add the microsoft edge kiosk mode deployment preview content

This commit is contained in:
Patti Short 2018-07-17 06:35:31 -07:00
parent fbf3f3ab10
commit dbe105e220
147 changed files with 3646 additions and 0 deletions

Binary file not shown.

After

Width:  |  Height:  |  Size: 2.5 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 2.5 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 14 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 4.6 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 51 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 2.3 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 305 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 35 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 398 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 428 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 29 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 204 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 14 KiB

View File

@ -0,0 +1,40 @@
<!-- ## Allow Address bar drop-down list suggestions -->
>*Supported versions: Microsoft Edge on Windows 10, version 1703 or later*<br>
>*Default setting: Enabled or not configured (Allowed)*
[!INCLUDE [allow-address-bar-drop-down-shortdesc](../shortdesc/allow-address-bar-drop-down-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Disabled |0 |0 |Not allowed. Hides the Address bar drop-down functionality, which also disables the _Show search and site suggestions as I type_ toggle in Settings. |![Most restricted value](../images/check-gn.png) |
|Enabled or not configured **(default)** |1 |1 |Allowed. Shows the Address bar drop-down list and makes it available. | |
---
### ADMX info and settings
#### ADMX info
- **GP English name:** Allow Address bar drop-down list suggestions
- **GP name:** AllowAddressBarDropdown
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[AllowAddressBarDropdown](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser\#browser-allowaddressbardropdown)
- **Supported devices:** Desktop
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowAddressBarDropdown
- **Data type:** Integer
#### Registry settings
- **Path:** HKLM\Software\Policies\Microsoft\MicrosoftEdge\ServiceUI
- **Value name:** ShowOneBox
- **Value type:** REG_
### Related policies
[Configure search suggestions in Address bar](../available-policies.md#configure-search-suggestions-in-address-bar): [!INCLUDE [configure-additional-search-engines-shortdesc](../shortdesc/configure-additional-search-engines-shortdesc.md)]
<hr>

View File

@ -0,0 +1,34 @@
<!-- ## Allow Adobe Flash -->
>*Supported versions: Microsoft Edge on Windows 10*<br>
>*Default setting: Enabled or not configured (Allowed)*
[!INCLUDE [allow-adobe-flash-shortdesc](../shortdesc/allow-adobe-flash-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Disabled |0 |0 |Prevented/not allowed. | |
|Enabled<br>**(default)** |1 |1 |Allowed. | |
---
### ADMX info and settings
#### ADMX info
- **GP English name:** Allow Adobe Flash
- **GP name:** AllowFlash
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[AllowFlash](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser\#browser-allowflash)
- **Supported devices:** Desktop
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowAdobeFlash
- **Data type:** Integer
#### Registry settings
- **Path:** HLKM\Software\Policies\Microsoft\MicrosoftEdge\Addons
- **Value name:** FlashPlayerEnabled
- **Value type:** REG_DWORD
<hr>

View File

@ -0,0 +1,35 @@
<!-- ## Allow clearing browsing data on exit -->
>*Supported versions: Microsoft Edge on Windows 10, version 1703 or later*<br>
>*Default setting: Disabled or not configured (Prevented)*
[!INCLUDE [allow-clearing-browsing-data-on-exit-shortdesc](../shortdesc/allow-clearing-browsing-data-on-exit-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Disabled or not configured<br>**(default)** |0 |0 |Prevented, but users can configure the _Clear browsing data_ option in Settings. | |
|Enabled |1 |1 |Allowed |![Most restricted value](../images/check-gn.png) |
---
### ADMX info and settings
#### ADMX info
- **GP English name:** Allow clearing browsing data on exit
- **GP name:** AllowClearingBrowsingDataOnExit
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[ClearBrowsingDataOnExit](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser\#browser-clearbrowsingdataonexit)
- **Supported devices:** Desktop
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ClearBrowsingDataOnExit
- **Data type:** Integer
#### *Registry
- **Path:** HLKM\\Software\\Policies\\Microsoft\\MicrosoftEdge\\Privacy
- **Value name:** ClearBrowsingHistoryOnExit
- **Value type:** REG_DWORD</li></ul>
<hr>

View File

@ -0,0 +1,38 @@
<!-- ## Allow configuration updates for the Books Library -->
>*Supported versions: Microsoft Edge on Windows 10, version 1802 or later*<br>
>*Default setting: Enabled or not configured (Allowed)*
[!INCLUDE [allow-configuration-updates-for-books-library-shortdesc](../shortdesc/allow-configuration-updates-for-books-library-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Disabled |0 |0 |Prevented/not allowed. |![Most restricted value](../images/check-gn.png) |
|Enabled or not configured<br>**(default)** |1 |1 |Allowed. Microsoft Edge updates the configuration data for the Books Library automatically. | |
---
### ADMX info and settings
#### ADMX info
- **GP English name:**
- **GP name:**
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[AllowConfigurationUpdateForBooksLibrary](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowconfigurationupdateforbookslibrary)
- **Supported devices:** Desktop
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowConfigurationUpdateForBooksLibrary
- **Data type:** Integer
#### Registry settings
- **Path:** HKLM\Software\Policies\Microsoft\MicrosoftEdge\BooksLibrary
- **Value name:** AllowConfigurationUpdateForBooksLibrary
- **Value type:** REG_DWORD
### Related documents
[Manage connections from Windows operating system components to Microsoft services](https://docs.microsoft.com/en-us/windows/configuration/manage-connections-from-windows-operating-system-components-to-microsoft-services)
<hr>

View File

@ -0,0 +1,34 @@
<!-- ## Allow Cortana -->
>*Supported versions: Microsoft Edge on Windows 10*<br>
>*Default setting: Enabled (Allowed)*
[!INCLUDE [allow-cortana-shortdesc](../shortdesc/allow-cortana-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Disabled |0 |0 |Prevented but users can still search to find items on their device. |![Most restricted value](../images/check-gn.png) |
|Enabled<br>**(default)** |1 |1 |Allowed. | |
---
### ADMX info and settings
#### ADMX info
- **GP English name:**
- **GP name:**
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Experience/[AllowCortana](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-experience#experience-allowcortana)
- **Supported devices:** Mobile**URI full path:** ./Vendor/MSFT/Policy/Config/Experience/AllowCortana
- **Data type:** Integer
#### Registry settings
- **Path:** HKLM\Software\Policies\Microsoft\Windows\Windows Search
- **Value name:** AllowCortana
- **Value type:** REG_DWORD
<hr>

View File

@ -0,0 +1,36 @@
<!-- ## Allow Developer Tools -->
>*Supported versions: Microsoft Edge on Windows 10, version 1511 or later*<br>
>*Default setting: Enabled (Allowed)*
[!INCLUDE [allow-developer-tools-shortdesc](../shortdesc/allow-developer-tools-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Disabled |0 |0 |Prevented/not allowed. |![Most restricted value](../images/check-gn.png) |
|Enabled |1 |1 |Allowed. | |
---
### ADMX info and settings
#### ADMX info
- **GP English name:** Allow Developer Tools
- **GP name:** AllowDeveloperTools
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/AllowDeveloperTools
- **Supported devices:** Desktop
- **URI full Path:** ./Vendor/MSFT/Policy/Config/Browser/AllowDeveloperTools
- **Data type:** Integer
#### Registry settings
- **Path:** HKLM\Software\Policies\Microsoft\MicrosoftEdge\F12
- **Value name:** AllowDeveloperTools
- **Value type:** REG_DWORD
<hr>

View File

@ -0,0 +1,33 @@
<!-- ## Always show the Books Library in Microsoft Edge -->
>*Supported versions: Microsoft Edge on Windows 10, version 1709 or later*<br>
>*Default setting: Disabled or not configured*
[!INCLUDE [always-show-books-library-shortdesc](../shortdesc/always-show-books-library-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Disabled or not configured<br>**(default)** |0 |0 |Shows the Books Library only in countries or regions where supported. |![Most restricted value](../images/check-gn.png) |
|Enabled |1 |1 |Shows the Books Library, regardless of the devices country or region. | |
---
### ADMX info and settings
#### ADMX info
- **GP English name:** Always show the Books Library in Microsoft Edge
- **GP name:** AlwaysEnableBooksLibrary
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[Browser/AlwaysEnableBooksLibrary](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-alwaysenablebookslibrary)
- **Supported devices:** Desktop and Mobile
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AlwaysEnableBooksLibrary
- **Data type:** Integer
#### Registry settings
- **Path:** HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Main
- **Value name:** AlwaysEnableBooksLibrary
- **Value type:** REG_DWORD
<hr>

View File

@ -0,0 +1,41 @@
<!-- ## Allow extended telemetry for the Books tab -->
>*Supported versions: Microsoft Edge on Windows 10, version 1802 or later*<br>
>*Default setting: Disabled or not configured (Gather and send only basic diagnostic data)*
[!INCLUDE [allow-extended-telemetry-for-books-tab-shortdesc](../shortdesc/allow-extended-telemetry-for-books-tab-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Disabled or not configured<br>**(default)** |0 |0 |Depending on the device configuration, Microsoft Edge gathers only basic diagnostic data. |![Most restricted value](../images/check-gn.png) |
|Enabled |1 |1 |Microsoft Edge gathers both basic and additional diagnostic data. | |
---
### ADMX info and settings
#### ADMX info
- **GP English name:** Allow extended telemetry for the Books tab
- **GP name:** EnableExtendedBooksTelemetry
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[Browser/EnableExtendedBooksTelemetry](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-enableextendedbookstelemetry)
- **Supported devices:** Desktop and Mobile
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/EnableExtendedBooksTelemetry
- **Data type:** Integer
#### Registry settings
- **Path:** HLKM\\Software\\Policies\\Microsoft\\MicrosoftEdge\\BooksLibrary
- **Value name:** EnableExtendedBooksTelemetry
- **Value type:** REG_DWORD
### Scenario
Due to current Privacy policy, the Books feature does not have the right to gather the book's unique identifier through regular events (because it could help to build a Reading history, which is not an explicit feature).
For Schools that are one of the target of this feature of Edge, we will propose an advanced telemetry report to the Teachers. This advanced report system will require to have the ProductId in events so IT Admin will be able to enable the propagation from the user's device to Microsoft Telemetry servers of events that contain ProductId.
<hr>

View File

@ -0,0 +1,44 @@
<!-- ## Allow Extensions -->
>*Supported versions: Microsoft Edge on Windows 10, version 1607 or later*<br>
>*Default setting: Enabled or not configured (Allowed)*
[!INCLUDE [allow-extensions-shortdesc](../shortdesc/allow-extensions-shortdesc.md)]
### Allowed values
- (0) Disabled - Prevented.
- (1 default) Enabled Allowed.
Most restricted value: None### Allowed values
|Group Policy |MDM |Registry |Description |
|---|:---:|:---:|---|
|Disabled |0 |0 |Prevented/not allowed. |
|Enabled or not configured<br>**(default)** |1 |1 |Allowed. |
---
### ADMX info and settings
#### ADMX info
- **GP English name:** Allow Extensions
- **GP name:** AllowExtensions
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[AllowExtensions](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowextensions)
- **Supported devices:** Desktop
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowExtensions
- **Data type:** Integer
#### Registry settings
- **Path:** HLKM\\Software\\Policies\\Microsoft\\MicrosoftEdge\\Extensions
- **Value name:** ExtensionsEnabled
- **Value type:** REG_DWORD
### Related documents
[Microsoft browser extension policy](https://docs.microsoft.com/en-us/legal/windows/agreements/microsoft-browser-extension-policy):
This document describes the supported mechanisms for extending or modifying the behavior or user experience of Microsoft Edge and Internet Explorer, or the content displayed by these browsers. Any technique not explicitly listed in this document is considered **unsupported**.
<hr>

View File

@ -0,0 +1,35 @@
<!-- ## Allow fullscreen mode -->
>*Supported versions: Microsoft Edge on Windows 10, version 1810*<br>
>*Default setting: Enabled or not configured (Allowed)*
[!INCLUDE [allow-fullscreen-mode-shortdesc](../shortdesc/allow-fullscreen-mode-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Disabled |0 |0 |Prevented/not allowed. |![Most restricted value](../images/check-gn.png) |
|Enabled<br>**(default)** |1 |1 |Allowed. | |
---
### ADMX info and settings
#### ADMX info
- **GP English name:** Allow fullscreen mode
- **GP name:** AllowFullScreenMode
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[AllowFullscreen]()
- **Supported devices:** Desktop
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowFullscreen
- **Data type:** Integer
#### Registry settings
- **Path:** HLKM\Software\Policies\Microsoft\MicrosoftEdge\Main
- **Value name:** AllowFullScreenMode
- **Value type:** REG_DWORD
<hr>

View File

@ -0,0 +1,36 @@
<!-- ## Allow InPrivate browsing -->
>*Supported versions: Microsoft Edge on Windows 10, version 1511 or later*<br>
>*Default setting: Enabled or not configured (Allowed)*
[!INCLUDE [allow-inprivate-browsing-shortdesc](../shortdesc/allow-inprivate-browsing-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Disabled |0 |0 |Prevented/not allowed. |![Most restricted value](../images/check-gn.png) |
|Enabled or not configured<br>**(default)** |1 |1 |Allowed. | |
---
### ADMX info and settings
#### ADMX info
- **GP English name:** Allow InPrivate browsing
- **GP name:** AllowInPrivate
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[AllowInPrivate](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowinprivate)
- **Supported devices:** Desktop and Mobile
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowInPrivate
- **Data type:** Integer
#### Registry settings
- **Path:** HLKM\\Software\\Policies\\Microsoft\\MicrosoftEdge\\Main
- **Value name:** AllowInPrivate
- **Value type:** REG_DWORD
<hr>

View File

@ -0,0 +1,34 @@
<!-- ## Allow Microsoft Compatibility List -->
>*Supported versions: Microsoft Edge on Windows 10, version 1607 or later*<br>
>*Default setting: Enabled or not configured (Allowed)*
[!INCLUDE [allow-microsoft-compatibility-list-shortdesc](../shortdesc/allow-microsoft-compatibility-list-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Disabled |0 |0 |Prevented/ignored. |![Most restricted value](../images/check-gn.png) |
|Enabled or not configured<br>**(default)** |1 |1 |Allowed. | |
---
### ADMX info and settings
#### ADMX info
- **GP English name:** Allow Microsoft Compatibility List
- **GP name:** AllowCVList
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[AllowMicrosoftCompatibilityList](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowmicrosoftcompatibilitylist)
- **Supported devices:** Desktop and Mobile
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowMicrosoftCompatibilityList
- **Data type:** Integer
#### Registry settings
- **Path:** HLKM\\Software\\Policies\\Microsoft\\MicrosoftEdge\\BrowserEmulation
- **Value name:** MSCompatibilityMode
- **Value type:** REG_DWORD
<hr>

View File

@ -0,0 +1,35 @@
<!-- Allow Prelaunch -->
>*Supported versions: Microsoft Edge on Windows 10, version 1810*<br>
>*Default setting: Enabled or not configured (Allowed)*
[!INCLUDE [allow-prelaunch-shortdesc](../shortdesc/allow-prelaunch-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Disabled |0 |0 |Prevented/not allowed. |![Most restrictive value](../images/check-gn.png) |
|Enabled or not configured<br>**(default)** |1 |1 |Allowed. | |
---
### ADMX info and settings
#### ADMX info
- **GP English name:**
- **GP name:**
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[AllowPrelaunch]()
- **Supported devices:** Desktop
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowPrelaunch
- **Data type:** Integer
#### Registry settings
- **Path:** HLKM\Software\Policies\Microsoft\MicrosoftEdge\
- **Value name:**
- **Value type:** REG_DWORD
<hr>

View File

@ -0,0 +1,34 @@
<!-- ## Allow printing -->
>*Supported versions: Microsoft Edge on Windows 10, Version 1810*<br>
>*Default setting: Enabled or not configured (Allowed)*
[!INCLUDE [allow-printing-shortdesc](../shortdesc/allow-printing-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Disabled |0 |0 |Prevented/not allowed. |![Most restrictive value](../images/check-gn.png) |
|Enabled<br>**(default)** |1 |1 |Allowed | |
---
### ADMX info and settings
#### ADMX info
- **GP English name:** Allow printing
- **GP name:** AllowPrinting
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[AllowPrinting]()
- **Supported devices:** Desktop
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowPrinting
- **Data type:** Integer
#### Registry settings
- **Path:** HLKM\\Software\\Policies\\Microsoft\\MicrosoftEdge\\Main
- **Value name:** AllowPrinting
- **Value type:** REG_DWORD
<hr>

View File

@ -0,0 +1,35 @@
<!-- ## Allow Saving History -->
>*Supported versions: Microsoft Edge on Windows 10, version 1810*<br>
>*Default setting: Enabled or not configured (Allowed)*
[!INCLUDE [allow-saving-history-shortdesc](../shortdesc/allow-saving-history-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Disabled |0 |0 |Prevented/not allowed. |![Most restricted value](../images/check-gn.png) |
|Enabled or not configured<br>**(default)** |1 |1 |Allowed. | |
---
### ADMX info and settings
#### ADMX info
- **GP English name:** Allow saving history
- **GP name:** AllowSavingHistory
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[AllowSavingHistory]()
- **Supported devices:** Desktop
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowSavingHistory
- **Data type:** Integer
#### Registry settings
- **Path:** HLKM\\Software\\Policies\\Microsoft\\MicrosoftEdge\\Main
- **Value name:** AllowSavingHistory
- **Value type:** REG_DWORD
<hr>

View File

@ -0,0 +1,85 @@
<!-- ## Allow search engine customization -->
>*Supported versions: Microsoft Edge on Windows 10, version 1703 or later*<br>
>*Default setting: Enabled or not configured (Allowed)*
[!INCLUDE [allow-search-engine-customization-shortdesc](../shortdesc/allow-search-engine-customization-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Disabled |0 |0 |Prevented/not allowed. |![Most restricted value](../images/check-gn.png) |
|Enabled or not configured<br>**(default)** |1 |1 |Allowed. | |
---
### Configuration combinations
| **Set default search engine** | **Allow search engine customization** | **Configure additional search engines** | **Results** |
| --- | --- | --- | --- |
| Not configured (default) | Disabled | Disabled or not configured (default) | Default search engine specified in App settings. Users cannot make changes. |
| Not configured (default) | Enabled or not configured (default) | Disabled or not configured (default) | Default search engine specified in App settings. Users can make changes to the default search engine at any time. |
| Not configured (default) | Disabled | Enabled | ??? |
| Not configured (default) | Enabled or not configured (default) | Enabled | ??? |
| Disabled | Disabled | Disabled or not configured (default) | Users cannot add, remove, or change any of the search engines, but they can set a default search engine. |
| Disabled | Enabled or not configured (default) | Disabled or not configured (default) | Users can add new search engines or change the default search engine, in Settings. |
| Enabled | Disabled | Disabled or not configured (default) | Set the default search engine preventing users from making changes. |
| Enabled | Enabled or not configured (default) | Disabled or not configured (default) | Set the default search engine and allow users to add search engines or make changes. |
#### If you want to use the default search engine in Apps settings and prevent users from making changes.
#### If you want to use the default search engine in Apps setting and let users make changes.
#### ???
#### ???
#### If you don't want users to add, remove, or change any of the search engines, but users can set a default search engine of their own.
#### If you want users to add new search engines or change the default in Settings.
#### If you want to set the default search engine and prevent users from making changes.
#### If you want to set the default search engine and let users make changes.
### ADMX info and settings
##### ADMX info
- **GP English name:** Allow search engine customization
- **GP name:** AllowSearchEngineCustomization
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[AllowSearchEngineCustomization](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowsearchenginecustomization)
- **Supported devices:** Desktop and Mobile
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowSearchEngineCustomization
- **Data type:** Integer
#### Registry settings
- **Path:** HLKM\\Software\\Policies\\Microsoft\\MicrosoftEdge\\Protected
- **Value name:** AllowSearchEngineCustomization
- **Value type:** REG_DWORD
### Related policies
- [Set default search engine](../available-policies.md#set-default-search-engine): [!INCLUDE [set-default-search-engine-shortdesc](../shortdesc/set-default-search-engine-shortdesc.md)]
- [Configure additional search engines](../available-policies.md#configure-additional-search-engines): [!INCLUDE [configure-additional-search-engines-shortdesc](../shortdesc/configure-additional-search-engines-shortdesc.md)]
### Related documents
- [Microsoft browser extension policy](https://docs.microsoft.com/en-us/legal/windows/agreements/microsoft-browser-extension-policy): This document describes the supported mechanisms for extending or modifying the behavior or user experience of Microsoft Edge and Internet Explorer, or the content displayed by these browsers. Any technique not explicitly listed in this document is considered **unsupported**.
- [Search provider discovery](https://docs.microsoft.com/en-us/microsoft-edge/dev-guide/browser/search-provider-discovery): Rich search integration is built into the Microsoft Edge address bar, including search suggestions, results from the web, your browsing history, and favorites.
<hr>

View File

@ -0,0 +1,37 @@
<!-- ## Allow a shared books folder -->
>*Supported versions: Microsoft Edge on Windows 10, version 1803*<br>
>*Default setting: Disabled or not configured (Not allowed)*
[!INCLUDE [allow-a-shared-books-folder-shortdesc](../shortdesc/allow-a-shared-books-folder-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Disabled or not configured<br>**(default)** |0 |0 |Prevented/not allowed, but Microsoft Edge downloads book files to a per-user folder for each user. |![Most restricted value](../images/check-gn.png) |
|Enabled |1 |1 |Allowed. | |
---
### ADMX info and settings
#### ADMX info
- **GP English name:** Allow a shared Books folder
- **GP name:** UseSharedFolderForBooks
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[UseSharedFolderForBooks](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-usesharedfolderforbooks)
- **Supported devices:** Desktop
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/UseSharedFolderForBooks
- **Data type:** Integer
#### Registry settings
- **Path:** HLKM\\Software\\Policies\\Microsoft\\MicrosoftEdge\\BooksLibrary
- **Value name:** UseSharedFolderForBooks
- **Value type:** REG_DWORD
### Scenarios
Some schools may use a Shared Cart (a physical cart), to store some devices. For example, at the beginning of the lessons, each student picks up a device and returns their device at the end of the of lessons.
<hr>

View File

@ -0,0 +1,44 @@
<!-- ## Allow sideloading of Extensions -->
>*Supported versions: Microsoft Edge on Windows 10, version 1810*<br>
>*Default setting: Enabled (Allowed)*
[!INCLUDE [allow-sideloading-of-extensions-shortdesc](../shortdesc/allow-sideloading-of-extensions-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Disabled or not configured |0 |0 |Prevented, but does not prevent sideloading of extensions using Add-AppxPackage via PowerShell.<p>To prevent this, enable **Allows development of Windows Store apps and installing them from an integrated development environment (IDE)** policy, located at Computer Configuration \> Administrative Templates \> Windows Components \> App Package Deployment. For the MDM setting, enable **ApplicationManagement/AllowDeveloperUnlock**. |![Most restricted value](../images/check-gn.png) |
|Enabled<br>**(default)** |1 |1 |Allowed | |
---
### ADMX info and settings
#### ADMX info
- **GP English name:** Allow sideloading of Extensions
- **GP name:** AllowSideloadingOfExtensions
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[AllowSideloadingExtensions]()
- **Supported devices:** Desktop and Mobile
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowSideloadingExtensions
- **Data type:** Integer
#### Registry settings
- **Path:** HLKM\Software\Policies\Microsoft\MicrosoftEdge\Extensions
- **Value name:** AllowSideloadingOfExtensions
- **Value type:** REG_SZ
### Related policies
- Allows development of Windows Store apps and installing them from an integrated development environment (IDE): When you enable this policy and the Allow all trusted apps to install policy, you allow users to develop Windows Store apps and install them directly from an IDE.
- Allow all trusted apps to install: When you enable this policy, you can manage the installation of trusted line-of-business (LOB) or developer-signed Windows Store apps.
### Related Documents
[Enable your device for development](https://docs.microsoft.com/en-us/windows/uwp/get-started/enable-your-device-for-development): Configure your Windows 10 device for development and debugging.
<hr>

View File

@ -0,0 +1,34 @@
<!-- ## Allow Start and New Tab page preload (aka: AllowStartAndNewTabPagePreload) -->
>*Supported versions: Microsoft Edge on Windows 10, version 1802*<br>
>*Default setting: Enabled or not configured (Allow preloading)*
[!INCLUDE [allow-tab-preloading-shortdesc](../shortdesc/allow-tab-preloading-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Enabled or not configured<br>**(default)** |0 |0 |Allow preloading of the Start and New Tab page. | |
|Disabled |1 |1 |Prevent/not allowed. |![Most restricted value](../images/check-gn.png) |
---
### ADMX info and settings
#### ADMX info
- **GP English name:** Allow Start and New Tab page preload
- **GP name:** AllowTabPreloading
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[AllowTabPreloading]()
- **Supported devices:** Desktop
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowTabPreloading
- **Data type:** Integer
#### Registry settings
- **Path:** HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\TabPreloader
- **Value name:** AllowTabPreloading
- **Value type:** REG_DWORD
<hr>

View File

@ -0,0 +1,37 @@
<!-- ## Allow web content on New Tab page -->
>*Supported versions: Microsoft Edge on Windows 10*<br>
>*Default setting: Enabled (Default New tab page loads)*
[!INCLUDE [allow-web-content-on-new-tab-page-shortdesc](../shortdesc/allow-web-content-on-new-tab-page-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Not configured |Blank |Blank |Users can choose what loads in the New tab page. | |
|Disabled |0 |0 |A blank page loads instead of the default New tab page and prevent users from changing it. | |
|Enabled **(default)** |1 |1 |Default New tab page loads. | |
---
### ADMX info and settings
#### ADMX info
- **GP English name:** Allow web content on New Tab page
- **GP name:** AllowWebContentOnNewTabPage
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[AllowWebContentOnNewTabPage]()
- **Supported devices:** Desktop
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowWebContentOnNewTabPage
- **Data type:** Integer
#### Registry settings
- **Path:** HLKM\\Software\\Policies\\Microsoft\\MicrosoftEdge\\ServiceUI
- **Value name:** AllowWebContentOnNewTabPage
- **Value type:** REG_DWORD
<hr>

View File

@ -0,0 +1,35 @@
<!-- ## Always show the Books Library in Microsoft Edge -->
>*Supported versions: Microsoft Edge on Windows 10, version 1709 or later*<br>
>*Default setting: Disabled or not configured*
[!INCLUDE [always-show-books-library-shortdesc](../shortdesc/always-show-books-library-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Disabled or not configured<br>**(default)** |0 |0 |Shows the Books Library only in countries or regions where supported. |![Most restricted value](../images/check-gn.png) |
|Enabled |1 |1 |Shows the Books Library, regardless of the devices country or region. | |
---
### ADMX info and settings
#### ADMX info
- **GP English name:** Always show the Books Library in Microsoft Edge
- **GP name:** AlwaysEnableBooksLibrary
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[AlwaysEnableBooksLibrary](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-alwaysenablebookslibrary)
- **Supported devices:** Desktop and Mobile
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AlwaysEnableBooksLibrary
- **Data type:** Integer
#### Registry settings
- **Path:** HLKM\\Software\\Policies\\Microsoft\\MicrosoftEdge\\Main
- **Value name:** AlwaysEnableBooksLibrary
- **Value type:** REG_DWORD
<hr>

View File

@ -0,0 +1 @@
[Microsoft browser extension policy](https://docs.microsoft.com/en-us/legal/windows/agreements/microsoft-browser-extension-policy): This document describes the supported mechanisms for extending or modifying the behavior or user experience of Microsoft Edge and Internet Explorer, or the content displayed by these browsers. Any technique not explicitly listed in this document is considered **unsupported**.

View File

@ -0,0 +1,85 @@
<!-- ## Configure additional search engines -->
>*Supported versions: Microsoft Edge on Windows 10, version 1703 or later*<br>
>*Default setting: Disabled or not configured (Not allowed)*
[!INCLUDE [configure-additional-search-engines-shortdesc](../shortdesc/configure-additional-search-engines-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Disabled or not configured<br>**(default)** |0 |0 |If you don't configure this policy, Microsoft Edge uses the search engine specified in App settings.<p>If you enabled this policy and now you want to disable it, disabling removes all configured search engines.|![Most restricted value](../images/check-gn.png) |
|Enabled |1 |1 |Add up to five additional search engines and set any one of them as the default.<p>For each search engine added you must specify a link to the OpenSearch XML file that contains, at a minimum, the short name and URL template (HTTPS) of the search engine. For more information about creating the OpenSearch XML file, see [Search provider discovery](https://developer.microsoft.com/en-us/microsoft-edge/platform/documentation/dev-guide/browser/search-provider-discovery/). | |
---
### Configuration combinations
| **Set default search engine** | **Allow search engine customization** | **Configure additional search engines** | **Results** |
| --- | --- | --- | --- |
| Not configured (default) | Disabled | Disabled or not configured (default) | Default search engine specified in App settings. Users cannot make changes. |
| Not configured (default) | Enabled or not configured (default) | Disabled or not configured (default) | Default search engine specified in App settings. Users can make changes to the default search engine at any time. |
| Not configured (default) | Disabled | Enabled | ??? |
| Not configured (default) | Enabled or not configured (default) | Enabled | ??? |
| Disabled | Disabled | Disabled or not configured (default) | Users cannot add, remove, or change any of the search engines, but they can set a default search engine. |
| Disabled | Enabled or not configured (default) | Disabled or not configured (default) | Users can add new search engines or change the default search engine, in Settings. |
| Enabled | Disabled | Disabled or not configured (default) | Set the default search engine preventing users from making changes. |
| Enabled | Enabled or not configured (default) | Disabled or not configured (default) | Set the default search engine and allow users to add search engines or make changes. |
#### If you want to use the default search engine in Apps settings and prevent users from making changes.
#### If you want to use the default search engine in Apps setting and let users make changes.
#### ???
#### ???
#### If you don't want users to add, remove, or change any of the search engines, but users can set a default search engine of their own.
#### If you want users to add new search engines or change the default in Settings.
#### If you want to set the default search engine and prevent users from making changes.
#### If you want to set the default search engine and let users make changes.
### ADMX info and settings
#### ADMX info
- **GP English name:** Configure additional search engines
- **GP name:** ConfigureAdditionalSearchEngines
- **GP element:** ConfigureAdditionalSearchEngines_Prompt
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[ConfigureAdditionalSearchEngines](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-configureadditionalsearchengines)
- **Supported devices:** Desktop and Mobile
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureAdditionalSearchEngines
- **Data type:** Integer
#### Registry settings
- **Path:** HLKM\\Software\\Policies\\Microsoft\\MicrosoftEdge\\OpenSearch
- **Value name:** ConfigureAdditionalSearchEngines
- **Value type:** REG_SZ
### Related policies
- [Set default search engine](../available-policies.md\#set-default-search-engine): [!INCLUDE [set-default-search-engine-shortdesc](../shortdesc/set-default-search-engine-shortdesc.md)]
- [Allow search engine customization](../available-policies.md#allow-search-engine-customization): [!INCLUDE [allow-search-engine-customization-shortdesc](../shortdesc/allow-search-engine-customization-shortdesc.md)]
### Related documents
- [Microsoft browser extension policy](https://docs.microsoft.com/en-us/legal/windows/agreements/microsoft-browser-extension-policy): This document describes the supported mechanisms for extending or modifying the behavior or user experience of Microsoft Edge and Internet Explorer, or the content displayed by these browsers. Any technique not explicitly listed in this document is considered **unsupported**.
- [Search provider discovery](https://docs.microsoft.com/en-us/microsoft-edge/dev-guide/browser/search-provider-discovery): Rich search integration is built into the Microsoft Edge address bar, including search suggestions, results from the web, your browsing history, and favorites.
<hr>

View File

@ -0,0 +1,34 @@
<!-- ## Configure the Adobe Flash Click-to-Run setting -->
>*Supported versions: Microsoft Edge on Windows 10, version 1703 or later*<br>
>*Default setting: Enabled or not configured (Does not load content automatically)*
[!INCLUDE [configure-adobe-flash-click-to-run-setting-shortdesc](../shortdesc/configure-adobe-flash-click-to-run-setting-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Disabled |0 |0 |Loads and runs Adobe Flash content automatically. | |
|Enabled or not configured<br>**(default)** |1 |1 |Does not load or run Adobe Flash content automatically, requiring action from the user before the content loads and runs. For example, clicking the **Click-to-Run** button or clicking the content. |![Most restricted value](../images/check-gn.png) |
---
### ADMX info and settings
#### ADMX info
- **GP English name:** Configure the Adobe Flash Click-to-Run setting
- **GP name:** AllowFlashClickToRun
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[AllowFlashClickToRun](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowflashclicktorun)
- **Supported devices:** Desktop
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowFlashClickToRun
- **Data type:** Integer
#### Registry settings
- **Path:** HLKM\\Software\\Policies\\Microsoft\\MicrosoftEdge\\Security
- **Value name:** FlashClickToRunMode
- **Value type:** REG_DWORD
<hr>

View File

@ -0,0 +1,36 @@
<!-- ## Configure allow flash for URL list -->
>*Supported versions: Microsoft Edge on Windows 10*<br>
>*Default setting:*
[!INCLUDE [configure-allow-flash-for-url-list-shortdesc](../shortdesc/configure-allow-flash-for-url-list-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
| | | | | |
| | | | | |
| | | | | |
---
![Most restricted value](../images/check-gn.png)
### ADMX info and settings
#### ADMX info
- **GP English name:**
- **GP name:**
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[]()
- **Supported devices:** Desktop and Mobile
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/
- **Data type:** Integer
#### Registry settings
- **Path:** HLKM\Software\Policies\Microsoft\MicrosoftEdge\
- **Value name:**
- **Value type:** REG_DWORD
<hr>

View File

@ -0,0 +1,34 @@
<!-- ## Configure Autofill -->
>*Supported versions: Microsoft Edge on Windows 10*<br>
>*Default setting: Not configured*
[!INCLUDE [configure-autofill-shortdesc](../shortdesc/configure-autofill-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Not configured<br>**(default)** | Blank |Blank |Users can choose to use AutoFill. | |
|Disabled | 0 | no | Prevented. |![Most restricted value](../images/check-gn.png) |
|Enabled |1 |yes | Allowed. | |
---
### ADMX info and settings
#### ADMX info
- **GP English name:** Configure Autofill
- **GP name:** AllowAutofill
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[AllowAutofill](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser\#browser-allowautofill)
- **Supported devices:** Desktop
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowAutofill
- **Data type:** Integer
#### Registry settings
- **Path:** HLKM\\Software\\Policies\\Microsoft\\MicrosoftEdge\\Main
- **Value name:** Use FormSuggest
- **Value type:** REG_SZ
<hr>

View File

@ -0,0 +1,49 @@
<!-- Configure collection of browsing data for Microsoft 365 Analytics -->
>*Supported versions: Microsoft Edge on Windows 10, version 1810*<br>
>*Default setting: Disabled or not configured (No data collected or sent)*
[!INCLUDE [configure-browser-telemetry-for-m365-analytics-shortdesc](../shortdesc/configure-browser-telemetry-for-m365-analytics-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Disabled or not configured<br>**(default)** |0 |0 |Microsoft Edge does not collect or send browsing history data. |![Most restricted value](../images/check-gn.png) |
|Enabled |1 |1 |Allow sending intranet history only. | |
|Enabled |2 |2 |Allow sending Internet history only. | |
|Enabled |3 |3 |Allow sending both intranet and Internet history. | |
---
>[!IMPORTANT]
>For this policy to work, enable the Allow Telemetry policy with the _Enhanced_ option and enable the Configure the Commercial ID policy by providing the Commercial ID.
### ADMX info and settings
#### ADMX info
- **GP English name:** Configure collection of browsing data for Microsoft 365 Analytics
- **GP name:** ConfigureTelemetryForMicrosoft365Analytics
- **GP element:** ZonesListBox
- **GP path:** Data Collection and Preview Builds
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[ConfigureTelemetryForMicrosoft365Analytics]()
- **Supported devices:** Desktop
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureTelemetryForMicrosoft365Analytics
- **Data type:** Integer
#### Registry settings
- **Path:** HLKM\Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection
- **Value name:** MicrosoftEdgeDataOptIn
- **Value type:** REG_DWORD
### Scenarios
### Related policies
Allow Telemetry: Determine the highest level of Windows diagnostic data sent to Microsoft. When you enable this policy, users can change their Telemetry Settings but prevent users from choosing a higher level than configured.
Configure the Commercial ID: Define the Commercial ID used to associate the device's telemetry data as belonging to a given organization.
<hr>

View File

@ -0,0 +1,35 @@
<!-- ## Configure cookies -->
>*Supported versions: Microsoft Edge on Windows 10*<br>
>*Default setting: Disabled or not configured (Allow all cookies from all sites)*
[!INCLUDE [configure-cookies-shortdesc](../shortdesc/configure-cookies-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Enabled |0 |0 |Block all cookies from all sites. |![Most restricted value](../images/check-gn.png) |
|Enabled |1 |1 |Block only coddies from third party websites. | |
|Disabled or not configured<br>**(default)** |2 |2 |Allow all cookies from all sites. | |
---
### ADMX info and settings
#### ADMX info
- **GP English name:** Configure cookies
- **GP name:** Cookies
- **GP element:** CookiesListBox
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[AllowCookies](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser\#browser-allowcookies)
- **Supported devices:** Desktop and Mobile
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowCookies
- **Data type:** Integer
#### Registry settings
** |<ul><li>**Path:** HKLM\\Software\\Policies\\Microsoft\\MicrosoftEdge\\Main
**Value name:** Cookies
**Value type:** REG_DWORD
<hr>

View File

@ -0,0 +1,34 @@
<!-- ## Configure Do Not Track -->
>*Supported versions: Microsoft Edge on Windows 10*<br>
>*Default setting: Not configured (Does not send tracking information)*
[!INCLUDE [configure-do-not-track-shortdesc](../shortdesc/configure-do-not-track-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Not configured |Blank |Blank |Does not send tracking information, but allow users to choose whether to send tracking information to sites they visit. | |
|Disabled |1 |1 |Never sends tracking information. | |
|Enabled<br>**(default)** |1 |1 |Sends tracking information, including to the third parties whose content may be hosted on the sites visited. |![Most restricted value](../images/check-gn.png) |
---
### ADMX info and settings
#### ADMX info
- **GP English name:** Configure Do Not Track
- **GP name:** AllowDoNotTrack
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[AllowDoNotTrack](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowdonottrack)
- **Supported devices:** Desktop and Mobile
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowDoNotTrack
- **Data type:** Integer
#### Registry settings
- **Path:** HLKM\\Software\\Policies\\Microsoft\\MicrosoftEdge\\Main
- **Value name:** DoNotTrack
- **Value type:** REG_DWORD
<hr>

View File

@ -0,0 +1,55 @@
<!-- ## Configure kiosk reset after idle timeout -->
>*Supported versions: Microsoft Edge on Windows 10, version 1810*<br>
>*Default setting: 5 minutes*
[!INCLUDE [configure-kiosk-reset-after-idle-timeout-shortdesc](../shortdesc/configure-kiosk-reset-after-idle-timeout-shortdesc.md)]
For this policy to work, you must leave the default setting (not configured) for the Configure kiosk mode policy. You need to configure Microsoft Edge in assigned access for this policy to take effect; otherwise, Microsoft Edge ignores these settings. To learn more about assigned access and kiosk configuration, see [Configure kiosk and shared devices running Windows desktop editions](https://aka.ms/E489vw).
### Allowed values
- 0-1440 - Any integer from 1-1440 (5 minutes is the default) The time in minutes from the last user activity before Microsoft Edge kiosk mode resets to the default kiosk configuration. A confirmation dialog displays for the user to cancel or continue and automatically continues after 30 seconds.
- 0 No restart after idle timer.
### ADMX info and settings
#### ADMX info
- **GP English name:** Configure kiosk reset after idle timeout
- **GP name:** ConfigureKioskResetAfterIdleTimeout
- **GP element:** ConfigureKioskResetAfterIdleTimeout_TextBox
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[ConfigureKioskResetAfterIdleTimeout]()
- **Supported devices:** Desktop
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskResetAfterIdleTimeout
- **Data type:** Integer
#### Registry settings
- **Path:** HLKM\Software\Policies\Microsoft\MicrosoftEdge\KioskMode
- **Value name:**ConfigureKioskResetAfterIdleTimeout
- **Value type:** REG_DWORD
### Related policies
[Configure kiosk mode](#configure-microsoft-edge-kiosk-mode-include): [!INCLUDE [configure-kiosk-mode-shortdesc](../shortdesc/configure-kiosk-mode-shortdesc.md)]
### Related topics:
- [Create a Kiosk Experience](https://aka.ms/Sed1cr)
- [Configure assigned access](https://aka.ms/Xscxri)
- [Configure a Windows 10 kiosk that runs multiple apps](https://aka.ms/Ckmq4n)
- [Set up a kiosk or digital signage on Windows 10 Pro, Enterprise, or Education](https://aka.ms/R4cdff)
- [Kiosk apps for assigned access: Best practices](https://aka.ms/H1s8y4)
- [Guidelines for choosing an app for assigned access (kiosk mode)](https://aka.ms/Ul7dw3)
<br>

View File

@ -0,0 +1,121 @@
<!-- ## Configure the Enterprise Mode Site List -->
>*Supported versions: Microsoft Edge on Windows 10*<br>
>*Default setting: Disabled or not configured*
[!INCLUDE [configure-enterprise-mode-site-list-shortdesc](../shortdesc/configure-enterprise-mode-site-list-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Disabled or not configured<br>**(default)** |0 |0 |Turned off. Microsoft Edge does not check the Enterprise Mode Site List, and in this case, users might experience problems while using legacy apps. | |
|Enabled |1 |1 |Turned on. Microsoft Edge checks the Enterprise Mode Site List if configured. If an XML file exists in the cache container, IE11 waits 65 seconds and then checks the local cache for a new version from the server. If the server has a different version, Microsoft Edge uses the server file and stores it in the cache container. If you already use a site list, Enterprise Mode continues to work during the 65 second, but uses the existing file. To add the location to your site list, enter it in the **{URI}** box.<p>For details on how to configure the Enterprise Mode Site List, see the [Instructions](#instructions) section below. | |
---
### ADMX info and settings
#### ADMX info
- **GP English name:** Configure the Enterprise Mode Site List
- **GP name:** EnterpriseModeSiteList
- **GP element:** EnterSiteListPrompt
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[EnterpriseModeSiteList](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-enterprisemodesitelist)
- **Supported devices:** Desktop and Mobile
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/EnterpriseModeSiteList
- **Data type:** String
#### Registry settings
- **Path:** HLKM\Software\Policies\Microsoft\MicrosoftEdge\Main\EnterpriseMode
- **Value name:** SiteList
- **Value type:** REG_SZ
### Related Policies
[Show message opening sites in IE](../available-policies.md#show-message-when-opening-sites-in-internet-explorer):
[!INCLUDE
[show-message-when-opening-sites-in-ie-shortdesc](../shortdesc/show-message-when-opening-sites-in-ie-shortdesc.md)]
### Related Documents
- [Use Enterprise Mode to improve compatibility](https://docs.microsoft.com/en-us/microsoft-edge/deploy/emie-to-improve-compatibility). If you have specific web sites and apps that you know have compatibility problems with Microsoft Edge, you can use the Enterprise Mode site list so that the web sites will automatically open using Internet Explorer 11. Additionally, if you know that your intranet sites aren't going to work properly with Microsoft Edge, you can set all intranet sites to automatically open using IE11. Using Enterprise Mode means that you can continue to use Microsoft Edge as your default browser, while also ensuring that your apps continue working on IE11.
- [Use the Enterprise Mode Site List Manager](https://docs.microsoft.com/en-us/internet-explorer/ie11-deploy-guide/use-the-enterprise-mode-site-list-manager). You can use IE11 and the Enterprise Mode Site List Manager to add individual website domains and domain paths and to specify whether the site renders using Enterprise Mode or the default mode.
- [Enterprise Mode for Internet Explorer 11](https://docs.microsoft.com/en-us/internet-explorer/ie11-deploy-guide/enterprise-mode-overview-for-ie11). Learn how to set up and use Enterprise Mode and the Enterprise Mode Site List Manager in your company.
- [Enterprise Mode and the Enterprise Mode Site List](https://docs.microsoft.com/en-us/internet-explorer/ie11-deploy-guide/what-is-enterprise-mode). Internet Explorer and Microsoft Edge can work together to support your legacy web apps, while still defaulting to the higher bar for security and modern experiences enabled by Microsoft Edge. Working with multiple browsers can be difficult, particularly if you have a substantial number of internal sites. To help manage this dual-browser experience, we are introducing a new web tool specifically targeted towards larger organizations: the [Enterprise Mode Site List Portal](https://github.com/MicrosoftEdge/enterprise-mode-site-list-portal).
- [Enterprise Mode and the Enterprise Mode Site List XML file](https://docs.microsoft.com/en-us/internet-explorer/ie11-deploy-guide/what-is-enterprise-mode#enterprise-mode-and-the-enterprise-mode-site-list-xml-file). The Enterprise Mode Site List is an XML document that specifies a list of sites, their compat mode, and their intended browser. Using Enterprise Mode Site List Manager (schema v.2), you can automatically start a webpage using a specific browser. In the case of IE11, the webpage can also be launched in a specific compat mode, so it always renders correctly. Your users can easily view this site list by typing about:compat in either Microsoft Edge or IE11.
### Scenarios
Certain sites or web apps still use ActiveX controls, Browser Helper Objects, VBScript, or other legacy technology, which Microsoft Edge does not support. If you have web sites or web apps that still use this technology and need IE11 to run, you must use Enterprise Mode and the Enterprise Mode Site List to address common compatibility issues with legacy apps. Enterprise Mode is a compatibility
mode that runs on Internet Explorer 11 and Microsoft Edge on Windows 10 devices.
### Instructions
You build your Enterprise Mode list with the Enterprise Mode Site List Manager and apply it with Group Policy.
<!-- work on these instructions. it seems like it doesn't flow from this policy to the Use the Enterprise Mode IE website list policy. Give me more reasons to click on the link. and why is it equivalent to the this policy? -->
To turn it on for IE 11, you enable [Use the Enterprise Mode IE website list](https://docs.microsoft.com/en-us/internet-explorer/ie11-deploy-guide/turn-on-enterprise-mode-and-use-a-site-list),
which is the equivalent to this Microsoft Edge policy.
>[!NOTE]
>We recommend that you store and download your website list from a secure web server (https://), to help protect against data tampering. After the list is downloaded, it is stored locally on your user's computer so if the centralized file location is unavailable, they can still use Enterprise Mode.
- [Step 1. Turn on Enterprise Mode](#step-1-turn-on-enterprise-mode)
- [Step 2. (Optional) Import your Enterprise Mode Site List](#step-2-optional-import-your-enterprise-mode-site-list)
- [Step 3. Add sites to your list](#step-3-add-sites-to-your-list)
- [Step 4. Turn on Enterprise Mode and use a site list](#step-4-set-up-microsoft-edge-to-use-the-enterprise-mode-site-list)
- [Step 5. Send all intranet sites to Internet Explorer 11](#step-5-send-all-intranet-sites-to-internet-explorer-11)
#### Step 1. Turn on Enterprise Mode
[!INCLUDE [turn-on-enterprise-mode-and-use-a-site-list](../../enterprise-mode/turn-on-enterprise-mode-and-use-a-site-list.md)]
#### Step 2. (Optional) Import your Enterprise Mode Site List
[!INCLUDE [import-into-the-enterprise-mode-site-list-mgr-include](../../includes/import-into-the-enterprise-mode-site-list-mgr-include.md)]
#### Step 3. Add sites to your list
1. In the Enterprise Mode Site List Manager, click **Add**.
2. In the **URL** box, type or paste the URL for the website experiencing compatibility problems, like *\<domain\>*.com or *\<domain\>*.com/*\<path\>*.<p>You do not need to include the `http://` or `https://` designation. The tool automatically tries both versions during validation.
3. In the **Notes about URL**, enter any comments about the website.<p>Administrators can only see comments while they are in this tool.
4. Click in the **Open in IE** column next to the URL that should open in IE11.<p>The path within a domain can require a different compatibility mode from the domain itself. For example, the domain might look fine in the default IE11 browser, but the path might have problems and require the use of Enterprise Mode. If you added the domain previously, your original compatibility choice is still selected. However, if the domain is new, Enterprise Mode is automatically selected.
5. Click **Save** to validate your website and to add it to the site list for your enterprise.<p>If your site passes validation, it is added to the global compatibility list. If the site fails to pass validation, an error message displays explaining the problem. You can either cancel the site or ignore the validation problem and add it to your list anyway.
6. On the **File** menu, go to where you want to save the file, and then click **Save to XML**.<p>You can save the file locally or to a network share. However, you must make sure you deploy it to the location specified in your Group Policy setting.
#### Step 4. Set up Microsoft Edge to use the Enterprise Mode Site List
add the steps here, if there are steps
#### Step 5. Send all intranet sites to Internet Explorer 11
Enabling the Send all intranet sites to Internet Explorer 11 policy automatically opens all intranet sites in IE11, even if the users have Microsoft Edge as their default browser.
1. In Group Policy Editor, navigate to:<p>**Computer Configuration\\Administrative Templates\\Windows Components\\File Explorer\\Set a default associations configuration file**
2. Click **Enabled** and then refresh the policy and then vew the affected sites in Microsoft Edge.<p>A message displays saying that the page needs to open in IE. At the same time, the page opens in IE11 automatically; in a new frame if it is not yet running, or in a new tab.
### Troubleshooting
- If an XML already exists, make sure it is syntactically correct.
- If an update or delete operation failed, check if the entry already exists in the site list.
- If a user is not able to sign in, the account might not have access. Check if the account is marked as active.
- Check if the Enterprise Mode Site List is loaded correctly by browsing to "about:compat" in both Microsoft Edge and Internet Explorer. Deselect the Microsoft Compatibility List to see your custom entries.
<hr>

View File

@ -0,0 +1,61 @@
<!-- ##Configure Favorites Bar -->
>*Supported versions: Microsoft Edge on Windows 10, version 1810*<br>
>*Default setting: Not configured (Hidden)*
[!INCLUDE [allow-favorites-bar-shortdesc](../shortdesc/configure-favorites-bar-shortdesc.md)]
If you want the favorites bar to show in kiosk mode, … \<action\>
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Not configured<br>**(default)** |Blank |Blank |Hides the favorites bar but show it on the Start and New tab pages. The favorites bar toggle, in Settings, is set to Off but enabled allowing users to make changes. | |
|Disabled |0 |0 |Hides the favorites bar on all pages. Also, the favorites bar toggle, in Settings, is set to Off and disabled preventing users from making changes. Microsoft Edge also hides the “show bar/hide bar” option in the context menu. | |
|Enabled |1 |1 |Shows the favorites bar on all pages. Also, the favorites bar toggle, in Settings, is set to On and disabled preventing users from making changes. Microsoft Edge also hides the “show bar/hide bar” option in the context menu. | |
---
### ADMX info and settings
#### ADMX info
- **GP English name:** Configure Favorites Bar
- **GP name:** ConfigureFavoritesBar
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[ConfigureFavoritesBar]()
- **Supported devices:** Desktop and Mobile
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureFavoritesBar
- **Data type:** Integer
#### Registry settings
- **Path:** HLKM\Software\Policies\Microsoft\MicrosoftEdge\Main
- **Value name:** ConfigureFavoritesBar
- **Value type:** REG_DWORD
### Scenarios
Chrome compete for enterprise policies. IT admin may want to have the bar always
show (perhaps with favorites provisioned via other policy), or to never show it
in their enterprise.
Kiosk mode scenario, where favorites bar is never needed; this policy then
allows the bar to be hidden and never seen. Alternatively, they may always want
to always show the bar, with helpful links for example.
As Commercial (Enterprise and EDU) organizations migrate to Windows 10 IT Admins
and IT Decision Makers are evaluating whether to set Edge as their default
browser. When making the decision they consider browser manageability and
configuration. Today Google Chrome provides a broader flexibility to configure
the browser via policies. With Edge positioned as the modern browser replacement
for IE, at minimum, they expect Edge to have the same level of policy support as
Google Chrome.
As a workaround to the lack of Edge policies IT Admins are directly editing the
registry to manipulate Edge. This practice is not recommended and has
potentially negative consequences that impact Edge reliability. Edge needs to
improve its policy story to help IT Admins easily configure it to meet their
organizations requirements.
<hr>

View File

@ -0,0 +1,6 @@
<!-- ## Configure Favorites -->
>*Supported versions: Microsoft Edge on Windows 10, version 1511 or later*<br>
>*Default setting: Disabled or not configured*
>>deprecated

View File

@ -0,0 +1,66 @@
<!-- ## Configure Home Button -->
>*Supported versions: Microsoft Edge on Windows 10*<br>
>*Default setting: Disabled or not configured (Show home button and load the Start page)*
[!INCLUDE [configure-home-button-shortdesc](../shortdesc/configure-home-button-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Disabled or not configured<br>**(default)** |0 |0 |Shows the home button and loads the Start page. | |
|Enabled |1 |1 |Shows the home button and loads the New tab page. | |
|Enabled |2 |2 |Shows the home button and loads the custom URL defined in the Set Home Button URL policy. | |
|Enabled |3 |3 |Hides the home button. | |
---
With these values, you can do any of the following configurations:
#### If you want to show the home button, load the New tab page, and prevent users from making changes to the settings.
1. **Configure Home Button:** Enable and select the _Show home button & set to New tab page_ option.
2. **Set Home Button URL:** Leave blank or not configured.
3. **Unlock Home Button:** Leave disabled or not configured.
#### If you want to show the home button, load the New tab page, and let users make changes:
1. **Configure Home Button:** Enable and select the _Show home button & set to New tab page_ option.
2. **Set Home Button URL:** Leave blank or not configured.
3. **Unlock Home Button:** Enable to let users make changes.
#### If you want to show the home button, load a custom URL, and prevent users from making changes:
1. **Configure Home Button:** Enable and select the _Show the home button & set a specific page_ option.
2. **Set Home Button URL:** Enter a URL in string format, for example, https://www.bing.com.
3. **Unlock Home Button:** Leave disabled or not configured.
#### If you want to show the home button, load a custom URL, and let users make changes:
1. **Configure Home Button:** Enable and select the _Show the home button & set a specific page_ option.
2. **Set Home Button URL:** Enter a URL in string format, for example, https://www.bing.com.
3. **Unlock Home Button:** Enable to let users make changes.
### ADMX info and settings
#### ADMX info
- **GP English name:** Configure Home Button
- **GP name:** ConfigureHomeButton
- **GP element:** ConfigureHomeButtonDropdown
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[ConfigureHomeButton]()
- **Supported devices:** Desktop and Mobile
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureHomeButton
- **Data type:** Integer
#### Registry settings
- **Path:** HLKM\Software\Policies\Microsoft\MicrosoftEdge\Internet Settings
- **Value name:** ConfigureHomeButton
- **Value type:** REG_SZ
### Related policies
- [Set Home Button URL](#set-new-tab-url-include): [!INCLUDE [set-home-button-url-shortdesc](../shortdesc/set-home-button-url-shortdesc.md)]
- [Unlock Home Button](#unlock-home-button-include): [!INCLUDE [unlock-home-button-shortdesc](../shortdesc/unlock-home-button-shortdesc.md)]
<hr>

View File

@ -0,0 +1,32 @@
## Configure InPrivate
>*Supported versions: Microsoft Edge on Windows 10*<br>
>*Default setting: Disabled or not configured
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
| | | | | |
| | | | | |
| | | | | |
---
### ADMX info and settings
#### ADMX info
- **GP English name:**
- **GP name:**
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[]()
- **Supported devices:** Desktop and Mobile
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/
- **Data type:** Integer
#### Registry settings
- **Path:** HLKM\Software\Policies\Microsoft\MicrosoftEdge\
- **Value name:**
- **Value type:** REG_DWORD
<hr>

View File

@ -0,0 +1,70 @@
<!-- ## Configure kiosk mode -->
>*Supported versions: Microsoft Edge on Windows 10, version 1810*<br>
>*Default setting: Not configured*
[!INCLUDE [configure-kiosk-mode-shortdesc](../shortdesc/configure-kiosk-mode-shortdesc.md)]
You need to configure Microsoft Edge in assigned access for this policy to take effect; otherwise, Microsoft Edge ignores these settings. To learn more about assigned access and kiosk configuration, see [Configure kiosk and shared devices running Windows desktop editions](https://aka.ms/E489vw).
>[!NOTE]
>If you do not configure the [Configure kiosk reset after idle timeout](../available-policies.md#configure-kiosk-reset-after-idle-timeout) policy and you enable this policy, Microsoft Edge kiosk resets after 5 minutes of idle time.
### Allowed values
| | |
|---|---|
|(0) Default or not configured |<ul><li>If its a single app, it runs InPrivate full screen for digital signage or interactive displays.</li><li>If its one of many apps, Microsoft Edge runs as normal.</li></ul> |
|(1) Enabled |<ul><li>If its a single app, it runs a limited multi-tab version of InPrivate and is the only app available for public browsing. Users cant minimize, close, or open windows or customize Microsoft Edge, but can clear browsing data and downloads and restart by clicking “End session.” You can configure Microsoft Edge to restart after a period of inactivity by using the “Configure kiosk reset after idle timeout” policy.</li><li>If its one of many apps, it runs in a limited multi-tab version of InPrivate for public browsing with other apps. Users can minimize, close, and open multiple InPrivate windows, but they cant customize Microsoft Edge.</li></ul> |
---
For single app assigned access:
- 0 = Full-screen digital signage and interactive display
- 1 = InPrivate public browsing (limited features)
For multi-app assigned access:
- 0 = Normal Microsoft Edge running in assigned access
- 1 = InPrivate public browsing
### ADMX info and settings
#### ADMX info
- **GP English name:** Configure kiosk mode
- **GP name:** ConfigureKioskMode
- **GP element:** ConfigureKioskMode_TextBox
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
**<ul><li>**MDM name:** Browser/[ConfigureKioskMode]()
**Supported devices:** Desktop
**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskMode
**Data type:** Integer
#### Registry settings
**<ul><li>**Path:** HLKM\Software\Policies\Microsoft\MicrosoftEdge\KioskMode
**Value name:** ConfigureKioskMode
**Value type:** REG_SZ
### Related policies
[Configure kiosk reset after idle timeout](#configure-edge-kiosk-reset-idle-timeout-include): [!INCLUDE [configure-kiosk-reset-after-idle-timeout-shortdesc](../shortdesc/configure-kiosk-reset-after-idle-timeout-shortdesc.md)]
### Related documents
- [Create a Kiosk Experience](https://aka.ms/Sed1cr)
- [Configure assigned access](https://aka.ms/Xscxri)
- [Configure a Windows 10 kiosk that runs multiple apps](https://aka.ms/Ckmq4n)
- [Set up a kiosk or digital signage on Windows 10 Pro, Enterprise, or Education](https://aka.ms/R4cdff)
- [Kiosk apps for assigned access: Best practices](https://aka.ms/H1s8y4)
- [Guidelines for choosing an app for assigned access (kiosk mode)](https://aka.ms/Ul7dw3)
<hr>

View File

@ -0,0 +1,135 @@
<!-- Configure Open Microsoft Edge With -->
>*Supported versions: Microsoft Edge on Windows 10, version 1810*<br>
>*Default setting: Enabled (A specific page or pages)*
[!INCLUDE [configure-open-microsoft-edge-with-shortdesc](../shortdesc/configure-open-microsoft-edge-with-shortdesc.md)]
**Version 1703 or later:**<br>If you do not want to send traffic to Microsoft, use the \<about:blank\> value, which honors both domain and non-domain-joined devices when it is the only configured URL.
**Version 1810:**<br>When you enable this policy and select an option, and also enable the Configure Start Pages policy, Microsoft Edge ignores the Configure Start Page policy.<p>
### Allowed values
|Group Policy |MDM |Registry |Description |
|---|---|---|---|
|Not configured |Blank |Blank |If you don't configure this policy and you enable the Disable Lockdown of Start Pages policy, users can change or customize the Start page. |
|Enabled |0 |0 |Loads Start page. |
|Enabled |1 |1 |Loads New tab page. |
|Enabled |2 |2 |Loads previous pages. |
|Enabled<br>**(default)** |3 |3 |Loads a specific page or pages. |
---
### Configuration combinations
| **Configure Open Microsoft Edge With** | **Configure Start Pages** | **Disabled Lockdown of Start Pages** | **Results** |
| --- | --- | --- | --- |
| Enabled (applies to all options) | Enabled String | Enabled (all configured start pages are editable) | [\#1: Load URLs defined in the Configure Open Microsoft Edge With policy, and allow users to edit all configured start pages.](#1-load-the-urls-defined-in-the-configure-open-microsoft-edge-with-policy-and-allow-users-to-edit-all-configured-start-pages) |
| Disabled or not configured | Enabled String | Enabled (any Start page configured in the Configured Start Pages policy) | [\#2: Load any start page and allow users to edit their Start pages.](#2-load-any-start-page-configured-using-the-configured-start-pages-policy-and-allow-users-to-edit-their-start-pages) |
| Enabled (Start page) | Enabled String | Blank or not configured | [\#3: Load Start page(s) and prevent users from changing it.](#3-load-the-start-pages-and-prevent-users-from-making-changes) |
| Enabled (New tab page) | Enabled String | Blank or not configured | [\#4: Load New tab page and prevent users from changing it.](#4-load-the-new-tab-page-and-prevent-users-from-making-changes) |
| Enabled (Previous pages) | Enabled String | Blank or not configured | [\#5: Load previously opened pages and prevent users from changing it.](#5-load-the-previously-opened-pages-that-were-opened-when-microsoft-edge-last-closed-and-prevent-users-from-making-changes) |
| Enabled (A specific page or pages) | Enabled String | Blank or not configured | [\#6: Load a specific page or pages and prevent users from changing it.](#6-load-a-specific-page-or-pages-defined-in-the-configure-start-pages-policy-and-prevent-users-from-making-changes) |
| Enabled (A specific page or pages) | Enabled String | Enabled (any Start page configured in Configure Start Pages policy) | [\#7: Load a specific page or pages and allow users to make changes to their Start page.](#7-load-a-specific-page-or-pages-defined-in-the-configure-start-pages-policy-and-allow-users-to-make-changes-to-their-start-page) |
| N/A | Blank or not configured | N/A | Microsoft Edge loads the pages specified in App settings as the default Start pages. |
---
### ADMX info and settings
#### ADMX info
- **GP English name:** Configure Open Microsoft Edge With
- **GP name:** ConfigureOpenMicrosoftEdgeWith
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[ConfigureOpenEdgeWith]()
- **Supported devices:** Desktop
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureOpenEdgeWith
- **Data type:** Integer
#### Registry settings
- **Path:** HLKM\Software\Policies\Microsoft\MicrosoftEdge\Internet Settings
- **Value name:** ConfigureOpenEdgeWith
- **Value type:** REG_DWORD
### Related policies
- [Configure Start Pages](#configure-start-pages-include): [!INCLUDE [configure-start-pages-shortdesc](../shortdesc/configure-start-pages-shortdesc.md)]
- [Disable Lockdown of Start Pages](#disable-lockdown-of-start-pages-include): [!INCLUDE [disable-lockdown-of-start-pages-shortdesc](../shortdesc/disable-lockdown-of-start-pages-shortdesc.md)]
### Scenarios
If you want to make changes to this policy:<ol><li>Set the Disabled Lockdown of Start Pages to not configured.</li><li>Make changes to the Configure Open Microsoft With policy.</li><li>Enable the Disabled Lockdown of Start Pages.</li></ol>
#### \#1: Load URLs defined in the Configure Open Microsoft Edge With policy, and allow users to edit all configured start pages.
1. Enable the **Configure Open Microsoft Edge With** policy. Applies to all options for this policy. <p>
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
3. Enable the **Disabled Lockdown of Start Pages** policy by selecting *All configured start pages are editable*.
---
#### \#2: Load any start page and allow users to edit their Start pages.
1. Disable or don't configure the **Configure Open Microsoft Edge With** policy.
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets in the following format:<p> \<support.contoso.com\>\<support.microsoft.com\>
3. Enable the **Disabled Lockdown of Start Pages** policy by selecting *Start pages are not editable*.
---
#### \#3: Load Start page(s) and prevent users from changing it.
1. Enable the **Configure Open Microsoft Edge With** policy by selecting *Start page*.<p>
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
3. Disable or don't configure the **Disabled Lockdown of Start Pages** policy.
---
#### \#4: Load New tab page and prevent users from changing it..
1. Enable the **Configure Open Microsoft Edge With** policy by selecting *New tab page*.<p>
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
3. Disable or don't configure the **Disabled Lockdown of Start Pages** policy.
---
#### \#5: Load previously opened pages and prevent users from changing it.
1. Enable the **Configure Open Microsoft Edge With** policy by selecting *Previous pages*.<p>
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
3. Disable or don't configure the **Disabled Lockdown of Start Pages** policy.
---
#### \#6: Load a specific page or pages and prevent users from changing it.
1. Enable the **Configure Open Microsoft Edge With** policy by selecting *A specific page or pages*.<p>
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
3. Disable or don't configure the **Disabled Lockdown of Start Pages** policy.
---
#### \#7: Load a specific page or pages and allow users to make changes to their Start page.
1. Enable the **Configure Open Microsoft Edge With** policy by selecting *A specific page or pages*. <p>
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
3. Enable **Disabled Lockdown of Start Pages** by selecting *Start pages are not editable*.
---

View File

@ -0,0 +1,39 @@
<!-- ## Configure Password Manager -->
>*Supported versions: Microsoft Edge on Windows 10*<br>
>*Default setting: Enabled (Allowed)
[!INCLUDE [configure-password-manager-shortdesc](../shortdesc/configure-password-manager-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Not configured |Blank |Blank |Users can choose whether to save and manage passwords locally. | |
|Disabled |0 |no |Not allowed. |![Most restricted value](../images/check-gn.png) |
|Enabled<br>**(default)** |1 |yes |Allowed. | |
---
Verify not allowed/disabled settings:
1. In the upper-right corner of Microsoft Edge or Microsoft Edge for Windows 10 Mobile, click or tap ellipses (…).
2. Click **Settings** and select **View Advanced settings**.
3. Verify the settings **???** are greyed out.
### ADMX info and settings
#### ADMX info
- **GP English name:** Configure Password Manager
- **GP name:** AllowPasswordManager
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[AllowPasswordManager](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowpasswordmanager)
- **Supported devices:** Desktop and Mobile
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowPasswordManager
- **Data type:** Integer
#### Registry settings
- **Path:** HLKM\Software\Policies\Microsoft\MicrosoftEdge\Main
- **Value name:** FormSuggest Passwords
- **Value type:** REG_SZ
<hr>

View File

@ -0,0 +1,34 @@
<!-- ## Configure Pop-up Blocker -->
>*Supported versions: Microsoft Edge on Windows 10*<br>
>*Default setting: Disabled (Turned off)*
[!INCLUDE [configure-pop-up-blocker-shortdesc](../shortdesc/configure-pop-up-blocker-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Not configured |Blank |Blank |Users can choose to use Pop-up Blocker. | |
|Disabled<br>**(default)** |0 |0 |Turns off Pop-up Blocker letting pop-ups windows appear. | |
|Enabled |1 |1 |Turns on Pop-up Blocker stopping pop-up windows from appearing. |![Most restricted value](../images/check-gn.png) |
---
### ADMX info and settings
#### ADMX info
- **GP English name:** Configure Pop-up Blocker
- **GP name:** AllowPopups
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[AllowPopups](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowpopups)
- **Supported devices:** Desktop
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowPopups
- **Data type:** Integer
### Registry
- **Path:** HLKM\\Software\\Policies\\Microsoft\\MicrosoftEdge\\Main
- **Value name:** AllowPopups
- **Value type:** REG_SZ
<hr>

View File

@ -0,0 +1,34 @@
<!-- ## Configure search suggestions in Address bar -->
>*Supported versions: Microsoft Edge on Windows 10*<br>
>*Default setting: Not configured*
[!INCLUDE [configure-search-suggestions-in-address-bar-shortdesc](../shortdesc/configure-search-suggestions-in-address-bar-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Not configured<br>**(default)** |Blank |Blank |Users can choose to see search suggestions. | |
|Disabled |0 |0 |Hides the search suggestions. |![Most restricted value](../images/check-gn.png) |
|Enabled |1 |1 |Shows the search suggestions. | |
---
### ADMX info and settings
#### ADMX info
- **GP English name:** Configure search suggestions in Address bar
- **GP name:** AllowSearchSuggestionsinAddressBar
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[AllowSearchSuggestionsinAddressBar](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowsearchsuggestionsinaddressbar)
- **Supported devices:** Desktop and Mobile
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowSearchSuggestionsinAddressBar
- **Data type:** Integer
#### Registry settings
- **Path:** HLKM\\Software\\Policies\\Microsoft\\MicrosoftEdge\\SearchScopes
- **Value name:** ShowSearchSuggestionsGlobal
- **Value type:** REG_DWORD
<hr>

View File

@ -0,0 +1,129 @@
<!-- ## Configure Start Pages -->
>*Supported versions: Microsoft Edge on Windows 10, version 1703 or later*<br>
>*Default setting: Blank or not configured (Load pages specified in App settings)*
[!INCLUDE [configure-start-pages-shortdesc](../shortdesc/configure-start-pages-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Not configured |Blank |Blank |Microsoft Edge loads the pages specified in App settings as the default Start pages. | |
|Enabled | | |Enter URLs to the pages, separating multiple pages by using angle brackets in the following format:<p>\<support.contoso.com\>\<support.microsoft.com\><p>**Version 1703 or later:**<br>If you do not want to send traffic to Microsoft, use the \<about:blank\> value, which honors both domain and non-domain-joined devices when it is the only configured URL.<p>**Version 1810:**<br>When you enable the Configure Open Microsoft Edge With policy with an option selected, and you enable the Configure Start Pages policy, Microsoft Edge ignores the Configure Start Page policy. | |
---
### Configuration combinations
| **Configure Open Microsoft Edge With** | **Configure Start Pages** | **Disabled Lockdown of Start Pages** | **Results** |
| --- | --- | --- | --- |
| Enabled (applies to all options) | Enabled String | Enabled (all configured start pages are editable) | [\#1: Load URLs defined in the Configure Open Microsoft Edge With policy, and allow users to edit all configured start pages.](#1-load-the-urls-defined-in-the-configure-open-microsoft-edge-with-policy-and-allow-users-to-edit-all-configured-start-pages) |
| Disabled or not configured | Enabled String | Enabled (any Start page configured in the Configured Start Pages policy) | [\#2: Load any start page and allow users to edit their Start pages.](#2-load-any-start-page-configured-using-the-configured-start-pages-policy-and-allow-users-to-edit-their-start-pages) |
| Enabled (Start page) | Enabled String | Blank or not configured | [\#3: Load Start page(s) and prevent users from changing it.](#3-load-the-start-pages-and-prevent-users-from-making-changes) |
| Enabled (New tab page) | Enabled String | Blank or not configured | [\#4: Load New tab page and prevent users from changing it.](#4-load-the-new-tab-page-and-prevent-users-from-making-changes) |
| Enabled (Previous pages) | Enabled String | Blank or not configured | [\#5: Load previously opened pages and prevent users from changing it.](#5-load-the-previously-opened-pages-that-were-opened-when-microsoft-edge-last-closed-and-prevent-users-from-making-changes) |
| Enabled (A specific page or pages) | Enabled String | Blank or not configured | [\#6: Load a specific page or pages and prevent users from changing it.](#6-load-a-specific-page-or-pages-defined-in-the-configure-start-pages-policy-and-prevent-users-from-making-changes) |
| Enabled (A specific page or pages) | Enabled String | Enabled (any Start page configured in Configure Start Pages policy) | [\#7: Load a specific page or pages and allow users to make changes to their Start page.](#7-load-a-specific-page-or-pages-defined-in-the-configure-start-pages-policy-and-allow-users-to-make-changes-to-their-start-page) |
| N/A | Blank or not configured | N/A | Microsoft Edge loads the pages specified in App settings as the default Start pages. |
---
### ADMX info and settings
#### ADMX info
- **GP English name:** Configure Start pages
- **GP name:** HomePages
- **GP element:** HomePagesPrompt
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[HomePages](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-homepages)
- **Supported devices:** Desktop
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/HomePages
- **Data type:** String
#### Registry settings
- **Path:** HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Internet Settings
- **Value name:** ProvisionedHomePages
- **Value type:** REG_SZ
### Related policies
- [Disable Lockdown of Start Pages](#disable-lockdown-of-start-pages-include): [!INCLUDE [disable-lockdown-of-start-pages-shortdesc](../shortdesc/disable-lockdown-of-start-pages-shortdesc.md)]
- [Configure Start Pages](#configure-start-pages-include): [!INCLUDE [configure-start-pages-shortdesc](../shortdesc/configure-start-pages-shortdesc.md)]
### Scenarios
#### \#1: Load URLs defined in the Configure Open Microsoft Edge With policy, and allow users to edit all configured start pages.
1. Enable the **Configure Open Microsoft Edge With** policy. Applies to all options for this policy. <p>
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
3. Enable the **Disabled Lockdown of Start Pages** policy by selecting *All configured start pages are editable*.
---
#### \#2: Load any start page and allow users to edit their Start pages.
1. Disable or don't configure the **Configure Open Microsoft Edge With** policy.
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets in the following format:<p> \<support.contoso.com\>\<support.microsoft.com\>
3. Enable the **Disabled Lockdown of Start Pages** policy by selecting *Start pages are not editable*.
---
#### \#3: Load Start page(s) and prevent users from changing it.
1. Enable the **Configure Open Microsoft Edge With** policy by selecting *Start page*.<p>
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
3. Disable or don't configure the **Disabled Lockdown of Start Pages** policy.
---
#### \#4: Load New tab page and prevent users from changing it..
1. Enable the **Configure Open Microsoft Edge With** policy by selecting *New tab page*.<p>
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
3. Disable or don't configure the **Disabled Lockdown of Start Pages** policy.
---
#### \#5: Load previously opened pages and prevent users from changing it.
1. Enable the **Configure Open Microsoft Edge With** policy by selecting *Previous pages*.<p>
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
3. Disable or don't configure the **Disabled Lockdown of Start Pages** policy.
---
#### \#6: Load a specific page or pages and prevent users from changing it.
1. Enable the **Configure Open Microsoft Edge With** policy by selecting *A specific page or pages*.<p>
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
3. Disable or don't configure the **Disabled Lockdown of Start Pages** policy.
---
#### \#7: Load a specific page or pages and allow users to make changes to their Start page.
1. Enable the **Configure Open Microsoft Edge With** policy by selecting *A specific page or pages*. <p>
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
3. Enable **Disabled Lockdown of Start Pages** by selecting *Start pages are not editable*.
---
<hr>

View File

@ -0,0 +1,40 @@
<!-- ## Configure Windows Defender SmartScreen -->
>*Supported versions: Microsoft Edge on Windows 10*<br>
>*Default setting: Enabled (Turned on)*
[!INCLUDE [configure-windows-defender-smartscreen-shortdesc](../shortdesc/configure-windows-defender-smartscreen-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Not configured |Blank |Blank |Users can choose to use Windows Defender SmartScreen or not. | |
|Disabled |0 |0 |Turned off. Does not protect users from potential threats and preventing users from turning it on. | |
|Enabled |1 |1 |Turned on. Protects users from potential threats and prevents users from turning it off. |![Most restricted value](../images/check-gn.png) |
---
To verify Windows Defender SmartScreen is turned off (disabled):
1. In the upper-right corner of Microsoft Edge or Microsoft Edge for Windows 10 Mobile, click or tap the ellipses (**...**).
2. Click **Settings** and select **View Advanced Settings**.
3. At the bottom, verify that **Help protect me from malicious sites and download with SmartScreen Filter** is greyed out.<p>![Verify that Windows Defender SmartScreen is turned off (disabled)](../images/allow-smart-screen-validation.PNG)
### ADMX info and settings
#### ADMX info
- **GP English name:** Configure Windows Defender SmartScreen
- **GP name:** AllowSmartScreen
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[AllowSmartScreen](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowsmartscreen)
- **Supported devices:** Desktop and Mobile
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowSmartScreen
- **Data type:** Integer
#### Registry settings
- **Path:** HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\PhishingFilter
- **Value name:** EnabledV9
- **Value type:** REG_DWORD
<hr>

View File

@ -0,0 +1,121 @@
<!-- Disable Lockdown of Start Pages -->
>*Supported versions: Microsoft Edge on Windows 10*<br>
>*Default setting: Enabled (Start pages are not editable)*
[!INCLUDE [disable-lockdown-of-start-pages-shortdesc](../shortdesc/disable-lockdown-of-start-pages-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Not configured |0 |0 |Lockdown Start pages configured in either the Configure Open Microsoft Edge With policy and Configure Start Pages policy. |![Most restricted value](../images/check-gn.png) |
|Enabled |1 |1 |Unlocked. Users can make changes to all configured start pages.<p>When you enable this policy and define a set of URLs in the Configure Start Pages policy, Microsoft Edge uses the URLs defined in the Configure Open Microsoft Edge With policy. | |
---
### Configuration combinations
| **Configure Open Microsoft Edge With** | **Configure Start Pages** | **Disabled Lockdown of Start Pages** | **Results** |
| --- | --- | --- | --- |
| Enabled (applies to all options) | Enabled String | Enabled (all configured start pages are editable) | [\#1: Load URLs defined in the Configure Open Microsoft Edge With policy, and allow users to edit all configured start pages.](#1-load-the-urls-defined-in-the-configure-open-microsoft-edge-with-policy-and-allow-users-to-edit-all-configured-start-pages) |
| Disabled or not configured | Enabled String | Enabled (any Start page configured in the Configured Start Pages policy) | [\#2: Load any start page and allow users to edit their Start pages.](#2-load-any-start-page-configured-using-the-configured-start-pages-policy-and-allow-users-to-edit-their-start-pages) |
| Enabled (Start page) | Enabled String | Blank or not configured | [\#3: Load Start page(s) and prevent users from changing it.](#3-load-the-start-pages-and-prevent-users-from-making-changes) |
| Enabled (New tab page) | Enabled String | Blank or not configured | [\#4: Load New tab page and prevent users from changing it.](#4-load-the-new-tab-page-and-prevent-users-from-making-changes) |
| Enabled (Previous pages) | Enabled String | Blank or not configured | [\#5: Load previously opened pages and prevent users from changing it.](#5-load-the-previously-opened-pages-that-were-opened-when-microsoft-edge-last-closed-and-prevent-users-from-making-changes) |
| Enabled (A specific page or pages) | Enabled String | Blank or not configured | [\#6: Load a specific page or pages and prevent users from changing it.](#6-load-a-specific-page-or-pages-defined-in-the-configure-start-pages-policy-and-prevent-users-from-making-changes) |
| Enabled (A specific page or pages) | Enabled String | Enabled (any Start page configured in Configure Start Pages policy) | [\#7: Load a specific page or pages and allow users to make changes to their Start page.](#7-load-a-specific-page-or-pages-defined-in-the-configure-start-pages-policy-and-allow-users-to-make-changes-to-their-start-page) |
| N/A | Blank or not configured | N/A | Microsoft Edge loads the pages specified in App settings as the default Start pages. |
---
### ADMX info and settings
#### ADMX info
- **GP English name:** Disable lockdown of Start pages
- **GP name:** DisableLockdownOfStartPages
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[DisableLockdownOfStartPages]()
- **Supported devices:** Desktop
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/DisableLockdownOfStartPages
- **Data type:** Integer
#### Registry settings
- **Path:** HKLM\Software\Policies\Microsoft\MicrosoftEdge\Internet Settings
- **Value name:** DisableLockdownOfStartPages
- **Value type:** REG_SZ
### Scenarios
#### \#1: Load URLs defined in the Configure Open Microsoft Edge With policy, and allow users to edit all configured start pages.
1. Enable the **Configure Open Microsoft Edge With** policy. Applies to all options for this policy. <p>
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
3. Enable the **Disabled Lockdown of Start Pages** policy by selecting *All configured start pages are editable*.
#### \#2: Load any start page and allow users to edit their Start pages.
1. Disable or don't configure the **Configure Open Microsoft Edge With** policy.
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets in the following format:<p> \<support.contoso.com\>\<support.microsoft.com\>
3. Enable the **Disabled Lockdown of Start Pages** policy by selecting *Start pages are not editable*.
#### \#3: Load Start page(s) and prevent users from changing it.
1. Enable the **Configure Open Microsoft Edge With** policy by selecting *Start page*.<p>
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
3. Disable or don't configure the **Disabled Lockdown of Start Pages** policy.
#### \#4: Load New tab page and prevent users from changing it..
1. Enable the **Configure Open Microsoft Edge With** policy by selecting *New tab page*.<p>
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
3. Disable or don't configure the **Disabled Lockdown of Start Pages** policy.
#### \#5: Load previously opened pages and prevent users from changing it.
1. Enable the **Configure Open Microsoft Edge With** policy by selecting *Previous pages*.<p>
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
3. Disable or don't configure the **Disabled Lockdown of Start Pages** policy.
#### \#6: Load a specific page or pages and prevent users from changing it.
1. Enable the **Configure Open Microsoft Edge With** policy by selecting *A specific page or pages*.<p>
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
3. Disable or don't configure the **Disabled Lockdown of Start Pages** policy.
#### \#7: Load a specific page or pages and allow users to make changes to their Start page.
1. Enable the **Configure Open Microsoft Edge With** policy by selecting *A specific page or pages*. <p>
2. In the **Configure Start Pages** policy, enter URLs to the pages, separating multiple pages by using angle brackets:<p>\<support.contoso.com\>\<support.microsoft.com\>
3. Enable **Disabled Lockdown of Start Pages** by selecting *Start pages are not editable*.
### Related Policies
- [Configure Start Pages](#configure-start-pages-include): [!INCLUDE [configure-start-pages-shortdesc](../shortdesc/configure-start-pages-shortdesc.md)]
- [Configure Open Microsoft Edge With](../available-policies.md#configure-open-microsoft-edge-with): [!INCLUDE [configure-open-microsoft-edge-with-shortdesc](../shortdesc/configure-open-microsoft-edge-with-shortdesc.md)]
### Related documents
[Microsoft browser extension policy](aka.ms/browser policy)
<hr>

View File

@ -0,0 +1,31 @@
<!-- ## Do not prompt client certificate when only one exists -->
>*Supported versions: Microsoft Edge on Windows 10*<br>
>*Default setting: Disabled or not configured*
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
| | | | | |
| | | | | |
| | | | | |
---
### ADMX info and settings
#### ADMX info
- **GP English name:**
- **GP name:**
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[]()
- **Supported devices:** Desktop and Mobile
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/
- **Data type:** Integer
#### Registry settings
- **Path:** HLKM\Software\Policies\Microsoft\MicrosoftEdge\
- **Value name:**
- **Value type:** REG_DWORD
<hr>

View File

@ -0,0 +1,74 @@
<!-- ## Do not sync browser settings -->
>*Supported versions: Microsoft Edge on Windows 10*<br>
>*Default setting: Disabled or not configured (Allowed/turned on)*
[!INCLUDE [do-not-sync-browser-settings-shortdesc](../shortdesc/do-not-sync-browser-settings-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Disabled or not configured<br>**(default)** |0 |0 |Allowed/turned on. The “browser” group syncs automatically between users devices and lets users to make changes. | |
|Enabled |2 |2 |Prevents (turned off) the “browser” group from using the Sync your Settings option. | |
---
### Configuration options
| **Do not sync browser settings** | **Prevent users from turning on browser syncing** | **Result** |
| --- | --- | --- |
| 0/disabled or not configured (default) Turned on; users can make changes | 0/disabled (default) | Microsoft Edge syncs browser settings automatically. |
| 0/disabled or not configured (default) Turned on; users can make changes | 1/enabled or not configured | Microsoft Edge syncs browser settings automatically. |
| 2/enabled Prevented/turned off | 0/disabled (default) | Prevents syncing of browser setting, but gives users the choice to turn it on. |
| 2/enabled Turned off | 1/enabled or not configured | Prevents browser setting sync and prevents users from turning on syncing. |
| 0/disabled or not configured (default) Turned on; users can make changes | N/A | Turn on Sync your Settings option by default and allow users to make changes. |
---
#### If you want Microsoft Edge to sync the browser settings automatically:
Disable both the Do not sync browser settings Prevent users from turning on browser syncing policies.
#### If you want to prevent syncing of browser settings and prevent users from turning it on:
1. Enable the Do not sync browser settings policy.
2. Enable or dont configure this policy (Prevented/turned off).
#### If you want to prevent syncing of browser settings and give users a choice to turn on syncing:
1. Enable the Do not sync browser settings policy.
2. Disable this policy (Allowed/turned on).
#### If you want syncing turned off by default but not disabled:
1. Enable the Do not sync browser setting policy.
2. Select the _Allow users to turn “browser” syncing_ option.
#### Verify configuration
To verify if syncing is turned on or off:
1. In the upper-right corner of Microsoft Edge, click the ellipses \(**...**\).
2. Click **Settings**.
3. Under Account, see if the setting is toggled on or off.<p>![Verify configuration](../images/sync-settings.PNG)
### ADMX info and settings
#### ADMX info
- **GP English name:** Do not sync browser settings
- **GP name:** DoNotSyncBrowserSetting
- **GP path:** Windows Components/Sync your settings
- **GP ADMX file name:** SettingSync.admx
#### MDM settings
- **MDM name:** Experience/[Experience/DoNotSyncBrowserSetting]()
- **Supported devices:** Desktop
- **URI full path:** ./Vendor/MSFT/Policy/Config/Experience/DoNotSyncBrowserSetting
- **Data type:** Integer
#### Registry settings
- **Path:** HLKM\\Software\Policies\Microsoft\Windows\SettingSync
- **Value name:** DisableWebBrowserSettingSyncUserOverride
- **Value type:** REG_DWORD
### Related policies
Prevent users from turning on browser syncing: [!INCLUDE [prevent-users-to-turn-on-browser-syncing-shortdesc](../shortdesc/prevent-users-to-turn-on-browser-syncing-shortdesc.md)]
### Related documents
[About sync setting on Microsoft Edge on Windows 10 devices](http://windows.microsoft.com/windows-10/about-sync-settings-on-windows-10-devices)
<hr>

View File

@ -0,0 +1,25 @@
<!-- ## Do not sync -->
>*Supported versions: Microsoft Edge on Windows 10*<br>
>*Default setting: Disabled or not configured (Turned on)*
[!INCLUDE [do-not-sync-shortdesc](../shortdesc/do-not-sync-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Disabled or not configured<br>**(default)** |0 |0 |Allowed/turned on. Users can choose what to sync to their device. | |
|Enabled |2 |2 |Prevented/turned off. Disables the Sync your Settings toggle and prevents syncing. |![Most restricted value](../images/check-gn.png) |
---
### ADMX info and settings
| |
|---|
|**ADMX info**<ul><li>**GP English name:** Do not sync</li><li>**GP name:** AllowSyncMySettings</li><li>**GP path:** Windows Components/Microsoft Edge</li><li>**GP ADMX file name:** MicrosoftEdge.admx</li></ul>**MDM settings**<ul><li>**MDM name:** Experience/[AllowSyncMySettings](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-experience#experience-allowsyncmysettings)</li><li>**Supported devices:** Desktop</li><li>**URI full path:** ./Vendor/MSFT/Policy/Config/Experience/AllowSyncMySettings </li><li>**Data type:** Integer</li></ul>**Registry**<ul><li>**Path:** HKLM\Software\Policies\Microsoft\Windows\SettingSync</li><li>**Value name:** DisableSettingSync</li><li>**Value type:** REG_DWORD</li></ul> |
---
### Related topics
[About sync setting on Microsoft Edge on Windows 10 devices](http://windows.microsoft.com/windows-10/about-sync-settings-on-windows-10-devices): Learn about what settings are sync'ed.
<hr>

View File

@ -0,0 +1,22 @@
<!-- ## Edge respects AppLocker Lists for Extensions -->
>*Supported versions: Microsoft Edge on Windows 10*<br>
>*Default setting: Disabled or not configured
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
| | | | | |
| | | | | |
| | | | | |
---
### ADMX info and settings
| | |
|---|---|
|ADMX info |<ul><li>**GP English name:** </li><li>**GP name:** </li><li>**GP path:** Windows Components/Microsoft Edge</li><li>**GP ADMX file name:** MicrosoftEdge.admx</li></ul> |
|MDM settings |<ul><li>**MDM name:** Browser/[]()</li><li>**Supported devices:** Desktop and Mobile</li><li>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ </li><li>**Data type:** Integer</li></ul> |
|Registry |<ul><li>**Path:** HLKM\Software\Policies\Microsoft\MicrosoftEdge\ </li><li>**Value name:** </li><li>**Value type:** REG_DWORD</li></ul> |
---
---

View File

@ -0,0 +1 @@
[Enable your device for development](https://docs.microsoft.com/en-us/windows/uwp/get-started/enable-your-device-for-development): Developers can access special development features, along with other developer-focused settings, which makes it possible for them to develop, test, and debug apps. Learn how to configure your environment for development, the difference between Developer Mode and sideloading, and the security risks of Developer mode.

View File

@ -0,0 +1,43 @@
<!-- ## Keep favorites in sync between Internet Explorer and Microsoft Edge -->
>*Supported versions: Microsoft Edge on Windows 10, version 1703 or later*<br>
>*Default setting: Disabled or not configured (Turned off/not syncing)*
[!INCLUDE [keep-favorites-in-sync-between-ie-and-edge-shortdesc](../shortdesc/keep-favorites-in-sync-between-ie-and-edge-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Disabled or not configured<br>**(default)** |0 |0 |Turned off/not syncing. | |
|Enabled |1 |1 |Turned on/syncing. |![Most restricted value](../images/check-gn.png) |
---
### Configuration combinations
### Configuration combinations
| **Keep favorites in sync between IE and Microsoft Edge** | **Provision Favorites** | **Results** |
| --- | --- | --- |
| Disabled or not configured (default) | Disabled or not configured (default) | **Turned off/not syncing**. Microsoft Edge prevents users from syncing their favorites. |
| Enabled (turned on/syncing) | Disabled or not configured (default) | **Turned on/syncing**. Syncs favorites between Internet Explorer and Microsoft Edge. |
| Enabled (turned on/syncing) | Enabled (provision list of favorites) | **Turned off/not syncing**. Microsoft Edge prevents users from syncing their favorites. |
| Disabled or not configured (default) | Enabled (provision list of Favorites) | **Turned on/syncing**. Syncs favorites between Internet Explorer and Microsoft Edge. |
---
### ADMX info and settings
### ADMX info
- **GP English name:** Keep favorites in sync between Internet Explorer and Microsoft Edge
- **GP name:** SyncFavoritesBetweenIEAndMicrosoftEdge
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[SyncFavoritesBetweenIEAndMicrosoftEdge](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-syncfavoritesbetweenieandmicrosoftedge)
- **Supported devices:** Desktop
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/SyncFavoritesBetweenIEAndMicrosoftEdge
- **Data type:** Integer
#### Registry settings
- **Path:** HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Main
- **Value name:** SyncFavoritesBetweenIEAndMicrosoftEdge
- **Value type:** REG_DWORD
<hr>

View File

@ -0,0 +1 @@
[Manage connections from Windows operating system components to Microsoft services](https://docs.microsoft.com/en-us/windows/configuration/manage-connections-from-windows-operating-system-components-to-microsoft-services): Learn about the network connections from Windows to Microsoft services. Also, learn about the privacy settings that affect the data shared with either Microsoft or apps and how to manage them in an enterprise. You can configure diagnostic data at the lowest level for your edition of Windows, and also evaluate which other connections Windows makes to Microsoft services you want to turn off in your environment.

View File

@ -0,0 +1,33 @@
<!-- ## Prevent access to the about:flags page -->
>*Supported versions: Microsoft Edge on Windows 10, version 1607 or later*<br>
>*Default setting: Disabled or not configured (Allowed)*
[!INCLUDE [prevent-access-to-about-flags-page-shortdesc](../shortdesc/prevent-access-to-about-flags-page-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Disabled or not configured<br>**(default)** |0 |0 |Allowed. | |
|Enabled |1 |1 |Prevents users from access the about:flags page. |![Most restricted value](../images/check-gn.png) |
---
### ADMX info and settings
#### ADMX info
- **GP English name:** Prevent access to the about:flags page in Microsoft Edge
- **GP name:** PreventAccessToAboutFlagsInMicrosoftEdge
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[PreventAccessToAboutFlagsInMicrosoftEdge](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-preventaccesstoaboutflagsinmicrosoftedge)
- **Supported devices:** Desktop and Mobile
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/PreventAccessToAboutFlagsInMicrosoftEdge
- **Data type:** Integer
#### Registry settings
- **Path:** HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Main
- **Value name:** PreventAccessToAboutFlagsInMicrosoftEdge
- **Value type:** REG_DWORD
<hr>

View File

@ -0,0 +1,33 @@
<!-- ## Prevent bypassing Windows Defender SmartScreen prompts for files -->
>*Supported versions: Microsoft Edge on Windows 10, version 1511 or later*<br>
>*Default setting: Disabled or not configured (Allowed/turned off)*
[!INCLUDE [prevent-bypassing-windows-defender-prompts-for-files-shortdesc](../shortdesc/prevent-bypassing-windows-defender-prompts-for-files-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Disabled or not configured<br>**(default)** |0 |0 |Allowed/turned off. Users can ignore the warning and continue to download the unverified file(s). | |
|Enabled |1 |1 |Prevented/turned on. |![Most restricted value](../images/check-gn.png) |
---
### ADMX info and settings
#### ADMX info
- **GP English name:** Prevent bypassing Windows Defender SmartScreen prompts for files
- **GP name:** PreventSmartScreenPromptOverrideForFiles
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[PreventSmartScreenPromptOverrideForFiles](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-preventsmartscreenpromptoverrideforfiles)
- **Supported devices:** Desktop and Mobile
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/PreventSmartScreenPromptOverrideForFiles
- **Data type:** Integer
#### Registry settings
- **Path:** HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\PhishingFilter
- **Value name:** PreventOverrideAppRepUnknown
- **Value type:** REG_DWORD
<hr>

View File

@ -0,0 +1,33 @@
<!-- ## Prevent bypassing Windows Defender SmartScreen prompts for sites -->
>*Supported versions: Microsoft Edge on Windows 10, version 1511 or later*<br>
>*Default setting: Disabled or not configured (Allowed/turned off)*
[!INCLUDE [prevent-bypassing-windows-defender-prompts-for-sites-shortdesc](../shortdesc/prevent-bypassing-windows-defender-prompts-for-sites-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Disabled or not configured<br>**(default)** |0 |0 |Allowed/turned off. Users can ignore the warning and continue to the site.| |
|Enabled |1 |1 |Prevented/turned on. |![Most restricted value](../images/check-gn.png) |
---
### ADMX info and settings
#### ADMX info
- **GP English name:** Prevent bypassing Windows Defender SmartScreen prompts for sites
- **GP name:** PreventSmartscreenPromptOverride
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[PreventSmartscreenPromptOverride](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-preventsmartscreenpromptoverride)
- **Supported devices:** Desktop and Mobile
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/PreventSmartscreenPromptOverride
- **Data type:** Integer
#### Registry settings
- **Path:** HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\PhishingFilter
- **Value name:** PreventOverride
- **Value type:** REG_DWORD
<hr>

View File

@ -0,0 +1,31 @@
<!-- ## Prevent certificate error overrides -->
>*Supported versions: Microsoft Edge on Windows 10, version 1810*<br>
>*Default setting: Disabled or not configured (Allowed/turned off)*
[!INCLUDE [prevent-certificate-error-overrides-shortdesc](../shortdesc/prevent-certificate-error-overrides-shortdesc.md)]
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Disabled or not configured<br>**(default)** |0 |0 |Allowed/turned on. Overrides the security warning to sites that have SSL errors. | |
|Enabled |1 |1 |Prevented/turned on. |![Most restricted value](../images/check-gn.png) |
---
### ADMX info and settings
#### ADMX info
- **GP English name:** Prevent certificate error overrides
- **GP name:** PreventCertErrorOverrides
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[PreventCertErrorOverrides]()
- **Supported devices:** Desktop and Mobile
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/PreventCertErrorOverrides
- **Data type:** Integer
#### Registry settings
- **Path:** Software\Policies\Microsoft\MicrosoftEdge\Internet Setting
- **Value name:** PreventCertErrorOverrides
- **Value type:** REG_DWORD
<hr>

View File

@ -0,0 +1,33 @@
<!-- ## Prevent changes to Favorites on Microsoft Edge -->
>*Supported versions: Microsoft Edge on Windows 10, version 1709 or later*<br>
>*Default setting: Disabled or not configured (Allowed/not locked down)*
[!INCLUDE [prevent-changes-to-favorites-shortdesc](../shortdesc/prevent-changes-to-favorites-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Disabled or not configured<br>**(default)** |0 |0 |Allowed/not locked down. Users can add, import, and make changes to the Favorites list. | |
|Enabled |1 |1 |Prevented/locked down. |![Most restricted value](../images/check-gn.png) |
---
### ADMX info and settings
#### ADMX info
- **GP English name:** Prevent changes to Favorites on Microsoft Edge
- **GP name:** LockdownFavorites
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[LockdownFavorites](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-lockdownfavorites)
- **Supported devices:** Desktop and Mobile
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/LockdownFavorites
- **Data type:** Integer
#### Registry settings
- **Path:** HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Favorites
- **Value name:** LockdownFavorites
- **Value type:** REG_DWORD
<hr>

View File

@ -0,0 +1,33 @@
<!-- ## Prevent the First Run webpage from opening on Microsoft Edge -->
>*Supported versions: Microsoft Edge on Windows 10, version 1703 or later*<br>
>*Default setting: Disabled or not configured (Allowed)*
[!INCLUDE [prevent-first-run-webpage-from-opening-shortdesc](../shortdesc/prevent-first-run-webpage-from-opening-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Disabled or not configured<br>**(default)** |0 |0 |Allowed. Microsoft Edge loads the welcome page. | |
|Enabled |1 |1 |Prevented. |![Most restricted value](../images/check-gn.png) |
---
### ADMX info and settings
#### ADMX info
- **GP English name:** Prevent the First Run webpage from opening on Microsoft Edge
- **GP name:** PreventFirstRunPage
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[PreventFirstRunPage](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-preventfirstrunpage)
- **Supported devices:** Desktop and Mobile
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/PreventFirstRunPage
- **Data type:** Integer
####Registry
- **Path:** HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Main
- **Value name:** PreventFirstRunPage
- **Value type:** REG_DWORD
<hr>

View File

@ -0,0 +1,33 @@
<!-- ## Prevent Microsoft Edge from gathering Live Tile information when pinning a site to Start -->
>*Supported versions: Microsoft Edge on Windows 10, version 1703 or later*<br>
>*Default setting: Disabled or not configured (Collected and sent)*
[!INCLUDE [prevent-edge-from-gathering-live-tile-info-shortdesc](../shortdesc/prevent-edge-from-gathering-live-tile-info-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Disabled or not configured<br>**(default)** |0 |0 |Collect and send Live Tile metadata. | |
|Enabled |1 |1 |Not collected and sent. |![Most restricted value](../images/check-gn.png) |
---
### ADMX info and settings
#### ADMX info
- **GP English name:** Prevent Microsoft Edge from gathering Live Tile information when pinning a site to Start
- **GP name:** PreventLiveTileDataCollection
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[PreventLiveTileDataCollection](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-preventlivetiledatacollection)
- **Supported devices:** Desktop and Mobile
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/PreventLiveTileDataCollection
- **Data type:** Integer
#### Registry settings
**<ul><li>**Path:** HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Main
**Value name:** PreventLiveTileDataCollection
**Value type:** REG_DWORD
<hr>

View File

@ -0,0 +1,33 @@
<!-- ## Prevent using Localhost IP address for WebRTC -->
>*Supported versions: Microsoft Edge on Windows 10, version 1511 or later*<br>
>*Default setting: Disabled or not configured (Allowed/show localhost IP addresses)*
[!INCLUDE [prevent-using-localhost-ip-address-for-webrtc-shortdesc](../shortdesc/prevent-using-localhost-ip-address-for-webrtc-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Disabled or not configured<br>**(default)** |0 |0 |Allowed. Shows localhost IP addresses. | |
|Enabled |1 |1 |Prevented. |![Most restricted value](../images/check-gn.png) |
---
### ADMX info and settings
#### ADMX info
- **GP English name:** Prevent using Localhost IP address for WebRTC
- **GP name:** HideLocalHostIPAddress
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[PreventUsingLocalHostIPAddressForWebRTC](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-preventusinglocalhostipaddressforwebrtc)
- **Supported devices:** Desktop
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/PreventUsingLocalHostIPAddressForWebRTC
- **Data type:** Integer
#### Registry settings
- **Path:** HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Main
- **Value name:** HideLocalHostIPAddress
- **Value type:** REG_DWORD
<hr>

View File

@ -0,0 +1,45 @@
<!-- ## Prevent turning off required extensions -->
>*Supported versions: Microsoft Edge on Windows 10, version 1810*<br>
>*Default setting: Disabled or not configured (Allowed)*
[!INCLUDE [prevent-turning-off-required-extensions-shortdesc](../shortdesc/prevent-turning-off-required-extensions-shortdesc.md)]
### Allowed values
|Group Policy |Description |Most restricted |
|---|---|:---:|
|Disabled or not configured<br>**(default)** |Provide a semi-colon delimited list of extension PFNs. For example, adding _Microsoft.OneNoteWebClipper8wekyb3d8bbwe_ or _Microsoft.OfficeOnline8wekyb3d8bbwe_ prevents a user from turning off the OneNote Web Clipper and Office Online extension. After defining the list of extensions, you deploy them through any available enterprise deployment channel, such as Microsoft Intune. Removing extensions from the list does not uninstall the extension from the users computer automatically. To uninstall the extension, use any available enterprise deployment channel. If you enable the Allow Developer Tools policy, then this policy does not prevent users from debugging and altering the logic on an extension. | |
|Enabled |Allowed. Users can uninstall extensions. If you previously enabled this policy and you decide to disable it, the list of extension PFNs defined in this policy get ignored. | |
---
### ADMX info and settings
#### ADMX info
- **GP English name:** Prevent turning off required extensions
- **GP name:** ForceEnabledExtensions
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[PreventTurningOffRequiredExtensions]()
- **Supported devices:** Desktop and Mobile
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/PreventTurningOffRequiredExtensions
- **Data type:** Integer
#### Registry settings
- **Path:** HLKM\Software\Policies\Microsoft\MicrosoftEdge\
- **Value name:** PreventTurningOffRequiredExtensions
- **Value type:** REG_DWORD
### Related policies
[Allow Developer Tools](../available-policies.md#allow-developer-tools): [!INCLUDE [allow-developer-tools-shortdesc](../shortdesc/allow-developer-tools-shortdesc.md)]
### Related documents
- [Find a package family name (PFN) for per-app VPN](https://docs.microsoft.com/en-us/sccm/protect/deploy-use/find-a-pfn-for-per-app-vpn): There are two ways to find a PFN so that you can configure a per-app VPN.
- [How to manage apps you purchased from the Microsoft Store for Business with Microsoft Intune](https://docs.microsoft.com/en-us/intune/windows-store-for-business): The Microsoft Store for Business gives you a place to find and purchase apps for your organization, individually, or in volume. By connecting the store to Microsoft Intune, you can manage volume-purchased apps from the Azure portal.
- [How to assign apps to groups with Microsoft Intune](https://docs.microsoft.com/en-us/intune/apps-deploy): Apps can be assigned to devices whether or not they are managed by Intune.
- [Manage apps from the Microsoft Store for Business with System Center Configuration Manager](https://docs.microsoft.com/en-us/sccm/apps/deploy-use/manage-apps-from-the-windows-store-for-business): Configuration Manager supports managing Microsoft Store for Business apps on both Windows 10 devices with the Configuration Manager client, and also Windows 10 devices enrolled with Microsoft Intune.
- [How to add Windows line-of-business (LOB) apps to Microsoft Intune](https://docs.microsoft.com/en-us/intune/lob-apps-windows): A line-of-business (LOB) app is one that you add from an app installation file. These types of apps are typically written in-house.
<hr>

View File

@ -0,0 +1,63 @@
<!-- Prevent users from turning on browser syncing -->
>*Supported versions: Microsoft Edge on Windows 10*<br>
>*Default setting: Enabled or not configured (Prevented/turned off)*
[!INCLUDE [prevent-users-to-turn-on-browser-syncing-shortdesc](../shortdesc/prevent-users-to-turn-on-browser-syncing-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Disabled |0 |0 |Allowed/turned on. Users can sync the browser settings. | |
|Enabled or not configured<br>**(default)** |1 |1 |Prevented/turned off. | |
---
### Configuration options
<!-- put the grids in a document that categorizes the policies -->
| **Do not sync browser settings** | **Prevent users from turning on browser syncing** | **Result** |
| --- | --- | --- |
| 0/disabled or not configured (default) Turned on; users can make changes | 0/disabled (default) | Microsoft Edge syncs browser settings automatically. |
| 0/disabled or not configured (default) Turned on; users can make changes | 1/enabled or not configured | Microsoft Edge syncs browser settings automatically. |
| 2/enabled Prevented/turned off | 0/disabled (default) | Prevents syncing of browser setting, but gives users the choice to turn it on. |
| 2/enabled Turned off | 1/enabled or not configured | Prevents browser setting sync and prevents users from turning on syncing. |
| 0/disabled or not configured (default) Turned on; users can make changes | N/A | Turn on Sync your Settings option by default and allow users to make changes. |
---
#### If you want to prevent syncing of browser settings and prevent users from turning it on:
1. Enable the Do not sync browser settings policy.
2. Enable or dont configure this policy (Prevented/turned off).
#### If you want to prevent syncing of browser settings and give users a choice to turn on syncing:
1. Enable the Do not sync browser settings policy.
2. Disable this policy (Allowed/turned on).
#### If you want syncing turned off by default but not disabled:
1. Enable the Do not sync browser setting policy.
2. Select the _Allow users to turn “browser” syncing_ option.
### ADMX info and settings
#### ADMX info
- **GP English name:** Prevent users from turning on browser syncing
- **GP name:** ???
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** ???.admx
#### MDM settings
- **MDM name:** Experience/[PreventUsersFromTurningOnBrowserSyncing]()
- **Supported devices:** Desktop
- **URI full path:** ./Vendor/MSFT/Policy/Config/Experience/PreventUsersFromTurningOnBrowserSyncing
- **Data type:** String
#### Registry settings
- **Path:** HLKM\Software\Policies\Microsoft\???
- **Value name:** ???
- **Value type:** REG_SZ
### Related policies
[Do not sync browser settings](../available-policies.md#do-not-sync-browser-settings): [!INCLUDE [do-not-sync-browser-settings-shortdesc](../shortdesc/do-not-sync-browser-settings-shortdesc.md)].
### Related topics
[About sync setting on Microsoft Edge on Windows 10 devices](http://windows.microsoft.com/windows-10/about-sync-settings-on-windows-10-devices)
<hr>

View File

@ -0,0 +1,49 @@
<!-- ## Provision Favorites -->
>*Supported versions: Microsoft Edge on Windows 10, version 1511 or later*<br>
>*Default setting: Disabled or not configured (Customizable)*
[!INCLUDE [provision-favorites-shortdesc](../shortdesc/provision-favorites-shortdesc.md)]
>[!IMPORTANT]
>Enable only this policy or the Keep favorites in sync between Internet Explorer and Microsoft Edge policy. If you enable both, Microsoft Edge prevents users from syncing their favorites between the two browsers.
### Allowed values
|Group Policy |Description |Most restricted |
|---|---|:---:|
|Disabled or not configured<br>**(default)** |Default list of favorites not defined in Microsoft Edge. In this case, the Favorites list is customizable, such as adding folders, or adding and removing favorites. | |
|Enabled |Define a default list of favorites in Microsoft Edge. In this case, the Save a Favorite, Import settings, and context menu options (such as Create a new folder) are turned off.<p>To define a default list of favorites, do the following:<ol><li>In the upper-right corner of Microsoft Edge, click the ellipses (**...**) and select **Settings**.</li><li>Click **Import from another browser**, click **Export to file**, and save the file.</li><li>In the **Options** section of the Group Policy Editor, provide the location that points the file with the list of favorites to provision. Specify the URL as: <ul><li>HTTP location: "SiteList"=http://localhost:8080/URLs.html</li><li>Local network: "SiteList"="\network\shares\URLs.html"</li><li>Local file: "SiteList"=file:///c:\Users\\Documents\URLs.html</li></ul></li></ol> |![Most restricted value](../images/check-gn.png) |
---
### Configuration combinations
| **Keep favorites in sync between IE and Microsoft Edge** | **Provision Favorites** | **Results** |
| --- | --- | --- |
| Disabled or not configured (default) | Disabled or not configured (default) | **Turned off/not syncing**. Microsoft Edge prevents users from syncing their favorites. |
| Enabled (turned on/syncing) | Disabled or not configured (default) | **Turned on/syncing**. Syncs favorites between Internet Explorer and Microsoft Edge. |
| Enabled (turned on/syncing) | Enabled (provision list of favorites) | **Turned off/not syncing**. Microsoft Edge prevents users from syncing their favorites. |
| Disabled or not configured (default) | Enabled (provision list of Favorites) | **Turned on/syncing**. Syncs favorites between Internet Explorer and Microsoft Edge. |
---
### ADMX info and settings
#### ADMX info
- **GP English name:** Provision Favorites
- **GP name:** ConfiguredFavorites
- **GP element:** ConfiguredFavoritesPrompt
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[ProvisionFavorites](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-provisionfavorites)
- **Supported devices:** Desktop
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ProvisionFavorites
- **Data type:** String
#### Registry settings
- **Path:** HLKM\Software\Policies\Microsoft\MicrosoftEdge\Favorites
- **Value name:** ConfiguredFavorites
- **Value type:** REG_SZ
### Related policies
[Keep favorites in sync between Internet Explorer and Microsoft Edge](../available-policies.md#keep-favorites-in-sync-between-internet-explorer-and-microsoft-edge): [!INCLUDE [keep-favorites-in-sync-between-ie-and-edge-shortdesc](../shortdesc/keep-favorites-in-sync-between-ie-and-edge-shortdesc.md)]
<hr>

View File

@ -0,0 +1 @@
[Search provider discovery](https://docs.microsoft.com/en-us/microsoft-edge/dev-guide/browser/search-provider-discovery): Microsoft Edge follows the OpenSearch 1.1 specification to discover and use web search providers. When a user browses to a search service, the OpenSearch description is picked up and saved for later use. Users can then choose to add the search service to use in the Microsoft Edge address bar.

View File

@ -0,0 +1,53 @@
<!-- ## Send all intranet sites to Internet Explorer 11 -->
>*Supported versions: Microsoft Edge on Windows 10*<br>
>*Default setting: Disabled or not configured*
[!INCLUDE [send-all-intranet-sites-to-ie-shortdesc](../shortdesc/send-all-intranet-sites-to-ie-shortdesc.md)]
>[!TIP]
>Microsoft Edge does not support ActiveX controls, Browser Helper Objects, VBScript, or other legacy technology. If you have websites or web apps that still use this technology and needs IE11 to run, you can add them to the Enterprise Mode site list, using Enterprise Mode Site List Manager. Allowed values.
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Disabled or not configured<br>**(default)** |0 |0 |All sites, including intranet sites, open in Microsoft Edge automatically. |![Most restricted value](../images/check-gn.png) |
|Enabled |1 |1 |Only intranet sites open in Internet Explorer 11 automatically.<p>Enabling this policy automatically opens all intranet sites in IE11, even if the users have Microsoft Edge as their default browser.<ol><li>In Group Policy Editor, navigate to:<br>**Computer Configuration\\Administrative Templates\\Windows Components\\File Explorer\\Set a default associations configuration file**</li><li>Click **Enabled** and then refresh the policy and then vew the affected sites in Microsoft Edge.<br><br>A message displays saying that the page needs to open in IE. At the same time, the page opens in IE11 automatically; in a new frame if it is not yet running, or in a new tab.</li></ol>| |
---
### Configuration combinations
### ADMX info and settings
#### ADMX info
- **GP English name:** Send all intranet sites to Internet Explorer 11
- **GP name:** SendIntranetTraffictoInternetExplorer
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[SendIntranetTraffictoInternetExplorer](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-sendintranettraffictointernetexplorer)
- **Supported devices:** Desktop
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/SendIntranetTraffictoInternetExplorer
- **Data type:** Integer
#### Registry settings
- **Path:** HLKM\\Software\\Policies\\Microsoft\\MicrosoftEdge\\Main
- **Value name:** SendIntranetTraffictoInternetExplorer
- **Value type:** REG_DWORD
### Related Policies
- [Configure the Enterprise Mode Site List](../available-policies.md#configure-the-enterprise-mode-site-list): [!INCLUDE [configure-enterprise-mode-site-list-shortdesc](../shortdesc/configure-enterprise-mode-site-list-shortdesc.md)]
- [Show message when opening sites in Internet Explorer](../available-policies.md#show-message-when-opening-sites-in-internet-explorer): [!INCLUDE [show-message-when-opening-sites-in-ie-shortdesc](../shortdesc/show-message-when-opening-sites-in-ie-shortdesc.md)]
### Related documents
- [Blog: How Microsoft Edge and Internet Explorer 11 on Windows 10 work better together in the Enterprise](https://go.microsoft.com/fwlink/p/?LinkID=624035). Many customers depend on legacy features only available in older versions of Internet Explorer and are familiar with our Enterprise Mode tools for IE11. The Enterprise Mode has been extended to support to Microsoft Edge by opening any site specified on the Enterprise Mode Site List in IE11. IT Pros can use their existing IE11 Enterprise Mode Site List or they can create a new one specifically for Microsoft Edge. By keeping Microsoft Edge as the default browser in Windows 10 and only opening legacy line of business sites in IE11 when necessary, you can help keep newer development projects on track, using the latest web standards on Microsoft Edge.
- [Enterprise Mode for Internet Explorer 11 (IE11)](https://go.microsoft.com/fwlink/p/?linkid=618377). Learn how to set up and use Enterprise Mode and the Enterprise Mode Site List Manager in your company.
- [Use the Enterprise Mode Site List Manager](https://docs.microsoft.com/en-us/internet-explorer/ie11-deploy-guide/use-the-enterprise-mode-site-list-manager). You can use IE11 and the Enterprise Mode Site List Manager to add individual website domains and domain paths and to specify whether the site renders using Enterprise Mode or the default mode.
<hr>

View File

@ -0,0 +1,84 @@
<!-- ## Set default search engine -->
>*Supported versions: Microsoft Edge on Windows 10, version 1703 or later*<br>
>*Default setting: Not configured (Defined in App settings)*
[!INCLUDE [set-default-search-engine-shortdesc](../shortdesc/set-default-search-engine-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Not configured<br>**(default)** |Blank |Blank |Microsoft Edge uses the default search engine specified in App settings. If you don't configure this policy and disable the [Allow search engine customization](#allow-search-engine-customization-include) policy, users cannot make changes. | |
|Disabled |0 |0 |Microsoft Edge removes the policy-set search engine and uses the Microsoft Edge specified engine for the market. | |
|Enabled |1 |1 |Microsoft Edge uses the policy-set search engine specified in the OpenSearch XML file. Users cannot change the default search engine.<p>Specify a link to the OpenSearch XML file that contains, at a minimum, the short name and the URL template (HTTPS) of the search engine. For more information about creating the OpenSearch XML file, see [Search provider discovery](https://docs.microsoft.com/en-us/microsoft-edge/dev-guide/browser/search-provider-discovery). Use this format to specify the link you want to add.<p>If you want users to use the default Microsoft Edge settings for each market set the string to EDGEDEFAULT. <p>If you would like users to use Microsoft Bing as the default search engine set the string to EDGEBING. |![Most restricted value](../images/check-gn.png) |
---
### Configuration combinations
| **Set default search engine** | **Allow search engine customization** | **Configure additional search engines** | **Results** |
| --- | --- | --- | --- |
| Not configured (default) | Disabled | Disabled or not configured (default) | Default search engine specified in App settings. Users cannot make changes. |
| Not configured (default) | Enabled or not configured (default) | Disabled or not configured (default) | Default search engine specified in App settings. Users can make changes to the default search engine at any time. |
| Not configured (default) | Disabled | Enabled | ??? |
| Not configured (default) | Enabled or not configured (default) | Enabled | ??? |
| Disabled | Disabled | Disabled or not configured (default) | Users cannot add, remove, or change any of the search engines, but they can set a default search engine. |
| Disabled | Enabled or not configured (default) | Disabled or not configured (default) | Users can add new search engines or change the default search engine, in Settings. |
| Enabled | Disabled | Disabled or not configured (default) | Set the default search engine preventing users from making changes. |
| Enabled | Enabled or not configured (default) | Disabled or not configured (default) | Set the default search engine and allow users to add search engines or make changes. |
#### If you want to use the default search engine in Apps settings and prevent users from making changes.
#### If you want to use the default search engine in Apps setting and let users make changes.
#### ???
#### ???
#### If you don't want users to add, remove, or change any of the search engines, but users can set a default search engine of their own.
#### If you want users to add new search engines or change the default in Settings.
#### If you want to set the default search engine and prevent users from making changes.
#### If you want to set the default search engine and let users make changes.
### ADMX info and settings
#### ADMX info
- **GP English name:** Set default search engine
- **GP name:** SetDefaultSearchEngine
- **GP element:** SetDefaultSearchEngine_Prompt
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** [SetDefaultSearchEngine](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-setdefaultsearchengine)
- **Supported devices:** Desktop
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/SetDefaultSearchEngine
- **Data type:** Integer
#### Registry settings
- **Path:** HLKM\\Software\\Policies\\Microsoft\\MicrosoftEdge\\OpenSearch
- **Value name:** SetDefaultSearchEngine
- **Value type:** REG_SZ
### Related policies
- [Configure additional search engines](../available-policies.md#configure-additional-search-engines): [!INCLUDE [configure-additional-search-engines-shortdesc](../shortdesc/configure-additional-search-engines-shortdesc.md)]
- [Allow search engine customization](../available-policies.md#allow-search-engine-customization): [!INCLUDE [allow-search-engine-customization-shortdesc](../shortdesc/allow-search-engine-customization-shortdesc.md)]
### Related documents
- [Microsoft browser extension policy](https://docs.microsoft.com/en-us/legal/windows/agreements/microsoft-browser-extension-policy): This document describes the supported mechanisms for extending or modifying the behavior or user experience of Microsoft Edge and Internet Explorer, or the content displayed by these browsers. Any technique not explicitly listed in this document is considered **unsupported**.
- [Search provider discovery](https://docs.microsoft.com/en-us/microsoft-edge/dev-guide/browser/search-provider-discovery): Rich search integration is built into the Microsoft Edge address bar, including search suggestions, results from the web, your browsing history, and favorites.
<hr>

View File

@ -0,0 +1,56 @@
<!-- ## Set Home Button URL -->
>*Supported versions: Microsoft Edge on Windows 10*<br>
>*Default setting: Disabled or not configured (Blank)*
[!INCLUDE [set-home-button-url-shortdesc](../shortdesc/set-home-button-url-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Disabled or not configured<br>**(default)** |Blank |Blank |Microsoft Edge shows the home button and loads the Start page, and locks down the home button to prevent users from changing what page loads. | |
|Enabled - String |String |String |Enter a URL in string format, for example, https://www.msn.com. A custom URL loads when clicking the home button. You must also enable the [Configure Home Button](../available-policies.md#configure-home-button) policy and select the _Show home button & set a specific page_ option. | |
---
With these values, you can do any of the following configurations:
#### If you want to show the home button, load a custom URL, and let users make changes:
1. **Configure Home Button:** Enable and select the _Show the home button & set a specific page_ option.
2. **Set Home Button URL:** Enter a URL in string format, for example, https://www.bing.com.
3. **Unlock Home Button:** Enable to let users make changes.
#### If you want to show the home button, load a custom URL, and prevent users from making changes:
1. **Configure Home Button:** Enable and select the _Show the home button & set a specific page_ option.
2. **Set Home Button URL:** Enter a URL in string format, for example, https://www.bing.com.
3. **Unlock Home Button:** Leave disabled or not configured.
#### If you want to hide the home button:
Enable the **Configure Home Button** policy and select the _Hide home button_ option.
### ADMX info and settings
#### ADMX info
- **GP English name:** Set Home Button URL
- **GP name:** SetHomeButtonURL
- **GP element:** SetHomeButtonURLPrompt
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[SetHomeButtonURL]()
- **Supported devices:** Desktop and Mobile
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/SetHomeButtonURL
- **Data type:** Integer
#### Registry settings
- **Path:** HKLM\Software\Policies\Microsoft\MicrosoftEdge\Internet Settings
- **Value name:** HomeButtonURL
- **Value type:** REG_SZ
### Related policies
- [Configure Home Button](../available-policies.md#configure-home-button): [!INCLUDE [configure-home-button-shortdesc](../shortdesc/configure-home-button-shortdesc.md)]
- [Unlock Home button](../available-policies.md#unlock-home-button): [!INCLUDE [unlock-home-button-shortdesc](../shortdesc/unlock-home-button-shortdesc.md)]
<hr>

View File

@ -0,0 +1,49 @@
<!-- ## Set New Tab page URL -->
>*Supported versions: Microsoft Edge on Windows 10*<br>
>*Default setting: Disabled or not configured (Blank)*
[!INCLUDE [set-new-tab-url-shortdesc](../shortdesc/set-new-tab-url-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Disabled or not configured<br>**(default)** |Blank |Blank |Microsoft Edge loads the default New tab page. | |
|Enabled - String |String |String |Enter a URL in string format, for example, https://www.msn.com. A custom URL loads for the New tab page. When you enable this policy and disable the Allow web content on New tab page policy, Microsoft Edge opens about:blank. | |
---
### Configuration combinations
| **Set New Tab page URL** | **Allow web content on New tab page** | **Results** |
| --- | --- | --- |
| Enabled String | Enabled (default) | |
| Enabled String | Disabled | A blank page loads instead of the default New tab page. |
| Enabled String | Not configured | |
| Disabled or not configured (default) | Enabled (default) | |
| Disabled or not configured (default) | Disabled | |
| Disabled or not configured (default) | Not configured | |
### ADMX info and settings
#### ADMX info
- **GP English name:** Set New Tab page URL
- **GP name:** SetNewTabPageURL
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[SetNewTabPageURL]()
- **Supported devices:** Desktop
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/SetNewTabPageURL
- **Data type:** String
#### Registry settings
- **Path:** HKLM\Software\Policies\Microsoft\MicrosoftEdge\Internet Settings
- **Value name:** NewTabPageUR
- **Value type:** REG_SZ
### Related policies
[Allow web content on New Tab page](https://docs.microsoft.com/en-us/microsoft-edge/deploy/available-policies#allow-web-content-on-new-tab-page): [!INCLUDE [allow-web-content-on-new-tab-page-shortdesc](../shortdesc/allow-web-content-on-new-tab-page-shortdesc.md)]
<hr>

View File

@ -0,0 +1,70 @@
<!-- ## Show message when opening sites in Internet Explorer -->
>*Supported versions: Microsoft Edge on Windows 10, version 1607 and later*<br>
>*Default setting: Disabled or not configured (No additional message)*
<!-- RS5 update: add option for showing interstitial page with stay in Edge link (Koch) -->
[!INCLUDE [show-message-when-opening-sites-in-ie-shortdesc](../shortdesc/show-message-when-opening-sites-in-ie-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Disabled or not configured<br>**(default)** |0 |0 |No additional message displays. |![Most restricted value](../images/check-gn.png) |
|Enabled |1 |1 |Shows an additional message stating that a site has opened in IE11. | |
|Enabled |2 |2 |Shows an additional message with a "Keep going in Microsoft Edge" link. | |
---
### Configuration combinations
| **Show message when opening sites in Internet Explorer** | **Configure the Enterprise Mode Site List** | **Send all intranet sites to Internet Explorer, or both.** | **Results** |
| --- | --- | --- | --- |
| Disabled or not configured (default) | Disabled or not configured (default) | Disabled or not configured (default) | |
| Disabled or not configured | Disabled or not configured (default) | Enabled (only intranet sites open in IE11) | |
| Disabled or not configured | Enabled (turned on) | Disabled or not configured (default) | |
| Disabled or not configured | Enabled (turned on) | Enabled (only intranet sites open in IE11) | |
| Enabled (shows an additional message) | Disabled or not configured (default) | Disabled or not configured (default) | |
| Enabled (shows an additional message) | Enabled (turned on) | Disabled or not configured (default) | |
| Enabled (shows an additional message) | Enabled (turned on) | Enabled (only intranet sites open in IE11) | |
| Enabled (shows an additional message) | Disabled or not configured (default) | Enabled (only intranet sites open in IE11) | |
| Enabled (shows the Keep going link) | Disabled or not configured (default) | Disabled or not configured (default) | |
| Enabled (shows the Keep going link) | Enabled (turned on) | Disabled or not configured (default) | |
| Enabled (shows the Keep going link) | Enabled (turned on) | Enabled (only intranet sites open in IE11) | |
| Enabled (shows the Keep going link) | Disabled or not configured (default) | Enabled (only intranet sites open in IE11) | |
---
### ADMX info and settings
#### ADMX info
- **GP English name:** Show message when opening sites in Internet Explorer
- **GP name:** ShowMessageWhenOpeningSitesInInternetExplorer
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[ShowMessageWhenOpeningSitesInInternetExplorer](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-showmessagewhenopeningsitesininternetexplorer)
- **Supported devices:** Desktop
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ShowMessageWhenOpeningSitesInInternetExplorer
- **Data type:** Integer
#### Registry settings
- **Path:** HKLM\Software\Policies\Microsoft\MicrosoftEdge\Main
- **Value name:** ShowMessageWhenOpeningSitesInInternetExplorer
- **Value type:** REG_DWORD
### Related policies
- [Configure the Enterprise Mode Site List](../available-policies.md#configure-the-enterprise-mode-site-list): [!INCLUDE [configure-enterprise-mode-site-list-shortdesc](../shortdesc/configure-enterprise-mode-site-list-shortdesc.md)]
- [Send all intranet sites to Internet Explorer 11](../available-policies.md#send-all-intranet-sites-to-internet-explorer-11): [!INCLUDE [send-all-intranet-sites-to-ie-shortdesc](../shortdesc/send-all-intranet-sites-to-ie-shortdesc.md)]
### Scenarios
Customer has all Intranet sites redirect from Edge to IE, and as website owners find their sites no longer require IE, they override the setting for that specific site to no longer redirect it to IE.
As part of this, we have a GPO in place for our website owners to not hide the page Edge displays saying they were redirected. Before the Fall Creators Update, that page looked something like this:
Note the option to “Keep going in Microsoft Edge” at the bottom which would allow our website owners to be able to continue to their site in Edge to test.
Meaning that our website owners can no longer test their websites in Edge due to our GPO redirecting all internal sites to IE. So now they cant test to let us know if their site will work in Edge. Is this by design? If so, is there a work around that Microsoft would suggest for our users?
<hr>

View File

@ -0,0 +1,62 @@
<!-- ## Unlock Home Button -->
>*Supported versions: Microsoft Edge on Windows 10*<br>
>*Default setting: Disabled or not configured (Home button is locked)*
[!INCLUDE [unlock-home-button-shortdesc](../shortdesc/unlock-home-button-shortdesc.md)]
### Allowed values
|Group Policy |MDM |Registry |Description |Most restricted |
|---|:---:|:---:|---|:---:|
|Disabled or not configured<br>**(default)** |0 |0 |Prevent users from making changes to the home button settings. | |
|Enabled |1 |1 |Allow users to make changes to the home button settings. | |
---
With these values, you can do any of the following configurations:
#### If you want to show the home button, load the New tab page, and prevent users from making changes to the settings.
1. **Configure Home Button:** Enable and select the _Show home button & set to New tab page_ option.
2. **Set Home Button URL:** Leave blank or not configured.
3. **Unlock Home Button:** Leave disabled or not configured.
#### If you want to show the home button, load the New tab page, and let users make changes:
1. **Configure Home Button:** Enable and select the _Show home button & set to New tab page_ option.
2. **Set Home Button URL:** Leave blank or not configured.
3. **Unlock Home Button:** Enable to let users make changes.
#### If you want to show the home button, load a custom URL, and prevent users from making changes:
1. **Configure Home Button:** Enable and select the _Show the home button & set a specific page_ option.
2. **Set Home Button URL:** Enter a URL in string format, for example, https://www.bing.com.
3. **Unlock Home Button:** Leave disabled or not configured.
#### If you want to show the home button, load a custom URL, and let users make changes:
1. **Configure Home Button:** Enable and select the _Show the home button & set a specific page_ option.
2. **Set Home Button URL:** Enter a URL in string format, for example, https://www.bing.com.
3. **Unlock Home Button:** Enable to let users make changes.
### ADMX info and settings
#### ADMX info
- **GP English name:** Unlock Home Button
- **GP name:** UnlockHomeButton
- **GP path:** Windows Components/Microsoft Edge
- **GP ADMX file name:** MicrosoftEdge.admx
#### MDM settings
- **MDM name:** Browser/[UnlockHomeButton]()
- **Supported devices:** Desktop
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/UnlockHomeButton
- **Data type:** Integer
#### Registry settings
- **Path:** HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Internet Settings
- **Value name:** UnlockHomeButton
- **Value type:** REG_DWORD
### Related policies
- [Configure Home Button](#configure-home-button-include): [!INCLUDE [configure-home-button-shortdesc](../shortdesc/configure-home-button-shortdesc.md)]
- [Set Home Button URL](#set-home-button-url-include): [!INCLUDE [set-home-button-url-shortdesc](../shortdesc/set-home-button-url-shortdesc.md)]
<hr>

View File

@ -0,0 +1,432 @@
---
description:
ms.assetid:
author: shortpatti
ms.author: pashort
ms.prod: edge
ms.sitesec: library
title: Deploy Microsoft Edge kiosk mode
ms.localizationpriority: high
ms.date: 07/18/2018
---
# Deploy Microsoft Edge kiosk mode (Preview Build 17718)
>Applies to: Microsoft Edge on Windows 10
Microsoft Edge kiosk mode works with assigned access to restrict the browsing
experience for kiosk devices. The kiosk browsing experience includes a full
screen digital/interactive signage mode and a multi-tab browsing mode. To use
Microsoft Edge kiosk mode, you must configure Microsoft Edge with assigned
access.
When you configure Microsoft Edge kiosk mode in assigned access, you can set it
up to show only a single URL in full-screen, in the case of digital or
interactive signage on a single-app kiosk device. You can also restrict
Microsoft Edge for public browsing (single and multi-app kiosk devices) that run
a multi-tab version of InPrivate limiting the functionality. You can also
configure a multi-app kiosk device to run a full version of Microsoft Edge.
Digital/Interactive signage, public browsing (single-app) and public browsing
(multi-app) protect users browsing data by running Microsoft Edge InPrivate.
Single-app public browsing provides an idle timer and an 'End session' button.
The idle timer resets the browsing session after a specified timeout, and the
'End Session' button resets the session immediately.
## Microsoft Edge kiosk types
Windows 10 offers two different kiosk type experiences in assigned access for
public and specialized use: single-app kiosk and multi-app kiosk. Microsoft Edge
kiosk mode supports **four** types, depending on how a Microsoft Edge kiosk is
set up in assigned access.
### Single-app kiosk
When you set up Microsoft Edge kiosk mode in single-app assigned access,
Microsoft Edge runs InPrivate either in full-screen or a limited multi-tab
version.
The single-app Microsoft Edge kiosk mode types include:
1. **Digital / Interactive signage** devices display a specific site in
full-screen mode where Microsoft Edge runs InPrivate mode. Examples of
Digital signage are, a rotating advertisement or menu. Examples of
Interactive signage are an interactive museum display or restaurant
order/pay station.
2. **Public browsing** devices run a limited multi-tab version of InPrivate and
are the only app available. Users cant minimize, close, or open new
Microsoft Edge windows or customize Microsoft Edge. Users can clear browsing
data, downloads and restart Microsoft Edge by clicking “End session.” You
can configure Microsoft Edge to restart after a period of inactivity by
using the “Configure kiosk reset after idle timeout” policy. For example, an
information kiosk at a public library.
![single-app kiosk mode public browsing station](images/single-app-pbs.png)
### Multi-app kiosk
When you set up Microsoft Edge kiosk mode in multi-app assigned access,
Microsoft Edge runs a limited multi-tab version of InPrivate or a normal
browsing version. For more details about running a multi-app kiosk, or
fixed-purpose device, see Set up a multi-app kiosk. Here you learn how to create
kiosks that run more than one app and the benefits of a multi-app kiosk, or
fixed-purpose device.
The multi-app Microsoft Edge kiosk mode types include:
1. **Public browsing** (shared browsing) supports browsing the internet and
runs InPrivate with minimal features available. In this configuration,
Microsoft Edge can be one of many apps available. Users can minimize, close,
and open multiple InPrivate windows. On a multi-app kiosk device, Microsoft
Edge can interact with other applications. For example, users can install
extensions from Microsoft Store if Microsoft Store is set up in assigned
access. If you also have Internet Explorer 11 set up in assigned access; you
can use the Enterprise Mode site list to allow users to open sites in
Internet Explorer 11.
![multi-app public browsing station](images/multi-app-pbs.png)
1. **Normal mode** runs a full version of Microsoft Edge, but some features may
not work depending on what other apps you configured in assigned access. For
example, if the Microsoft Store is not set up, users cannot install
extensions. If the user logs in with an MSA, their browsing data will roam
with them. If you also have Internet Explorer 11 set up in assigned access;
you can use the Enterprise Mode site list to open sites in Internet Explorer
11 automatically.
![normal mode kiosk app](images/normal-mode.png)
## Lets get started!
Before you can configure Microsoft Edge kiosk mode, you must set up Microsoft
Edge in assigned access. You can set up Microsoft Edge kiosk mode in assigned
access using:
- **Windows Settings.** Best for physically setting up a single device as a
kiosk. With this method, you set up assigned access and configure the kiosk
or digital sign device using Settings. You can configure Microsoft Edge in
single-app (kiosk type Full-screen or public browsing) and define a single
URL for the Home Button, Start Page and New Tab page. You can also set the
reset after idle timeout. an ,
- **Microsoft Intune or other MDM service.** Best for setting up multiple
devices as a kiosk. With this method, you configure Microsoft Edge in
assigned access and configure how Microsoft Edge behaves when its running
in kiosk mode with assigned access.
>[!NOTE]
>For other MDM service, check with your provider for instructions.
- **Windows PowerShell.** Best for setting up multiple devices as a kiosk.
With this method, you set up assigned access using the
[Set-AssignedAccess](https://docs.microsoft.com/en-us/powershell/module/assignedaccess/Set-AssignedAccess?view=win10-ps)
cmdlet to restrict a local standard user account on a single-function
device. The user cannot exit the app, sign out, or access any system
settings. To configure how Microsoft Edge behaves when its running in kiosk
mode, use Intune or other MDM service, the Group Policy Editor, or registry.
- **Windows Configuration Designer.** Best for setting up multiple devices as
a kiosk. Download and install both the latest version of the [Windows
Assessment and Deployment Kit
(ADK)](https://developer.microsoft.com/windows/hardware/windows-assessment-deployment-kit)
and [Windows Configuration
Manager](https://docs.microsoft.com/en-us/windows/configuration/provisioning-packages/provisioning-install-icd#install-windows-configuration-designer-1).
### Prerequisites
- Microsoft Edge on Windows 10, version 1809 (Professional, Enterprise, and
Education).
- Configuration and deployment service, such as Windows PowerShell, Microsoft
Intune or other MDM service, or Windows Configuration Designer. With these
methods, you must have the
[AppUserModelID](https://docs.microsoft.com/windows-hardware/customize/enterprise/find-the-application-user-model-id-of-an-installed-app);
this does not apply to the Windows Settings method.
### Use Windows Settings
Windows Settings is the simplest and easiest way to set up one or a couple of
devices because you must perform these steps on each device. This method is
ideal for mom and pop shops or small businesses.
1. In Windows Settings, select **Accounts** \> **Other people**.
2. Under **Set up a kiosk**, select **Assigned access**.
3. Select **Get started**.
4. Create a standard user account or choose an existing account for your kiosk.
5. Select **Next**.
6. On the **Choose the app for the kiosk** page, select **Microsoft Edge.**
7. Select **Next**.
8. Select how Microsoft Edge displays when running in kiosk mode:
- **As a digital sign or interactive display,** the default URL shows in full
screen, without browser controls.
- **As a public browser,** the default URL shows in a browser view with
limited browser controls.
1. Select **Next**.
2. Enter the URL that you want to load when the kiosk launches.
>[!NOTE]
>The URL sets the Home Button, Start page, and New Tab page.
1. Microsoft Edge in kiosk mode has a built-in timer to help keep data safe in
public browsing sessions. When the idle time (no user activity) meets the
time limit, a confirmation message prompts the user to continue; if
**Continue** is not selected, Microsoft Edge resets to the default URL.
Accept the default value of **5 minutes,** or you can choose your own idle
timer value.
2. Select **Next**, and then select **Close**.
3. Close **Settings** to save your choices automatically and apply them the
next time the user accounts logs on.
4. Configure the policies for Microsoft Edge kiosk mode. For details on the
valid kiosk policy settings, see Related policies on page 17.
5. Validate the Microsoft Edge kiosk mode by restarting the device and signing
in with the local kiosk account.
*Congratulations!* Youve finished setting up Microsoft Edge in assigned access
and a kiosk or digital sign, and configured browser policies for Microsoft Edge
kiosk mode.
*Next steps.*
- Use your new kiosk. Sign in to the device using the user account
that you selected to run the kiosk app.
- If you want to make changes to your kiosk, you can quickly change the display
option and default URL for Microsoft Edge.
1. Go to **Start** \> **Settings** \> **Accounts** \> **Other people**.
2. Under **Set up a kiosk**, select **Assigned access**.
3. Make your changes to **Choose a kiosk mode** and **Set up Microsoft Edge**.
### Use Microsoft Intune or other MDM service
With this method, you can use Microsoft Intune or other MDM services to
configure Microsoft Edge in assigned access and how it behaves when its running
in assigned access.
1. In Microsoft Intune or other MDM service, configure AssignedAccess to
prevent users from accessing the file system, running executables, or other
apps.
2. Configure the following MDM settings to control a web browser app on the
kiosk device.
| | |
|---|---|
| **ConfigureKioskMode**<p>![](images/icon-thin-line-computer.png) | Configure the display mode for Microsoft Edge as a kiosk app.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskMode<p>**Data type:** Integer<p>**Allowed values:**<ul><li>**Single-app kiosk experience**<ul><li>**0** - Digital signage and interactive display</li><li>**1** - InPrivate Public browsing</li></ul></li><li>**Multi-app kiosk experience**<ul><li>**0** - Normal Microsoft Edge running in assigned access</li><li>**1** - InPrivate public browsing with other apps</li></ul></li></ul> |
| **ConfigureKioskResetAfterIdleTimeout**<p>![](images/icon-thin-line-computer.png) | Change the time in minutes from the last user activity before Microsoft Edge kiosk mode resets to the default kiosk configuration.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskResetAfterIdleTimeout<p>**Data type:** Integer<p>**Allowed values:**<ul><li>**0** - No idle timer</li><li>**1-1440 (5 minutes is the default)** - Set reset on idle timer</li></ul> |
| **HomePages**<p>![](images/icon-thin-line-computer.png) | Set one or more start pages, URLs, to load when Microsoft Edge launches.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/HomePages<p>**Data type:** String<p>**Allowed values:**<p>Enter one or more URL, for example,<br>&nbsp;&nbsp;&nbsp;\<https://www.msn.com\>\<https:/www.bing.com\> |
| **ConfigureHomeButton**<p>![](images/icon-thin-line-computer.png) | Configure how the Home Button behaves.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureHomeButton<p>**Data type:** Integer<p> **Allowed values:**<ul><li>**0 (default)** - Not configured. Show home button, and load the default Start page.</li><li>**1** - Enabled. Show home button and load New tab page</li><li>**2** - Enabled. Show home button & set a specific page.</li><li>**3** - Enabled. Hide the home button.</li></ul> |
| **SetNewTabPageURL**<p>![](images/icon-thin-line-computer.png) | Set a custom URL for the New tab page.<p> **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ <p>**Data type:** String<p>**Allowed values:** Enter a URL, for example, https://www.msn.com |
| **SetHomeButtonURL**<p>![](images/icon-thin-line-computer.png) | If you set ConfigureHomeButton to 2, configure the home button URL.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ <p>**Data type:** String<p>**Allowed values:** Enter a URL, for example, https://www.bing.com |
---
3. Restart the device and sign in using the kiosk app user account.
*Congratulations!* Youve finished setting up a kiosk or digital signage and
configuring policies for Microsoft Edge kiosk mode using Microsoft Intune or
other MDM service.
*Next steps.* Use your new kiosk. Sign in to the device using the user account
that you selected to run the kiosk app.
### Use a provisioning package
With this method, you can use a provisioning package to configure Microsoft Edge
in assigned access. After you set up the provisioning package for configuring
Microsoft Edge in assigned access, you configure how Microsoft Edge behaves when
its running in kiosk mode with assigned access.
1. Open Windows Configuration Designer to create a provisioning package and
configure Microsoft Edge in assigned access.
2. After creating the provisioning package and configuring assigned access, and
before you build the package, switch to the advanced editor.
3. Navigate to **Runtime settings \> Policies \> Browser** and set the
following policies:
| | |
|---|---|
| **ConfigureKioskMode**<p>![](images/icon-thin-line-computer.png) | Configure the display mode for Microsoft Edge as a kiosk app.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskMode<p>**Data type:** Integer<p>**Allowed values:**<ul><li>**Single-app kiosk experience**<ul><li>**0** - Digital signage and interactive display</li><li>**1** - InPrivate Public browsing</li></ul></li><li>**Multi-app kiosk experience**<ul><li>**0** - Normal Microsoft Edge running in assigned access</li><li>**1** - InPrivate public browsing with other apps</li></ul></li></ul> |
| **ConfigureKioskResetAfterIdleTimeout**<p>![](images/icon-thin-line-computer.png) | Change the time in minutes from the last user activity before Microsoft Edge kiosk mode resets to the default kiosk configuration.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskResetAfterIdleTimeout<p>**Data type:** Integer<p>**Allowed values:**<ul><li>**0** - No idle timer</li><li>**1-1440 (5 minutes is the default)** - Set reset on idle timer</li></ul> |
| **HomePages**<p>![](images/icon-thin-line-computer.png) | Set one or more start pages, URLs, to load when Microsoft Edge launches.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/HomePages<p>**Data type:** String<p>**Allowed values:**<p>Enter one or more URL, for example,<br>&nbsp;&nbsp;&nbsp;\<https://www.msn.com\>\<https:/www.bing.com\> |
| **ConfigureHomeButton**<p>![](images/icon-thin-line-computer.png) | Configure how the Home Button behaves.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureHomeButton<p>**Data type:** Integer<p> **Allowed values:**<ul><li>**0 (default)** - Not configured. Show home button, and load the default Start page.</li><li>**1** - Enabled. Show home button and load New tab page</li><li>**2** - Enabled. Show home button & set a specific page.</li><li>**3** - Enabled. Hide the home button.</li></ul> |
| **SetNewTabPageURL**<p>![](images/icon-thin-line-computer.png) | Set a custom URL for the New tab page.<p> **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ <p>**Data type:** String<p>**Allowed values:** Enter a URL, for example, https://www.msn.com |
| **SetHomeButtonURL**<p>![](images/icon-thin-line-computer.png) | If you set ConfigureHomeButton to 2, configure the home button URL.<p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ <p>**Data type:** String<p>**Allowed values:** Enter a URL, for example, https://www.bing.com |
---
4. After youve configured the Microsoft Edge kiosk mode policies, including
any of the related policies, its time to build the package.
5. Click **Finish**. The wizard closes taking you back to the Customizations
page.
6. Apply the provisioning package to the device, which you can do during the
first-run experience (out-of-box experience or OOBE) and after (runtime).
For more details, see Apply a provisioning package.
*Congratulations!* Youve finished creating your provisioning package for
Microsoft Edge kiosk mode.
*Next steps.* Use your new kiosk. Sign in to the device using the user account
that you selected to run the kiosk app.
# Feature comparison of kiosk mode and kiosk browser app
In the following table, we show you the features available in both Microsoft
Edge kiosk mode and Kiosk Browser app available in Microsoft Store. Both kiosk
mode and kiosk browser app work in assigned access.
| **Feature** | **Microsoft Edge kiosk mode** | **Kiosk Browser** |
|---------------|--------------------------------|-----------------------|
| Print support | [Supported](images/148767.png) | [Not supported](images/148766.png) |
| Multi-tab support | [Supported](images/148767.png) | [Not supported](images/148766.png) |
| Allow URL support | [Supported](images/148767.png) <p>*\*For Microsoft Edge kiosk mode use* [Windows Defender Firewall](#_*Windows_Defender_Firewall)*. Microsoft kiosk browser has custom policy support.* | [Supported](images/148767.png) |
| Block URL support | [Supported](images/148767.png)<p>*\*For Microsoft Edge kiosk mode use* [Windows Defender Firewall](#_*Windows_Defender_Firewall)*. Microsoft kiosk browser has custom policy support.* | [Supported](images/148767.png) |
| Configure Home button | [Supported](images/148767.png) | [Supported](images/148767.png) |
| Set Start page(s) URL | [Supported](images/148767.png) | [Supported](images/148767.png) <p>*Same as Home button URL* |
| Set New Tab page URL | [Supported](images/148767.png) | [Not supported](images/148766.png) |
| Favorites management | [Supported](images/148767.png) | [Not supported](images/148766.png) |
| End session button | [Supported](images/148767.png) | [Supported](images/148767.png)<p>*In Intune, must create custom URI to enable. Dedicated UI configuration targeted for 1808.* |
| Reset on inactivity | [Supported](images/148767.png) | [Supported](images/148767.png) |
| Internet Explorer integration (Enterprise Mode site list) | [Supported](images/148767.png)<p>*Multi-app mode only* | [Not supported](images/148766.png) |
---
## \*Windows Defender Firewall
To prevent unwanted websites, use Windows Defender Firewall to configure a list of allowed websites or blocked websites or both. For more details, see [Windows Defender Firewall with Advanced Security Deployment](https://docs.microsoft.com/en-us/windows/security/identity-protection/windows-firewall/windows-firewall-with-advanced-security-deployment-guide).
# Related policies
| **MDM Setting** | **Digital /<br>Interactive signage** | **Public browsing<br>single-app** | **Public browsing<br>multi-app** | **Normal** |
|------------------|--------------------------|----------------------|------------------------|--------------------------|
| AllowAddressBarDropdown | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) |
| AllowAutofill | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) |
| AllowBrowser | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) |
| AllowConfigurationUpdateForBooksLibrary | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) |
| AllowCookies | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
| AllowDeveloperTools | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) |
| AllowDoNotTrack | [Supported](images/148767.png) ? | [Supported](images/148767.png) ? | [Supported](images/148767.png) ? | [Supported](images/148767.png) |
| AllowExtensions | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) |
| AllowFlash | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
| AllowFlashClickToRun | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
| AllowFullscreen\* | [Not supported](images/148766.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
| AllowInPrivate | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) |
| AllowMicrosoftCompatibilityList | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) \* | [Supported](images/148767.png) |
| AllowPasswordManager | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) |
| AllowPopups | [Not supported](images/148766.png) ? | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
| AllowPrelaunch\* | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) |
| AllowPrinting\* | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
| AllowSavingHistory\* | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) |
| AllowSearchEngineCustomization | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) |
| AllowSearchSuggestionsinAddressBar | [Not supported](images/148766.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
| AllowSideloadingOfExtensions\* | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) |
| AllowSmartScreen | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
| AllowSyncMySettings | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [./media/image12.png](./media/image12.png) ? | [Supported](images/148767.png) |
| AllowTabPreloading\* | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) |
| AllowWebContentOnNewTabPage\* | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) |
| AlwaysEnabledBooksLibrary | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) |
| ClearBrowsingDataOnExit | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) |
| ConfigureAdditionalSearchEngines | [Not supported](images/148766.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
| ConfigureFavoritesBar\* | [Not supported](images/148766.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
| ConfigureHomeButton\* | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
|  ConfigureKioskMode\* | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
|  ConfigureKioskResetAfterIdleTimeout\* | [Not supported](images/148766.png) | [Supported](images/148767.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) |
| ConfigureOpenMicrosoftEdgeWith\* | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
| ConfigureTelemetryForMicrosoft365Analytics\* | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
| DisableLockdownOfStartPages | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) |
| DoNotSyncBrowserSettings\* & PreventUsersFromTurningOnBrowserSyncing\* | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) ? | [Supported](images/148767.png) |
| EnableExtendedBooksTelemetry | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) |
| EnterpriseModeSiteList | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) \* | [Supported](images/148767.png) |
| FirstRunURL | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) |
| HomePages | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
| LockdownFavorites | [Not supported](images/148766.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
| PreventAccessToAboutFlagsInMicrosoftEdge | [Not supported](images/148766.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
| PreventCertErrorOverrides\* | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
| PreventFirstRunPage | [Supported](images/148767.png) ? | [Supported](images/148767.png) ? | [Supported](images/148767.png) ? | [Supported](images/148767.png) |
| PreventLiveTileDataCollection | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) |
| PreventSmartScreenPromptOverride | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
| PreventSmartScreenPromptOverrideForFiles | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
| PreventTurningOffRequiredExtensions\* | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
| PreventUsingLocalHostIPAddressForWebRTC | ? | ? | ? | [Supported](images/148767.png) |
| ProvisionFavorites | [Not supported](images/148766.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
| SendIntranetTraffictoInternetExplorer | [Not supported](images/148766.png) | [Not supported](images/148766.png) | ?\* | [Supported](images/148767.png) |
| SetDefaultSearchEngine | [Not supported](images/148766.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
| SetHomeButtonURL\* | [Not supported](images/148766.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
| SetNewTabPageURL\* | [Not supported](images/148766.png) | [Supported](images/148767.png) | [Supported](images/148767.png) | [Supported](images/148767.png) |
| ShowMessageWhenOpeningInteretExplorerSites | [Not supported](images/148766.png) | [Supported](images/148767.png) | [Supported](images/148767.png) \* | [Supported](images/148767.png) |
| SyncFavoritesBetweenIEAndMicrosoftEdge | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) ? | [Supported](images/148767.png) |
| UnlockHomeButton\* | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) |
| UseSharedFolderForBooks | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Not supported](images/148766.png) | [Supported](images/148767.png) |
---
*\* New policy coming in the next release of Windows 10.*
# Related topics
- **Create a Kiosk Experience:** Learn how to set up single-function kiosk
devices, such as restaurant menus, and optional features for a welcome
screen or power button availability. Also, learn how to create a multi-app
kiosk, or fixed-purpose device, to provide an easy-to-understand experience
giving users the things they need to use.
- **Configure a Windows 10 kiosk that runs multiple apps:** Learn how to
create kiosks that run more than one app and the benefits of a multi-app
kiosk, or fixed-purpose device.
- **Kiosk apps for assigned access: Best practices:** In Windows 10, you can
use assigned access to create a kiosk device, which enables users to
interact with just a single Universal Windows app. Learn about the best
practices for implementing a kiosk app.
- **Guidelines for choosing an app for assigned access (kiosk mode):**
Assigned access restricts a local standard user account on the device so
that it only has access to a single-function device, like a kiosk. Learn
about the guidelines for choosing a Windows app, web browsers, and securing
your information. Also, learn about additional configurations required for
some apps before it can work properly in assigned access.
- **Other settings to lock down:** Learn how to configure a more secure kiosk
experience. In addition to the settings, learn how to set up **automatic
logon** for your kiosk device. For example, when the kiosk device restarts,
you can log back into the device manually or by setting up automatic logon.
- **Add apps to Microsoft Intune:** Learn about and understand a few app
fundamentals and requirements before adding them to Intune and making them
available to your users.
- **AssignedAccess configuration service provider (CSP):** The AssignedAccess
configuration service provider (CSP) sets the device to run in kiosk mode.
Once the CSP has executed, then the next user login associated with the
kiosk mode puts the device into the kiosk mode running the application
specified in the CSP configuration.
- **Create a provisioning page for Windows 10**. Learn to use Windows
Configuration Designer (WCD) to create a provisioning package (.ppkg) for
configuring devices running Windows 10. The WCD wizard options provide a
simple interface to configure desktop, mobile, and kiosk device settings.
# Provide feedback or get support
To provide feedback on Microsoft Edge kiosk mode in Feedback Hub, select **Microsoft Edge** as the **Category**, and **All other issues** as the
subcategory.
*For multi-app kiosk only.* If you have set up the Feedback Hub in assigned access, you can you submit the feedback from the device running Microsoft Edge in kiosk mode in which you can include diagnostic logs. In the Feedback Hub, select **Microsoft Edge** as the **Category**, and **All other issues** as the
subcategory.
---

View File

@ -0,0 +1,93 @@
---
description:
ms.assetid:
author: shortpatti
ms.author: pashort
ms.prod: edge
ms.mktglfcycl: explore
ms.sitesec: library
title: New Microsoft Edge Group Policies and MDM settings
ms.localizationpriority:
ms.date: 07/18/2018
---
# New Microsoft Edge Group Policies and MDM settings (Preview Build 17718)
> Applies to: Microsoft Edge on Windows 10 and Windows 10 Mobile
You can find the Microsoft Edge Group Policy settings in the following location of the Group Policy Editor:
Computer Configuration\Administrative Templates\Windows Components\Microsoft Edge\
<!-- RS5 policies -->
## Allow fullscreen mode
[!INCLUDE [allow-full-screen-include](includes/allow-full-screen-include.md)]
## Allow Prelaunch
[!INCLUDE [allow-prelaunch-include](includes/allow-prelaunch-include.md)]
## Allow printing
[!INCLUDE [allow-printing-include.md](includes/allow-printing-include.md)]
## Allow Saving History
[!INCLUDE [allow-saving-history-include.md](includes/allow-saving-history-include.md)]
## Allow sideloading of Extensions
[!INCLUDE [allow-sideloading-extensions-include.md](includes/allow-sideloading-extensions-include.md)]
## Allow Microsoft Edge to start and load the Start and New Tab page at Windows startup and each time Microsoft Edge is closed
[!INCLUDE [allow-tab-preloading-include](includes/allow-tab-preloading-include.md)]
## Prevent users from turning on browser syncing
[!INCLUDE [prevent-users-to-turn-on-browser-syncing-include](includes/prevent-users-to-turn-on-browser-syncing-include.md)]
## Configure collection of browsing data for Microsoft 365 Analytics
[!INCLUDE [configure-browser-telemetry-for-m365-analytics-include](includes/configure-browser-telemetry-for-m365-analytics-include.md)]
## Configure Favorites Bar
[!INCLUDE [configure-favorites-bar-include.md](includes/configure-favorites-bar-include.md)]
## Configure Home Button
[!INCLUDE [configure-home-button-include.md](includes/configure-home-button-include.md)]
## Configure Open Microsoft Edge With
[!INCLUDE [configure-open-edge-with-include.md](includes/configure-open-edge-with-include.md)]
## Configure kiosk mode
[!INCLUDE [configure-microsoft-edge-kiosk-mode-include.md](includes/configure-microsoft-edge-kiosk-mode-include.md)]
## Configure kiosk reset after idle timeout
[!INCLUDE [configure-edge-kiosk-reset-idle-timeout-include.md](includes/configure-edge-kiosk-reset-idle-timeout-include.md)]
## Prevent certificate error overrides
[!INCLUDE [prevent-certificate-error-overrides-include.md](includes/prevent-certificate-error-overrides-include.md)]
## Prevent turning off required extensions
[!INCLUDE [prevent-turning-off-required-extensions-include.md](includes/prevent-turning-off-required-extensions-include.md)]
## Set Home button URL
[!INCLUDE [set-home-button-url-include](includes/set-home-button-url-include.md)]
## Set New Tab page URL
[!INCLUDE [set-new-tab-url-include.md](includes/set-new-tab-url-include.md)]
## Unlock Home button
[!INCLUDE [unlock-home-button-include.md](includes/unlock-home-button-include.md)]
# Additional MDM policies added
short intro for this...
ShowMessageWhenOpeningInteretExplorerSites
AllowWebContentOnNewTabPage
DoNotSyncBrowserSetting & DisableWebBrowserSettingSync (added MDM settings)

View File

@ -0,0 +1 @@
You can configure Microsoft Edge to store books from the Books Library to a default, shared folder in Windows, which decreases the amount of storage used by book files. When you enable this policy, Microsoft Edge downloads book files automatically to a common, shared folder, and prevents users from removing the book from the library. When disabled, Microsoft Edge does not use a shared folder but downloads book files to a folder for each user. For this policy to work properly, users must be signed in with a school or work account.

View File

@ -0,0 +1 @@
By default, Microsoft Edge shows the Address bar drop-down list and makes it available. When enabled (default setting), this policy takes precedence over the [Configure search suggestions in Address bar](../available-policies.md#configure-search-suggestions-in-address-bar) policy. If you want to minimize network connections from Microsoft Edge to Microsoft service, we recommend disabling this policy, which hides the Address bar drop-down list functionality. When disabled, Microsoft Edge also disables the _Show search and site suggestions as I type_ toggle in Settings.

View File

@ -0,0 +1 @@
Adobe Flash is integrated with Microsoft Edge and updated via Windows Update. By default, Microsoft Edge runs Adobe Flash content. With this policy, you can configure Microsoft Edge to prevent running Adobe Flash content.

View File

@ -0,0 +1 @@
By default, Microsoft Edge does not clear the browsing data on exit, but users can configure the _Clear browsing data_ option in Settings. Browsing data includes information you entered in forms, passwords, and even the websites visited. Enabling this policy clears the browsing data automatically each time Microsoft Edge closes.

View File

@ -0,0 +1 @@
By default, Microsoft Edge automatically updates the configuration data for the Books Library. Enabling this policy prevents Microsoft Edge from updating the configuration data.

View File

@ -0,0 +1 @@
Since Microsoft Edge is integration with Cortana, and by default, Microsoft Edge allows users to use Cortana voice assistant. Disabling this policy prevents users from using Cortana, but they can still search to find items on their device.

View File

@ -0,0 +1 @@
By default, Microsoft Edge allows users to use the F12 developer tools to build and debug web pages. Disabling this policy prevents users from using the F12 developer tools.

View File

@ -0,0 +1 @@
By default, and depending on the device configuration, Microsoft Edge gathers basic diagnostic data about the books in the Books Library and sends it to Microsoft. Enabling this policy gathers and sends both basic and additional diagnostic data.

View File

@ -0,0 +1 @@
By default, this policy allows users to add or personalize extensions in Microsoft Edge. Disabling this policy prevents users from adding or personalizing extensions.

View File

@ -0,0 +1 @@
By default, Microsoft Edge allows full-screen mode, which shows only the web content and hides the Microsoft Edge UI. When allowing full-screen mode, users and extensions must have the proper permissions. Disabling this policy prevents full-screen mode in Microsoft Edge.

View File

@ -0,0 +1 @@
By default, Microsoft Edge allows InPrivate browsing, and after closing all InPrivate tabs, Microsoft Edge deletes the browsing data from the device. Disabling this policy prevents InPrivate web browsing.

View File

@ -0,0 +1 @@
By default, during navigation, Microsoft Edge checks the Microsoft Compatibility List for websites with known compatibility issues. If found, users are prompted to use Internet Explorer, where the site loads and displays properly. Periodically during browser navigation, Microsoft Edge downloads the latest version of the list and applies the updates. You can view the compatibility list at about:compat. Disable this policy to ignore the compatibility list.

View File

@ -0,0 +1 @@
By default, Microsoft Edge pre-launches during Windows startup, when the system is idle, and each time Microsoft Edge closes. When Microsoft Edge pre-launches, it runs as a background process waiting to be launched by the user. Pre-launching helps the performance of Microsoft Edge and minimizes the amount of time required to start up Microsoft Edge. Disabling this policy prevents Microsoft Edge from pre-launching.

View File

@ -0,0 +1 @@
By default, Microsoft Edge allows users to print web content. Disabling this policy prevents users from printing web content.

View File

@ -0,0 +1 @@
By default, Microsoft Edge saves the browsing history of visited websites and shows them in the History pane. Disable this policy if you want Microsoft Edge to stop saving the browsing history. If browsing history existed before disabling this policy, the previous browsing history remains in the History pane. Disabling this policy does not stop roaming of existing browsing history or browsing history from other devices.

View File

@ -0,0 +1 @@
By default, users can add new search engines or change the default search engine, in Settings, in Microsoft Edge. Disabling this policy prevents users from customizing the search engine in Microsoft Edge.

View File

@ -0,0 +1 @@
By default, Microsoft Edge allows sideloading, which installs and runs unverified extensions. Disabling this policy prevents sideloading, but does not prevent sideloading of extensions using Add-AppxPackage via PowerShell. You can only install extensions through Microsoft store (including a store for business), enterprise storefront (such as Company Portal) or PowerShell (using Add-AppxPackage).

Some files were not shown because too many files have changed in this diff Show More