ProcessIsolationEnabled

Enable Process Isolation

Supported versions

  • Windows: ≥ 151
  • macOS: Not supported
  • Android: Not supported
  • iOS: Not supported

Description

This policy controls Process Isolation in Microsoft Edge.

When this policy is enabled, Microsoft Edge uses Process Isolation to help improve browser security by preventing authorized applications on the device from reading or modifying the contents of Microsoft Edge's running processes. This also helps prevent other applications from accessing encrypted data used by Microsoft Edge.

Enabling Process Isolation may cause incompatibilities with third party applications that rely on being able to inject or tamper with Microsoft Edge's processes, such as antivirus, screen reader or window manager applications.

Setting the policy to Enabled turns on process isolation in Microsoft Edge.

Setting the policy to Disabled turns off process isolation in Microsoft Edge.

If this policy is unset, Microsoft Edge will follow the default rollout process for the Process Isolation feature, which means that the feature will be gradually rolled out to an increasing number of users.

Note: This policy is applied when Microsoft Edge starts. If the policy is changed while Microsoft Edge is running, the new setting will take effect on the next restart.

Supported features

  • Can be mandatory: Yes
  • Can be recommended: No
  • Dynamic Policy Refresh: No - Requires browser restart
  • Per Profile: No
  • Applies to a profile that is signed in with a Microsoft account: Yes

Data type

  • Boolean

Windows information and settings

Group Policy (ADMX) info

  • GP unique name: ProcessIsolationEnabled
  • GP name: Enable Process Isolation
  • GP path (Mandatory): Administrative Templates/Microsoft Edge
  • GP path (Recommended): N/A
  • GP ADMX file name: MSEdge.admx

Example value

Enabled

Registry settings

  • Path (Mandatory): SOFTWARE\Policies\Microsoft\Edge
  • Path (Recommended): N/A
  • Value name: ProcessIsolationEnabled
  • Value type: REG_DWORD

Example registry value

0x00000001

See also