NativeMessagingAllowlist

Control which native messaging hosts users can use

Supported versions

• On Windows and macOS since 77 or later

Description

Setting the policy specifies which native messaging hosts aren't subject to the deny list. A deny list value of * means all native messaging hosts are denied unless they're explicitly allowed.

All native messaging hosts are allowed by default. However, if a native messaging host is denied by policy, the admin can use the allow list to change that policy.

Supported features

• Can be mandatory: Yes
• Can be recommended: No
• Dynamic Policy Refresh: Yes
• Per Profile: Yes
• Applies to a profile that is signed in with a Microsoft account: No

Data type

• List of strings

Windows information and settings

Group Policy (ADMX) info

• GP unique name: NativeMessagingAllowlist
• GP name: Control which native messaging hosts users can use
• GP path (Mandatory): Administrative Templates/Microsoft Edge/Native Messaging
• GP path (Recommended): N/A
• GP ADMX file name: MSEdge.admx

Example value

com.native.messaging.host.name1

com.native.messaging.host.name2

Registry settings

• Path (Mandatory): SOFTWARE\Policies\Microsoft\Edge\NativeMessagingAllowlist
• Path (Recommended): N/A
• Value name: 1, 2, 3, ...
• Value type: List of REG_SZ

Example registry value

SOFTWARE\Policies\Microsoft\Edge\NativeMessagingAllowlist\1 =

com.native.messaging.host.name1

SOFTWARE\Policies\Microsoft\Edge\NativeMessagingAllowlist\2 =

com.native.messaging.host.name2

Mac information and settings

• Preference Key name: NativeMessagingAllowlist
• Example value:

<array>
  <string>com.native.messaging.host.name1</string>
  <string>com.native.messaging.host.name2</string>
</array>

See also

• Microsoft Edge - Policies