]()
|
||||
- **Supported devices:** Desktop
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowTabPreloading
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\TabPreloader
|
||||
- **Value name:** AllowTabPreloading
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
<hr>
|
@ -0,0 +1,37 @@
|
||||
<!-- ## Allow web content on New Tab page -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10*<br>
|
||||
>*Default setting: Enabled (Default New tab page loads)*
|
||||
|
||||
|
||||
[!INCLUDE [allow-web-content-on-new-tab-page-shortdesc](../shortdesc/allow-web-content-on-new-tab-page-shortdesc.md)]
|
||||
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Not configured |Blank |Blank |Users can choose what loads in the New tab page. | |
|
||||
|Disabled |0 |0 |A blank page loads instead of the default New tab page and prevent users from changing it. | |
|
||||
|Enabled **(default)** |1 |1 |Default New tab page loads. | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
|
||||
#### ADMX info
|
||||
- **GP English name:** Allow web content on New Tab page
|
||||
- **GP name:** AllowWebContentOnNewTabPage
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[AllowWebContentOnNewTabPage]()
|
||||
- **Supported devices:** Desktop
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowWebContentOnNewTabPage
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HLKM\\Software\\Policies\\Microsoft\\MicrosoftEdge\\ServiceUI
|
||||
- **Value name:** AllowWebContentOnNewTabPage
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
<hr>
|
35
browsers/edge/includes/always-enable-book-library-include.md
Normal file
@ -0,0 +1,35 @@
|
||||
<!-- ## Always show the Books Library in Microsoft Edge -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10, version 1709 or later*<br>
|
||||
>*Default setting: Disabled or not configured*
|
||||
|
||||
|
||||
[!INCLUDE [always-show-books-library-shortdesc](../shortdesc/always-show-books-library-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled or not configured<br>**(default)** |0 |0 |Shows the Books Library only in countries or regions where supported. | |
|
||||
|Enabled |1 |1 |Shows the Books Library, regardless of the device’s country or region. | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
|
||||
#### ADMX info
|
||||
- **GP English name:** Always show the Books Library in Microsoft Edge
|
||||
- **GP name:** AlwaysEnableBooksLibrary
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[AlwaysEnableBooksLibrary](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-alwaysenablebookslibrary)
|
||||
- **Supported devices:** Desktop and Mobile
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AlwaysEnableBooksLibrary
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HLKM\\Software\\Policies\\Microsoft\\MicrosoftEdge\\Main
|
||||
- **Value name:** AlwaysEnableBooksLibrary
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
<hr>
|
@ -0,0 +1 @@
|
||||
[Microsoft browser extension policy](https://docs.microsoft.com/en-us/legal/windows/agreements/microsoft-browser-extension-policy): This document describes the supported mechanisms for extending or modifying the behavior or user experience of Microsoft Edge and Internet Explorer, or the content displayed by these browsers. Any technique not explicitly listed in this document is considered **unsupported**.
|
@ -0,0 +1,85 @@
|
||||
<!-- ## Configure additional search engines -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10, version 1703 or later*<br>
|
||||
>*Default setting: Disabled or not configured (Not allowed)*
|
||||
|
||||
[!INCLUDE [configure-additional-search-engines-shortdesc](../shortdesc/configure-additional-search-engines-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled or not configured<br>**(default)** |0 |0 |If you don't configure this policy, Microsoft Edge uses the search engine specified in App settings.<p>If you enabled this policy and now you want to disable it, disabling removes all configured search engines.| |
|
||||
|Enabled |1 |1 |Add up to five additional search engines and set any one of them as the default.<p>For each search engine added you must specify a link to the OpenSearch XML file that contains, at a minimum, the short name and URL template (HTTPS) of the search engine. For more information about creating the OpenSearch XML file, see [Search provider discovery](https://developer.microsoft.com/en-us/microsoft-edge/platform/documentation/dev-guide/browser/search-provider-discovery/). | |
|
||||
---
|
||||
|
||||
### Configuration combinations
|
||||
|
||||
| **Set default search engine** | **Allow search engine customization** | **Configure additional search engines** | **Results** |
|
||||
| --- | --- | --- | --- |
|
||||
| Not configured (default) | Disabled | Disabled or not configured (default) | Default search engine specified in App settings. Users cannot make changes. |
|
||||
| Not configured (default) | Enabled or not configured (default) | Disabled or not configured (default) | Default search engine specified in App settings. Users can make changes to the default search engine at any time. |
|
||||
| Not configured (default) | Disabled | Enabled | ??? |
|
||||
| Not configured (default) | Enabled or not configured (default) | Enabled | ??? |
|
||||
| Disabled | Disabled | Disabled or not configured (default) | Users cannot add, remove, or change any of the search engines, but they can set a default search engine. |
|
||||
| Disabled | Enabled or not configured (default) | Disabled or not configured (default) | Users can add new search engines or change the default search engine, in Settings. |
|
||||
| Enabled | Disabled | Disabled or not configured (default) | Set the default search engine preventing users from making changes. |
|
||||
| Enabled | Enabled or not configured (default) | Disabled or not configured (default) | Set the default search engine and allow users to add search engines or make changes. |
|
||||
|
||||
#### If you want to use the default search engine in Apps settings and prevent users from making changes.
|
||||
|
||||
|
||||
#### If you want to use the default search engine in Apps setting and let users make changes.
|
||||
|
||||
|
||||
#### ???
|
||||
|
||||
|
||||
#### ???
|
||||
|
||||
|
||||
#### If you don't want users to add, remove, or change any of the search engines, but users can set a default search engine of their own.
|
||||
|
||||
|
||||
#### If you want users to add new search engines or change the default in Settings.
|
||||
|
||||
|
||||
#### If you want to set the default search engine and prevent users from making changes.
|
||||
|
||||
|
||||
#### If you want to set the default search engine and let users make changes.
|
||||
|
||||
|
||||
|
||||
### ADMX info and settings
|
||||
#### ADMX info
|
||||
- **GP English name:** Configure additional search engines
|
||||
- **GP name:** ConfigureAdditionalSearchEngines
|
||||
- **GP element:** ConfigureAdditionalSearchEngines_Prompt
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[ConfigureAdditionalSearchEngines](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-configureadditionalsearchengines)
|
||||
- **Supported devices:** Desktop and Mobile
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureAdditionalSearchEngines
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HLKM\\Software\\Policies\\Microsoft\\MicrosoftEdge\\OpenSearch
|
||||
- **Value name:** ConfigureAdditionalSearchEngines
|
||||
- **Value type:** REG_SZ
|
||||
|
||||
### Related policies
|
||||
|
||||
- [Set default search engine](../available-policies.md\#set-default-search-engine): [!INCLUDE [set-default-search-engine-shortdesc](../shortdesc/set-default-search-engine-shortdesc.md)]
|
||||
|
||||
- [Allow search engine customization](../available-policies.md#allow-search-engine-customization): [!INCLUDE [allow-search-engine-customization-shortdesc](../shortdesc/allow-search-engine-customization-shortdesc.md)]
|
||||
|
||||
|
||||
### Related documents
|
||||
|
||||
- [Microsoft browser extension policy](https://docs.microsoft.com/en-us/legal/windows/agreements/microsoft-browser-extension-policy): This document describes the supported mechanisms for extending or modifying the behavior or user experience of Microsoft Edge and Internet Explorer, or the content displayed by these browsers. Any technique not explicitly listed in this document is considered **unsupported**.
|
||||
|
||||
- [Search provider discovery](https://docs.microsoft.com/en-us/microsoft-edge/dev-guide/browser/search-provider-discovery): Rich search integration is built into the Microsoft Edge address bar, including search suggestions, results from the web, your browsing history, and favorites.
|
||||
|
||||
<hr>
|
@ -0,0 +1,34 @@
|
||||
<!-- ## Configure the Adobe Flash Click-to-Run setting -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10, version 1703 or later*<br>
|
||||
>*Default setting: Enabled or not configured (Does not load content automatically)*
|
||||
|
||||
[!INCLUDE [configure-adobe-flash-click-to-run-setting-shortdesc](../shortdesc/configure-adobe-flash-click-to-run-setting-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled |0 |0 |Loads and runs Adobe Flash content automatically. | |
|
||||
|Enabled or not configured<br>**(default)** |1 |1 |Does not load or run Adobe Flash content automatically, requiring action from the user before the content loads and runs. For example, clicking the **Click-to-Run** button or clicking the content. | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
|
||||
#### ADMX info
|
||||
- **GP English name:** Configure the Adobe Flash Click-to-Run setting
|
||||
- **GP name:** AllowFlashClickToRun
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[AllowFlashClickToRun](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowflashclicktorun)
|
||||
- **Supported devices:** Desktop
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowFlashClickToRun
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HLKM\\Software\\Policies\\Microsoft\\MicrosoftEdge\\Security
|
||||
- **Value name:** FlashClickToRunMode
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
<hr>
|
@ -0,0 +1,36 @@
|
||||
<!-- ## Configure allow flash for URL list -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10*<br>
|
||||
>*Default setting:*
|
||||
|
||||
[!INCLUDE [configure-allow-flash-for-url-list-shortdesc](../shortdesc/configure-allow-flash-for-url-list-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
| | | | | |
|
||||
| | | | | |
|
||||
| | | | | |
|
||||
---
|
||||
|
||||

|
||||
|
||||
### ADMX info and settings
|
||||
#### ADMX info
|
||||
- **GP English name:**
|
||||
- **GP name:**
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[]()
|
||||
- **Supported devices:** Desktop and Mobile
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HLKM\Software\Policies\Microsoft\MicrosoftEdge\
|
||||
- **Value name:**
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
<hr>
|
34
browsers/edge/includes/configure-autofill-include.md
Normal file
@ -0,0 +1,34 @@
|
||||
<!-- ## Configure Autofill -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10*<br>
|
||||
>*Default setting: Not configured*
|
||||
|
||||
[!INCLUDE [configure-autofill-shortdesc](../shortdesc/configure-autofill-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Not configured<br>**(default)** | Blank |Blank |Users can choose to use AutoFill. | |
|
||||
|Disabled | 0 | no | Prevented. | |
|
||||
|Enabled |1 |yes | Allowed. | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
#### ADMX info
|
||||
- **GP English name:** Configure Autofill
|
||||
- **GP name:** AllowAutofill
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[AllowAutofill](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser\#browser-allowautofill)
|
||||
- **Supported devices:** Desktop
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowAutofill
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HLKM\\Software\\Policies\\Microsoft\\MicrosoftEdge\\Main
|
||||
- **Value name:** Use FormSuggest
|
||||
- **Value type:** REG_SZ
|
||||
|
||||
<hr>
|
@ -0,0 +1,49 @@
|
||||
<!-- Configure collection of browsing data for Microsoft 365 Analytics -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10, version 1810*<br>
|
||||
>*Default setting: Disabled or not configured (No data collected or sent)*
|
||||
|
||||
[!INCLUDE [configure-browser-telemetry-for-m365-analytics-shortdesc](../shortdesc/configure-browser-telemetry-for-m365-analytics-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled or not configured<br>**(default)** |0 |0 |Microsoft Edge does not collect or send browsing history data. | |
|
||||
|Enabled |1 |1 |Allow sending intranet history only. | |
|
||||
|Enabled |2 |2 |Allow sending Internet history only. | |
|
||||
|Enabled |3 |3 |Allow sending both intranet and Internet history. | |
|
||||
---
|
||||
|
||||
>[!IMPORTANT]
|
||||
>For this policy to work, enable the Allow Telemetry policy with the _Enhanced_ option and enable the Configure the Commercial ID policy by providing the Commercial ID.
|
||||
|
||||
|
||||
### ADMX info and settings
|
||||
#### ADMX info
|
||||
- **GP English name:** Configure collection of browsing data for Microsoft 365 Analytics
|
||||
- **GP name:** ConfigureTelemetryForMicrosoft365Analytics
|
||||
- **GP element:** ZonesListBox
|
||||
- **GP path:** Data Collection and Preview Builds
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[ConfigureTelemetryForMicrosoft365Analytics]()
|
||||
- **Supported devices:** Desktop
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureTelemetryForMicrosoft365Analytics
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HLKM\Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection
|
||||
- **Value name:** MicrosoftEdgeDataOptIn
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
### Scenarios
|
||||
|
||||
|
||||
### Related policies
|
||||
Allow Telemetry: Determine the highest level of Windows diagnostic data sent to Microsoft. When you enable this policy, users can change their Telemetry Settings but prevent users from choosing a higher level than configured.
|
||||
|
||||
Configure the Commercial ID: Define the Commercial ID used to associate the device's telemetry data as belonging to a given organization.
|
||||
|
||||
<hr>
|
35
browsers/edge/includes/configure-cookies-include.md
Normal file
@ -0,0 +1,35 @@
|
||||
<!-- ## Configure cookies -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10*<br>
|
||||
>*Default setting: Disabled or not configured (Allow all cookies from all sites)*
|
||||
|
||||
[!INCLUDE [configure-cookies-shortdesc](../shortdesc/configure-cookies-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Enabled |0 |0 |Block all cookies from all sites. | |
|
||||
|Enabled |1 |1 |Block only coddies from third party websites. | |
|
||||
|Disabled or not configured<br>**(default)** |2 |2 |Allow all cookies from all sites. | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
#### ADMX info
|
||||
- **GP English name:** Configure cookies
|
||||
- **GP name:** Cookies
|
||||
- **GP element:** CookiesListBox
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[AllowCookies](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser\#browser-allowcookies)
|
||||
- **Supported devices:** Desktop and Mobile
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowCookies
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
** |<ul><li>**Path:** HKLM\\Software\\Policies\\Microsoft\\MicrosoftEdge\\Main
|
||||
**Value name:** Cookies
|
||||
**Value type:** REG_DWORD
|
||||
|
||||
<hr>
|
34
browsers/edge/includes/configure-do-not-track-include.md
Normal file
@ -0,0 +1,34 @@
|
||||
<!-- ## Configure Do Not Track -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10*<br>
|
||||
>*Default setting: Not configured (Does not send tracking information)*
|
||||
|
||||
[!INCLUDE [configure-do-not-track-shortdesc](../shortdesc/configure-do-not-track-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Not configured |Blank |Blank |Does not send tracking information, but allow users to choose whether to send tracking information to sites they visit. | |
|
||||
|Disabled |1 |1 |Never sends tracking information. | |
|
||||
|Enabled<br>**(default)** |1 |1 |Sends tracking information, including to the third parties whose content may be hosted on the sites visited. | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
#### ADMX info
|
||||
- **GP English name:** Configure Do Not Track
|
||||
- **GP name:** AllowDoNotTrack
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[AllowDoNotTrack](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowdonottrack)
|
||||
- **Supported devices:** Desktop and Mobile
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowDoNotTrack
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HLKM\\Software\\Policies\\Microsoft\\MicrosoftEdge\\Main
|
||||
- **Value name:** DoNotTrack
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
<hr>
|
@ -0,0 +1,55 @@
|
||||
<!-- ## Configure kiosk reset after idle timeout -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10, version 1810*<br>
|
||||
>*Default setting: 5 minutes*
|
||||
|
||||
[!INCLUDE [configure-kiosk-reset-after-idle-timeout-shortdesc](../shortdesc/configure-kiosk-reset-after-idle-timeout-shortdesc.md)]
|
||||
|
||||
For this policy to work, you must leave the default setting (not configured) for the Configure kiosk mode policy. You need to configure Microsoft Edge in assigned access for this policy to take effect; otherwise, Microsoft Edge ignores these settings. To learn more about assigned access and kiosk configuration, see [Configure kiosk and shared devices running Windows desktop editions](https://aka.ms/E489vw).
|
||||
|
||||
### Allowed values
|
||||
|
||||
- 0-1440 - Any integer from 1-1440 (5 minutes is the default) – The time in minutes from the last user activity before Microsoft Edge kiosk mode resets to the default kiosk configuration. A confirmation dialog displays for the user to cancel or continue and automatically continues after 30 seconds.
|
||||
|
||||
- 0 – No restart after idle timer.
|
||||
|
||||
### ADMX info and settings
|
||||
#### ADMX info
|
||||
- **GP English name:** Configure kiosk reset after idle timeout
|
||||
- **GP name:** ConfigureKioskResetAfterIdleTimeout
|
||||
- **GP element:** ConfigureKioskResetAfterIdleTimeout_TextBox
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[ConfigureKioskResetAfterIdleTimeout]()
|
||||
- **Supported devices:** Desktop
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskResetAfterIdleTimeout
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HLKM\Software\Policies\Microsoft\MicrosoftEdge\KioskMode
|
||||
- **Value name:**ConfigureKioskResetAfterIdleTimeout
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
|
||||
|
||||
### Related policies
|
||||
|
||||
[Configure kiosk mode](#configure-microsoft-edge-kiosk-mode-include): [!INCLUDE [configure-kiosk-mode-shortdesc](../shortdesc/configure-kiosk-mode-shortdesc.md)]
|
||||
|
||||
|
||||
### Related topics:
|
||||
|
||||
- [Create a Kiosk Experience](https://aka.ms/Sed1cr)
|
||||
|
||||
- [Configure assigned access](https://aka.ms/Xscxri)
|
||||
|
||||
- [Configure a Windows 10 kiosk that runs multiple apps](https://aka.ms/Ckmq4n)
|
||||
|
||||
- [Set up a kiosk or digital signage on Windows 10 Pro, Enterprise, or Education](https://aka.ms/R4cdff)
|
||||
|
||||
- [Kiosk apps for assigned access: Best practices](https://aka.ms/H1s8y4)
|
||||
|
||||
- [Guidelines for choosing an app for assigned access (kiosk mode)](https://aka.ms/Ul7dw3)
|
||||
|
||||
<br>
|
@ -0,0 +1,121 @@
|
||||
<!-- ## Configure the Enterprise Mode Site List -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10*<br>
|
||||
>*Default setting: Disabled or not configured*
|
||||
|
||||
|
||||
[!INCLUDE [configure-enterprise-mode-site-list-shortdesc](../shortdesc/configure-enterprise-mode-site-list-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled or not configured<br>**(default)** |0 |0 |Turned off. Microsoft Edge does not check the Enterprise Mode Site List, and in this case, users might experience problems while using legacy apps. | |
|
||||
|Enabled |1 |1 |Turned on. Microsoft Edge checks the Enterprise Mode Site List if configured. If an XML file exists in the cache container, IE11 waits 65 seconds and then checks the local cache for a new version from the server. If the server has a different version, Microsoft Edge uses the server file and stores it in the cache container. If you already use a site list, Enterprise Mode continues to work during the 65 second, but uses the existing file. To add the location to your site list, enter it in the **{URI}** box.<p>For details on how to configure the Enterprise Mode Site List, see the [Instructions](#instructions) section below. | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
|
||||
#### ADMX info
|
||||
- **GP English name:** Configure the Enterprise Mode Site List
|
||||
- **GP name:** EnterpriseModeSiteList
|
||||
- **GP element:** EnterSiteListPrompt
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[EnterpriseModeSiteList](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-enterprisemodesitelist)
|
||||
- **Supported devices:** Desktop and Mobile
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/EnterpriseModeSiteList
|
||||
- **Data type:** String
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HLKM\Software\Policies\Microsoft\MicrosoftEdge\Main\EnterpriseMode
|
||||
- **Value name:** SiteList
|
||||
- **Value type:** REG_SZ
|
||||
|
||||
### Related Policies
|
||||
|
||||
[Show message opening sites in IE](../available-policies.md#show-message-when-opening-sites-in-internet-explorer):
|
||||
[!INCLUDE
|
||||
[show-message-when-opening-sites-in-ie-shortdesc](../shortdesc/show-message-when-opening-sites-in-ie-shortdesc.md)]
|
||||
|
||||
### Related Documents
|
||||
|
||||
- [Use Enterprise Mode to improve compatibility](https://docs.microsoft.com/en-us/microsoft-edge/deploy/emie-to-improve-compatibility). If you have specific web sites and apps that you know have compatibility problems with Microsoft Edge, you can use the Enterprise Mode site list so that the web sites will automatically open using Internet Explorer 11. Additionally, if you know that your intranet sites aren't going to work properly with Microsoft Edge, you can set all intranet sites to automatically open using IE11. Using Enterprise Mode means that you can continue to use Microsoft Edge as your default browser, while also ensuring that your apps continue working on IE11.
|
||||
|
||||
- [Use the Enterprise Mode Site List Manager](https://docs.microsoft.com/en-us/internet-explorer/ie11-deploy-guide/use-the-enterprise-mode-site-list-manager). You can use IE11 and the Enterprise Mode Site List Manager to add individual website domains and domain paths and to specify whether the site renders using Enterprise Mode or the default mode.
|
||||
|
||||
- [Enterprise Mode for Internet Explorer 11](https://docs.microsoft.com/en-us/internet-explorer/ie11-deploy-guide/enterprise-mode-overview-for-ie11). Learn how to set up and use Enterprise Mode and the Enterprise Mode Site List Manager in your company.
|
||||
|
||||
- [Enterprise Mode and the Enterprise Mode Site List](https://docs.microsoft.com/en-us/internet-explorer/ie11-deploy-guide/what-is-enterprise-mode). Internet Explorer and Microsoft Edge can work together to support your legacy web apps, while still defaulting to the higher bar for security and modern experiences enabled by Microsoft Edge. Working with multiple browsers can be difficult, particularly if you have a substantial number of internal sites. To help manage this dual-browser experience, we are introducing a new web tool specifically targeted towards larger organizations: the [Enterprise Mode Site List Portal](https://github.com/MicrosoftEdge/enterprise-mode-site-list-portal).
|
||||
|
||||
- [Enterprise Mode and the Enterprise Mode Site List XML file](https://docs.microsoft.com/en-us/internet-explorer/ie11-deploy-guide/what-is-enterprise-mode#enterprise-mode-and-the-enterprise-mode-site-list-xml-file). The Enterprise Mode Site List is an XML document that specifies a list of sites, their compat mode, and their intended browser. Using Enterprise Mode Site List Manager (schema v.2), you can automatically start a webpage using a specific browser. In the case of IE11, the webpage can also be launched in a specific compat mode, so it always renders correctly. Your users can easily view this site list by typing about:compat in either Microsoft Edge or IE11.
|
||||
|
||||
### Scenarios
|
||||
|
||||
Certain sites or web apps still use ActiveX controls, Browser Helper Objects, VBScript, or other legacy technology, which Microsoft Edge does not support. If you have web sites or web apps that still use this technology and need IE11 to run, you must use Enterprise Mode and the Enterprise Mode Site List to address common compatibility issues with legacy apps. Enterprise Mode is a compatibility
|
||||
mode that runs on Internet Explorer 11 and Microsoft Edge on Windows 10 devices.
|
||||
|
||||
### Instructions
|
||||
|
||||
|
||||
You build your Enterprise Mode list with the Enterprise Mode Site List Manager and apply it with Group Policy.
|
||||
<!-- work on these instructions. it seems like it doesn't flow from this policy to the Use the Enterprise Mode IE website list policy. Give me more reasons to click on the link. and why is it equivalent to the this policy? -->
|
||||
To turn it on for IE 11, you enable [Use the Enterprise Mode IE website list](https://docs.microsoft.com/en-us/internet-explorer/ie11-deploy-guide/turn-on-enterprise-mode-and-use-a-site-list),
|
||||
which is the equivalent to this Microsoft Edge policy.
|
||||
|
||||
>[!NOTE]
|
||||
>We recommend that you store and download your website list from a secure web server (https://), to help protect against data tampering. After the list is downloaded, it is stored locally on your user's computer so if the centralized file location is unavailable, they can still use Enterprise Mode.
|
||||
|
||||
- [Step 1. Turn on Enterprise Mode](#step-1-turn-on-enterprise-mode)
|
||||
- [Step 2. (Optional) Import your Enterprise Mode Site List](#step-2-optional-import-your-enterprise-mode-site-list)
|
||||
- [Step 3. Add sites to your list](#step-3-add-sites-to-your-list)
|
||||
- [Step 4. Turn on Enterprise Mode and use a site list](#step-4-set-up-microsoft-edge-to-use-the-enterprise-mode-site-list)
|
||||
- [Step 5. Send all intranet sites to Internet Explorer 11](#step-5-send-all-intranet-sites-to-internet-explorer-11)
|
||||
|
||||
#### Step 1. Turn on Enterprise Mode
|
||||
|
||||
[!INCLUDE [turn-on-enterprise-mode-and-use-a-site-list](../../enterprise-mode/turn-on-enterprise-mode-and-use-a-site-list.md)]
|
||||
|
||||
#### Step 2. (Optional) Import your Enterprise Mode Site List
|
||||
|
||||
[!INCLUDE [import-into-the-enterprise-mode-site-list-mgr-include](../../includes/import-into-the-enterprise-mode-site-list-mgr-include.md)]
|
||||
|
||||
#### Step 3. Add sites to your list
|
||||
|
||||
1. In the Enterprise Mode Site List Manager, click **Add**.
|
||||
|
||||
2. In the **URL** box, type or paste the URL for the website experiencing compatibility problems, like *\<domain\>*.com or *\<domain\>*.com/*\<path\>*.<p>You do not need to include the `http://` or `https://` designation. The tool automatically tries both versions during validation.
|
||||
|
||||
3. In the **Notes about URL**, enter any comments about the website.<p>Administrators can only see comments while they are in this tool.
|
||||
|
||||
4. Click in the **Open in IE** column next to the URL that should open in IE11.<p>The path within a domain can require a different compatibility mode from the domain itself. For example, the domain might look fine in the default IE11 browser, but the path might have problems and require the use of Enterprise Mode. If you added the domain previously, your original compatibility choice is still selected. However, if the domain is new, Enterprise Mode is automatically selected.
|
||||
|
||||
5. Click **Save** to validate your website and to add it to the site list for your enterprise.<p>If your site passes validation, it is added to the global compatibility list. If the site fails to pass validation, an error message displays explaining the problem. You can either cancel the site or ignore the validation problem and add it to your list anyway.
|
||||
|
||||
6. On the **File** menu, go to where you want to save the file, and then click **Save to XML**.<p>You can save the file locally or to a network share. However, you must make sure you deploy it to the location specified in your Group Policy setting.
|
||||
|
||||
#### Step 4. Set up Microsoft Edge to use the Enterprise Mode Site List
|
||||
|
||||
add the steps here, if there are steps
|
||||
|
||||
#### Step 5. Send all intranet sites to Internet Explorer 11
|
||||
|
||||
Enabling the Send all intranet sites to Internet Explorer 11 policy automatically opens all intranet sites in IE11, even if the users have Microsoft Edge as their default browser.
|
||||
|
||||
1. In Group Policy Editor, navigate to:<p>**Computer Configuration\\Administrative Templates\\Windows Components\\File Explorer\\Set a default associations configuration file**
|
||||
|
||||
2. Click **Enabled** and then refresh the policy and then vew the affected sites in Microsoft Edge.<p>A message displays saying that the page needs to open in IE. At the same time, the page opens in IE11 automatically; in a new frame if it is not yet running, or in a new tab.
|
||||
|
||||
### Troubleshooting
|
||||
|
||||
- If an XML already exists, make sure it is syntactically correct.
|
||||
|
||||
- If an update or delete operation failed, check if the entry already exists in the site list.
|
||||
|
||||
- If a user is not able to sign in, the account might not have access. Check if the account is marked as active.
|
||||
|
||||
- Check if the Enterprise Mode Site List is loaded correctly by browsing to "about:compat" in both Microsoft Edge and Internet Explorer. Deselect the Microsoft Compatibility List to see your custom entries.
|
||||
|
||||
|
||||
<hr>
|
61
browsers/edge/includes/configure-favorites-bar-include.md
Normal file
@ -0,0 +1,61 @@
|
||||
<!-- ##Configure Favorites Bar -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10, version 1810*<br>
|
||||
>*Default setting: Not configured (Hidden)*
|
||||
|
||||
|
||||
[!INCLUDE [allow-favorites-bar-shortdesc](../shortdesc/configure-favorites-bar-shortdesc.md)]
|
||||
|
||||
If you want the favorites bar to show in kiosk mode, … \<action\>
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Not configured<br>**(default)** |Blank |Blank |Hides the favorites bar but show it on the Start and New tab pages. The favorites bar toggle, in Settings, is set to Off but enabled allowing users to make changes. | |
|
||||
|Disabled |0 |0 |Hides the favorites bar on all pages. Also, the favorites bar toggle, in Settings, is set to Off and disabled preventing users from making changes. Microsoft Edge also hides the “show bar/hide bar” option in the context menu. | |
|
||||
|Enabled |1 |1 |Shows the favorites bar on all pages. Also, the favorites bar toggle, in Settings, is set to On and disabled preventing users from making changes. Microsoft Edge also hides the “show bar/hide bar” option in the context menu. | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
#### ADMX info
|
||||
- **GP English name:** Configure Favorites Bar
|
||||
- **GP name:** ConfigureFavoritesBar
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[ConfigureFavoritesBar]()
|
||||
- **Supported devices:** Desktop and Mobile
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureFavoritesBar
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HLKM\Software\Policies\Microsoft\MicrosoftEdge\Main
|
||||
- **Value name:** ConfigureFavoritesBar
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
### Scenarios
|
||||
|
||||
Chrome compete for enterprise policies. IT admin may want to have the bar always
|
||||
show (perhaps with favorites provisioned via other policy), or to never show it
|
||||
in their enterprise.
|
||||
|
||||
Kiosk mode scenario, where favorites bar is never needed; this policy then
|
||||
allows the bar to be hidden and never seen. Alternatively, they may always want
|
||||
to always show the bar, with helpful links for example.
|
||||
|
||||
As Commercial (Enterprise and EDU) organizations migrate to Windows 10 IT Admins
|
||||
and IT Decision Makers are evaluating whether to set Edge as their default
|
||||
browser. When making the decision they consider browser manageability and
|
||||
configuration. Today Google Chrome provides a broader flexibility to configure
|
||||
the browser via policies. With Edge positioned as the modern browser replacement
|
||||
for IE, at minimum, they expect Edge to have the same level of policy support as
|
||||
Google Chrome.
|
||||
|
||||
As a workaround to the lack of Edge policies IT Admins are directly editing the
|
||||
registry to manipulate Edge. This practice is not recommended and has
|
||||
potentially negative consequences that impact Edge reliability. Edge needs to
|
||||
improve its policy story to help IT Admins easily configure it to meet their
|
||||
organizations requirements.
|
||||
|
||||
<hr>
|
6
browsers/edge/includes/configure-favorites-include.md
Normal file
@ -0,0 +1,6 @@
|
||||
<!-- ## Configure Favorites -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10, version 1511 or later*<br>
|
||||
>*Default setting: Disabled or not configured*
|
||||
|
||||
|
||||
>>deprecated
|
66
browsers/edge/includes/configure-home-button-include.md
Normal file
@ -0,0 +1,66 @@
|
||||
<!-- ## Configure Home Button -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10*<br>
|
||||
>*Default setting: Disabled or not configured (Show home button and load the Start page)*
|
||||
|
||||
|
||||
[!INCLUDE [configure-home-button-shortdesc](../shortdesc/configure-home-button-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled or not configured<br>**(default)** |0 |0 |Shows the home button and loads the Start page. | |
|
||||
|Enabled |1 |1 |Shows the home button and loads the New tab page. | |
|
||||
|Enabled |2 |2 |Shows the home button and loads the custom URL defined in the Set Home Button URL policy. | |
|
||||
|Enabled |3 |3 |Hides the home button. | |
|
||||
---
|
||||
|
||||
With these values, you can do any of the following configurations:
|
||||
|
||||
#### If you want to show the home button, load the New tab page, and prevent users from making changes to the settings.
|
||||
1. **Configure Home Button:** Enable and select the _Show home button & set to New tab page_ option.
|
||||
2. **Set Home Button URL:** Leave blank or not configured.
|
||||
3. **Unlock Home Button:** Leave disabled or not configured.
|
||||
|
||||
#### If you want to show the home button, load the New tab page, and let users make changes:
|
||||
1. **Configure Home Button:** Enable and select the _Show home button & set to New tab page_ option.
|
||||
2. **Set Home Button URL:** Leave blank or not configured.
|
||||
3. **Unlock Home Button:** Enable to let users make changes.
|
||||
|
||||
#### If you want to show the home button, load a custom URL, and prevent users from making changes:
|
||||
1. **Configure Home Button:** Enable and select the _Show the home button & set a specific page_ option.
|
||||
2. **Set Home Button URL:** Enter a URL in string format, for example, https://www.bing.com.
|
||||
3. **Unlock Home Button:** Leave disabled or not configured.
|
||||
|
||||
#### If you want to show the home button, load a custom URL, and let users make changes:
|
||||
1. **Configure Home Button:** Enable and select the _Show the home button & set a specific page_ option.
|
||||
2. **Set Home Button URL:** Enter a URL in string format, for example, https://www.bing.com.
|
||||
3. **Unlock Home Button:** Enable to let users make changes.
|
||||
|
||||
|
||||
### ADMX info and settings
|
||||
#### ADMX info
|
||||
- **GP English name:** Configure Home Button
|
||||
- **GP name:** ConfigureHomeButton
|
||||
- **GP element:** ConfigureHomeButtonDropdown
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[ConfigureHomeButton]()
|
||||
- **Supported devices:** Desktop and Mobile
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureHomeButton
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HLKM\Software\Policies\Microsoft\MicrosoftEdge\Internet Settings
|
||||
- **Value name:** ConfigureHomeButton
|
||||
- **Value type:** REG_SZ
|
||||
|
||||
### Related policies
|
||||
|
||||
- [Set Home Button URL](#set-new-tab-url-include): [!INCLUDE [set-home-button-url-shortdesc](../shortdesc/set-home-button-url-shortdesc.md)]
|
||||
|
||||
- [Unlock Home Button](#unlock-home-button-include): [!INCLUDE [unlock-home-button-shortdesc](../shortdesc/unlock-home-button-shortdesc.md)]
|
||||
|
||||
<hr>
|
32
browsers/edge/includes/configure-inprivate-include.md
Normal file
@ -0,0 +1,32 @@
|
||||
## Configure InPrivate
|
||||
|
||||
>*Supported versions: Microsoft Edge on Windows 10*<br>
|
||||
>*Default setting: Disabled or not configured
|
||||
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
| | | | | |
|
||||
| | | | | |
|
||||
| | | | | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
#### ADMX info
|
||||
- **GP English name:**
|
||||
- **GP name:**
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[]()
|
||||
- **Supported devices:** Desktop and Mobile
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HLKM\Software\Policies\Microsoft\MicrosoftEdge\
|
||||
- **Value name:**
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
<hr>
|
@ -0,0 +1,70 @@
|
||||
|
||||
<!-- ## Configure kiosk mode -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10, version 1810*<br>
|
||||
>*Default setting: Not configured*
|
||||
|
||||
[!INCLUDE [configure-kiosk-mode-shortdesc](../shortdesc/configure-kiosk-mode-shortdesc.md)]
|
||||
|
||||
|
||||
You need to configure Microsoft Edge in assigned access for this policy to take effect; otherwise, Microsoft Edge ignores these settings. To learn more about assigned access and kiosk configuration, see [Configure kiosk and shared devices running Windows desktop editions](https://aka.ms/E489vw).
|
||||
|
||||
>[!NOTE]
|
||||
>If you do not configure the [Configure kiosk reset after idle timeout](../available-policies.md#configure-kiosk-reset-after-idle-timeout) policy and you enable this policy, Microsoft Edge kiosk resets after 5 minutes of idle time.
|
||||
|
||||
### Allowed values
|
||||
|
||||
| | |
|
||||
|---|---|
|
||||
|(0) Default or not configured |<ul><li>If it’s a single app, it runs InPrivate full screen for digital signage or interactive displays.</li><li>If it’s one of many apps, Microsoft Edge runs as normal.</li></ul> |
|
||||
|(1) Enabled |<ul><li>If it’s a single app, it runs a limited multi-tab version of InPrivate and is the only app available for public browsing. Users can’t minimize, close, or open windows or customize Microsoft Edge, but can clear browsing data and downloads and restart by clicking “End session.” You can configure Microsoft Edge to restart after a period of inactivity by using the “Configure kiosk reset after idle timeout” policy.</li><li>If it’s one of many apps, it runs in a limited multi-tab version of InPrivate for public browsing with other apps. Users can minimize, close, and open multiple InPrivate windows, but they can’t customize Microsoft Edge.</li></ul> |
|
||||
---
|
||||
|
||||
For single app assigned access:
|
||||
|
||||
- 0 = Full-screen digital signage and interactive display
|
||||
|
||||
- 1 = InPrivate public browsing (limited features)
|
||||
|
||||
For multi-app assigned access:
|
||||
|
||||
- 0 = Normal Microsoft Edge running in assigned access
|
||||
|
||||
- 1 = InPrivate public browsing
|
||||
|
||||
### ADMX info and settings
|
||||
#### ADMX info
|
||||
- **GP English name:** Configure kiosk mode
|
||||
- **GP name:** ConfigureKioskMode
|
||||
- **GP element:** ConfigureKioskMode_TextBox
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
**<ul><li>**MDM name:** Browser/[ConfigureKioskMode]()
|
||||
**Supported devices:** Desktop
|
||||
**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskMode
|
||||
**Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
**<ul><li>**Path:** HLKM\Software\Policies\Microsoft\MicrosoftEdge\KioskMode
|
||||
**Value name:** ConfigureKioskMode
|
||||
**Value type:** REG_SZ
|
||||
|
||||
### Related policies
|
||||
[Configure kiosk reset after idle timeout](#configure-edge-kiosk-reset-idle-timeout-include): [!INCLUDE [configure-kiosk-reset-after-idle-timeout-shortdesc](../shortdesc/configure-kiosk-reset-after-idle-timeout-shortdesc.md)]
|
||||
|
||||
### Related documents
|
||||
|
||||
- [Create a Kiosk Experience](https://aka.ms/Sed1cr)
|
||||
|
||||
- [Configure assigned access](https://aka.ms/Xscxri)
|
||||
|
||||
- [Configure a Windows 10 kiosk that runs multiple apps](https://aka.ms/Ckmq4n)
|
||||
|
||||
- [Set up a kiosk or digital signage on Windows 10 Pro, Enterprise, or Education](https://aka.ms/R4cdff)
|
||||
|
||||
- [Kiosk apps for assigned access: Best practices](https://aka.ms/H1s8y4)
|
||||
|
||||
- [Guidelines for choosing an app for assigned access (kiosk mode)](https://aka.ms/Ul7dw3)
|
||||
|
||||
<hr>
|
135
browsers/edge/includes/configure-open-edge-with-include.md
Normal file
@ -0,0 +1,135 @@
|
||||
<!-- Configure Open Microsoft Edge With -->
|
||||
|
||||
>*Supported versions: Microsoft Edge on Windows 10, version 1810*<br>
|
||||
>*Default setting: Enabled (A specific page or pages)*
|
||||
|
||||
[!INCLUDE [configure-open-microsoft-edge-with-shortdesc](../shortdesc/configure-open-microsoft-edge-with-shortdesc.md)]
|
||||
|
||||
**Version 1703 or later:**<br>If you do not want to send traffic to Microsoft, use the \<about:blank\> value, which honors both domain and non-domain-joined devices when it is the only configured URL.
|
||||
|
||||
**Version 1810:**<br>When you enable this policy and select an option, and also enable the Configure Start Pages policy, Microsoft Edge ignores the Configure Start Page policy.<p>
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |
|
||||
|---|---|---|---|
|
||||
|Not configured |Blank |Blank |If you don't configure this policy and you enable the Disable Lockdown of Start Pages policy, users can change or customize the Start page. |
|
||||
|Enabled |0 |0 |Loads Start page. |
|
||||
|Enabled |1 |1 |Loads New tab page. |
|
||||
|Enabled |2 |2 |Loads previous pages. |
|
||||
|Enabled<br>**(default)** |3 |3 |Loads a specific page or pages. |
|
||||
---
|
||||
|
||||
### Configuration combinations
|
||||
| **Configure Open Microsoft Edge With** | **Configure Start Pages** | **Disabled Lockdown of Start Pages** | **Results** |
|
||||
| --- | --- | --- | --- |
|
||||
| Enabled (applies to all options) | Enabled – String | Enabled (all configured start pages are editable) | [\#1: Load URLs defined in the Configure Open Microsoft Edge With policy, and allow users to edit all configured start pages.](#1-load-the-urls-defined-in-the-configure-open-microsoft-edge-with-policy-and-allow-users-to-edit-all-configured-start-pages) |
|
||||
| Disabled or not configured | Enabled – String | Enabled (any Start page configured in the Configured Start Pages policy) | [\#2: Load any start page and allow users to edit their Start pages.](#2-load-any-start-page-configured-using-the-configured-start-pages-policy-and-allow-users-to-edit-their-start-pages) |
|
||||
| Enabled (Start page) | Enabled – String | Blank or not configured | [\#3: Load Start page(s) and prevent users from changing it.](#3-load-the-start-pages-and-prevent-users-from-making-changes) |
|
||||
| Enabled (New tab page) | Enabled – String | Blank or not configured | [\#4: Load New tab page and prevent users from changing it.](#4-load-the-new-tab-page-and-prevent-users-from-making-changes) |
|
||||
| Enabled (Previous pages) | Enabled – String | Blank or not configured | [\#5: Load previously opened pages and prevent users from changing it.](#5-load-the-previously-opened-pages-that-were-opened-when-microsoft-edge-last-closed-and-prevent-users-from-making-changes) |
|
||||
| Enabled (A specific page or pages) | Enabled – String | Blank or not configured | [\#6: Load a specific page or pages and prevent users from changing it.](#6-load-a-specific-page-or-pages-defined-in-the-configure-start-pages-policy-and-prevent-users-from-making-changes) |
|
||||
| Enabled (A specific page or pages) | Enabled – String | Enabled (any Start page configured in Configure Start Pages policy) | [\#7: Load a specific page or pages and allow users to make changes to their Start page.](#7-load-a-specific-page-or-pages-defined-in-the-configure-start-pages-policy-and-allow-users-to-make-changes-to-their-start-page) |
|
||||
| N/A | Blank or not configured | N/A | Microsoft Edge loads the pages specified in App settings as the default Start pages. |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
#### ADMX info
|
||||
- **GP English name:** Configure Open Microsoft Edge With
|
||||
- **GP name:** ConfigureOpenMicrosoftEdgeWith
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[ConfigureOpenEdgeWith]()
|
||||
- **Supported devices:** Desktop
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureOpenEdgeWith
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HLKM\Software\Policies\Microsoft\MicrosoftEdge\Internet Settings
|
||||
- **Value name:** ConfigureOpenEdgeWith
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
### Related policies
|
||||
|
||||
- [Configure Start Pages](#configure-start-pages-include): [!INCLUDE [configure-start-pages-shortdesc](../shortdesc/configure-start-pages-shortdesc.md)]
|
||||
|
||||
- [Disable Lockdown of Start Pages](#disable-lockdown-of-start-pages-include): [!INCLUDE [disable-lockdown-of-start-pages-shortdesc](../shortdesc/disable-lockdown-of-start-pages-shortdesc.md)]
|
||||
|
||||
### Scenarios
|
||||
|
||||
If you want to make changes to this policy:<ol><li>Set the Disabled Lockdown of Start Pages to not configured.</li><li>Make changes to the Configure Open Microsoft With policy.</li><li>Enable the Disabled Lockdown of Start Pages.</li></ol>
|
||||
|
||||
#### \#1: Load URLs defined in the Configure Open Microsoft Edge With policy, and allow users to edit all configured start pages.
|
||||
|
||||
1. Enable the **Configure Open Microsoft Edge With** policy. Applies to all options for this policy. <p>
|
||||
|
||||
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
|
||||
|
||||
3. Enable the **Disabled Lockdown of Start Pages** policy by selecting *All configured start pages are editable*.
|
||||
|
||||
---
|
||||
|
||||
#### \#2: Load any start page and allow users to edit their Start pages.
|
||||
|
||||
1. Disable or don't configure the **Configure Open Microsoft Edge With** policy.
|
||||
|
||||
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets in the following format:<p> \<support.contoso.com\>\<support.microsoft.com\>
|
||||
|
||||
3. Enable the **Disabled Lockdown of Start Pages** policy by selecting *Start pages are not editable*.
|
||||
|
||||
---
|
||||
|
||||
#### \#3: Load Start page(s) and prevent users from changing it.
|
||||
|
||||
1. Enable the **Configure Open Microsoft Edge With** policy by selecting *Start page*.<p>
|
||||
|
||||
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
|
||||
|
||||
3. Disable or don't configure the **Disabled Lockdown of Start Pages** policy.
|
||||
|
||||
---
|
||||
|
||||
#### \#4: Load New tab page and prevent users from changing it..
|
||||
|
||||
1. Enable the **Configure Open Microsoft Edge With** policy by selecting *New tab page*.<p>
|
||||
|
||||
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
|
||||
|
||||
3. Disable or don't configure the **Disabled Lockdown of Start Pages** policy.
|
||||
|
||||
---
|
||||
|
||||
|
||||
#### \#5: Load previously opened pages and prevent users from changing it.
|
||||
|
||||
1. Enable the **Configure Open Microsoft Edge With** policy by selecting *Previous pages*.<p>
|
||||
|
||||
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
|
||||
|
||||
3. Disable or don't configure the **Disabled Lockdown of Start Pages** policy.
|
||||
|
||||
---
|
||||
|
||||
|
||||
#### \#6: Load a specific page or pages and prevent users from changing it.
|
||||
|
||||
1. Enable the **Configure Open Microsoft Edge With** policy by selecting *A specific page or pages*.<p>
|
||||
|
||||
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
|
||||
|
||||
3. Disable or don't configure the **Disabled Lockdown of Start Pages** policy.
|
||||
|
||||
---
|
||||
|
||||
|
||||
#### \#7: Load a specific page or pages and allow users to make changes to their Start page.
|
||||
|
||||
1. Enable the **Configure Open Microsoft Edge With** policy by selecting *A specific page or pages*. <p>
|
||||
|
||||
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
|
||||
|
||||
3. Enable **Disabled Lockdown of Start Pages** by selecting *Start pages are not editable*.
|
||||
|
||||
---
|
39
browsers/edge/includes/configure-password-manager-include.md
Normal file
@ -0,0 +1,39 @@
|
||||
<!-- ## Configure Password Manager -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10*<br>
|
||||
>*Default setting: Enabled (Allowed)
|
||||
|
||||
[!INCLUDE [configure-password-manager-shortdesc](../shortdesc/configure-password-manager-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Not configured |Blank |Blank |Users can choose whether to save and manage passwords locally. | |
|
||||
|Disabled |0 |no |Not allowed. | |
|
||||
|Enabled<br>**(default)** |1 |yes |Allowed. | |
|
||||
---
|
||||
|
||||
Verify not allowed/disabled settings:
|
||||
1. In the upper-right corner of Microsoft Edge or Microsoft Edge for Windows 10 Mobile, click or tap ellipses (…).
|
||||
2. Click **Settings** and select **View Advanced settings**.
|
||||
3. Verify the settings **???** are greyed out.
|
||||
|
||||
### ADMX info and settings
|
||||
#### ADMX info
|
||||
- **GP English name:** Configure Password Manager
|
||||
- **GP name:** AllowPasswordManager
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[AllowPasswordManager](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowpasswordmanager)
|
||||
- **Supported devices:** Desktop and Mobile
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowPasswordManager
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HLKM\Software\Policies\Microsoft\MicrosoftEdge\Main
|
||||
- **Value name:** FormSuggest Passwords
|
||||
- **Value type:** REG_SZ
|
||||
|
||||
<hr>
|
34
browsers/edge/includes/configure-pop-up-blocker-include.md
Normal file
@ -0,0 +1,34 @@
|
||||
<!-- ## Configure Pop-up Blocker -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10*<br>
|
||||
>*Default setting: Disabled (Turned off)*
|
||||
|
||||
[!INCLUDE [configure-pop-up-blocker-shortdesc](../shortdesc/configure-pop-up-blocker-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Not configured |Blank |Blank |Users can choose to use Pop-up Blocker. | |
|
||||
|Disabled<br>**(default)** |0 |0 |Turns off Pop-up Blocker letting pop-ups windows appear. | |
|
||||
|Enabled |1 |1 |Turns on Pop-up Blocker stopping pop-up windows from appearing. | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
#### ADMX info
|
||||
- **GP English name:** Configure Pop-up Blocker
|
||||
- **GP name:** AllowPopups
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[AllowPopups](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowpopups)
|
||||
- **Supported devices:** Desktop
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowPopups
|
||||
- **Data type:** Integer
|
||||
|
||||
### Registry
|
||||
- **Path:** HLKM\\Software\\Policies\\Microsoft\\MicrosoftEdge\\Main
|
||||
- **Value name:** AllowPopups
|
||||
- **Value type:** REG_SZ
|
||||
|
||||
<hr>
|
@ -0,0 +1,34 @@
|
||||
<!-- ## Configure search suggestions in Address bar -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10*<br>
|
||||
>*Default setting: Not configured*
|
||||
|
||||
[!INCLUDE [configure-search-suggestions-in-address-bar-shortdesc](../shortdesc/configure-search-suggestions-in-address-bar-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Not configured<br>**(default)** |Blank |Blank |Users can choose to see search suggestions. | |
|
||||
|Disabled |0 |0 |Hides the search suggestions. | |
|
||||
|Enabled |1 |1 |Shows the search suggestions. | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
#### ADMX info
|
||||
- **GP English name:** Configure search suggestions in Address bar
|
||||
- **GP name:** AllowSearchSuggestionsinAddressBar
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[AllowSearchSuggestionsinAddressBar](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowsearchsuggestionsinaddressbar)
|
||||
- **Supported devices:** Desktop and Mobile
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowSearchSuggestionsinAddressBar
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HLKM\\Software\\Policies\\Microsoft\\MicrosoftEdge\\SearchScopes
|
||||
- **Value name:** ShowSearchSuggestionsGlobal
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
<hr>
|
129
browsers/edge/includes/configure-start-pages-include.md
Normal file
@ -0,0 +1,129 @@
|
||||
<!-- ## Configure Start Pages -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10, version 1703 or later*<br>
|
||||
>*Default setting: Blank or not configured (Load pages specified in App settings)*
|
||||
|
||||
[!INCLUDE [configure-start-pages-shortdesc](../shortdesc/configure-start-pages-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Not configured |Blank |Blank |Microsoft Edge loads the pages specified in App settings as the default Start pages. | |
|
||||
|Enabled | | |Enter URLs to the pages, separating multiple pages by using angle brackets in the following format:<p>\<support.contoso.com\>\<support.microsoft.com\><p>**Version 1703 or later:**<br>If you do not want to send traffic to Microsoft, use the \<about:blank\> value, which honors both domain and non-domain-joined devices when it is the only configured URL.<p>**Version 1810:**<br>When you enable the Configure Open Microsoft Edge With policy with an option selected, and you enable the Configure Start Pages policy, Microsoft Edge ignores the Configure Start Page policy. | |
|
||||
---
|
||||
|
||||
### Configuration combinations
|
||||
| **Configure Open Microsoft Edge With** | **Configure Start Pages** | **Disabled Lockdown of Start Pages** | **Results** |
|
||||
| --- | --- | --- | --- |
|
||||
| Enabled (applies to all options) | Enabled – String | Enabled (all configured start pages are editable) | [\#1: Load URLs defined in the Configure Open Microsoft Edge With policy, and allow users to edit all configured start pages.](#1-load-the-urls-defined-in-the-configure-open-microsoft-edge-with-policy-and-allow-users-to-edit-all-configured-start-pages) |
|
||||
| Disabled or not configured | Enabled – String | Enabled (any Start page configured in the Configured Start Pages policy) | [\#2: Load any start page and allow users to edit their Start pages.](#2-load-any-start-page-configured-using-the-configured-start-pages-policy-and-allow-users-to-edit-their-start-pages) |
|
||||
| Enabled (Start page) | Enabled – String | Blank or not configured | [\#3: Load Start page(s) and prevent users from changing it.](#3-load-the-start-pages-and-prevent-users-from-making-changes) |
|
||||
| Enabled (New tab page) | Enabled – String | Blank or not configured | [\#4: Load New tab page and prevent users from changing it.](#4-load-the-new-tab-page-and-prevent-users-from-making-changes) |
|
||||
| Enabled (Previous pages) | Enabled – String | Blank or not configured | [\#5: Load previously opened pages and prevent users from changing it.](#5-load-the-previously-opened-pages-that-were-opened-when-microsoft-edge-last-closed-and-prevent-users-from-making-changes) |
|
||||
| Enabled (A specific page or pages) | Enabled – String | Blank or not configured | [\#6: Load a specific page or pages and prevent users from changing it.](#6-load-a-specific-page-or-pages-defined-in-the-configure-start-pages-policy-and-prevent-users-from-making-changes) |
|
||||
| Enabled (A specific page or pages) | Enabled – String | Enabled (any Start page configured in Configure Start Pages policy) | [\#7: Load a specific page or pages and allow users to make changes to their Start page.](#7-load-a-specific-page-or-pages-defined-in-the-configure-start-pages-policy-and-allow-users-to-make-changes-to-their-start-page) |
|
||||
| N/A | Blank or not configured | N/A | Microsoft Edge loads the pages specified in App settings as the default Start pages. |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
#### ADMX info
|
||||
- **GP English name:** Configure Start pages
|
||||
- **GP name:** HomePages
|
||||
- **GP element:** HomePagesPrompt
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[HomePages](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-homepages)
|
||||
- **Supported devices:** Desktop
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/HomePages
|
||||
- **Data type:** String
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Internet Settings
|
||||
- **Value name:** ProvisionedHomePages
|
||||
- **Value type:** REG_SZ
|
||||
|
||||
|
||||
### Related policies
|
||||
|
||||
- [Disable Lockdown of Start Pages](#disable-lockdown-of-start-pages-include): [!INCLUDE [disable-lockdown-of-start-pages-shortdesc](../shortdesc/disable-lockdown-of-start-pages-shortdesc.md)]
|
||||
|
||||
- [Configure Start Pages](#configure-start-pages-include): [!INCLUDE [configure-start-pages-shortdesc](../shortdesc/configure-start-pages-shortdesc.md)]
|
||||
|
||||
### Scenarios
|
||||
|
||||
#### \#1: Load URLs defined in the Configure Open Microsoft Edge With policy, and allow users to edit all configured start pages.
|
||||
|
||||
1. Enable the **Configure Open Microsoft Edge With** policy. Applies to all options for this policy. <p>
|
||||
|
||||
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
|
||||
|
||||
3. Enable the **Disabled Lockdown of Start Pages** policy by selecting *All configured start pages are editable*.
|
||||
|
||||
---
|
||||
|
||||
#### \#2: Load any start page and allow users to edit their Start pages.
|
||||
|
||||
1. Disable or don't configure the **Configure Open Microsoft Edge With** policy.
|
||||
|
||||
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets in the following format:<p> \<support.contoso.com\>\<support.microsoft.com\>
|
||||
|
||||
3. Enable the **Disabled Lockdown of Start Pages** policy by selecting *Start pages are not editable*.
|
||||
|
||||
---
|
||||
|
||||
#### \#3: Load Start page(s) and prevent users from changing it.
|
||||
|
||||
1. Enable the **Configure Open Microsoft Edge With** policy by selecting *Start page*.<p>
|
||||
|
||||
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
|
||||
|
||||
3. Disable or don't configure the **Disabled Lockdown of Start Pages** policy.
|
||||
|
||||
---
|
||||
|
||||
#### \#4: Load New tab page and prevent users from changing it..
|
||||
|
||||
1. Enable the **Configure Open Microsoft Edge With** policy by selecting *New tab page*.<p>
|
||||
|
||||
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
|
||||
|
||||
3. Disable or don't configure the **Disabled Lockdown of Start Pages** policy.
|
||||
|
||||
---
|
||||
|
||||
|
||||
#### \#5: Load previously opened pages and prevent users from changing it.
|
||||
|
||||
1. Enable the **Configure Open Microsoft Edge With** policy by selecting *Previous pages*.<p>
|
||||
|
||||
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
|
||||
|
||||
3. Disable or don't configure the **Disabled Lockdown of Start Pages** policy.
|
||||
|
||||
---
|
||||
|
||||
|
||||
#### \#6: Load a specific page or pages and prevent users from changing it.
|
||||
|
||||
1. Enable the **Configure Open Microsoft Edge With** policy by selecting *A specific page or pages*.<p>
|
||||
|
||||
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
|
||||
|
||||
3. Disable or don't configure the **Disabled Lockdown of Start Pages** policy.
|
||||
|
||||
---
|
||||
|
||||
|
||||
#### \#7: Load a specific page or pages and allow users to make changes to their Start page.
|
||||
|
||||
1. Enable the **Configure Open Microsoft Edge With** policy by selecting *A specific page or pages*. <p>
|
||||
|
||||
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
|
||||
|
||||
3. Enable **Disabled Lockdown of Start Pages** by selecting *Start pages are not editable*.
|
||||
|
||||
---
|
||||
|
||||
<hr>
|
@ -0,0 +1,40 @@
|
||||
<!-- ## Configure Windows Defender SmartScreen -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10*<br>
|
||||
>*Default setting: Enabled (Turned on)*
|
||||
|
||||
[!INCLUDE [configure-windows-defender-smartscreen-shortdesc](../shortdesc/configure-windows-defender-smartscreen-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Not configured |Blank |Blank |Users can choose to use Windows Defender SmartScreen or not. | |
|
||||
|Disabled |0 |0 |Turned off. Does not protect users from potential threats and preventing users from turning it on. | |
|
||||
|Enabled |1 |1 |Turned on. Protects users from potential threats and prevents users from turning it off. | |
|
||||
---
|
||||
|
||||
To verify Windows Defender SmartScreen is turned off (disabled):
|
||||
1. In the upper-right corner of Microsoft Edge or Microsoft Edge for Windows 10 Mobile, click or tap the ellipses (**...**).
|
||||
2. Click **Settings** and select **View Advanced Settings**.
|
||||
3. At the bottom, verify that **Help protect me from malicious sites and download with SmartScreen Filter** is greyed out.<p>
|
||||
|
||||
|
||||
### ADMX info and settings
|
||||
#### ADMX info
|
||||
- **GP English name:** Configure Windows Defender SmartScreen
|
||||
- **GP name:** AllowSmartScreen
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[AllowSmartScreen](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowsmartscreen)
|
||||
- **Supported devices:** Desktop and Mobile
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowSmartScreen
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\PhishingFilter
|
||||
- **Value name:** EnabledV9
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
<hr>
|
@ -0,0 +1,121 @@
|
||||
<!-- Disable Lockdown of Start Pages -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10*<br>
|
||||
>*Default setting: Enabled (Start pages are not editable)*
|
||||
|
||||
[!INCLUDE [disable-lockdown-of-start-pages-shortdesc](../shortdesc/disable-lockdown-of-start-pages-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Not configured |0 |0 |Lockdown Start pages configured in either the Configure Open Microsoft Edge With policy and Configure Start Pages policy. | |
|
||||
|Enabled |1 |1 |Unlocked. Users can make changes to all configured start pages.<p>When you enable this policy and define a set of URLs in the Configure Start Pages policy, Microsoft Edge uses the URLs defined in the Configure Open Microsoft Edge With policy. | |
|
||||
---
|
||||
|
||||
### Configuration combinations
|
||||
| **Configure Open Microsoft Edge With** | **Configure Start Pages** | **Disabled Lockdown of Start Pages** | **Results** |
|
||||
| --- | --- | --- | --- |
|
||||
| Enabled (applies to all options) | Enabled – String | Enabled (all configured start pages are editable) | [\#1: Load URLs defined in the Configure Open Microsoft Edge With policy, and allow users to edit all configured start pages.](#1-load-the-urls-defined-in-the-configure-open-microsoft-edge-with-policy-and-allow-users-to-edit-all-configured-start-pages) |
|
||||
| Disabled or not configured | Enabled – String | Enabled (any Start page configured in the Configured Start Pages policy) | [\#2: Load any start page and allow users to edit their Start pages.](#2-load-any-start-page-configured-using-the-configured-start-pages-policy-and-allow-users-to-edit-their-start-pages) |
|
||||
| Enabled (Start page) | Enabled – String | Blank or not configured | [\#3: Load Start page(s) and prevent users from changing it.](#3-load-the-start-pages-and-prevent-users-from-making-changes) |
|
||||
| Enabled (New tab page) | Enabled – String | Blank or not configured | [\#4: Load New tab page and prevent users from changing it.](#4-load-the-new-tab-page-and-prevent-users-from-making-changes) |
|
||||
| Enabled (Previous pages) | Enabled – String | Blank or not configured | [\#5: Load previously opened pages and prevent users from changing it.](#5-load-the-previously-opened-pages-that-were-opened-when-microsoft-edge-last-closed-and-prevent-users-from-making-changes) |
|
||||
| Enabled (A specific page or pages) | Enabled – String | Blank or not configured | [\#6: Load a specific page or pages and prevent users from changing it.](#6-load-a-specific-page-or-pages-defined-in-the-configure-start-pages-policy-and-prevent-users-from-making-changes) |
|
||||
| Enabled (A specific page or pages) | Enabled – String | Enabled (any Start page configured in Configure Start Pages policy) | [\#7: Load a specific page or pages and allow users to make changes to their Start page.](#7-load-a-specific-page-or-pages-defined-in-the-configure-start-pages-policy-and-allow-users-to-make-changes-to-their-start-page) |
|
||||
| N/A | Blank or not configured | N/A | Microsoft Edge loads the pages specified in App settings as the default Start pages. |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
#### ADMX info
|
||||
- **GP English name:** Disable lockdown of Start pages
|
||||
- **GP name:** DisableLockdownOfStartPages
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[DisableLockdownOfStartPages]()
|
||||
- **Supported devices:** Desktop
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/DisableLockdownOfStartPages
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HKLM\Software\Policies\Microsoft\MicrosoftEdge\Internet Settings
|
||||
- **Value name:** DisableLockdownOfStartPages
|
||||
- **Value type:** REG_SZ
|
||||
|
||||
|
||||
### Scenarios
|
||||
#### \#1: Load URLs defined in the Configure Open Microsoft Edge With policy, and allow users to edit all configured start pages.
|
||||
|
||||
1. Enable the **Configure Open Microsoft Edge With** policy. Applies to all options for this policy. <p>
|
||||
|
||||
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
|
||||
|
||||
3. Enable the **Disabled Lockdown of Start Pages** policy by selecting *All configured start pages are editable*.
|
||||
|
||||
|
||||
#### \#2: Load any start page and allow users to edit their Start pages.
|
||||
|
||||
1. Disable or don't configure the **Configure Open Microsoft Edge With** policy.
|
||||
|
||||
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets in the following format:<p> \<support.contoso.com\>\<support.microsoft.com\>
|
||||
|
||||
3. Enable the **Disabled Lockdown of Start Pages** policy by selecting *Start pages are not editable*.
|
||||
|
||||
|
||||
#### \#3: Load Start page(s) and prevent users from changing it.
|
||||
|
||||
1. Enable the **Configure Open Microsoft Edge With** policy by selecting *Start page*.<p>
|
||||
|
||||
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
|
||||
|
||||
3. Disable or don't configure the **Disabled Lockdown of Start Pages** policy.
|
||||
|
||||
|
||||
#### \#4: Load New tab page and prevent users from changing it..
|
||||
|
||||
1. Enable the **Configure Open Microsoft Edge With** policy by selecting *New tab page*.<p>
|
||||
|
||||
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
|
||||
|
||||
3. Disable or don't configure the **Disabled Lockdown of Start Pages** policy.
|
||||
|
||||
|
||||
#### \#5: Load previously opened pages and prevent users from changing it.
|
||||
|
||||
1. Enable the **Configure Open Microsoft Edge With** policy by selecting *Previous pages*.<p>
|
||||
|
||||
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
|
||||
|
||||
3. Disable or don't configure the **Disabled Lockdown of Start Pages** policy.
|
||||
|
||||
|
||||
#### \#6: Load a specific page or pages and prevent users from changing it.
|
||||
|
||||
1. Enable the **Configure Open Microsoft Edge With** policy by selecting *A specific page or pages*.<p>
|
||||
|
||||
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
|
||||
|
||||
3. Disable or don't configure the **Disabled Lockdown of Start Pages** policy.
|
||||
|
||||
|
||||
#### \#7: Load a specific page or pages and allow users to make changes to their Start page.
|
||||
|
||||
1. Enable the **Configure Open Microsoft Edge With** policy by selecting *A specific page or pages*. <p>
|
||||
|
||||
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
|
||||
|
||||
3. Enable **Disabled Lockdown of Start Pages** by selecting *Start pages are not editable*.
|
||||
|
||||
|
||||
### Related Policies
|
||||
- [Configure Start Pages](#configure-start-pages-include): [!INCLUDE [configure-start-pages-shortdesc](../shortdesc/configure-start-pages-shortdesc.md)]
|
||||
|
||||
- [Configure Open Microsoft Edge With](../available-policies.md#configure-open-microsoft-edge-with): [!INCLUDE [configure-open-microsoft-edge-with-shortdesc](../shortdesc/configure-open-microsoft-edge-with-shortdesc.md)]
|
||||
|
||||
|
||||
### Related documents
|
||||
|
||||
[Microsoft browser extension policy](aka.ms/browser policy)
|
||||
|
||||
<hr>
|
@ -0,0 +1,31 @@
|
||||
<!-- ## Do not prompt client certificate when only one exists -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10*<br>
|
||||
>*Default setting: Disabled or not configured*
|
||||
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
| | | | | |
|
||||
| | | | | |
|
||||
| | | | | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
#### ADMX info
|
||||
- **GP English name:**
|
||||
- **GP name:**
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[]()
|
||||
- **Supported devices:** Desktop and Mobile
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HLKM\Software\Policies\Microsoft\MicrosoftEdge\
|
||||
- **Value name:**
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
<hr>
|
@ -0,0 +1,74 @@
|
||||
<!-- ## Do not sync browser settings -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10*<br>
|
||||
>*Default setting: Disabled or not configured (Allowed/turned on)*
|
||||
|
||||
[!INCLUDE [do-not-sync-browser-settings-shortdesc](../shortdesc/do-not-sync-browser-settings-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled or not configured<br>**(default)** |0 |0 |Allowed/turned on. The “browser” group syncs automatically between user’s devices and lets users to make changes. | |
|
||||
|Enabled |2 |2 |Prevents (turned off) the “browser” group from using the Sync your Settings option. | |
|
||||
---
|
||||
|
||||
### Configuration options
|
||||
| **Do not sync browser settings** | **Prevent users from turning on browser syncing** | **Result** |
|
||||
| --- | --- | --- |
|
||||
| 0/disabled or not configured (default) – Turned on; users can make changes | 0/disabled (default) | Microsoft Edge syncs browser settings automatically. |
|
||||
| 0/disabled or not configured (default) – Turned on; users can make changes | 1/enabled or not configured | Microsoft Edge syncs browser settings automatically. |
|
||||
| 2/enabled – Prevented/turned off | 0/disabled (default) | Prevents syncing of browser setting, but gives users the choice to turn it on. |
|
||||
| 2/enabled – Turned off | 1/enabled or not configured | Prevents browser setting sync and prevents users from turning on syncing. |
|
||||
| 0/disabled or not configured (default) – Turned on; users can make changes | N/A | Turn on Sync your Settings option by default and allow users to make changes. |
|
||||
---
|
||||
|
||||
#### If you want Microsoft Edge to sync the browser settings automatically:
|
||||
Disable both the Do not sync browser settings Prevent users from turning on browser syncing policies.
|
||||
|
||||
#### If you want to prevent syncing of browser settings and prevent users from turning it on:
|
||||
1. Enable the Do not sync browser settings policy.
|
||||
2. Enable or don’t configure this policy (Prevented/turned off).
|
||||
|
||||
#### If you want to prevent syncing of browser settings and give users a choice to turn on syncing:
|
||||
1. Enable the Do not sync browser settings policy.
|
||||
2. Disable this policy (Allowed/turned on).
|
||||
|
||||
#### If you want syncing turned off by default but not disabled:
|
||||
1. Enable the Do not sync browser setting policy.
|
||||
2. Select the _Allow users to turn “browser” syncing_ option.
|
||||
|
||||
#### Verify configuration
|
||||
To verify if syncing is turned on or off:
|
||||
1. In the upper-right corner of Microsoft Edge, click the ellipses \(**...**\).
|
||||
2. Click **Settings**.
|
||||
3. Under Account, see if the setting is toggled on or off.<p>
|
||||
|
||||
|
||||
### ADMX info and settings
|
||||
#### ADMX info
|
||||
- **GP English name:** Do not sync browser settings
|
||||
- **GP name:** DoNotSyncBrowserSetting
|
||||
- **GP path:** Windows Components/Sync your settings
|
||||
- **GP ADMX file name:** SettingSync.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Experience/[Experience/DoNotSyncBrowserSetting]()
|
||||
- **Supported devices:** Desktop
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Experience/DoNotSyncBrowserSetting
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HLKM\\Software\Policies\Microsoft\Windows\SettingSync
|
||||
- **Value name:** DisableWebBrowserSettingSyncUserOverride
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
|
||||
### Related policies
|
||||
|
||||
Prevent users from turning on browser syncing: [!INCLUDE [prevent-users-to-turn-on-browser-syncing-shortdesc](../shortdesc/prevent-users-to-turn-on-browser-syncing-shortdesc.md)]
|
||||
|
||||
### Related documents
|
||||
|
||||
[About sync setting on Microsoft Edge on Windows 10 devices](http://windows.microsoft.com/windows-10/about-sync-settings-on-windows-10-devices)
|
||||
|
||||
<hr>
|
25
browsers/edge/includes/do-not-sync-include.md
Normal file
@ -0,0 +1,25 @@
|
||||
<!-- ## Do not sync -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10*<br>
|
||||
>*Default setting: Disabled or not configured (Turned on)*
|
||||
|
||||
[!INCLUDE [do-not-sync-shortdesc](../shortdesc/do-not-sync-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled or not configured<br>**(default)** |0 |0 |Allowed/turned on. Users can choose what to sync to their device. | |
|
||||
|Enabled |2 |2 |Prevented/turned off. Disables the Sync your Settings toggle and prevents syncing. | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
| |
|
||||
|---|
|
||||
|**ADMX info**<ul><li>**GP English name:** Do not sync</li><li>**GP name:** AllowSyncMySettings</li><li>**GP path:** Windows Components/Microsoft Edge</li><li>**GP ADMX file name:** MicrosoftEdge.admx</li></ul>**MDM settings**<ul><li>**MDM name:** Experience/[AllowSyncMySettings](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-experience#experience-allowsyncmysettings)</li><li>**Supported devices:** Desktop</li><li>**URI full path:** ./Vendor/MSFT/Policy/Config/Experience/AllowSyncMySettings </li><li>**Data type:** Integer</li></ul>**Registry**<ul><li>**Path:** HKLM\Software\Policies\Microsoft\Windows\SettingSync</li><li>**Value name:** DisableSettingSync</li><li>**Value type:** REG_DWORD</li></ul> |
|
||||
---
|
||||
|
||||
### Related topics
|
||||
[About sync setting on Microsoft Edge on Windows 10 devices](http://windows.microsoft.com/windows-10/about-sync-settings-on-windows-10-devices): Learn about what settings are sync'ed.
|
||||
|
||||
|
||||
<hr>
|
@ -0,0 +1,22 @@
|
||||
<!-- ## Edge respects AppLocker Lists for Extensions -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10*<br>
|
||||
>*Default setting: Disabled or not configured
|
||||
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
| | | | | |
|
||||
| | | | | |
|
||||
| | | | | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
| | |
|
||||
|---|---|
|
||||
|ADMX info |<ul><li>**GP English name:** </li><li>**GP name:** </li><li>**GP path:** Windows Components/Microsoft Edge</li><li>**GP ADMX file name:** MicrosoftEdge.admx</li></ul> |
|
||||
|MDM settings |<ul><li>**MDM name:** Browser/[]()</li><li>**Supported devices:** Desktop and Mobile</li><li>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ </li><li>**Data type:** Integer</li></ul> |
|
||||
|Registry |<ul><li>**Path:** HLKM\Software\Policies\Microsoft\MicrosoftEdge\ </li><li>**Value name:** </li><li>**Value type:** REG_DWORD</li></ul> |
|
||||
---
|
||||
|
||||
|
||||
---
|
@ -0,0 +1 @@
|
||||
[Enable your device for development](https://docs.microsoft.com/en-us/windows/uwp/get-started/enable-your-device-for-development): Developers can access special development features, along with other developer-focused settings, which makes it possible for them to develop, test, and debug apps. Learn how to configure your environment for development, the difference between Developer Mode and sideloading, and the security risks of Developer mode.
|
43
browsers/edge/includes/keep-fav-sync-ie-edge-include.md
Normal file
@ -0,0 +1,43 @@
|
||||
<!-- ## Keep favorites in sync between Internet Explorer and Microsoft Edge -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10, version 1703 or later*<br>
|
||||
>*Default setting: Disabled or not configured (Turned off/not syncing)*
|
||||
|
||||
[!INCLUDE [keep-favorites-in-sync-between-ie-and-edge-shortdesc](../shortdesc/keep-favorites-in-sync-between-ie-and-edge-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled or not configured<br>**(default)** |0 |0 |Turned off/not syncing. | |
|
||||
|Enabled |1 |1 |Turned on/syncing. | |
|
||||
---
|
||||
|
||||
### Configuration combinations
|
||||
### Configuration combinations
|
||||
| **Keep favorites in sync between IE and Microsoft Edge** | **Provision Favorites** | **Results** |
|
||||
| --- | --- | --- |
|
||||
| Disabled or not configured (default) | Disabled or not configured (default) | **Turned off/not syncing**. Microsoft Edge prevents users from syncing their favorites. |
|
||||
| Enabled (turned on/syncing) | Disabled or not configured (default) | **Turned on/syncing**. Syncs favorites between Internet Explorer and Microsoft Edge. |
|
||||
| Enabled (turned on/syncing) | Enabled (provision list of favorites) | **Turned off/not syncing**. Microsoft Edge prevents users from syncing their favorites. |
|
||||
| Disabled or not configured (default) | Enabled (provision list of Favorites) | **Turned on/syncing**. Syncs favorites between Internet Explorer and Microsoft Edge. |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
### ADMX info
|
||||
- **GP English name:** Keep favorites in sync between Internet Explorer and Microsoft Edge
|
||||
- **GP name:** SyncFavoritesBetweenIEAndMicrosoftEdge
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[SyncFavoritesBetweenIEAndMicrosoftEdge](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-syncfavoritesbetweenieandmicrosoftedge)
|
||||
- **Supported devices:** Desktop
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/SyncFavoritesBetweenIEAndMicrosoftEdge
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Main
|
||||
- **Value name:** SyncFavoritesBetweenIEAndMicrosoftEdge
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
<hr>
|
@ -0,0 +1 @@
|
||||
[Manage connections from Windows operating system components to Microsoft services](https://docs.microsoft.com/en-us/windows/configuration/manage-connections-from-windows-operating-system-components-to-microsoft-services): Learn about the network connections from Windows to Microsoft services. Also, learn about the privacy settings that affect the data shared with either Microsoft or apps and how to manage them in an enterprise. You can configure diagnostic data at the lowest level for your edition of Windows, and also evaluate which other connections Windows makes to Microsoft services you want to turn off in your environment.
|
33
browsers/edge/includes/prevent-access-about-flag-include.md
Normal file
@ -0,0 +1,33 @@
|
||||
<!-- ## Prevent access to the about:flags page -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10, version 1607 or later*<br>
|
||||
>*Default setting: Disabled or not configured (Allowed)*
|
||||
|
||||
[!INCLUDE [prevent-access-to-about-flags-page-shortdesc](../shortdesc/prevent-access-to-about-flags-page-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled or not configured<br>**(default)** |0 |0 |Allowed. | |
|
||||
|Enabled |1 |1 |Prevents users from access the about:flags page. | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
#### ADMX info
|
||||
- **GP English name:** Prevent access to the about:flags page in Microsoft Edge
|
||||
- **GP name:** PreventAccessToAboutFlagsInMicrosoftEdge
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[PreventAccessToAboutFlagsInMicrosoftEdge](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-preventaccesstoaboutflagsinmicrosoftedge)
|
||||
- **Supported devices:** Desktop and Mobile
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/PreventAccessToAboutFlagsInMicrosoftEdge
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Main
|
||||
- **Value name:** PreventAccessToAboutFlagsInMicrosoftEdge
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
<hr>
|
@ -0,0 +1,33 @@
|
||||
<!-- ## Prevent bypassing Windows Defender SmartScreen prompts for files -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10, version 1511 or later*<br>
|
||||
>*Default setting: Disabled or not configured (Allowed/turned off)*
|
||||
|
||||
[!INCLUDE [prevent-bypassing-windows-defender-prompts-for-files-shortdesc](../shortdesc/prevent-bypassing-windows-defender-prompts-for-files-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled or not configured<br>**(default)** |0 |0 |Allowed/turned off. Users can ignore the warning and continue to download the unverified file(s). | |
|
||||
|Enabled |1 |1 |Prevented/turned on. | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
#### ADMX info
|
||||
- **GP English name:** Prevent bypassing Windows Defender SmartScreen prompts for files
|
||||
- **GP name:** PreventSmartScreenPromptOverrideForFiles
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[PreventSmartScreenPromptOverrideForFiles](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-preventsmartscreenpromptoverrideforfiles)
|
||||
- **Supported devices:** Desktop and Mobile
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/PreventSmartScreenPromptOverrideForFiles
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\PhishingFilter
|
||||
- **Value name:** PreventOverrideAppRepUnknown
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
<hr>
|
@ -0,0 +1,33 @@
|
||||
<!-- ## Prevent bypassing Windows Defender SmartScreen prompts for sites -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10, version 1511 or later*<br>
|
||||
>*Default setting: Disabled or not configured (Allowed/turned off)*
|
||||
|
||||
[!INCLUDE [prevent-bypassing-windows-defender-prompts-for-sites-shortdesc](../shortdesc/prevent-bypassing-windows-defender-prompts-for-sites-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled or not configured<br>**(default)** |0 |0 |Allowed/turned off. Users can ignore the warning and continue to the site.| |
|
||||
|Enabled |1 |1 |Prevented/turned on. | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
#### ADMX info
|
||||
- **GP English name:** Prevent bypassing Windows Defender SmartScreen prompts for sites
|
||||
- **GP name:** PreventSmartscreenPromptOverride
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[PreventSmartscreenPromptOverride](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-preventsmartscreenpromptoverride)
|
||||
- **Supported devices:** Desktop and Mobile
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/PreventSmartscreenPromptOverride
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\PhishingFilter
|
||||
- **Value name:** PreventOverride
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
<hr>
|
@ -0,0 +1,31 @@
|
||||
<!-- ## Prevent certificate error overrides -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10, version 1810*<br>
|
||||
>*Default setting: Disabled or not configured (Allowed/turned off)*
|
||||
|
||||
[!INCLUDE [prevent-certificate-error-overrides-shortdesc](../shortdesc/prevent-certificate-error-overrides-shortdesc.md)]
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled or not configured<br>**(default)** |0 |0 |Allowed/turned on. Overrides the security warning to sites that have SSL errors. | |
|
||||
|Enabled |1 |1 |Prevented/turned on. | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
#### ADMX info
|
||||
- **GP English name:** Prevent certificate error overrides
|
||||
- **GP name:** PreventCertErrorOverrides
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[PreventCertErrorOverrides]()
|
||||
- **Supported devices:** Desktop and Mobile
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/PreventCertErrorOverrides
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** Software\Policies\Microsoft\MicrosoftEdge\Internet Setting
|
||||
- **Value name:** PreventCertErrorOverrides
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
<hr>
|
@ -0,0 +1,33 @@
|
||||
<!-- ## Prevent changes to Favorites on Microsoft Edge -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10, version 1709 or later*<br>
|
||||
>*Default setting: Disabled or not configured (Allowed/not locked down)*
|
||||
|
||||
[!INCLUDE [prevent-changes-to-favorites-shortdesc](../shortdesc/prevent-changes-to-favorites-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled or not configured<br>**(default)** |0 |0 |Allowed/not locked down. Users can add, import, and make changes to the Favorites list. | |
|
||||
|Enabled |1 |1 |Prevented/locked down. | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
#### ADMX info
|
||||
- **GP English name:** Prevent changes to Favorites on Microsoft Edge
|
||||
- **GP name:** LockdownFavorites
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[LockdownFavorites](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-lockdownfavorites)
|
||||
- **Supported devices:** Desktop and Mobile
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/LockdownFavorites
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Favorites
|
||||
- **Value name:** LockdownFavorites
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
<hr>
|
@ -0,0 +1,33 @@
|
||||
<!-- ## Prevent the First Run webpage from opening on Microsoft Edge -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10, version 1703 or later*<br>
|
||||
>*Default setting: Disabled or not configured (Allowed)*
|
||||
|
||||
[!INCLUDE [prevent-first-run-webpage-from-opening-shortdesc](../shortdesc/prevent-first-run-webpage-from-opening-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled or not configured<br>**(default)** |0 |0 |Allowed. Microsoft Edge loads the welcome page. | |
|
||||
|Enabled |1 |1 |Prevented. | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
#### ADMX info
|
||||
- **GP English name:** Prevent the First Run webpage from opening on Microsoft Edge
|
||||
- **GP name:** PreventFirstRunPage
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[PreventFirstRunPage](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-preventfirstrunpage)
|
||||
- **Supported devices:** Desktop and Mobile
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/PreventFirstRunPage
|
||||
- **Data type:** Integer
|
||||
|
||||
####Registry
|
||||
- **Path:** HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Main
|
||||
- **Value name:** PreventFirstRunPage
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
<hr>
|
@ -0,0 +1,33 @@
|
||||
<!-- ## Prevent Microsoft Edge from gathering Live Tile information when pinning a site to Start -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10, version 1703 or later*<br>
|
||||
>*Default setting: Disabled or not configured (Collected and sent)*
|
||||
|
||||
[!INCLUDE [prevent-edge-from-gathering-live-tile-info-shortdesc](../shortdesc/prevent-edge-from-gathering-live-tile-info-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled or not configured<br>**(default)** |0 |0 |Collect and send Live Tile metadata. | |
|
||||
|Enabled |1 |1 |Not collected and sent. | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
#### ADMX info
|
||||
- **GP English name:** Prevent Microsoft Edge from gathering Live Tile information when pinning a site to Start
|
||||
- **GP name:** PreventLiveTileDataCollection
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[PreventLiveTileDataCollection](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-preventlivetiledatacollection)
|
||||
- **Supported devices:** Desktop and Mobile
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/PreventLiveTileDataCollection
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
**<ul><li>**Path:** HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Main
|
||||
**Value name:** PreventLiveTileDataCollection
|
||||
**Value type:** REG_DWORD
|
||||
|
||||
<hr>
|
@ -0,0 +1,33 @@
|
||||
<!-- ## Prevent using Localhost IP address for WebRTC -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10, version 1511 or later*<br>
|
||||
>*Default setting: Disabled or not configured (Allowed/show localhost IP addresses)*
|
||||
|
||||
[!INCLUDE [prevent-using-localhost-ip-address-for-webrtc-shortdesc](../shortdesc/prevent-using-localhost-ip-address-for-webrtc-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled or not configured<br>**(default)** |0 |0 |Allowed. Shows localhost IP addresses. | |
|
||||
|Enabled |1 |1 |Prevented. | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
#### ADMX info
|
||||
- **GP English name:** Prevent using Localhost IP address for WebRTC
|
||||
- **GP name:** HideLocalHostIPAddress
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[PreventUsingLocalHostIPAddressForWebRTC](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-preventusinglocalhostipaddressforwebrtc)
|
||||
- **Supported devices:** Desktop
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/PreventUsingLocalHostIPAddressForWebRTC
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Main
|
||||
- **Value name:** HideLocalHostIPAddress
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
<hr>
|
@ -0,0 +1,45 @@
|
||||
<!-- ## Prevent turning off required extensions -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10, version 1810*<br>
|
||||
>*Default setting: Disabled or not configured (Allowed)*
|
||||
|
||||
[!INCLUDE [prevent-turning-off-required-extensions-shortdesc](../shortdesc/prevent-turning-off-required-extensions-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |Description |Most restricted |
|
||||
|---|---|:---:|
|
||||
|Disabled or not configured<br>**(default)** |Provide a semi-colon delimited list of extension PFNs. For example, adding _Microsoft.OneNoteWebClipper8wekyb3d8bbwe_ or _Microsoft.OfficeOnline8wekyb3d8bbwe_ prevents a user from turning off the OneNote Web Clipper and Office Online extension. After defining the list of extensions, you deploy them through any available enterprise deployment channel, such as Microsoft Intune. Removing extensions from the list does not uninstall the extension from the user’s computer automatically. To uninstall the extension, use any available enterprise deployment channel. If you enable the Allow Developer Tools policy, then this policy does not prevent users from debugging and altering the logic on an extension. | |
|
||||
|Enabled |Allowed. Users can uninstall extensions. If you previously enabled this policy and you decide to disable it, the list of extension PFNs defined in this policy get ignored. | |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
#### ADMX info
|
||||
- **GP English name:** Prevent turning off required extensions
|
||||
- **GP name:** ForceEnabledExtensions
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[PreventTurningOffRequiredExtensions]()
|
||||
- **Supported devices:** Desktop and Mobile
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/PreventTurningOffRequiredExtensions
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HLKM\Software\Policies\Microsoft\MicrosoftEdge\
|
||||
- **Value name:** PreventTurningOffRequiredExtensions
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
### Related policies
|
||||
[Allow Developer Tools](../available-policies.md#allow-developer-tools): [!INCLUDE [allow-developer-tools-shortdesc](../shortdesc/allow-developer-tools-shortdesc.md)]
|
||||
|
||||
|
||||
### Related documents
|
||||
|
||||
- [Find a package family name (PFN) for per-app VPN](https://docs.microsoft.com/en-us/sccm/protect/deploy-use/find-a-pfn-for-per-app-vpn): There are two ways to find a PFN so that you can configure a per-app VPN.
|
||||
- [How to manage apps you purchased from the Microsoft Store for Business with Microsoft Intune](https://docs.microsoft.com/en-us/intune/windows-store-for-business): The Microsoft Store for Business gives you a place to find and purchase apps for your organization, individually, or in volume. By connecting the store to Microsoft Intune, you can manage volume-purchased apps from the Azure portal.
|
||||
- [How to assign apps to groups with Microsoft Intune](https://docs.microsoft.com/en-us/intune/apps-deploy): Apps can be assigned to devices whether or not they are managed by Intune.
|
||||
- [Manage apps from the Microsoft Store for Business with System Center Configuration Manager](https://docs.microsoft.com/en-us/sccm/apps/deploy-use/manage-apps-from-the-windows-store-for-business): Configuration Manager supports managing Microsoft Store for Business apps on both Windows 10 devices with the Configuration Manager client, and also Windows 10 devices enrolled with Microsoft Intune.
|
||||
- [How to add Windows line-of-business (LOB) apps to Microsoft Intune](https://docs.microsoft.com/en-us/intune/lob-apps-windows): A line-of-business (LOB) app is one that you add from an app installation file. These types of apps are typically written in-house.
|
||||
|
||||
<hr>
|
@ -0,0 +1,63 @@
|
||||
|
||||
<!-- Prevent users from turning on browser syncing -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10*<br>
|
||||
>*Default setting: Enabled or not configured (Prevented/turned off)*
|
||||
|
||||
[!INCLUDE [prevent-users-to-turn-on-browser-syncing-shortdesc](../shortdesc/prevent-users-to-turn-on-browser-syncing-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled |0 |0 |Allowed/turned on. Users can sync the browser settings. | |
|
||||
|Enabled or not configured<br>**(default)** |1 |1 |Prevented/turned off. | |
|
||||
---
|
||||
|
||||
### Configuration options
|
||||
<!-- put the grids in a document that categorizes the policies -->
|
||||
| **Do not sync browser settings** | **Prevent users from turning on browser syncing** | **Result** |
|
||||
| --- | --- | --- |
|
||||
| 0/disabled or not configured (default) – Turned on; users can make changes | 0/disabled (default) | Microsoft Edge syncs browser settings automatically. |
|
||||
| 0/disabled or not configured (default) – Turned on; users can make changes | 1/enabled or not configured | Microsoft Edge syncs browser settings automatically. |
|
||||
| 2/enabled – Prevented/turned off | 0/disabled (default) | Prevents syncing of browser setting, but gives users the choice to turn it on. |
|
||||
| 2/enabled – Turned off | 1/enabled or not configured | Prevents browser setting sync and prevents users from turning on syncing. |
|
||||
| 0/disabled or not configured (default) – Turned on; users can make changes | N/A | Turn on Sync your Settings option by default and allow users to make changes. |
|
||||
---
|
||||
|
||||
#### If you want to prevent syncing of browser settings and prevent users from turning it on:
|
||||
1. Enable the Do not sync browser settings policy.
|
||||
2. Enable or don’t configure this policy (Prevented/turned off).
|
||||
|
||||
#### If you want to prevent syncing of browser settings and give users a choice to turn on syncing:
|
||||
1. Enable the Do not sync browser settings policy.
|
||||
2. Disable this policy (Allowed/turned on).
|
||||
|
||||
#### If you want syncing turned off by default but not disabled:
|
||||
1. Enable the Do not sync browser setting policy.
|
||||
2. Select the _Allow users to turn “browser” syncing_ option.
|
||||
|
||||
### ADMX info and settings
|
||||
#### ADMX info
|
||||
- **GP English name:** Prevent users from turning on browser syncing
|
||||
- **GP name:** ???
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** ???.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Experience/[PreventUsersFromTurningOnBrowserSyncing]()
|
||||
- **Supported devices:** Desktop
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Experience/PreventUsersFromTurningOnBrowserSyncing
|
||||
- **Data type:** String
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HLKM\Software\Policies\Microsoft\???
|
||||
- **Value name:** ???
|
||||
- **Value type:** REG_SZ
|
||||
|
||||
### Related policies
|
||||
[Do not sync browser settings](../available-policies.md#do-not-sync-browser-settings): [!INCLUDE [do-not-sync-browser-settings-shortdesc](../shortdesc/do-not-sync-browser-settings-shortdesc.md)].
|
||||
|
||||
### Related topics
|
||||
[About sync setting on Microsoft Edge on Windows 10 devices](http://windows.microsoft.com/windows-10/about-sync-settings-on-windows-10-devices)
|
||||
|
||||
|
||||
<hr>
|
49
browsers/edge/includes/provision-favorites-include.md
Normal file
@ -0,0 +1,49 @@
|
||||
<!-- ## Provision Favorites -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10, version 1511 or later*<br>
|
||||
>*Default setting: Disabled or not configured (Customizable)*
|
||||
|
||||
[!INCLUDE [provision-favorites-shortdesc](../shortdesc/provision-favorites-shortdesc.md)]
|
||||
|
||||
>[!IMPORTANT]
|
||||
>Enable only this policy or the Keep favorites in sync between Internet Explorer and Microsoft Edge policy. If you enable both, Microsoft Edge prevents users from syncing their favorites between the two browsers.
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |Description |Most restricted |
|
||||
|---|---|:---:|
|
||||
|Disabled or not configured<br>**(default)** |Default list of favorites not defined in Microsoft Edge. In this case, the Favorites list is customizable, such as adding folders, or adding and removing favorites. | |
|
||||
|Enabled |Define a default list of favorites in Microsoft Edge. In this case, the Save a Favorite, Import settings, and context menu options (such as Create a new folder) are turned off.<p>To define a default list of favorites, do the following:<ol><li>In the upper-right corner of Microsoft Edge, click the ellipses (**...**) and select **Settings**.</li><li>Click **Import from another browser**, click **Export to file**, and save the file.</li><li>In the **Options** section of the Group Policy Editor, provide the location that points the file with the list of favorites to provision. Specify the URL as: <ul><li>HTTP location: "SiteList"=http://localhost:8080/URLs.html</li><li>Local network: "SiteList"="\network\shares\URLs.html"</li><li>Local file: "SiteList"=file:///c:\Users\\Documents\URLs.html</li></ul></li></ol> | |
|
||||
---
|
||||
|
||||
### Configuration combinations
|
||||
| **Keep favorites in sync between IE and Microsoft Edge** | **Provision Favorites** | **Results** |
|
||||
| --- | --- | --- |
|
||||
| Disabled or not configured (default) | Disabled or not configured (default) | **Turned off/not syncing**. Microsoft Edge prevents users from syncing their favorites. |
|
||||
| Enabled (turned on/syncing) | Disabled or not configured (default) | **Turned on/syncing**. Syncs favorites between Internet Explorer and Microsoft Edge. |
|
||||
| Enabled (turned on/syncing) | Enabled (provision list of favorites) | **Turned off/not syncing**. Microsoft Edge prevents users from syncing their favorites. |
|
||||
| Disabled or not configured (default) | Enabled (provision list of Favorites) | **Turned on/syncing**. Syncs favorites between Internet Explorer and Microsoft Edge. |
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
#### ADMX info
|
||||
- **GP English name:** Provision Favorites
|
||||
- **GP name:** ConfiguredFavorites
|
||||
- **GP element:** ConfiguredFavoritesPrompt
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[ProvisionFavorites](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-provisionfavorites)
|
||||
- **Supported devices:** Desktop
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ProvisionFavorites
|
||||
- **Data type:** String
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HLKM\Software\Policies\Microsoft\MicrosoftEdge\Favorites
|
||||
- **Value name:** ConfiguredFavorites
|
||||
- **Value type:** REG_SZ
|
||||
|
||||
### Related policies
|
||||
[Keep favorites in sync between Internet Explorer and Microsoft Edge](../available-policies.md#keep-favorites-in-sync-between-internet-explorer-and-microsoft-edge): [!INCLUDE [keep-favorites-in-sync-between-ie-and-edge-shortdesc](../shortdesc/keep-favorites-in-sync-between-ie-and-edge-shortdesc.md)]
|
||||
|
||||
<hr>
|
@ -0,0 +1 @@
|
||||
[Search provider discovery](https://docs.microsoft.com/en-us/microsoft-edge/dev-guide/browser/search-provider-discovery): Microsoft Edge follows the OpenSearch 1.1 specification to discover and use web search providers. When a user browses to a search service, the OpenSearch description is picked up and saved for later use. Users can then choose to add the search service to use in the Microsoft Edge address bar.
|
53
browsers/edge/includes/send-all-intranet-sites-ie-include.md
Normal file
@ -0,0 +1,53 @@
|
||||
<!-- ## Send all intranet sites to Internet Explorer 11 -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10*<br>
|
||||
>*Default setting: Disabled or not configured*
|
||||
|
||||
[!INCLUDE [send-all-intranet-sites-to-ie-shortdesc](../shortdesc/send-all-intranet-sites-to-ie-shortdesc.md)]
|
||||
|
||||
>[!TIP]
|
||||
>Microsoft Edge does not support ActiveX controls, Browser Helper Objects, VBScript, or other legacy technology. If you have websites or web apps that still use this technology and needs IE11 to run, you can add them to the Enterprise Mode site list, using Enterprise Mode Site List Manager. Allowed values.
|
||||
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled or not configured<br>**(default)** |0 |0 |All sites, including intranet sites, open in Microsoft Edge automatically. | |
|
||||
|Enabled |1 |1 |Only intranet sites open in Internet Explorer 11 automatically.<p>Enabling this policy automatically opens all intranet sites in IE11, even if the users have Microsoft Edge as their default browser.<ol><li>In Group Policy Editor, navigate to:<br>**Computer Configuration\\Administrative Templates\\Windows Components\\File Explorer\\Set a default associations configuration file**</li><li>Click **Enabled** and then refresh the policy and then vew the affected sites in Microsoft Edge.<br><br>A message displays saying that the page needs to open in IE. At the same time, the page opens in IE11 automatically; in a new frame if it is not yet running, or in a new tab.</li></ol>| |
|
||||
---
|
||||
|
||||
### Configuration combinations
|
||||
|
||||
|
||||
### ADMX info and settings
|
||||
#### ADMX info
|
||||
- **GP English name:** Send all intranet sites to Internet Explorer 11
|
||||
- **GP name:** SendIntranetTraffictoInternetExplorer
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[SendIntranetTraffictoInternetExplorer](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-sendintranettraffictointernetexplorer)
|
||||
- **Supported devices:** Desktop
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/SendIntranetTraffictoInternetExplorer
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HLKM\\Software\\Policies\\Microsoft\\MicrosoftEdge\\Main
|
||||
- **Value name:** SendIntranetTraffictoInternetExplorer
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
### Related Policies
|
||||
- [Configure the Enterprise Mode Site List](../available-policies.md#configure-the-enterprise-mode-site-list): [!INCLUDE [configure-enterprise-mode-site-list-shortdesc](../shortdesc/configure-enterprise-mode-site-list-shortdesc.md)]
|
||||
|
||||
- [Show message when opening sites in Internet Explorer](../available-policies.md#show-message-when-opening-sites-in-internet-explorer): [!INCLUDE [show-message-when-opening-sites-in-ie-shortdesc](../shortdesc/show-message-when-opening-sites-in-ie-shortdesc.md)]
|
||||
|
||||
|
||||
### Related documents
|
||||
- [Blog: How Microsoft Edge and Internet Explorer 11 on Windows 10 work better together in the Enterprise](https://go.microsoft.com/fwlink/p/?LinkID=624035). Many customers depend on legacy features only available in older versions of Internet Explorer and are familiar with our Enterprise Mode tools for IE11. The Enterprise Mode has been extended to support to Microsoft Edge by opening any site specified on the Enterprise Mode Site List in IE11. IT Pros can use their existing IE11 Enterprise Mode Site List or they can create a new one specifically for Microsoft Edge. By keeping Microsoft Edge as the default browser in Windows 10 and only opening legacy line of business sites in IE11 when necessary, you can help keep newer development projects on track, using the latest web standards on Microsoft Edge.
|
||||
|
||||
- [Enterprise Mode for Internet Explorer 11 (IE11)](https://go.microsoft.com/fwlink/p/?linkid=618377). Learn how to set up and use Enterprise Mode and the Enterprise Mode Site List Manager in your company.
|
||||
|
||||
- [Use the Enterprise Mode Site List Manager](https://docs.microsoft.com/en-us/internet-explorer/ie11-deploy-guide/use-the-enterprise-mode-site-list-manager). You can use IE11 and the Enterprise Mode Site List Manager to add individual website domains and domain paths and to specify whether the site renders using Enterprise Mode or the default mode.
|
||||
|
||||
<hr>
|
84
browsers/edge/includes/set-default-search-engine-include.md
Normal file
@ -0,0 +1,84 @@
|
||||
<!-- ## Set default search engine -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10, version 1703 or later*<br>
|
||||
>*Default setting: Not configured (Defined in App settings)*
|
||||
|
||||
[!INCLUDE [set-default-search-engine-shortdesc](../shortdesc/set-default-search-engine-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Not configured<br>**(default)** |Blank |Blank |Microsoft Edge uses the default search engine specified in App settings. If you don't configure this policy and disable the [Allow search engine customization](#allow-search-engine-customization-include) policy, users cannot make changes. | |
|
||||
|Disabled |0 |0 |Microsoft Edge removes the policy-set search engine and uses the Microsoft Edge specified engine for the market. | |
|
||||
|Enabled |1 |1 |Microsoft Edge uses the policy-set search engine specified in the OpenSearch XML file. Users cannot change the default search engine.<p>Specify a link to the OpenSearch XML file that contains, at a minimum, the short name and the URL template (HTTPS) of the search engine. For more information about creating the OpenSearch XML file, see [Search provider discovery](https://docs.microsoft.com/en-us/microsoft-edge/dev-guide/browser/search-provider-discovery). Use this format to specify the link you want to add.<p>If you want users to use the default Microsoft Edge settings for each market set the string to EDGEDEFAULT. <p>If you would like users to use Microsoft Bing as the default search engine set the string to EDGEBING. | |
|
||||
---
|
||||
|
||||
### Configuration combinations
|
||||
|
||||
| **Set default search engine** | **Allow search engine customization** | **Configure additional search engines** | **Results** |
|
||||
| --- | --- | --- | --- |
|
||||
| Not configured (default) | Disabled | Disabled or not configured (default) | Default search engine specified in App settings. Users cannot make changes. |
|
||||
| Not configured (default) | Enabled or not configured (default) | Disabled or not configured (default) | Default search engine specified in App settings. Users can make changes to the default search engine at any time. |
|
||||
| Not configured (default) | Disabled | Enabled | ??? |
|
||||
| Not configured (default) | Enabled or not configured (default) | Enabled | ??? |
|
||||
| Disabled | Disabled | Disabled or not configured (default) | Users cannot add, remove, or change any of the search engines, but they can set a default search engine. |
|
||||
| Disabled | Enabled or not configured (default) | Disabled or not configured (default) | Users can add new search engines or change the default search engine, in Settings. |
|
||||
| Enabled | Disabled | Disabled or not configured (default) | Set the default search engine preventing users from making changes. |
|
||||
| Enabled | Enabled or not configured (default) | Disabled or not configured (default) | Set the default search engine and allow users to add search engines or make changes. |
|
||||
|
||||
#### If you want to use the default search engine in Apps settings and prevent users from making changes.
|
||||
|
||||
|
||||
#### If you want to use the default search engine in Apps setting and let users make changes.
|
||||
|
||||
|
||||
#### ???
|
||||
|
||||
|
||||
#### ???
|
||||
|
||||
|
||||
#### If you don't want users to add, remove, or change any of the search engines, but users can set a default search engine of their own.
|
||||
|
||||
|
||||
#### If you want users to add new search engines or change the default in Settings.
|
||||
|
||||
|
||||
#### If you want to set the default search engine and prevent users from making changes.
|
||||
|
||||
|
||||
#### If you want to set the default search engine and let users make changes.
|
||||
|
||||
|
||||
### ADMX info and settings
|
||||
#### ADMX info
|
||||
- **GP English name:** Set default search engine
|
||||
- **GP name:** SetDefaultSearchEngine
|
||||
- **GP element:** SetDefaultSearchEngine_Prompt
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** [SetDefaultSearchEngine](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-setdefaultsearchengine)
|
||||
- **Supported devices:** Desktop
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/SetDefaultSearchEngine
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HLKM\\Software\\Policies\\Microsoft\\MicrosoftEdge\\OpenSearch
|
||||
- **Value name:** SetDefaultSearchEngine
|
||||
- **Value type:** REG_SZ
|
||||
|
||||
### Related policies
|
||||
|
||||
- [Configure additional search engines](../available-policies.md#configure-additional-search-engines): [!INCLUDE [configure-additional-search-engines-shortdesc](../shortdesc/configure-additional-search-engines-shortdesc.md)]
|
||||
|
||||
- [Allow search engine customization](../available-policies.md#allow-search-engine-customization): [!INCLUDE [allow-search-engine-customization-shortdesc](../shortdesc/allow-search-engine-customization-shortdesc.md)]
|
||||
|
||||
### Related documents
|
||||
|
||||
- [Microsoft browser extension policy](https://docs.microsoft.com/en-us/legal/windows/agreements/microsoft-browser-extension-policy): This document describes the supported mechanisms for extending or modifying the behavior or user experience of Microsoft Edge and Internet Explorer, or the content displayed by these browsers. Any technique not explicitly listed in this document is considered **unsupported**.
|
||||
|
||||
- [Search provider discovery](https://docs.microsoft.com/en-us/microsoft-edge/dev-guide/browser/search-provider-discovery): Rich search integration is built into the Microsoft Edge address bar, including search suggestions, results from the web, your browsing history, and favorites.
|
||||
|
||||
<hr>
|
56
browsers/edge/includes/set-home-button-url-include.md
Normal file
@ -0,0 +1,56 @@
|
||||
<!-- ## Set Home Button URL -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10*<br>
|
||||
>*Default setting: Disabled or not configured (Blank)*
|
||||
|
||||
[!INCLUDE [set-home-button-url-shortdesc](../shortdesc/set-home-button-url-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled or not configured<br>**(default)** |Blank |Blank |Microsoft Edge shows the home button and loads the Start page, and locks down the home button to prevent users from changing what page loads. | |
|
||||
|Enabled - String |String |String |Enter a URL in string format, for example, https://www.msn.com. A custom URL loads when clicking the home button. You must also enable the [Configure Home Button](../available-policies.md#configure-home-button) policy and select the _Show home button & set a specific page_ option. | |
|
||||
---
|
||||
|
||||
With these values, you can do any of the following configurations:
|
||||
|
||||
#### If you want to show the home button, load a custom URL, and let users make changes:
|
||||
1. **Configure Home Button:** Enable and select the _Show the home button & set a specific page_ option.
|
||||
2. **Set Home Button URL:** Enter a URL in string format, for example, https://www.bing.com.
|
||||
3. **Unlock Home Button:** Enable to let users make changes.
|
||||
|
||||
#### If you want to show the home button, load a custom URL, and prevent users from making changes:
|
||||
1. **Configure Home Button:** Enable and select the _Show the home button & set a specific page_ option.
|
||||
2. **Set Home Button URL:** Enter a URL in string format, for example, https://www.bing.com.
|
||||
3. **Unlock Home Button:** Leave disabled or not configured.
|
||||
|
||||
#### If you want to hide the home button:
|
||||
Enable the **Configure Home Button** policy and select the _Hide home button_ option.
|
||||
|
||||
|
||||
### ADMX info and settings
|
||||
#### ADMX info
|
||||
- **GP English name:** Set Home Button URL
|
||||
- **GP name:** SetHomeButtonURL
|
||||
- **GP element:** SetHomeButtonURLPrompt
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[SetHomeButtonURL]()
|
||||
- **Supported devices:** Desktop and Mobile
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/SetHomeButtonURL
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HKLM\Software\Policies\Microsoft\MicrosoftEdge\Internet Settings
|
||||
- **Value name:** HomeButtonURL
|
||||
- **Value type:** REG_SZ
|
||||
|
||||
### Related policies
|
||||
|
||||
- [Configure Home Button](../available-policies.md#configure-home-button): [!INCLUDE [configure-home-button-shortdesc](../shortdesc/configure-home-button-shortdesc.md)]
|
||||
|
||||
- [Unlock Home button](../available-policies.md#unlock-home-button): [!INCLUDE [unlock-home-button-shortdesc](../shortdesc/unlock-home-button-shortdesc.md)]
|
||||
|
||||
<hr>
|
49
browsers/edge/includes/set-new-tab-url-include.md
Normal file
@ -0,0 +1,49 @@
|
||||
<!-- ## Set New Tab page URL -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10*<br>
|
||||
>*Default setting: Disabled or not configured (Blank)*
|
||||
|
||||
[!INCLUDE [set-new-tab-url-shortdesc](../shortdesc/set-new-tab-url-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled or not configured<br>**(default)** |Blank |Blank |Microsoft Edge loads the default New tab page. | |
|
||||
|Enabled - String |String |String |Enter a URL in string format, for example, https://www.msn.com. A custom URL loads for the New tab page. When you enable this policy and disable the Allow web content on New tab page policy, Microsoft Edge opens about:blank. | |
|
||||
---
|
||||
|
||||
### Configuration combinations
|
||||
|
||||
| **Set New Tab page URL** | **Allow web content on New tab page** | **Results** |
|
||||
| --- | --- | --- |
|
||||
| Enabled – String | Enabled (default) | |
|
||||
| Enabled – String | Disabled | A blank page loads instead of the default New tab page. |
|
||||
| Enabled – String | Not configured | |
|
||||
| Disabled or not configured (default) | Enabled (default) | |
|
||||
| Disabled or not configured (default) | Disabled | |
|
||||
| Disabled or not configured (default) | Not configured | |
|
||||
|
||||
### ADMX info and settings
|
||||
#### ADMX info
|
||||
- **GP English name:** Set New Tab page URL
|
||||
- **GP name:** SetNewTabPageURL
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[SetNewTabPageURL]()
|
||||
- **Supported devices:** Desktop
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/SetNewTabPageURL
|
||||
- **Data type:** String
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HKLM\Software\Policies\Microsoft\MicrosoftEdge\Internet Settings
|
||||
- **Value name:** NewTabPageUR
|
||||
- **Value type:** REG_SZ
|
||||
|
||||
|
||||
### Related policies
|
||||
|
||||
[Allow web content on New Tab page](https://docs.microsoft.com/en-us/microsoft-edge/deploy/available-policies#allow-web-content-on-new-tab-page): [!INCLUDE [allow-web-content-on-new-tab-page-shortdesc](../shortdesc/allow-web-content-on-new-tab-page-shortdesc.md)]
|
||||
|
||||
<hr>
|
@ -0,0 +1,70 @@
|
||||
<!-- ## Show message when opening sites in Internet Explorer -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10, version 1607 and later*<br>
|
||||
>*Default setting: Disabled or not configured (No additional message)*
|
||||
|
||||
<!-- RS5 update: add option for showing interstitial page with stay in Edge link (Koch) -->
|
||||
[!INCLUDE [show-message-when-opening-sites-in-ie-shortdesc](../shortdesc/show-message-when-opening-sites-in-ie-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled or not configured<br>**(default)** |0 |0 |No additional message displays. | |
|
||||
|Enabled |1 |1 |Shows an additional message stating that a site has opened in IE11. | |
|
||||
|Enabled |2 |2 |Shows an additional message with a "Keep going in Microsoft Edge" link. | |
|
||||
---
|
||||
|
||||
### Configuration combinations
|
||||
|
||||
| **Show message when opening sites in Internet Explorer** | **Configure the Enterprise Mode Site List** | **Send all intranet sites to Internet Explorer, or both.** | **Results** |
|
||||
| --- | --- | --- | --- |
|
||||
| Disabled or not configured (default) | Disabled or not configured (default) | Disabled or not configured (default) | |
|
||||
| Disabled or not configured | Disabled or not configured (default) | Enabled (only intranet sites open in IE11) | |
|
||||
| Disabled or not configured | Enabled (turned on) | Disabled or not configured (default) | |
|
||||
| Disabled or not configured | Enabled (turned on) | Enabled (only intranet sites open in IE11) | |
|
||||
| Enabled (shows an additional message) | Disabled or not configured (default) | Disabled or not configured (default) | |
|
||||
| Enabled (shows an additional message) | Enabled (turned on) | Disabled or not configured (default) | |
|
||||
| Enabled (shows an additional message) | Enabled (turned on) | Enabled (only intranet sites open in IE11) | |
|
||||
| Enabled (shows an additional message) | Disabled or not configured (default) | Enabled (only intranet sites open in IE11) | |
|
||||
| Enabled (shows the Keep going link) | Disabled or not configured (default) | Disabled or not configured (default) | |
|
||||
| Enabled (shows the Keep going link) | Enabled (turned on) | Disabled or not configured (default) | |
|
||||
| Enabled (shows the Keep going link) | Enabled (turned on) | Enabled (only intranet sites open in IE11) | |
|
||||
| Enabled (shows the Keep going link) | Disabled or not configured (default) | Enabled (only intranet sites open in IE11) | |
|
||||
---
|
||||
|
||||
|
||||
### ADMX info and settings
|
||||
#### ADMX info
|
||||
- **GP English name:** Show message when opening sites in Internet Explorer
|
||||
- **GP name:** ShowMessageWhenOpeningSitesInInternetExplorer
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[ShowMessageWhenOpeningSitesInInternetExplorer](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-showmessagewhenopeningsitesininternetexplorer)
|
||||
- **Supported devices:** Desktop
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ShowMessageWhenOpeningSitesInInternetExplorer
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HKLM\Software\Policies\Microsoft\MicrosoftEdge\Main
|
||||
- **Value name:** ShowMessageWhenOpeningSitesInInternetExplorer
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
### Related policies
|
||||
|
||||
- [Configure the Enterprise Mode Site List](../available-policies.md#configure-the-enterprise-mode-site-list): [!INCLUDE [configure-enterprise-mode-site-list-shortdesc](../shortdesc/configure-enterprise-mode-site-list-shortdesc.md)]
|
||||
|
||||
- [Send all intranet sites to Internet Explorer 11](../available-policies.md#send-all-intranet-sites-to-internet-explorer-11): [!INCLUDE [send-all-intranet-sites-to-ie-shortdesc](../shortdesc/send-all-intranet-sites-to-ie-shortdesc.md)]
|
||||
|
||||
### Scenarios
|
||||
|
||||
Customer has all Intranet sites redirect from Edge to IE, and as website owners find their sites no longer require IE, they override the setting for that specific site to no longer redirect it to IE.
|
||||
|
||||
As part of this, we have a GPO in place for our website owners to not hide the page Edge displays saying they were redirected. Before the Fall Creators Update, that page looked something like this:
|
||||
|
||||
Note the option to “Keep going in Microsoft Edge” at the bottom which would allow our website owners to be able to continue to their site in Edge to test.
|
||||
|
||||
Meaning that our website owners can no longer test their websites in Edge due to our GPO redirecting all internal sites to IE. So now they can’t test to let us know if their site will work in Edge. Is this by design? If so, is there a work around that Microsoft would suggest for our users?
|
||||
|
||||
<hr>
|
62
browsers/edge/includes/unlock-home-button-include.md
Normal file
@ -0,0 +1,62 @@
|
||||
<!-- ## Unlock Home Button -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10*<br>
|
||||
>*Default setting: Disabled or not configured (Home button is locked)*
|
||||
|
||||
[!INCLUDE [unlock-home-button-shortdesc](../shortdesc/unlock-home-button-shortdesc.md)]
|
||||
|
||||
### Allowed values
|
||||
|
||||
|Group Policy |MDM |Registry |Description |Most restricted |
|
||||
|---|:---:|:---:|---|:---:|
|
||||
|Disabled or not configured<br>**(default)** |0 |0 |Prevent users from making changes to the home button settings. | |
|
||||
|Enabled |1 |1 |Allow users to make changes to the home button settings. | |
|
||||
---
|
||||
|
||||
With these values, you can do any of the following configurations:
|
||||
|
||||
#### If you want to show the home button, load the New tab page, and prevent users from making changes to the settings.
|
||||
1. **Configure Home Button:** Enable and select the _Show home button & set to New tab page_ option.
|
||||
2. **Set Home Button URL:** Leave blank or not configured.
|
||||
3. **Unlock Home Button:** Leave disabled or not configured.
|
||||
|
||||
#### If you want to show the home button, load the New tab page, and let users make changes:
|
||||
1. **Configure Home Button:** Enable and select the _Show home button & set to New tab page_ option.
|
||||
2. **Set Home Button URL:** Leave blank or not configured.
|
||||
3. **Unlock Home Button:** Enable to let users make changes.
|
||||
|
||||
#### If you want to show the home button, load a custom URL, and prevent users from making changes:
|
||||
1. **Configure Home Button:** Enable and select the _Show the home button & set a specific page_ option.
|
||||
2. **Set Home Button URL:** Enter a URL in string format, for example, https://www.bing.com.
|
||||
3. **Unlock Home Button:** Leave disabled or not configured.
|
||||
|
||||
#### If you want to show the home button, load a custom URL, and let users make changes:
|
||||
1. **Configure Home Button:** Enable and select the _Show the home button & set a specific page_ option.
|
||||
2. **Set Home Button URL:** Enter a URL in string format, for example, https://www.bing.com.
|
||||
3. **Unlock Home Button:** Enable to let users make changes.
|
||||
|
||||
|
||||
### ADMX info and settings
|
||||
#### ADMX info
|
||||
- **GP English name:** Unlock Home Button
|
||||
- **GP name:** UnlockHomeButton
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[UnlockHomeButton]()
|
||||
- **Supported devices:** Desktop
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/UnlockHomeButton
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Internet Settings
|
||||
- **Value name:** UnlockHomeButton
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
### Related policies
|
||||
|
||||
- [Configure Home Button](#configure-home-button-include): [!INCLUDE [configure-home-button-shortdesc](../shortdesc/configure-home-button-shortdesc.md)]
|
||||
|
||||
- [Set Home Button URL](#set-home-button-url-include): [!INCLUDE [set-home-button-url-shortdesc](../shortdesc/set-home-button-url-shortdesc.md)]
|
||||
|
||||
<hr>
|
432
browsers/edge/microsoft-edge-kiosk-mode-deploy.md
Normal file
@ -0,0 +1,432 @@
|
||||
---
|
||||
description:
|
||||
ms.assetid:
|
||||
author: shortpatti
|
||||
ms.author: pashort
|
||||
ms.prod: edge
|
||||
ms.sitesec: library
|
||||
title: Deploy Microsoft Edge kiosk mode
|
||||
ms.localizationpriority: high
|
||||
ms.date: 07/18/2018
|
||||
---
|
||||
|
||||
# Deploy Microsoft Edge kiosk mode (Preview Build 17718)
|
||||
|
||||
>Applies to: Microsoft Edge on Windows 10
|
||||
|
||||
Microsoft Edge kiosk mode works with assigned access to restrict the browsing
|
||||
experience for kiosk devices. The kiosk browsing experience includes a full
|
||||
screen digital/interactive signage mode and a multi-tab browsing mode. To use
|
||||
Microsoft Edge kiosk mode, you must configure Microsoft Edge with assigned
|
||||
access.
|
||||
|
||||
When you configure Microsoft Edge kiosk mode in assigned access, you can set it
|
||||
up to show only a single URL in full-screen, in the case of digital or
|
||||
interactive signage on a single-app kiosk device. You can also restrict
|
||||
Microsoft Edge for public browsing (single and multi-app kiosk devices) that run
|
||||
a multi-tab version of InPrivate limiting the functionality. You can also
|
||||
configure a multi-app kiosk device to run a full version of Microsoft Edge.
|
||||
|
||||
Digital/Interactive signage, public browsing (single-app) and public browsing
|
||||
(multi-app) protect user’s browsing data by running Microsoft Edge InPrivate.
|
||||
Single-app public browsing provides an idle timer and an 'End session' button.
|
||||
The idle timer resets the browsing session after a specified timeout, and the
|
||||
'End Session' button resets the session immediately.
|
||||
|
||||
## Microsoft Edge kiosk types
|
||||
|
||||
Windows 10 offers two different kiosk type experiences in assigned access for
|
||||
public and specialized use: single-app kiosk and multi-app kiosk. Microsoft Edge
|
||||
kiosk mode supports **four** types, depending on how a Microsoft Edge kiosk is
|
||||
set up in assigned access.
|
||||
|
||||
### Single-app kiosk
|
||||
|
||||
When you set up Microsoft Edge kiosk mode in single-app assigned access,
|
||||
Microsoft Edge runs InPrivate either in full-screen or a limited multi-tab
|
||||
version.
|
||||
|
||||
The single-app Microsoft Edge kiosk mode types include:
|
||||
|
||||
1. **Digital / Interactive signage** devices display a specific site in
|
||||
full-screen mode where Microsoft Edge runs InPrivate mode. Examples of
|
||||
Digital signage are, a rotating advertisement or menu. Examples of
|
||||
Interactive signage are an interactive museum display or restaurant
|
||||
order/pay station.
|
||||
|
||||
2. **Public browsing** devices run a limited multi-tab version of InPrivate and
|
||||
are the only app available. Users can’t minimize, close, or open new
|
||||
Microsoft Edge windows or customize Microsoft Edge. Users can clear browsing
|
||||
data, downloads and restart Microsoft Edge by clicking “End session.” You
|
||||
can configure Microsoft Edge to restart after a period of inactivity by
|
||||
using the “Configure kiosk reset after idle timeout” policy. For example, an
|
||||
information kiosk at a public library.
|
||||
|
||||

|
||||
|
||||
### Multi-app kiosk
|
||||
|
||||
When you set up Microsoft Edge kiosk mode in multi-app assigned access,
|
||||
Microsoft Edge runs a limited multi-tab version of InPrivate or a normal
|
||||
browsing version. For more details about running a multi-app kiosk, or
|
||||
fixed-purpose device, see Set up a multi-app kiosk. Here you learn how to create
|
||||
kiosks that run more than one app and the benefits of a multi-app kiosk, or
|
||||
fixed-purpose device.
|
||||
|
||||
The multi-app Microsoft Edge kiosk mode types include:
|
||||
|
||||
1. **Public browsing** (shared browsing) supports browsing the internet and
|
||||
runs InPrivate with minimal features available. In this configuration,
|
||||
Microsoft Edge can be one of many apps available. Users can minimize, close,
|
||||
and open multiple InPrivate windows. On a multi-app kiosk device, Microsoft
|
||||
Edge can interact with other applications. For example, users can install
|
||||
extensions from Microsoft Store if Microsoft Store is set up in assigned
|
||||
access. If you also have Internet Explorer 11 set up in assigned access; you
|
||||
can use the Enterprise Mode site list to allow users to open sites in
|
||||
Internet Explorer 11.
|
||||
|
||||

|
||||
|
||||
1. **Normal mode** runs a full version of Microsoft Edge, but some features may
|
||||
not work depending on what other apps you configured in assigned access. For
|
||||
example, if the Microsoft Store is not set up, users cannot install
|
||||
extensions. If the user logs in with an MSA, their browsing data will roam
|
||||
with them. If you also have Internet Explorer 11 set up in assigned access;
|
||||
you can use the Enterprise Mode site list to open sites in Internet Explorer
|
||||
11 automatically.
|
||||
|
||||

|
||||
|
||||
## Let’s get started!
|
||||
|
||||
Before you can configure Microsoft Edge kiosk mode, you must set up Microsoft
|
||||
Edge in assigned access. You can set up Microsoft Edge kiosk mode in assigned
|
||||
access using:
|
||||
|
||||
- **Windows Settings.** Best for physically setting up a single device as a
|
||||
kiosk. With this method, you set up assigned access and configure the kiosk
|
||||
or digital sign device using Settings. You can configure Microsoft Edge in
|
||||
single-app (kiosk type – Full-screen or public browsing) and define a single
|
||||
URL for the Home Button, Start Page and New Tab page. You can also set the
|
||||
reset after idle timeout. an ,
|
||||
|
||||
- **Microsoft Intune or other MDM service.** Best for setting up multiple
|
||||
devices as a kiosk. With this method, you configure Microsoft Edge in
|
||||
assigned access and configure how Microsoft Edge behaves when it’s running
|
||||
in kiosk mode with assigned access.
|
||||
|
||||
>[!NOTE]
|
||||
>For other MDM service, check with your provider for instructions.
|
||||
|
||||
- **Windows PowerShell.** Best for setting up multiple devices as a kiosk.
|
||||
With this method, you set up assigned access using the
|
||||
[Set-AssignedAccess](https://docs.microsoft.com/en-us/powershell/module/assignedaccess/Set-AssignedAccess?view=win10-ps)
|
||||
cmdlet to restrict a local standard user account on a single-function
|
||||
device. The user cannot exit the app, sign out, or access any system
|
||||
settings. To configure how Microsoft Edge behaves when it’s running in kiosk
|
||||
mode, use Intune or other MDM service, the Group Policy Editor, or registry.
|
||||
|
||||
- **Windows Configuration Designer.** Best for setting up multiple devices as
|
||||
a kiosk. Download and install both the latest version of the [Windows
|
||||
Assessment and Deployment Kit
|
||||
(ADK)](https://developer.microsoft.com/windows/hardware/windows-assessment-deployment-kit)
|
||||
and [Windows Configuration
|
||||
Manager](https://docs.microsoft.com/en-us/windows/configuration/provisioning-packages/provisioning-install-icd#install-windows-configuration-designer-1).
|
||||
|
||||
### Prerequisites
|
||||
|
||||
- Microsoft Edge on Windows 10, version 1809 (Professional, Enterprise, and
|
||||
Education).
|
||||
|
||||
- Configuration and deployment service, such as Windows PowerShell, Microsoft
|
||||
Intune or other MDM service, or Windows Configuration Designer. With these
|
||||
methods, you must have the
|
||||
[AppUserModelID](https://docs.microsoft.com/windows-hardware/customize/enterprise/find-the-application-user-model-id-of-an-installed-app);
|
||||
this does not apply to the Windows Settings method.
|
||||
|
||||
### Use Windows Settings
|
||||
|
||||
Windows Settings is the simplest and easiest way to set up one or a couple of
|
||||
devices because you must perform these steps on each device. This method is
|
||||
ideal for mom and pop shops or small businesses.
|
||||
|
||||
1. In Windows Settings, select **Accounts** \> **Other people**.
|
||||
|
||||
2. Under **Set up a kiosk**, select **Assigned access**.
|
||||
|
||||
3. Select **Get started**.
|
||||
|
||||
4. Create a standard user account or choose an existing account for your kiosk.
|
||||
|
||||
5. Select **Next**.
|
||||
|
||||
6. On the **Choose the app for the kiosk** page, select **Microsoft Edge.**
|
||||
|
||||
7. Select **Next**.
|
||||
|
||||
8. Select how Microsoft Edge displays when running in kiosk mode:
|
||||
|
||||
- **As a digital sign or interactive display,** the default URL shows in full
|
||||
screen, without browser controls.
|
||||
|
||||
- **As a public browser,** the default URL shows in a browser view with
|
||||
limited browser controls.
|
||||
|
||||
1. Select **Next**.
|
||||
|
||||
2. Enter the URL that you want to load when the kiosk launches.
|
||||
|
||||
>[!NOTE]
|
||||
>The URL sets the Home Button, Start page, and New Tab page.
|
||||
|
||||
1. Microsoft Edge in kiosk mode has a built-in timer to help keep data safe in
|
||||
public browsing sessions. When the idle time (no user activity) meets the
|
||||
time limit, a confirmation message prompts the user to continue; if
|
||||
**Continue** is not selected, Microsoft Edge resets to the default URL.
|
||||
Accept the default value of **5 minutes,** or you can choose your own idle
|
||||
timer value.
|
||||
|
||||
2. Select **Next**, and then select **Close**.
|
||||
|
||||
3. Close **Settings** to save your choices automatically and apply them the
|
||||
next time the user accounts logs on.
|
||||
|
||||
4. Configure the policies for Microsoft Edge kiosk mode. For details on the
|
||||
valid kiosk policy settings, see Related policies on page 17.
|
||||
|
||||
5. Validate the Microsoft Edge kiosk mode by restarting the device and signing
|
||||
in with the local kiosk account.
|
||||
|
||||
*Congratulations!* You’ve finished setting up Microsoft Edge in assigned access
|
||||
and a kiosk or digital sign, and configured browser policies for Microsoft Edge
|
||||
kiosk mode.
|
||||
|
||||
*Next steps.*
|
||||
- Use your new kiosk. Sign in to the device using the user account
|
||||
that you selected to run the kiosk app.
|
||||
- If you want to make changes to your kiosk, you can quickly change the display
|
||||
option and default URL for Microsoft Edge.
|
||||
|
||||
1. Go to **Start** \> **Settings** \> **Accounts** \> **Other people**.
|
||||
|
||||
2. Under **Set up a kiosk**, select **Assigned access**.
|
||||
|
||||
3. Make your changes to **Choose a kiosk mode** and **Set up Microsoft Edge**.
|
||||
|
||||
### Use Microsoft Intune or other MDM service
|
||||
|
||||
With this method, you can use Microsoft Intune or other MDM services to
|
||||
configure Microsoft Edge in assigned access and how it behaves when it’s running
|
||||
in assigned access.
|
||||
|
||||
1. In Microsoft Intune or other MDM service, configure AssignedAccess to
|
||||
prevent users from accessing the file system, running executables, or other
|
||||
apps.
|
||||
|
||||
2. Configure the following MDM settings to control a web browser app on the
|
||||
kiosk device.
|
||||
|
||||
| | |
|
||||
|---|---|
|
||||
| **ConfigureKioskMode**<p> | Configure the display mode for Microsoft Edge as a kiosk app.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskMode<p>**Data type:** Integer<p>**Allowed values:**<ul><li>**Single-app kiosk experience**<ul><li>**0** - Digital signage and interactive display</li><li>**1** - InPrivate Public browsing</li></ul></li><li>**Multi-app kiosk experience**<ul><li>**0** - Normal Microsoft Edge running in assigned access</li><li>**1** - InPrivate public browsing with other apps</li></ul></li></ul> |
|
||||
| **ConfigureKioskResetAfterIdleTimeout**<p> | Change the time in minutes from the last user activity before Microsoft Edge kiosk mode resets to the default kiosk configuration.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskResetAfterIdleTimeout<p>**Data type:** Integer<p>**Allowed values:**<ul><li>**0** - No idle timer</li><li>**1-1440 (5 minutes is the default)** - Set reset on idle timer</li></ul> |
|
||||
| **HomePages**<p> | Set one or more start pages, URLs, to load when Microsoft Edge launches.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/HomePages<p>**Data type:** String<p>**Allowed values:**<p>Enter one or more URL, for example,<br> \<https://www.msn.com\>\<https:/www.bing.com\> |
|
||||
| **ConfigureHomeButton**<p> | Configure how the Home Button behaves.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureHomeButton<p>**Data type:** Integer<p> **Allowed values:**<ul><li>**0 (default)** - Not configured. Show home button, and load the default Start page.</li><li>**1** - Enabled. Show home button and load New tab page</li><li>**2** - Enabled. Show home button & set a specific page.</li><li>**3** - Enabled. Hide the home button.</li></ul> |
|
||||
| **SetNewTabPageURL**<p> | Set a custom URL for the New tab page.<p> **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ <p>**Data type:** String<p>**Allowed values:** Enter a URL, for example, https://www.msn.com |
|
||||
| **SetHomeButtonURL**<p> | If you set ConfigureHomeButton to 2, configure the home button URL.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ <p>**Data type:** String<p>**Allowed values:** Enter a URL, for example, https://www.bing.com |
|
||||
---
|
||||
|
||||
3. Restart the device and sign in using the kiosk app user account.
|
||||
|
||||
*Congratulations!* You’ve finished setting up a kiosk or digital signage and
|
||||
configuring policies for Microsoft Edge kiosk mode using Microsoft Intune or
|
||||
other MDM service.
|
||||
|
||||
*Next steps.* Use your new kiosk. Sign in to the device using the user account
|
||||
that you selected to run the kiosk app.
|
||||
|
||||
### Use a provisioning package
|
||||
|
||||
With this method, you can use a provisioning package to configure Microsoft Edge
|
||||
in assigned access. After you set up the provisioning package for configuring
|
||||
Microsoft Edge in assigned access, you configure how Microsoft Edge behaves when
|
||||
it’s running in kiosk mode with assigned access.
|
||||
|
||||
1. Open Windows Configuration Designer to create a provisioning package and
|
||||
configure Microsoft Edge in assigned access.
|
||||
|
||||
2. After creating the provisioning package and configuring assigned access, and
|
||||
before you build the package, switch to the advanced editor.
|
||||
|
||||
3. Navigate to **Runtime settings \> Policies \> Browser** and set the
|
||||
following policies:
|
||||
|
||||
| | |
|
||||
|---|---|
|
||||
| **ConfigureKioskMode**<p> | Configure the display mode for Microsoft Edge as a kiosk app.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskMode<p>**Data type:** Integer<p>**Allowed values:**<ul><li>**Single-app kiosk experience**<ul><li>**0** - Digital signage and interactive display</li><li>**1** - InPrivate Public browsing</li></ul></li><li>**Multi-app kiosk experience**<ul><li>**0** - Normal Microsoft Edge running in assigned access</li><li>**1** - InPrivate public browsing with other apps</li></ul></li></ul> |
|
||||
| **ConfigureKioskResetAfterIdleTimeout**<p> | Change the time in minutes from the last user activity before Microsoft Edge kiosk mode resets to the default kiosk configuration.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskResetAfterIdleTimeout<p>**Data type:** Integer<p>**Allowed values:**<ul><li>**0** - No idle timer</li><li>**1-1440 (5 minutes is the default)** - Set reset on idle timer</li></ul> |
|
||||
| **HomePages**<p> | Set one or more start pages, URLs, to load when Microsoft Edge launches.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/HomePages<p>**Data type:** String<p>**Allowed values:**<p>Enter one or more URL, for example,<br> \<https://www.msn.com\>\<https:/www.bing.com\> |
|
||||
| **ConfigureHomeButton**<p> | Configure how the Home Button behaves.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureHomeButton<p>**Data type:** Integer<p> **Allowed values:**<ul><li>**0 (default)** - Not configured. Show home button, and load the default Start page.</li><li>**1** - Enabled. Show home button and load New tab page</li><li>**2** - Enabled. Show home button & set a specific page.</li><li>**3** - Enabled. Hide the home button.</li></ul> |
|
||||
| **SetNewTabPageURL**<p> | Set a custom URL for the New tab page.<p> **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ <p>**Data type:** String<p>**Allowed values:** Enter a URL, for example, https://www.msn.com |
|
||||
| **SetHomeButtonURL**<p> | If you set ConfigureHomeButton to 2, configure the home button URL.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ <p>**Data type:** String<p>**Allowed values:** Enter a URL, for example, https://www.bing.com |
|
||||
---
|
||||
|
||||
4. After you’ve configured the Microsoft Edge kiosk mode policies, including
|
||||
any of the related policies, it’s time to build the package.
|
||||
|
||||
5. Click **Finish**. The wizard closes taking you back to the Customizations
|
||||
page.
|
||||
|
||||
6. Apply the provisioning package to the device, which you can do during the
|
||||
first-run experience (out-of-box experience or OOBE) and after (runtime).
|
||||
For more details, see Apply a provisioning package.
|
||||
|
||||
*Congratulations!* You’ve finished creating your provisioning package for
|
||||
Microsoft Edge kiosk mode.
|
||||
|
||||
*Next steps.* Use your new kiosk. Sign in to the device using the user account
|
||||
that you selected to run the kiosk app.
|
||||
|
||||
# Feature comparison of kiosk mode and kiosk browser app
|
||||
|
||||
In the following table, we show you the features available in both Microsoft
|
||||
Edge kiosk mode and Kiosk Browser app available in Microsoft Store. Both kiosk
|
||||
mode and kiosk browser app work in assigned access.
|
||||
|
||||
| **Feature** | **Microsoft Edge kiosk mode** | **Kiosk Browser** |
|
||||
|---------------|--------------------------------|-----------------------|
|
||||
| Print support | [Supported](images/148767.png) | [Not supported](images/148766.png) |
|
||||
| Multi-tab support | [Supported](images/148767.png) | [Not supported](images/148766.png) |
|
||||
| Allow URL support | [Supported](images/148767.png) <p>*\*For Microsoft Edge kiosk mode use* [Windows Defender Firewall](#_*Windows_Defender_Firewall)*. Microsoft kiosk browser has custom policy support.* | [Supported](images/148767.png) |
|
||||
| Block URL support | [Supported](images/148767.png)<p>*\*For Microsoft Edge kiosk mode use* [Windows Defender Firewall](#_*Windows_Defender_Firewall)*. Microsoft kiosk browser has custom policy support.* | [Supported](images/148767.png) |
|
||||
| Configure Home button | [Supported](images/148767.png) | [Supported](images/148767.png) |
|
||||
| Set Start page(s) URL | [Supported](images/148767.png) | [Supported](images/148767.png) <p>*Same as Home button URL* |
|
||||
| Set New Tab page URL | [Supported](images/148767.png) | [Not supported](images/148766.png) |
|
||||
| Favorites management | [Supported](images/148767.png) | [Not supported](images/148766.png) |
|
||||
| End session button | [Supported](images/148767.png) | [Supported](images/148767.png)<p>*In Intune, must create custom URI to enable. Dedicated UI configuration targeted for 1808.* |
|
||||
| Reset on inactivity | [Supported](images/148767.png) | [Supported](images/148767.png) |
|
||||
| Internet Explorer integration (Enterprise Mode site list) | [Supported](images/148767.png)<p>*Multi-app mode only* | [Not supported](images/148766.png) |
|
||||
---
|
||||
|
||||
## \*Windows Defender Firewall
|
||||
To prevent unwanted websites, use Windows Defender Firewall to configure a list of allowed websites or blocked websites or both. For more details, see [Windows Defender Firewall with Advanced Security Deployment](https://docs.microsoft.com/en-us/windows/security/identity-protection/windows-firewall/windows-firewall-with-advanced-security-deployment-guide).
|
||||
|
||||
# Related policies
|
||||
|
||||
| **MDM Setting** | **Digital /<br>Interactive signage** | **Public browsing<br>single-app** | **Public browsing<br>multi-app** | **Normal** |
|
||||
|------------------|--------------------------|----------------------|------------------------|--------------------------|
|
||||
| AllowAddressBarDropdown | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) |
|
||||
| AllowAutofill | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) |
|
||||
| AllowBrowser | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) |
|
||||
| AllowConfigurationUpdateForBooksLibrary | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) |
|
||||
| AllowCookies | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
|
||||
| AllowDeveloperTools | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) |
|
||||
| AllowDoNotTrack | [Supported](images/148767.png) ? | [Supported](images/148767.png) ? | [Supported](images/148767.png) ? | [Supported](images/148767.png) |
|
||||
| AllowExtensions | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) |
|
||||
| AllowFlash | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
|
||||
| AllowFlashClickToRun | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
|
||||
| AllowFullscreen\* | [Not supported](images/148766.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
|
||||
| AllowInPrivate | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) |
|
||||
| AllowMicrosoftCompatibilityList | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) \* | [Supported](images/148767.png) |
|
||||
| AllowPasswordManager | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) |
|
||||
| AllowPopups | [Not supported](images/148766.png) ? | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
|
||||
| AllowPrelaunch\* | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) |
|
||||
| AllowPrinting\* | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
|
||||
| AllowSavingHistory\* | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) |
|
||||
| AllowSearchEngineCustomization | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) |
|
||||
| AllowSearchSuggestionsinAddressBar | [Not supported](images/148766.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
|
||||
| AllowSideloadingOfExtensions\* | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) |
|
||||
| AllowSmartScreen | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
|
||||
| AllowSyncMySettings | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [./media/image12.png](./media/image12.png) ? | [Supported](images/148767.png) |
|
||||
| AllowTabPreloading\* | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) |
|
||||
| AllowWebContentOnNewTabPage\* | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) |
|
||||
| AlwaysEnabledBooksLibrary | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) |
|
||||
| ClearBrowsingDataOnExit | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) |
|
||||
| ConfigureAdditionalSearchEngines | [Not supported](images/148766.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
|
||||
| ConfigureFavoritesBar\* | [Not supported](images/148766.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
|
||||
| ConfigureHomeButton\* | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
|
||||
| ConfigureKioskMode\* | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
|
||||
| ConfigureKioskResetAfterIdleTimeout\* | [Not supported](images/148766.png) | [Supported](images/148767.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) |
|
||||
| ConfigureOpenMicrosoftEdgeWith\* | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
|
||||
| ConfigureTelemetryForMicrosoft365Analytics\* | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
|
||||
| DisableLockdownOfStartPages | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) |
|
||||
| DoNotSyncBrowserSettings\* & PreventUsersFromTurningOnBrowserSyncing\* | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) ? | [Supported](images/148767.png) |
|
||||
| EnableExtendedBooksTelemetry | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) |
|
||||
| EnterpriseModeSiteList | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) \* | [Supported](images/148767.png) |
|
||||
| FirstRunURL | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) |
|
||||
| HomePages | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
|
||||
| LockdownFavorites | [Not supported](images/148766.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
|
||||
| PreventAccessToAboutFlagsInMicrosoftEdge | [Not supported](images/148766.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
|
||||
| PreventCertErrorOverrides\* | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
|
||||
| PreventFirstRunPage | [Supported](images/148767.png) ? | [Supported](images/148767.png) ? | [Supported](images/148767.png) ? | [Supported](images/148767.png) |
|
||||
| PreventLiveTileDataCollection | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) |
|
||||
| PreventSmartScreenPromptOverride | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
|
||||
| PreventSmartScreenPromptOverrideForFiles | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
|
||||
| PreventTurningOffRequiredExtensions\* | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
|
||||
| PreventUsingLocalHostIPAddressForWebRTC | ? | ? | ? | [Supported](images/148767.png) |
|
||||
| ProvisionFavorites | [Not supported](images/148766.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
|
||||
| SendIntranetTraffictoInternetExplorer | [Not supported](images/148766.png) | [Not supported](images/148766.png) | ?\* | [Supported](images/148767.png) |
|
||||
| SetDefaultSearchEngine | [Not supported](images/148766.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
|
||||
| SetHomeButtonURL\* | [Not supported](images/148766.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
|
||||
| SetNewTabPageURL\* | [Not supported](images/148766.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
|
||||
| ShowMessageWhenOpeningInteretExplorerSites | [Not supported](images/148766.png) | [Supported](images/148767.png) | [Supported](images/148767.png) \* | [Supported](images/148767.png) |
|
||||
| SyncFavoritesBetweenIEAndMicrosoftEdge | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) ? | [Supported](images/148767.png) |
|
||||
| UnlockHomeButton\* | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) |
|
||||
| UseSharedFolderForBooks | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) |
|
||||
---
|
||||
|
||||
*\* New policy coming in the next release of Windows 10.*
|
||||
|
||||
# Related topics
|
||||
|
||||
- **Create a Kiosk Experience:** Learn how to set up single-function kiosk
|
||||
devices, such as restaurant menus, and optional features for a welcome
|
||||
screen or power button availability. Also, learn how to create a multi-app
|
||||
kiosk, or fixed-purpose device, to provide an easy-to-understand experience
|
||||
giving users the things they need to use.
|
||||
|
||||
- **Configure a Windows 10 kiosk that runs multiple apps:** Learn how to
|
||||
create kiosks that run more than one app and the benefits of a multi-app
|
||||
kiosk, or fixed-purpose device.
|
||||
|
||||
- **Kiosk apps for assigned access: Best practices:** In Windows 10, you can
|
||||
use assigned access to create a kiosk device, which enables users to
|
||||
interact with just a single Universal Windows app. Learn about the best
|
||||
practices for implementing a kiosk app.
|
||||
|
||||
- **Guidelines for choosing an app for assigned access (kiosk mode):**
|
||||
Assigned access restricts a local standard user account on the device so
|
||||
that it only has access to a single-function device, like a kiosk. Learn
|
||||
about the guidelines for choosing a Windows app, web browsers, and securing
|
||||
your information. Also, learn about additional configurations required for
|
||||
some apps before it can work properly in assigned access.
|
||||
|
||||
- **Other settings to lock down:** Learn how to configure a more secure kiosk
|
||||
experience. In addition to the settings, learn how to set up **automatic
|
||||
logon** for your kiosk device. For example, when the kiosk device restarts,
|
||||
you can log back into the device manually or by setting up automatic logon.
|
||||
|
||||
- **Add apps to Microsoft Intune:** Learn about and understand a few app
|
||||
fundamentals and requirements before adding them to Intune and making them
|
||||
available to your users.
|
||||
|
||||
- **AssignedAccess configuration service provider (CSP):** The AssignedAccess
|
||||
configuration service provider (CSP) sets the device to run in kiosk mode.
|
||||
Once the CSP has executed, then the next user login associated with the
|
||||
kiosk mode puts the device into the kiosk mode running the application
|
||||
specified in the CSP configuration.
|
||||
|
||||
- **Create a provisioning page for Windows 10**. Learn to use Windows
|
||||
Configuration Designer (WCD) to create a provisioning package (.ppkg) for
|
||||
configuring devices running Windows 10. The WCD wizard options provide a
|
||||
simple interface to configure desktop, mobile, and kiosk device settings.
|
||||
|
||||
# Provide feedback or get support
|
||||
|
||||
To provide feedback on Microsoft Edge kiosk mode in Feedback Hub, select **Microsoft Edge** as the **Category**, and **All other issues** as the
|
||||
subcategory.
|
||||
|
||||
*For multi-app kiosk only.* If you have set up the Feedback Hub in assigned access, you can you submit the feedback from the device running Microsoft Edge in kiosk mode in which you can include diagnostic logs. In the Feedback Hub, select **Microsoft Edge** as the **Category**, and **All other issues** as the
|
||||
subcategory.
|
||||
|
||||
---
|
93
browsers/edge/new-policies.md
Normal file
@ -0,0 +1,93 @@
|
||||
---
|
||||
description:
|
||||
ms.assetid:
|
||||
author: shortpatti
|
||||
ms.author: pashort
|
||||
ms.prod: edge
|
||||
ms.mktglfcycl: explore
|
||||
ms.sitesec: library
|
||||
title: New Microsoft Edge Group Policies and MDM settings
|
||||
ms.localizationpriority:
|
||||
ms.date: 07/18/2018
|
||||
---
|
||||
|
||||
# New Microsoft Edge Group Policies and MDM settings (Preview Build 17718)
|
||||
|
||||
> Applies to: Microsoft Edge on Windows 10 and Windows 10 Mobile
|
||||
|
||||
|
||||
|
||||
|
||||
You can find the Microsoft Edge Group Policy settings in the following location of the Group Policy Editor:
|
||||
Computer Configuration\Administrative Templates\Windows Components\Microsoft Edge\
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
<!-- RS5 policies -->
|
||||
|
||||
|
||||
## Allow fullscreen mode
|
||||
[!INCLUDE [allow-full-screen-include](includes/allow-full-screen-include.md)]
|
||||
|
||||
## Allow Prelaunch
|
||||
[!INCLUDE [allow-prelaunch-include](includes/allow-prelaunch-include.md)]
|
||||
|
||||
## Allow printing
|
||||
[!INCLUDE [allow-printing-include.md](includes/allow-printing-include.md)]
|
||||
|
||||
## Allow Saving History
|
||||
[!INCLUDE [allow-saving-history-include.md](includes/allow-saving-history-include.md)]
|
||||
|
||||
## Allow sideloading of Extensions
|
||||
[!INCLUDE [allow-sideloading-extensions-include.md](includes/allow-sideloading-extensions-include.md)]
|
||||
|
||||
## Allow Microsoft Edge to start and load the Start and New Tab page at Windows startup and each time Microsoft Edge is closed
|
||||
[!INCLUDE [allow-tab-preloading-include](includes/allow-tab-preloading-include.md)]
|
||||
|
||||
## Prevent users from turning on browser syncing
|
||||
[!INCLUDE [prevent-users-to-turn-on-browser-syncing-include](includes/prevent-users-to-turn-on-browser-syncing-include.md)]
|
||||
|
||||
## Configure collection of browsing data for Microsoft 365 Analytics
|
||||
[!INCLUDE [configure-browser-telemetry-for-m365-analytics-include](includes/configure-browser-telemetry-for-m365-analytics-include.md)]
|
||||
|
||||
## Configure Favorites Bar
|
||||
[!INCLUDE [configure-favorites-bar-include.md](includes/configure-favorites-bar-include.md)]
|
||||
|
||||
## Configure Home Button
|
||||
[!INCLUDE [configure-home-button-include.md](includes/configure-home-button-include.md)]
|
||||
|
||||
## Configure Open Microsoft Edge With
|
||||
[!INCLUDE [configure-open-edge-with-include.md](includes/configure-open-edge-with-include.md)]
|
||||
|
||||
## Configure kiosk mode
|
||||
[!INCLUDE [configure-microsoft-edge-kiosk-mode-include.md](includes/configure-microsoft-edge-kiosk-mode-include.md)]
|
||||
|
||||
## Configure kiosk reset after idle timeout
|
||||
[!INCLUDE [configure-edge-kiosk-reset-idle-timeout-include.md](includes/configure-edge-kiosk-reset-idle-timeout-include.md)]
|
||||
|
||||
## Prevent certificate error overrides
|
||||
[!INCLUDE [prevent-certificate-error-overrides-include.md](includes/prevent-certificate-error-overrides-include.md)]
|
||||
|
||||
## Prevent turning off required extensions
|
||||
[!INCLUDE [prevent-turning-off-required-extensions-include.md](includes/prevent-turning-off-required-extensions-include.md)]
|
||||
|
||||
## Set Home button URL
|
||||
[!INCLUDE [set-home-button-url-include](includes/set-home-button-url-include.md)]
|
||||
|
||||
## Set New Tab page URL
|
||||
[!INCLUDE [set-new-tab-url-include.md](includes/set-new-tab-url-include.md)]
|
||||
|
||||
## Unlock Home button
|
||||
[!INCLUDE [unlock-home-button-include.md](includes/unlock-home-button-include.md)]
|
||||
|
||||
|
||||
# Additional MDM policies added
|
||||
short intro for this...
|
||||
|
||||
ShowMessageWhenOpeningInteretExplorerSites
|
||||
|
||||
AllowWebContentOnNewTabPage
|
||||
|
||||
DoNotSyncBrowserSetting & DisableWebBrowserSettingSync (added MDM settings)
|
@ -0,0 +1 @@
|
||||
You can configure Microsoft Edge to store books from the Books Library to a default, shared folder in Windows, which decreases the amount of storage used by book files. When you enable this policy, Microsoft Edge downloads book files automatically to a common, shared folder, and prevents users from removing the book from the library. When disabled, Microsoft Edge does not use a shared folder but downloads book files to a folder for each user. For this policy to work properly, users must be signed in with a school or work account.
|
@ -0,0 +1 @@
|
||||
By default, Microsoft Edge shows the Address bar drop-down list and makes it available. When enabled (default setting), this policy takes precedence over the [Configure search suggestions in Address bar](../available-policies.md#configure-search-suggestions-in-address-bar) policy. If you want to minimize network connections from Microsoft Edge to Microsoft service, we recommend disabling this policy, which hides the Address bar drop-down list functionality. When disabled, Microsoft Edge also disables the _Show search and site suggestions as I type_ toggle in Settings.
|
1
browsers/edge/shortdesc/allow-adobe-flash-shortdesc.md
Normal file
@ -0,0 +1 @@
|
||||
Adobe Flash is integrated with Microsoft Edge and updated via Windows Update. By default, Microsoft Edge runs Adobe Flash content. With this policy, you can configure Microsoft Edge to prevent running Adobe Flash content.
|
@ -0,0 +1 @@
|
||||
By default, Microsoft Edge does not clear the browsing data on exit, but users can configure the _Clear browsing data_ option in Settings. Browsing data includes information you entered in forms, passwords, and even the websites visited. Enabling this policy clears the browsing data automatically each time Microsoft Edge closes.
|
@ -0,0 +1 @@
|
||||
By default, Microsoft Edge automatically updates the configuration data for the Books Library. Enabling this policy prevents Microsoft Edge from updating the configuration data.
|
1
browsers/edge/shortdesc/allow-cortana-shortdesc.md
Normal file
@ -0,0 +1 @@
|
||||
Since Microsoft Edge is integration with Cortana, and by default, Microsoft Edge allows users to use Cortana voice assistant. Disabling this policy prevents users from using Cortana, but they can still search to find items on their device.
|
@ -0,0 +1 @@
|
||||
By default, Microsoft Edge allows users to use the F12 developer tools to build and debug web pages. Disabling this policy prevents users from using the F12 developer tools.
|
@ -0,0 +1 @@
|
||||
By default, and depending on the device configuration, Microsoft Edge gathers basic diagnostic data about the books in the Books Library and sends it to Microsoft. Enabling this policy gathers and sends both basic and additional diagnostic data.
|
1
browsers/edge/shortdesc/allow-extensions-shortdesc.md
Normal file
@ -0,0 +1 @@
|
||||
By default, this policy allows users to add or personalize extensions in Microsoft Edge. Disabling this policy prevents users from adding or personalizing extensions.
|
@ -0,0 +1 @@
|
||||
By default, Microsoft Edge allows full-screen mode, which shows only the web content and hides the Microsoft Edge UI. When allowing full-screen mode, users and extensions must have the proper permissions. Disabling this policy prevents full-screen mode in Microsoft Edge.
|
@ -0,0 +1 @@
|
||||
By default, Microsoft Edge allows InPrivate browsing, and after closing all InPrivate tabs, Microsoft Edge deletes the browsing data from the device. Disabling this policy prevents InPrivate web browsing.
|
@ -0,0 +1 @@
|
||||
By default, during navigation, Microsoft Edge checks the Microsoft Compatibility List for websites with known compatibility issues. If found, users are prompted to use Internet Explorer, where the site loads and displays properly. Periodically during browser navigation, Microsoft Edge downloads the latest version of the list and applies the updates. You can view the compatibility list at about:compat. Disable this policy to ignore the compatibility list.
|
1
browsers/edge/shortdesc/allow-prelaunch-shortdesc.md
Normal file
@ -0,0 +1 @@
|
||||
By default, Microsoft Edge pre-launches during Windows startup, when the system is idle, and each time Microsoft Edge closes. When Microsoft Edge pre-launches, it runs as a background process waiting to be launched by the user. Pre-launching helps the performance of Microsoft Edge and minimizes the amount of time required to start up Microsoft Edge. Disabling this policy prevents Microsoft Edge from pre-launching.
|
1
browsers/edge/shortdesc/allow-printing-shortdesc.md
Normal file
@ -0,0 +1 @@
|
||||
By default, Microsoft Edge allows users to print web content. Disabling this policy prevents users from printing web content.
|
@ -0,0 +1 @@
|
||||
By default, Microsoft Edge saves the browsing history of visited websites and shows them in the History pane. Disable this policy if you want Microsoft Edge to stop saving the browsing history. If browsing history existed before disabling this policy, the previous browsing history remains in the History pane. Disabling this policy does not stop roaming of existing browsing history or browsing history from other devices.
|
@ -0,0 +1 @@
|
||||
By default, users can add new search engines or change the default search engine, in Settings, in Microsoft Edge. Disabling this policy prevents users from customizing the search engine in Microsoft Edge.
|
@ -0,0 +1 @@
|
||||
By default, Microsoft Edge allows sideloading, which installs and runs unverified extensions. Disabling this policy prevents sideloading, but does not prevent sideloading of extensions using Add-AppxPackage via PowerShell. You can only install extensions through Microsoft store (including a store for business), enterprise storefront (such as Company Portal) or PowerShell (using Add-AppxPackage).
|