Düzenle

Aracılığıyla paylaş


Policy CSP - Browser

Note

These settings are for the previous version of Microsoft Edge (version 45 and earlier) and are deprecated. These settings will be removed in a future Windows release. Microsoft recommends updating your version of Microsoft Edge to version 77 or later and use the ADMX Ingestion function for management. Learn more about how to Configure Microsoft Edge using Mobile Device Management.

AllowAddressBarDropdown

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1703 [10.0.15063] and later
./User/Vendor/MSFT/Policy/Config/Browser/AllowAddressBarDropdown
./Device/Vendor/MSFT/Policy/Config/Browser/AllowAddressBarDropdown

This policy setting lets you decide whether the Address bar drop-down functionality is available in Microsoft Edge. We recommend disabling this setting if you want to minimize network connections from Microsoft Edge to Microsoft services.

Note

Disabling this setting turns off the Address bar drop-down functionality. Therefore, because search suggestions are shown in the drop-down, this setting takes precedence over the "Configure search suggestions in Address bar" setting.

  • If you enable or don't configure this setting, employees can see the Address bar drop-down functionality in Microsoft Edge.

  • If you disable this setting, employees won't see the Address bar drop-down functionality in Microsoft Edge. This setting also disables the user-defined setting, "Show search and site suggestions as I type".

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 1

Allowed values:

Value Description
0 Prevented/not allowed. Hide the Address bar drop-down functionality and disable the Show search and site suggestions as I type toggle in Settings.
1 (Default) Allowed. Show the Address bar drop-down list and make it available.

Group policy mapping:

Name Value
Name AllowAddressBarDropdown
Friendly Name Allow Address bar drop-down list suggestions
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\ServiceUI
Registry Value Name ShowOneBox
ADMX File Name MicrosoftEdge.admx

AllowAutofill

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1507 [10.0.10240] and later
./User/Vendor/MSFT/Policy/Config/Browser/AllowAutofill
./Device/Vendor/MSFT/Policy/Config/Browser/AllowAutofill

This policy setting lets you decide whether employees can use Autofill to automatically fill in form fields while using Microsoft Edge. By default, employees can choose whether to use Autofill.

  • If you enable this setting, employees can use Autofill to automatically fill in forms while using Microsoft Edge.

  • If you disable this setting, employees can't use Autofill to automatically fill in forms while using Microsoft Edge.

  • If you don't configure this setting, employees can choose whether to use Autofill to automatically fill in forms while using Microsoft Edge.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 0

Allowed values:

Value Description
0 (Default) Prevented/Not allowed.
1 Allowed.

Group policy mapping:

Name Value
Name AllowAutofill
Friendly Name Configure Autofill
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\Main
Registry Value Name Use FormSuggest
ADMX File Name MicrosoftEdge.admx

Verify: To verify AllowAutofill is set to 0 (not allowed):

  1. Open Microsoft Edge.
  2. In the upper-right corner of the browser, click .
  3. Click Settings in the dropdown list, and select View Advanced Settings.
  4. Verify the setting Save form entries is grayed out.

AllowBrowser

Note

This policy is deprecated and may be removed in a future release.

Scope Editions Applicable OS
✅ Device
✅ User
Not applicable ✅ Windows 10, version 1507 [10.0.10240] and later
./User/Vendor/MSFT/Policy/Config/Browser/AllowBrowser
./Device/Vendor/MSFT/Policy/Config/Browser/AllowBrowser

This policy is deprecated.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 1

Allowed values:

Value Description
0 Not allowed.
1 (Default) Allowed.

AllowConfigurationUpdateForBooksLibrary

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1803 [10.0.17134] and later
./User/Vendor/MSFT/Policy/Config/Browser/AllowConfigurationUpdateForBooksLibrary
./Device/Vendor/MSFT/Policy/Config/Browser/AllowConfigurationUpdateForBooksLibrary

This policy setting lets you decide whether Microsoft Edge can automatically update the configuration data for the Books Library.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 1

Allowed values:

Value Description
0 Prevented/Not allowed.
1 (Default) Allowed. Microsoft Edge updates the configuration data for the Books Library automatically.

AllowCookies

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1507 [10.0.10240] and later
./User/Vendor/MSFT/Policy/Config/Browser/AllowCookies
./Device/Vendor/MSFT/Policy/Config/Browser/AllowCookies

This setting lets you configure how to work with cookies.

  • If you enable this setting, you must also decide whether to:

Allow all cookies (default): Allows all cookies from all websites.

Block all cookies: Blocks all cookies from all websites.

Block only 3rd-party cookies: Blocks only cookies from 3rd-party websites.

  • If you disable or don't configure this setting, all cookies are allowed from all sites.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 2

Allowed values:

Value Description
0 Block all cookies from all sites.
1 Block only cookies from third party websites.
2 (Default) Allow all cookies from all sites.

Group policy mapping:

Name Value
Name Cookies
Friendly Name Configure cookies
Element Name Configure Cookies.
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\Main
ADMX File Name MicrosoftEdge.admx

Verify: To verify AllowCookies is set to 0 (not allowed):

  1. Open Microsoft Edge.
  2. In the upper-right corner of the browser, click .
  3. Click Settings in the dropdown list, and select View Advanced Settings.
  4. Verify the setting Cookies is disabled.

AllowDeveloperTools

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1511 [10.0.10586] and later
./User/Vendor/MSFT/Policy/Config/Browser/AllowDeveloperTools
./Device/Vendor/MSFT/Policy/Config/Browser/AllowDeveloperTools

This policy setting lets you decide whether F12 Developer Tools are available on Microsoft Edge.

  • If you enable or don't configure this setting, the F12 Developer Tools are available in Microsoft Edge.

  • If you disable this setting, the F12 Developer Tools aren't available in Microsoft Edge.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 1

Allowed values:

Value Description
0 Prevented/Not allowed.
1 (Default) Allowed.

Group policy mapping:

Name Value
Name AllowDeveloperTools
Friendly Name Allow Developer Tools
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\F12
Registry Value Name AllowDeveloperTools
ADMX File Name MicrosoftEdge.admx

AllowDoNotTrack

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1507 [10.0.10240] and later
./User/Vendor/MSFT/Policy/Config/Browser/AllowDoNotTrack
./Device/Vendor/MSFT/Policy/Config/Browser/AllowDoNotTrack

This policy setting lets you decide whether employees can send Do Not Track requests to websites that ask for tracking info. By default, Do Not Track requests aren't sent, but employees can choose to turn on and send requests.

  • If you enable this setting, Do Not Tracker requests are always sent to websites asking for tracking info.

  • If you disable this setting, Do Not Track requests are never sent to websites asking for tracking info.

  • If you don't configure this setting, employees can choose whether to send Do Not Track requests to websites asking for tracking info.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 0

Allowed values:

Value Description
0 (Default) Never send tracking information.
1 Send tracking information.

Group policy mapping:

Name Value
Name AllowDoNotTrack
Friendly Name Configure Do Not Track
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\Main
Registry Value Name DoNotTrack
ADMX File Name MicrosoftEdge.admx

Verify: To verify AllowDoNotTrack is set to 0 (not allowed):

  1. Open Microsoft Edge.
  2. In the upper-right corner of the browser, click .
  3. Click Settings in the dropdown list, and select View Advanced Settings.
  4. Verify the setting Send Do Not Track requests is grayed out.

AllowExtensions

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1703 [10.0.15063] and later
./User/Vendor/MSFT/Policy/Config/Browser/AllowExtensions
./Device/Vendor/MSFT/Policy/Config/Browser/AllowExtensions

This setting lets you decide whether employees can load extensions in Microsoft Edge.

  • If you enable or don't configure this setting, employees can use Microsoft Edge Extensions.

  • If you disable this setting, employees can't use Microsoft Edge Extensions.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 1

Allowed values:

Value Description
0 Prevented/Not allowed.
1 (Default) Allowed.

Group policy mapping:

Name Value
Name AllowExtensions
Friendly Name Allow Extensions
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\Extensions
Registry Value Name ExtensionsEnabled
ADMX File Name MicrosoftEdge.admx

AllowFlash

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1703 [10.0.15063] and later
./User/Vendor/MSFT/Policy/Config/Browser/AllowFlash
./Device/Vendor/MSFT/Policy/Config/Browser/AllowFlash

This setting lets you decide whether employees can run Adobe Flash in Microsoft Edge.

  • If you enable or don't configure this setting, employees can use Adobe Flash.

  • If you disable this setting, employees can't use Adobe Flash.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 1

Allowed values:

Value Description
0 Prevented/Not allowed.
1 (Default) Allowed.

Group policy mapping:

Name Value
Name AllowFlash
Friendly Name Allow Adobe Flash
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\Addons
Registry Value Name FlashPlayerEnabled
ADMX File Name MicrosoftEdge.admx

AllowFlashClickToRun

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1703 [10.0.15063] and later
./User/Vendor/MSFT/Policy/Config/Browser/AllowFlashClickToRun
./Device/Vendor/MSFT/Policy/Config/Browser/AllowFlashClickToRun

If you enable or don't configure the Adobe Flash Click-to-Run setting, Microsoft Edge will require a user to click the Click-to-Run button, to click the content, or for the site to appear on the auto-allowed list, before loading and running the content.

Sites get onto the auto-allowed list based on user feedback, specifically by how often the content is allowed to load and run.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 1

Allowed values:

Value Description
0 Load and run Adobe Flash content automatically.
1 (Default) Does not load or run Adobe Flash content automatically. Requires action from the user.

Group policy mapping:

Name Value
Name AllowFlashClickToRun
Friendly Name Configure the Adobe Flash Click-to-Run setting
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\Security
Registry Value Name FlashClickToRunMode
ADMX File Name MicrosoftEdge.admx

AllowFullScreenMode

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1809 [10.0.17763] and later
./User/Vendor/MSFT/Policy/Config/Browser/AllowFullScreenMode
./Device/Vendor/MSFT/Policy/Config/Browser/AllowFullScreenMode

With this policy, you can specify whether to allow full-screen mode, which shows only the web content and hides the Microsoft Edge UI.

If enabled or not configured, full-screen mode is available for use in Microsoft Edge. Your users and extensions must have the proper permissions.

If disabled, full-screen mode is unavailable for use in Microsoft Edge.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 1

Allowed values:

Value Description
0 Prevented/Not allowed.
1 (Default) Allowed.

Group policy mapping:

Name Value
Name AllowFullScreenMode
Friendly Name Allow FullScreen Mode
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\Main
Registry Value Name AllowFullScreenMode
ADMX File Name MicrosoftEdge.admx

AllowInPrivate

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1511 [10.0.10586] and later
./User/Vendor/MSFT/Policy/Config/Browser/AllowInPrivate
./Device/Vendor/MSFT/Policy/Config/Browser/AllowInPrivate

This policy setting lets you decide whether employees can browse using InPrivate website browsing.

  • If you enable or don't configure this setting, employees can use InPrivate website browsing.

  • If you disable this setting, employees can't use InPrivate website browsing.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 1

Allowed values:

Value Description
0 Prevented/Not allowed.
1 (Default) Allowed.

Group policy mapping:

Name Value
Name AllowInPrivate
Friendly Name Allow InPrivate browsing
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\Main
Registry Value Name AllowInPrivate
ADMX File Name MicrosoftEdge.admx

AllowMicrosoftCompatibilityList

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1607 [10.0.14393] and later
./User/Vendor/MSFT/Policy/Config/Browser/AllowMicrosoftCompatibilityList
./Device/Vendor/MSFT/Policy/Config/Browser/AllowMicrosoftCompatibilityList

This policy setting lets you decide whether to use the Microsoft Compatibility List (a Microsoft-provided list that helps sites with known compatibility issues to display properly) in Microsoft Edge. By default, the Microsoft Compatibility List is enabled and can be viewed by visiting about:compat.

  • If you enable or don't configure this setting, Microsoft Edge periodically downloads the latest version of the list from Microsoft, applying the updates during browser navigation. Visiting any site on the Microsoft Compatibility List prompts the employee to use Internet Explorer 11, where the site is automatically rendered as though it's in whatever version of IE is necessary for it to appear properly.

  • If you disable this setting, the Microsoft Compatibility List isn't used during browser navigation.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 1

Allowed values:

Value Description
0 Prevented/Not allowed.
1 (Default) Allowed.

Group policy mapping:

Name Value
Name AllowCVList
Friendly Name Allow Microsoft Compatibility List
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\BrowserEmulation
Registry Value Name MSCompatibilityMode
ADMX File Name MicrosoftEdge.admx

AllowPasswordManager

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1511 [10.0.10586] and later
./User/Vendor/MSFT/Policy/Config/Browser/AllowPasswordManager
./Device/Vendor/MSFT/Policy/Config/Browser/AllowPasswordManager

This policy setting lets you decide whether employees can save their passwords locally, using Password Manager. By default, Password Manager is turned on.

  • If you enable this setting, employees can use Password Manager to save their passwords locally.

  • If you disable this setting, employees can't use Password Manager to save their passwords locally.

  • If you don't configure this setting, employees can choose whether to use Password Manager to save their passwords locally.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 1

Allowed values:

Value Description
0 Not allowed.
1 (Default) Allowed.

Group policy mapping:

Name Value
Name AllowPasswordManager
Friendly Name Configure Password Manager
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\Main
Registry Value Name FormSuggest Passwords
ADMX File Name MicrosoftEdge.admx

Verify: To verify AllowPasswordManager is set to 0 (not allowed):

  1. Click or tap More (…) and select Settings > View Advanced settings.
  2. Verify the settings Save Password is disabled.

AllowPopups

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1507 [10.0.10240] and later
./User/Vendor/MSFT/Policy/Config/Browser/AllowPopups
./Device/Vendor/MSFT/Policy/Config/Browser/AllowPopups

This policy setting lets you decide whether to turn on Pop-up Blocker. By default, Pop-up Blocker is turned on.

  • If you enable this setting, Pop-up Blocker is turned on, stopping pop-up windows from appearing.

  • If you disable this setting, Pop-up Blocker is turned off, letting pop-ups windows appear.

  • If you don't configure this setting, employees can choose whether to use Pop-up Blocker.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 0

Allowed values:

Value Description
0 (Default) Turn off Pop-up Blocker letting pop-up windows open.
1 Turn on Pop-up Blocker stopping pop-up windows from opening.

Group policy mapping:

Name Value
Name AllowPopups
Friendly Name Configure Pop-up Blocker
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\Main
Registry Value Name AllowPopups
ADMX File Name MicrosoftEdge.admx

Verify: To verify AllowPopups is set to 0 (not allowed):

  1. Click or tap More (…) and select Settings > View Advanced settings.
  2. Verify whether the setting Block pop-ups is disabled.

AllowPrelaunch

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1809 [10.0.17763] and later
./User/Vendor/MSFT/Policy/Config/Browser/AllowPrelaunch
./Device/Vendor/MSFT/Policy/Config/Browser/AllowPrelaunch

This policy setting lets you decide whether Microsoft Edge can pre-launch during Windows sign in, when the system is idle, and each time Microsoft Edge is closed. By default this setting is to allow pre-launch.

If you allow pre-launch, disable, or don't configure this policy setting, Microsoft Edge pre-launches during Windows sign in, when the system is idle, and each time Microsoft Edge is closed; minimizing the amount of time required to start up Microsoft Edge.

If you prevent pre-launch, Microsoft Edge won't pre-launch during Windows sign in, when the system is idle, or each time Microsoft Edge is closed.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 1

Allowed values:

Value Description
0 Prevented/Not allowed.
1 (Default) Allowed.

Group policy mapping:

Name Value
Name AllowPrelaunch
Friendly Name Allow Microsoft Edge to pre-launch at Windows startup, when the system is idle, and each time Microsoft Edge is closed
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\Main
ADMX File Name MicrosoftEdge.admx

AllowPrinting

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1809 [10.0.17763] and later
./User/Vendor/MSFT/Policy/Config/Browser/AllowPrinting
./Device/Vendor/MSFT/Policy/Config/Browser/AllowPrinting

With this policy, you can restrict whether printing web content in Microsoft Edge is allowed.

If enabled, printing is allowed.

If disabled, printing isn't allowed.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 1

Allowed values:

Value Description
0 Prevented/Not allowed.
1 (Default) Allowed.

Group policy mapping:

Name Value
Name AllowPrinting
Friendly Name Allow printing
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\Main
Registry Value Name AllowPrinting
ADMX File Name MicrosoftEdge.admx

AllowSavingHistory

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1809 [10.0.17763] and later
./User/Vendor/MSFT/Policy/Config/Browser/AllowSavingHistory
./Device/Vendor/MSFT/Policy/Config/Browser/AllowSavingHistory

Microsoft Edge saves your user's browsing history, which is made up of info about the websites they visit, on their devices.

If enabled or not configured, the browsing history is saved and visible in the History pane.

If disabled, the browsing history stops saving and isn't visible in the History pane. If browsing history exists before this policy was disabled, the previous browsing history remains visible in the History pane. This policy, when disabled, doesn't stop roaming of existing history or history coming from other roamed devices.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 1

Allowed values:

Value Description
0 Prevented/Not allowed.
1 (Default) Allowed.

Group policy mapping:

Name Value
Name AllowSavingHistory
Friendly Name Allow Saving History
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\Main
Registry Value Name AllowSavingHistory
ADMX File Name MicrosoftEdge.admx

AllowSearchEngineCustomization

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1703 [10.0.15063] and later
./User/Vendor/MSFT/Policy/Config/Browser/AllowSearchEngineCustomization
./Device/Vendor/MSFT/Policy/Config/Browser/AllowSearchEngineCustomization

This policy setting lets you decide whether users can change their search engine.

  • If you disable this setting, users can't add new search engines or change the default used in the address bar.

Important.

This setting can only be used with domain-joined or MDM-enrolled devices. For more info, see the Microsoft browser extension policy (aka.ms/browserpolicy).

  • If you enable or don't configure this policy, users can add new search engines and change the default used in the address bar from within Microsoft Edge Settings.

  • If you disable this setting, users can't add search engines or change the default used in the address bar.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 1

Allowed values:

Value Description
0 Prevented/Not allowed.
1 (Default) Allowed.

Group policy mapping:

Name Value
Name AllowSearchEngineCustomization
Friendly Name Allow search engine customization
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy
Registry Value Name AllowSearchEngineCustomization
ADMX File Name MicrosoftEdge.admx

AllowSearchSuggestionsinAddressBar

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1507 [10.0.10240] and later
./User/Vendor/MSFT/Policy/Config/Browser/AllowSearchSuggestionsinAddressBar
./Device/Vendor/MSFT/Policy/Config/Browser/AllowSearchSuggestionsinAddressBar

This policy setting lets you decide whether search suggestions appear in the Address bar of Microsoft Edge. By default, employees can choose whether search suggestions appear in the Address bar of Microsoft Edge.

  • If you enable this setting, employees can see search suggestions in the Address bar of Microsoft Edge.

  • If you disable this setting, employees can't see search suggestions in the Address bar of Microsoft Edge.

  • If you don't configure this setting, employees can choose whether search suggestions appear in the Address bar of Microsoft Edge.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 1

Allowed values:

Value Description
0 Prevented/Not allowed. Hide the search suggestions.
1 (Default) Allowed. Show the search suggestions.

Group policy mapping:

Name Value
Name AllowSearchSuggestionsinAddressBar
Friendly Name Configure search suggestions in Address bar
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\SearchScopes
Registry Value Name ShowSearchSuggestionsGlobal
ADMX File Name MicrosoftEdge.admx

AllowSideloadingOfExtensions

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1809 [10.0.17763] and later
./User/Vendor/MSFT/Policy/Config/Browser/AllowSideloadingOfExtensions
./Device/Vendor/MSFT/Policy/Config/Browser/AllowSideloadingOfExtensions

Sideloading installs and runs unverified extensions in Microsoft Edge. With this policy, you can specify whether unverified extensions can be sideloaded in Microsoft Edge.

If enabled or not configured, sideloading of unverified extensions in Microsoft Edge is allowed.

If disabled, sideloading of unverified extensions in Microsoft Edge isn't allowed. Extensions can be installed only through Microsoft store (including a store for business), enterprise storefront (such as Company Portal) or PowerShell (using Add-AppxPackage). When disabled, this policy doesn't prevent sideloading of extensions using Add-AppxPackage via PowerShell. To prevent this, in Group Policy Editor, enable Allows development of Windows Store apps and installing them from an integrated development environment (IDE), which is located at:

Computer Configuration > Administrative Templates > Windows Components > App Package Deployment.

Supported versions: Microsoft Edge on Windows 10, version 1809 Default setting: Disabled or not configured.

Related policies:

  • Allows development of Windows Store apps and installing them from an integrated development environment (IDE)
  • Allow all trusted apps to install

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 1

Allowed values:

Value Description
0 Prevented/Not allowed. Disabling doesn't prevent sideloading of extensions using Add-AppxPackage via Powershell. To prevent this, set the ApplicationManagement/AllowDeveloperUnlock policy to 1 (enabled).
1 (Default) Allowed.

Group policy mapping:

Name Value
Name AllowSideloadingOfExtensions
Friendly Name Allow Sideloading of extension
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\Extensions
Registry Value Name AllowSideloadingOfExtensions
ADMX File Name MicrosoftEdge.admx

AllowSmartScreen

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1507 [10.0.10240] and later
./User/Vendor/MSFT/Policy/Config/Browser/AllowSmartScreen
./Device/Vendor/MSFT/Policy/Config/Browser/AllowSmartScreen

This policy setting lets you configure whether to turn on Windows Defender SmartScreen. Windows Defender SmartScreen provides warning messages to help protect your employees from potential phishing scams and malicious software. By default, Windows Defender SmartScreen is turned on.

  • If you enable this setting, Windows Defender SmartScreen is turned on and employees can't turn it off.

  • If you disable this setting, Windows Defender SmartScreen is turned off and employees can't turn it on.

  • If you don't configure this setting, employees can choose whether to use Windows Defender SmartScreen.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 1

Allowed values:

Value Description
0 Turned off. Don't protect users from potential threats and prevent users from turning it on.
1 (Default) Turned on. Protect users from potential threats and prevent users from turning it off.

Group policy mapping:

Name Value
Name AllowSmartScreen
Friendly Name Configure Windows Defender SmartScreen
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\PhishingFilter
Registry Value Name EnabledV9
ADMX File Name MicrosoftEdge.admx

Verify: To verify AllowSmartScreen is set to 0 (not allowed):

  1. Click or tap More (…) and select Settings > View Advanced settings.
  2. Verify that the setting Help protect me from malicious sites and download with Windows Defender SmartScreen is disabled.

AllowTabPreloading

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1809 [10.0.17763] and later
./User/Vendor/MSFT/Policy/Config/Browser/AllowTabPreloading
./Device/Vendor/MSFT/Policy/Config/Browser/AllowTabPreloading

This policy setting lets you decide whether Microsoft Edge can load the Start and New Tab page during Windows sign in and each time Microsoft Edge is closed. By default this setting is to allow preloading.

If you allow preloading, disable, or don't configure this policy setting, Microsoft Edge loads the Start and New Tab page during Windows sign in and each time Microsoft Edge is closed; minimizing the amount of time required to start up Microsoft Edge and to start a new tab.

If you prevent preloading, Microsoft Edge won't load the Start or New Tab page during Windows sign in and each time Microsoft Edge is closed.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 1

Allowed values:

Value Description
0 Prevented/Not allowed.
1 (Default) Allowed. Preload Start and New tab pages.

Group policy mapping:

Name Value
Name AllowTabPreloading
Friendly Name Allow Microsoft Edge to start and load the Start and New Tab page at Windows startup and each time Microsoft Edge is closed
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\TabPreloader
ADMX File Name MicrosoftEdge.admx

AllowWebContentOnNewTabPage

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1809 [10.0.17763] and later
./User/Vendor/MSFT/Policy/Config/Browser/AllowWebContentOnNewTabPage
./Device/Vendor/MSFT/Policy/Config/Browser/AllowWebContentOnNewTabPage

This policy setting lets you configure what appears when Microsoft Edge opens a new tab. By default, Microsoft Edge opens the New Tab page.

  • If you enable this setting, Microsoft Edge opens a new tab with the New Tab page.

  • If you disable this setting, Microsoft Edge opens a new tab with a blank page. If you use this setting, employees can't change it.

  • If you don't configure this setting, employees can choose how new tabs appears.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 1

Allowed values:

Value Description
0 Load a blank page instead of the default New tab page and prevent users from changing it.
1 (Default) Load the default New tab page.

Group policy mapping:

Name Value
Name AllowWebContentOnNewTabPage
Friendly Name Allow web content on New Tab page
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\ServiceUI
Registry Value Name AllowWebContentOnNewTabPage
ADMX File Name MicrosoftEdge.admx

AlwaysEnableBooksLibrary

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./User/Vendor/MSFT/Policy/Config/Browser/AlwaysEnableBooksLibrary
./Device/Vendor/MSFT/Policy/Config/Browser/AlwaysEnableBooksLibrary

This policy setting helps you to decide whether to make the Books tab visible, regardless of a device's country or region setting, as configured in the Country or region area of Windows settings.

  • If you enable this setting, Microsoft Edge shows the Books Library, regardless of the device's country or region.

  • If you disable or don't configure this setting, Microsoft Edge shows the Books Library only in countries or regions where it's supported.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 0

Allowed values:

Value Description
0 (Default) Show the Books Library only in countries or regions where supported.
1 Show the Books Library, regardless of the device's country or region.

Group policy mapping:

Name Value
Name AlwaysEnableBooksLibrary
Friendly Name Always show the Books Library in Microsoft Edge
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\Main
Registry Value Name AlwaysEnableBooksLibrary
ADMX File Name MicrosoftEdge.admx

ClearBrowsingDataOnExit

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1703 [10.0.15063] and later
./User/Vendor/MSFT/Policy/Config/Browser/ClearBrowsingDataOnExit
./Device/Vendor/MSFT/Policy/Config/Browser/ClearBrowsingDataOnExit

This policy setting allows the automatic clearing of browsing data when Microsoft Edge closes.

  • If you enable this policy setting, clearing browsing history on exit's turned on.

  • If you disable or don't configure this policy setting, it can be turned on and configured by the employee in the Clear browsing data options under Settings.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 0

Allowed values:

Value Description
0 (Default) Prevented/not allowed. Users can configure the 'Clear browsing data' option in Settings.
1 Allowed. Clear the browsing data upon exit automatically.

Group policy mapping:

Name Value
Name AllowClearingBrowsingDataOnExit
Friendly Name Allow clearing browsing data on exit
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\Privacy
Registry Value Name ClearBrowsingHistoryOnExit
ADMX File Name MicrosoftEdge.admx

Verify: To verify whether browsing data is cleared on exit (ClearBrowsingDataOnExit is set to 1):

  1. Open Microsoft Edge and browse to websites.
  2. Close the Microsoft Edge window.
  3. Open Microsoft Edge and start typing the same URL in address bar.
  4. Verify that it doesn't auto-complete from history.

ConfigureAdditionalSearchEngines

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1703 [10.0.15063] and later
./User/Vendor/MSFT/Policy/Config/Browser/ConfigureAdditionalSearchEngines
./Device/Vendor/MSFT/Policy/Config/Browser/ConfigureAdditionalSearchEngines

This policy setting lets you add up to 5 additional search engines, which can't be removed by your employees, but can be made a personal default engine. This setting doesn't set the default search engine. For that, you must use the "Set default search engine" setting.

Important.

This setting can only be used with domain-joined or MDM-enrolled devices. For more info, see the Microsoft browser extension policy (aka.ms/browserpolicy).

  • If you enable this setting, you can add up to 5 additional search engines. For each additional engine, you must also add a link to your OpenSearch XML file, including at least the short name and https: URL of the search engine. For more info about creating the OpenSearch XML file, see the Understanding OpenSearch Standards (https://msdn.microsoft.com/library/dd163546.aspx) topic. Use this format to specify the link(s) you wish to add: <https://fabrikam.com/opensearch.xml> <https://www.contoso.com/opensearch.xml>

  • If you disable this setting, any added search engines are removed from your employee's devices.

  • If you don't configure this setting, the search engine list is set to what's specified in App settings.

Description framework properties:

Property name Property value
Format chr (string)
Access Type Add, Delete, Get, Replace

Group policy mapping:

Name Value
Name ConfigureAdditionalSearchEngines
Friendly Name Configure additional search engines
Element Name Use this format to specify the link(s) you wish to add: <https://fabrikam.com/opensearch.xml> <https://www.contoso.com/opensearch.xml>
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\OpenSearch
ADMX File Name MicrosoftEdge.admx

ConfigureFavoritesBar

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1809 [10.0.17763] and later
./User/Vendor/MSFT/Policy/Config/Browser/ConfigureFavoritesBar
./Device/Vendor/MSFT/Policy/Config/Browser/ConfigureFavoritesBar

The favorites bar shows your user's links to sites they've added to it. With this policy, you can specify whether to set the favorites bar to always be visible or hidden on any page.

If enabled, favorites bar is always visible on any page, and the favorites bar toggle in Settings sets to On, but disabled preventing your users from making changes. An error message also shows at the top of the Settings pane indicating that your organization manages some settings. The show bar/hide bar option is hidden from the context menu.

If disabled, the favorites bar is hidden, and the favorites bar toggle resets to Off, but disabled preventing your users from making changes. An error message also shows at the top of the Settings pane indicating that your organization manages some settings.

If not configured, the favorites bar is hidden but is visible on the Start and New Tab pages, and the favorites bar toggle in Settings sets to Off but is enabled allowing the user to make changes.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 0

Allowed values:

Value Description
0 (Default) Hide the favorites bar on all pages. Also, the favorites bar toggle, in Settings, is set to Off and disabled preventing users from making changes. Microsoft Edge also hides the “show bar/hide bar” option in the context menu.
1 Show the favorites bar on all pages. Also, the favorites bar toggle, in Settings, is set to On and disabled preventing users from making changes. Microsoft Edge also hides the “show bar/hide bar” option in the context menu.

Group policy mapping:

Name Value
Name ConfigureFavoritesBar
Friendly Name Configure Favorites Bar
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\Main
Registry Value Name ConfigureFavoritesBar
ADMX File Name MicrosoftEdge.admx

ConfigureHomeButton

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1809 [10.0.17763] and later
./User/Vendor/MSFT/Policy/Config/Browser/ConfigureHomeButton
./Device/Vendor/MSFT/Policy/Config/Browser/ConfigureHomeButton

The Home button loads either the default Start page, the New tab page, or a URL defined in the Set Home Button URL policy.

By default, this policy is disabled or not configured and clicking the home button loads the default Start page.

When enabled, the home button is locked down preventing your users from making changes in Microsoft Edge's UI settings. To let your users change the Microsoft Edge UI settings, enable the Unlock Home Button policy.

If Enabled AND:

  • Show home button & set to Start page is selected, clicking the home button loads the Start page.

  • Show home button & set to New tab page is selected, clicking the home button loads a New tab page.

  • Show home button & set a specific page is selected, clicking the home button loads the URL specified in the Set Home Button URL policy.

  • Hide home button is selected, the home button is hidden in Microsoft Edge.

Default setting: Disabled or not configured.

Related policies:

  • Set Home Button URL
  • Unlock Home Button.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 0

Allowed values:

Value Description
0 (Default) Show home button and load the Start page.
1 Show home button and load the New tab page.
2 Show home button and load the custom URL defined in the Set Home Button URL policy.
3 Hide home button.

Group policy mapping:

Name Value
Name ConfigureHomeButton
Friendly Name Configure Home Button
Element Name Configure the Home Button.
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\Internet Settings
ADMX File Name MicrosoftEdge.admx

Tip

If you want to make changes to this policy:

  1. Set UnlockHomeButton to 1 (enabled).
  2. Make changes to ConfigureHomeButton or SetHomeButtonURL policy.
  3. Set UnlockHomeButton 0 (disabled).

ConfigureKioskMode

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1809 [10.0.17763] and later
./User/Vendor/MSFT/Policy/Config/Browser/ConfigureKioskMode
./Device/Vendor/MSFT/Policy/Config/Browser/ConfigureKioskMode

Configure how Microsoft Edge behaves when it's running in kiosk mode with assigned access, either as a single app or as one of multiple apps running on the kiosk device. You can control whether Microsoft Edge runs InPrivate full screen, InPrivate multi-tab with limited functionality, or normal Microsoft Edge.

You need to configure Microsoft Edge in assigned access for this policy to take effect; otherwise, these settings are ignored. To learn more about assigned access and kiosk configuration, see "Configure kiosk and shared devices running Windows desktop editions" (https://aka.ms/E489vw).

If enabled and set to 0 (Default or not configured):

  • If it's a single app, it runs InPrivate full screen for digital signage or interactive displays.

  • If it's one of many apps, Microsoft Edge runs as normal.

If enabled and set to 1:

  • If it's a single app, it runs a limited multi-tab version of InPrivate and is the only app available for public browsing. Users can't minimize, close, or open windows or customize Microsoft Edge, but can clear browsing data and downloads and restart by clicking "End session". You can configure Microsoft Edge to restart after a period of inactivity by using the "Configure kiosk reset after idle timeout" policy.

  • If it's one of many apps, it runs in a limited multi-tab version of InPrivate for public browsing with other apps. Users can minimize, close, and open multiple InPrivate windows, but they can't customize Microsoft Edge.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 0

Allowed values:

Value Description
1 Enable.
0 (Default) Disable.

Group policy mapping:

Name Value
Name ConfigureKioskMode
Friendly Name Configure kiosk mode
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\KioskMode
ADMX File Name MicrosoftEdge.admx

ConfigureKioskResetAfterIdleTimeout

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1809 [10.0.17763] and later
./User/Vendor/MSFT/Policy/Config/Browser/ConfigureKioskResetAfterIdleTimeout
./Device/Vendor/MSFT/Policy/Config/Browser/ConfigureKioskResetAfterIdleTimeout

You can configure Microsoft Edge to reset to the configured start experience after a specified amount of idle time. The reset timer begins after the last user interaction. Resetting to the configured start experience deletes the current user's browsing data.

If enabled, you can set the idle time in minutes (0-1440). You must set the Configure kiosk mode policy to 1 and configure Microsoft Edge in assigned access as a single app for this policy to work. Once the idle time meets the time specified, a confirmation message prompts the user to continue, and if no user action, Microsoft Edge resets after 30 seconds.

If you set this policy to 0, Microsoft Edge doesn't use an idle timer.

If disabled or not configured, the default value is 5 minutes.

If you don't configure Microsoft Edge in assigned access, then this policy doesn't take effect.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Allowed Values Range: [0-1440]
Default Value 5
Dependency [Browser_ConfigureKioskResetAfterIdleTimeout_DependencyGroup] Dependency Type: DependsOn
Dependency URI: Device/Vendor/MSFT/Policy/Config/Browser/ConfigureKioskMode
Dependency Allowed Value: [1]
Dependency Allowed Value Type: Range

Group policy mapping:

Name Value
Name ConfigureKioskResetAfterIdleTimeout
Friendly Name Configure kiosk reset after idle timeout
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\KioskMode
ADMX File Name MicrosoftEdge.admx

ConfigureOpenMicrosoftEdgeWith

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1809 [10.0.17763] and later
./User/Vendor/MSFT/Policy/Config/Browser/ConfigureOpenMicrosoftEdgeWith
./Device/Vendor/MSFT/Policy/Config/Browser/ConfigureOpenMicrosoftEdgeWith

You can configure Microsoft Edge to lock down the Start page, preventing users from changing or customizing it.

If enabled, you can choose one of the following options:

  • Start page: the Start page loads ignoring the Configure Start Pages policy.

  • New tab page: the New tab page loads ignoring the Configure Start Pages policy.

  • Previous pages: all tabs the user had open when Microsoft Edge last closed loads ignoring the Configure Start Pages policy.

  • A specific page or pages: the URL(s) specified with Configure Start Pages policy load(s). If selected, you must specify at least one URL in Configure Start Pages; otherwise, this policy is ignored.

When enabled, and you want to make changes, you must first set the Disable Lockdown of Start Pages to not configured, make the changes to the Configure Open Microsoft Edge With policy, and then enable the Disable Lockdown of Start Pages policy.

If disabled or not configured, and you enable the Disable Lockdown of Start Pages policy, your users can change or customize the Start page.

Default setting: A specific page or pages (default) Related policies:

-Disable Lockdown of Start Pages -Configure Start Pages.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 3

Allowed values:

Value Description
0 Load the Start page.
1 Load the New tab page.
2 Load the previous pages.
3 (Default) Load a specific page or pages.

Group policy mapping:

Name Value
Name ConfigureOpenEdgeWith
Friendly Name Configure Open Microsoft Edge With
Element Name Configure Open Microsoft Edge With.
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\Internet Settings
ADMX File Name MicrosoftEdge.admx

Tip

If you want to make changes to this policy:

  1. Set DisableLockdownOfStartPages to 0 (not configured).
  2. Make changes to ConfigureOpenEdgeWith.
  3. Set DisableLockdownOfStartPages to 1 (enabled).

ConfigureTelemetryForMicrosoft365Analytics

Note

This policy is deprecated and may be removed in a future release.

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1809 [10.0.17763] and later
./User/Vendor/MSFT/Policy/Config/Browser/ConfigureTelemetryForMicrosoft365Analytics
./Device/Vendor/MSFT/Policy/Config/Browser/ConfigureTelemetryForMicrosoft365Analytics

You can configure Microsoft Edge to send intranet history only, internet history only, or both to Desktop Analytics for enterprise devices with a configured Commercial ID. If disabled or not configured, Microsoft Edge doesn't send browsing history data to Desktop Analytics.

Supported versions: Microsoft Edge on Windows 10, version 1809 Default setting: Disabled or not configured (no data collected or sent)

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 0

Allowed values:

Value Description
0 (Default) No data collected or sent.
1 Send intranet history only.
2 Send Internet history only.
3 Send both intranet and Internet history.

Group policy mapping:

Name Value
Name ConfigureTelemetryForMicrosoft365Analytics
Friendly Name Configure collection of browsing data for Desktop Analytics
Element Name Configure telemetry collection.
Location Computer and User Configuration
Path WindowsComponents > Data Collection and Preview Builds
Registry Key Name Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection
ADMX File Name MicrosoftEdge.admx

DisableLockdownOfStartPages

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1703 [10.0.15063] and later
./User/Vendor/MSFT/Policy/Config/Browser/DisableLockdownOfStartPages
./Device/Vendor/MSFT/Policy/Config/Browser/DisableLockdownOfStartPages

You can configure Microsoft Edge to disable the lockdown of Start pages allowing users to change or customize their start pages. To do this, you must also enable the Configure Start Pages or Configure Open Microsoft With policy. When enabled, all configured start pages are editable. Any Start page configured using the Configure Start pages policy isn't locked down allowing users to edit their Start pages.

If disabled or not configured, the Start pages configured in the Configure Start Pages policy can't be changed and remain locked down.

Supported devices: Domain-joined or MDM-enrolled.

Related policy:

  • Configure Start Pages
  • Configure Open Microsoft Edge With.

Note

 This policy has no effect when the Browser/HomePages policy isn't configured. 

Important

This setting can be used only with domain-joined or MDM-enrolled devices. For more information, see the Microsoft browser extension policy.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 0

Allowed values:

Value Description
0 (Default) Lock down Start pages configured in either the ConfigureOpenEdgeWith policy and HomePages policy.
1 Unlocked. Users can make changes to all configured start pages.

Group policy mapping:

Name Value
Name DisableLockdownOfStartPages
Friendly Name Disable lockdown of Start pages
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\Internet Settings
ADMX File Name MicrosoftEdge.admx

EnableExtendedBooksTelemetry

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1803 [10.0.17134] and later
./User/Vendor/MSFT/Policy/Config/Browser/EnableExtendedBooksTelemetry
./Device/Vendor/MSFT/Policy/Config/Browser/EnableExtendedBooksTelemetry

This policy setting lets you decide how much data to send to Microsoft about the book you're reading from the Books tab in Microsoft Edge.

  • If you enable this setting, Microsoft Edge sends additional telemetry data, on top of the basic telemetry data, from the Books tab.

  • If you disable or don't configure this setting, Microsoft Edge only sends basic telemetry data, depending on your device configuration.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 0

Allowed values:

Value Description
0 (Default) Gather and send only basic diagnostic data, depending on the device configuration.
1 Gather all diagnostic data.

Group policy mapping:

Name Value
Name EnableExtendedBooksTelemetry
Friendly Name Allow extended telemetry for the Books tab
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\BooksLibrary
Registry Value Name EnableExtendedBooksTelemetry
ADMX File Name MicrosoftEdge.admx

EnterpriseModeSiteList

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1507 [10.0.10240] and later
./User/Vendor/MSFT/Policy/Config/Browser/EnterpriseModeSiteList
./Device/Vendor/MSFT/Policy/Config/Browser/EnterpriseModeSiteList

This policy setting lets you configure whether to use Enterprise Mode and the Enterprise Mode Site List to address common compatibility problems with legacy apps.

  • If you enable this setting, Microsoft Edge looks for the Enterprise Mode Site List XML file. This file includes the sites and domains that need to be viewed using Internet Explorer 11 and Enterprise Mode.

  • If you disable or don't configure this setting, Microsoft Edge won't use the Enterprise Mode Site List XML file. In this case, employees might experience compatibility problems while using legacy apps.

Description framework properties:

Property name Property value
Format chr (string)
Access Type Add, Delete, Get, Replace

Group policy mapping:

Name Value
Name EnterpriseModeSiteList
Friendly Name Configure the Enterprise Mode Site List
Element Name Type the location (URL) of your Enterprise Mode IE website list.
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\Main\EnterpriseMode
ADMX File Name MicrosoftEdge.admx

EnterpriseSiteListServiceUrl

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1703 [10.0.15063] and later
./User/Vendor/MSFT/Policy/Config/Browser/EnterpriseSiteListServiceUrl
./Device/Vendor/MSFT/Policy/Config/Browser/EnterpriseSiteListServiceUrl

Important. Discontinued in Windows 10, version 1511. Use the Browser/EnterpriseModeSiteList policy instead.

Description framework properties:

Property name Property value
Format chr (string)
Access Type Add, Delete, Get, Replace

FirstRunURL

Scope Editions Applicable OS
✅ Device
✅ User
❌ Pro
❌ Enterprise
❌ Education
❌ Windows SE
❌ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1607 [10.0.14393] and later
./User/Vendor/MSFT/Policy/Config/Browser/FirstRunURL
./Device/Vendor/MSFT/Policy/Config/Browser/FirstRunURL

Configure first run URL.

Description framework properties:

Property name Property value
Format chr (string)
Access Type Add, Delete, Get, Replace
Dependency [Browser_FirstRunURL_DependencyGroup] Dependency Type: DependsOn
Dependency URI: Device/Vendor/MSFT/Policy/Config/Browser/PreventFirstRunPage
Dependency Allowed Value: [0]
Dependency Allowed Value Type: Range

HomePages

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1703 [10.0.15063] and later
./User/Vendor/MSFT/Policy/Config/Browser/HomePages
./Device/Vendor/MSFT/Policy/Config/Browser/HomePages

When you enable the Configure Open Microsoft Edge With policy, you can configure one or more Start pages. When you enable this policy, users aren't allowed to make changes to their Start pages.

If enabled, you must include URLs to the pages, separating multiple pages using angle brackets in the following format:

<support.contoso.com> <support.microsoft.com>

If disabled or not configured, the webpages specified in App settings loads as the default Start pages.

Version 1703 or later:

If you don't want to send traffic to Microsoft, enable this policy and use the <about:blank> value, which honors domain- and non-domain-joined devices, when it's the only configured URL.

Version 1809:

If enabled, and you select either Start page, New Tab page, or previous page in the Configure Open Microsoft Edge With policy, Microsoft Edge ignores the Configure Start Pages policy. If not configured or you set the Configure Open Microsoft Edge With policy to a specific page or pages, Microsoft Edge uses the Configure Start Pages policy.

Supported devices: Domain-joined or MDM-enrolled.

Related policy:

  • Configure Open Microsoft Edge With
  • Disable Lockdown of Start Pages.

Description framework properties:

Property name Property value
Format chr (string)
Access Type Add, Delete, Get, Replace

Group policy mapping:

Name Value
Name HomePages
Friendly Name Configure Start pages
Element Name Use this format: <support.contoso.com> <https://support.microsoft.com/>
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\Internet Settings
ADMX File Name MicrosoftEdge.admx

LockdownFavorites

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./User/Vendor/MSFT/Policy/Config/Browser/LockdownFavorites
./Device/Vendor/MSFT/Policy/Config/Browser/LockdownFavorites

This policy setting lets you decide whether employees can add, import, sort, or edit the Favorites list on Microsoft Edge.

  • If you enable this setting, employees won't be able to add, import, or change anything in the Favorites list. Also as part of this, Save a Favorite, Import settings, and the context menu items (such as, Create a new folder) are all turned off.

Important.

Don't enable both this setting and the Keep favorites in sync between Internet Explorer and Microsoft Edge setting. Enabling both settings stops employees from syncing their favorites between Internet Explorer and Microsoft Edge.

  • If you disable or don't configure this setting (default), employees can add, import and make changes to the Favorites list.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 0

Allowed values:

Value Description
0 (Default) Allowed/not locked down. Users can add, import, and make changes to the favorites.
1 Prevented/locked down.

Group policy mapping:

Name Value
Name LockdownFavorites
Friendly Name Prevent changes to Favorites on Microsoft Edge
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\Favorites
Registry Value Name LockdownFavorites
ADMX File Name MicrosoftEdge.admx

PreventAccessToAboutFlagsInMicrosoftEdge

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1607 [10.0.14393] and later
./User/Vendor/MSFT/Policy/Config/Browser/PreventAccessToAboutFlagsInMicrosoftEdge
./Device/Vendor/MSFT/Policy/Config/Browser/PreventAccessToAboutFlagsInMicrosoftEdge

This policy setting lets you decide whether employees can access the about:flags page, which is used to change developer settings and to enable experimental features.

  • If you enable this policy setting, employees can't access the about:flags page.

  • If you disable or don't configure this setting, employees can access the about:flags page.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 0

Allowed values:

Value Description
0 (Default) Allowed.
1 Prevents users from accessing the about:flags page.

Group policy mapping:

Name Value
Name PreventAccessToAboutFlagsInMicrosoftEdge
Friendly Name Prevent access to the about:flags page in Microsoft Edge
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\Main
Registry Value Name PreventAccessToAboutFlagsInMicrosoftEdge
ADMX File Name MicrosoftEdge.admx

PreventCertErrorOverrides

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1809 [10.0.17763] and later
./User/Vendor/MSFT/Policy/Config/Browser/PreventCertErrorOverrides
./Device/Vendor/MSFT/Policy/Config/Browser/PreventCertErrorOverrides

Web security certificates are used to ensure a site your users go to is legitimate, and in some circumstances encrypts the data. With this policy, you can specify whether to prevent users from bypassing the security warning to sites that have SSL errors.

If enabled, overriding certificate errors aren't allowed.

If disabled or not configured, overriding certificate errors are allowed.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 0

Allowed values:

Value Description
0 (Default) Allowed/turned on. Override the security warning to sites that have SSL errors.
1 Prevented/turned on.

Group policy mapping:

Name Value
Name PreventCertErrorOverrides
Friendly Name Prevent certificate error overrides
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\Internet Settings
Registry Value Name PreventCertErrorOverrides
ADMX File Name MicrosoftEdge.admx

PreventFirstRunPage

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1703 [10.0.15063] and later
./User/Vendor/MSFT/Policy/Config/Browser/PreventFirstRunPage
./Device/Vendor/MSFT/Policy/Config/Browser/PreventFirstRunPage

This policy setting lets you decide whether employees see Microsoft's First Run webpage when opening Microsoft Edge for the first time.

  • If you enable this setting, employees won't see the First Run page when opening Microsoft Edge for the first time.

  • If you disable or don't configure this setting, employees will see the First Run page when opening Microsoft Edge for the first time.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 0

Allowed values:

Value Description
0 (Default) Allowed. Load the First Run webpage.
1 Prevented/Not allowed.

Group policy mapping:

Name Value
Name PreventFirstRunPage
Friendly Name Prevent the First Run webpage from opening on Microsoft Edge
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\Main
Registry Value Name PreventFirstRunPage
ADMX File Name MicrosoftEdge.admx

PreventLiveTileDataCollection

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1703 [10.0.15063] and later
./User/Vendor/MSFT/Policy/Config/Browser/PreventLiveTileDataCollection
./Device/Vendor/MSFT/Policy/Config/Browser/PreventLiveTileDataCollection

This policy lets you decide whether Microsoft Edge can gather Live Tile metadata from the ieonline.microsoft.com service to provide a better experience while pinning a Live Tile to the Start menu.

  • If you enable this setting, Microsoft Edge won't gather the Live Tile metadata, providing a minimal experience when a user pins a Live Tile to the Start menu.

  • If you disable or don't configure this setting, Microsoft Edge gathers the Live Tile metadata, providing a fuller and more complete experience when a user pins a Live Tile to the Start menu.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 0

Allowed values:

Value Description
0 (Default) Collect and send Live Tile metadata.
1 No data collected.

Group policy mapping:

Name Value
Name PreventLiveTileDataCollection
Friendly Name Prevent Microsoft Edge from gathering Live Tile information when pinning a site to Start
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\Main
Registry Value Name PreventLiveTileDataCollection
ADMX File Name MicrosoftEdge.admx

PreventSmartScreenPromptOverride

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1511 [10.0.10586] and later
./User/Vendor/MSFT/Policy/Config/Browser/PreventSmartScreenPromptOverride
./Device/Vendor/MSFT/Policy/Config/Browser/PreventSmartScreenPromptOverride

This policy setting lets you decide whether employees can override the Windows Defender SmartScreen warnings about potentially malicious websites.

  • If you enable this setting, employees can't ignore Windows Defender SmartScreen warnings and they're blocked from continuing to the site.

  • If you disable or don't configure this setting, employees can ignore Windows Defender SmartScreen warnings and continue to the site.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 0

Allowed values:

Value Description
0 (Default) Allowed/turned off. Users can ignore the warning and continue to the site.
1 Prevented/turned on.

Group policy mapping:

Name Value
Name PreventSmartScreenPromptOverride
Friendly Name Prevent bypassing Windows Defender SmartScreen prompts for sites
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\PhishingFilter
Registry Value Name PreventOverride
ADMX File Name MicrosoftEdge.admx

PreventSmartScreenPromptOverrideForFiles

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1511 [10.0.10586] and later
./User/Vendor/MSFT/Policy/Config/Browser/PreventSmartScreenPromptOverrideForFiles
./Device/Vendor/MSFT/Policy/Config/Browser/PreventSmartScreenPromptOverrideForFiles

This policy setting lets you decide whether employees can override the Windows Defender SmartScreen warnings about downloading unverified files.

  • If you enable this setting, employees can't ignore Windows Defender SmartScreen warnings and they're blocked from downloading the unverified files.

  • If you disable or don't configure this setting, employees can ignore Windows Defender SmartScreen warnings and continue the download process.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 0

Allowed values:

Value Description
0 (Default) Allowed/turned off. Users can ignore the warning and continue to download the unverified file(s).
1 Prevented/turned on.

Group policy mapping:

Name Value
Name PreventSmartScreenPromptOverrideForFiles
Friendly Name Prevent bypassing Windows Defender SmartScreen prompts for files
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\PhishingFilter
Registry Value Name PreventOverrideAppRepUnknown
ADMX File Name MicrosoftEdge.admx

PreventTurningOffRequiredExtensions

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1809 [10.0.17763] and later
./User/Vendor/MSFT/Policy/Config/Browser/PreventTurningOffRequiredExtensions
./Device/Vendor/MSFT/Policy/Config/Browser/PreventTurningOffRequiredExtensions

You can define a list of extensions in Microsoft Edge that users cannot turn off. You must deploy extensions through any available enterprise deployment channel, such as Microsoft Intune. When you enable this policy, users cannot uninstall extensions from their computer, but they can configure options for extensions defined in this policy, such as allow for InPrivate browsing. Any additional permissions requested by future updates of the extension gets granted automatically.

  • When you enable this policy, you must provide a semi-colon delimited list of extension package family names (PFNs). For example, adding Microsoft.OneNoteWebClipper_8wekyb3d8bbwe;Microsoft.OfficeOnline_8wekyb3d8bbwe prevents a user from turning off the OneNote Web Clipper and Office Online extension. When enabled, removing extensions from the list does not uninstall the extension from the user's computer automatically. To uninstall the extension, use any available enterprise deployment channel. If you enable the Allow Developer Tools policy, then this policy does not prevent users from debugging and altering the logic on an extension.
  • If disabled or not configured, extensions defined as part of this policy get ignored.
  • Default setting: Disabled or not configured

Related Documents:

Description framework properties:

Property name Property value
Format chr (string)
Access Type Add, Delete, Get, Replace
Allowed Values List (Delimiter: ;)

Group policy mapping:

Name Value
Name PreventTurningOffRequiredExtensions
Friendly Name Prevent turning off required extensions
Element Name In the space below, enter extension package family names (PFNs) separated by semi-colons.
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\Extensions
ADMX File Name MicrosoftEdge.admx

PreventUsingLocalHostIPAddressForWebRTC

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1511 [10.0.10586] and later
./User/Vendor/MSFT/Policy/Config/Browser/PreventUsingLocalHostIPAddressForWebRTC
./Device/Vendor/MSFT/Policy/Config/Browser/PreventUsingLocalHostIPAddressForWebRTC

This policy setting lets you decide whether an employee's LocalHost IP address shows while making calls using the WebRTC protocol.

  • If you enable this setting, LocalHost IP addresses are hidden while making calls using the WebRTC protocol.

  • If you disable or don't configure this setting, LocalHost IP addresses are shown while making calls using the WebRTC protocol.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 0

Allowed values:

Value Description
0 (Default) Allowed. Show localhost IP addresses.
1 Prevented/Not allowed.

Group policy mapping:

Name Value
Name HideLocalHostIPAddress
Friendly Name Prevent using Localhost IP address for WebRTC
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\Main
Registry Value Name HideLocalHostIP
ADMX File Name MicrosoftEdge.admx

ProvisionFavorites

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./User/Vendor/MSFT/Policy/Config/Browser/ProvisionFavorites
./Device/Vendor/MSFT/Policy/Config/Browser/ProvisionFavorites

This policy setting allows you to configure a default set of favorites, which will appear for employees. Employees can't modify, sort, move, export or delete these provisioned favorites.

  • If you enable this setting, you can set favorite URL's and favorite folders to appear on top of users' favorites list (either in the Hub or Favorites Bar). The user favorites will appear after these provisioned favorites.

Important.

Don't enable both this setting and the Keep favorites in sync between Internet Explorer and Microsoft Edge setting. Enabling both settings stops employees from syncing their favorites between Internet Explorer and Microsoft Edge.

  • If you disable or don't configure this setting, employees will see the favorites they set in the Hub and Favorites Bar.

Description framework properties:

Property name Property value
Format chr (string)
Access Type Add, Delete, Get, Replace

Group policy mapping:

Name Value
Name ConfiguredFavorites
Friendly Name Provision Favorites
Element Name ConfiguredFavoritesPrompt
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\Favorites
ADMX File Name MicrosoftEdge.admx

Example: Define a default list of favorites in Microsoft Edge. In this case, the Save a Favorite, Import settings, and context menu options (such as Create a new folder) are turned off.

To define a default list of favorites:

  1. In the upper-right corner of Microsoft Edge, click the ellipses (...) and select Settings.
  2. Click Import from another browser, click Export to file and save the file.
  3. In the Options section of the Group Policy Editor, provide the location that points the file with the list of favorites to provision.

    Specify the URL as:

    • HTTP location: "SiteList"=<http://localhost:8080/URLs.html>
    • Local network: "SiteList"="\network\shares\URLs.html"
    • Local file: "SiteList"=file:///c:/Users/Documents/URLs.html

SendIntranetTraffictoInternetExplorer

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1607 [10.0.14393] and later
./User/Vendor/MSFT/Policy/Config/Browser/SendIntranetTraffictoInternetExplorer
./Device/Vendor/MSFT/Policy/Config/Browser/SendIntranetTraffictoInternetExplorer

This policy setting lets you decide whether your intranet sites should all open using Internet Explorer 11. This setting should only be used if there are known compatibility problems with Microsoft Edge.

  • If you enable this setting, all intranet sites are automatically opened using Internet Explorer 11.

  • If you disable or don't configure this setting, all intranet sites are automatically opened using Microsoft Edge.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 0

Allowed values:

Value Description
0 (Default) All sites, including intranet sites, open in Microsoft Edge automatically.
1 Only intranet sites open in Internet Explorer 11 automatically.

Group policy mapping:

Name Value
Name SendIntranetTraffictoInternetExplorer
Friendly Name Send all intranet sites to Internet Explorer 11
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\Main
Registry Value Name SendIntranetTraffictoInternetExplorer
ADMX File Name MicrosoftEdge.admx

SetDefaultSearchEngine

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1703 [10.0.15063] and later
./User/Vendor/MSFT/Policy/Config/Browser/SetDefaultSearchEngine
./Device/Vendor/MSFT/Policy/Config/Browser/SetDefaultSearchEngine

This policy setting lets you configure the default search engine for your employees. Your employees can change the default search engine at any time.

Important.

This setting can only be used with domain-joined or MDM-enrolled devices. For more info, see the Microsoft browser extension policy (aka.ms/browserpolicy).

  • If you enable this setting, you can choose a default search engine for your employees.

  • If this setting is enabled, you must also add the default engine to the "Set default search engine" setting, by adding a link to your OpenSearch XML file, including at least the short name and https: URL of the search engine. For more info about creating the OpenSearch XML file, see the Understanding OpenSearch Standards (https://msdn.microsoft.com/library/dd163546.aspx) topic. Use this format to specify the link you wish to add: <https://fabrikam.com/opensearch.xml>

Note.

If you'd like your employees to use the default Microsoft Edge settings for each market, you can set the string to EDGEDEFAULT. If you'd like your employees to use Microsoft Bing as the default search engine, you can set the string to EDGEBING.

Employees can change the default search engine at any time, unless you disable the "Allow search engine customization" setting, which restricts any changes.

  • If you disable this setting, the policy-set default search engine is removed. If this is also the current in-use default, the engine changes to the Microsoft Edge specified engine for the market.

  • If you don't configure this setting, the default search engine is set to the one specified in App settings.

Description framework properties:

Property name Property value
Format chr (string)
Access Type Add, Delete, Get, Replace

Group policy mapping:

Name Value
Name SetDefaultSearchEngine
Friendly Name Set default search engine
Element Name Use this format to specify the link you wish to add: <https://fabrikam.com/opensearch.xml>
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\OpenSearch
ADMX File Name MicrosoftEdge.admx

SetHomeButtonURL

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1809 [10.0.17763] and later
./User/Vendor/MSFT/Policy/Config/Browser/SetHomeButtonURL
./Device/Vendor/MSFT/Policy/Config/Browser/SetHomeButtonURL

The home button can be configured to load a custom URL when your user clicks the home button.

If enabled, or configured, and the Configure Home Button policy is enabled, and the Show home button & set a specific page is selected, a custom URL loads when your user clicks the home button.

Default setting: Blank or not configured.

Related policy: Configure Home Button.

Description framework properties:

Property name Property value
Format chr (string)
Access Type Add, Delete, Get, Replace

Group policy mapping:

Name Value
Name SetHomeButtonURL
Friendly Name Set Home Button URL
Element Name Enter a URL in string format. For example: https://www.bing.com
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\Internet Settings
ADMX File Name MicrosoftEdge.admx

SetNewTabPageURL

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1809 [10.0.17763] and later
./User/Vendor/MSFT/Policy/Config/Browser/SetNewTabPageURL
./Device/Vendor/MSFT/Policy/Config/Browser/SetNewTabPageURL

You can set the default New Tab page URL in Microsoft Edge. Enabling this policy prevents your users from changing the New tab page setting. When enabled and the Allow web content on New Tab page policy is disabled, Microsoft Edge ignores the URL specified in this policy and opens about:blank.

If enabled, you can set the default New Tab page URL.

If disabled or not configured, the default Microsoft Edge new tab page is used.

Default setting: Disabled or not configured.

Related policy: Allow web content on New Tab page.

Description framework properties:

Property name Property value
Format chr (string)
Access Type Add, Delete, Get, Replace

Group policy mapping:

Name Value
Name SetNewTabPageURL
Friendly Name Set New Tab page URL
Element Name Enter a URL in string format. For example: https://www.bing.com
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\Internet Settings
ADMX File Name MicrosoftEdge.admx

ShowMessageWhenOpeningSitesInInternetExplorer

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1607 [10.0.14393] and later
./User/Vendor/MSFT/Policy/Config/Browser/ShowMessageWhenOpeningSitesInInternetExplorer
./Device/Vendor/MSFT/Policy/Config/Browser/ShowMessageWhenOpeningSitesInInternetExplorer

You can configure Microsoft Edge to open a site automatically in Internet Explorer 11 and choose to display a notification before the site opens. If you want to display a notification, you must enable Configure the Enterprise Mode Site List or Send all intranets sites to Internet Explorer 11 or both.

If enabled, the notification appears on a new page. If you want users to continue in Microsoft Edge, select the Show Keep going in Microsoft Edge option from the drop-down list under Options.

If disabled or not configured, the default app behavior occurs and no additional page displays.

Default setting: Disabled or not configured.

Related policies:

-Configure the Enterprise Mode Site List -Send all intranet sites to Internet Explorer 11.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 0

Allowed values:

Value Description
0 (Default) No additional message displays.
1 Show an additional message stating that a site has opened in IE11.
2 Show an additional message with a "Keep going in Microsoft Edge" link.

Group policy mapping:

Name Value
Name ShowMessageWhenOpeningSitesInInternetExplorer
Friendly Name Show message when opening sites in Internet Explorer
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\Main
Registry Value Name ShowMessageWhenOpeningSitesInInternetExplorer
ADMX File Name MicrosoftEdge.admx

SyncFavoritesBetweenIEAndMicrosoftEdge

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1703 [10.0.15063] and later
./User/Vendor/MSFT/Policy/Config/Browser/SyncFavoritesBetweenIEAndMicrosoftEdge
./Device/Vendor/MSFT/Policy/Config/Browser/SyncFavoritesBetweenIEAndMicrosoftEdge

This setting lets you decide whether people can sync their favorites between Internet Explorer and Microsoft Edge.

  • If you enable this setting, employees can sync their favorites between Internet Explorer and Microsoft Edge.

  • If you disable or don't configure this setting, employees can't sync their favorites between Internet Explorer and Microsoft Edge.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 0

Allowed values:

Value Description
0 (Default) Turned off/not syncing.
1 Turned on/syncing.

Group policy mapping:

Name Value
Name SyncFavoritesBetweenIEAndMicrosoftEdge
Friendly Name Keep favorites in sync between Internet Explorer and Microsoft Edge
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\Main
Registry Value Name SyncFavoritesBetweenIEAndMicrosoftEdge
ADMX File Name MicrosoftEdge.admx

Verify: To verify that favorites are in synchronized between Internet Explorer and Microsoft Edge:

  1. Open Internet Explorer and add some favorites.
  2. Open Microsoft Edge, then select Hub > Favorites.
  3. Verify that the favorites added to Internet Explorer show up in the favorites list in Microsoft Edge.

UnlockHomeButton

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1809 [10.0.17763] and later
./User/Vendor/MSFT/Policy/Config/Browser/UnlockHomeButton
./Device/Vendor/MSFT/Policy/Config/Browser/UnlockHomeButton

By default, when enabling Configure Home Button or Set Home Button URL, the home button is locked down to prevent your users from changing what page loads when clicking the home button. Use this policy to let users change the home button even when Configure Home Button or Set Home Button URL are enabled.

If enabled, the UI settings for the home button are enabled allowing your users to make changes, including hiding and showing the home button as well as configuring a custom URL.

If disabled or not configured, the UI settings for the home button are disabled preventing your users from making changes.

Default setting: Disabled or not configured.

Related policy:

-Configure Home Button -Set Home Button URL.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 0

Allowed values:

Value Description
0 (Default) Lock down and prevent users from making changes to the settings.
1 Let users make changes.

Group policy mapping:

Name Value
Name UnlockHomeButton
Friendly Name Unlock Home Button
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\Internet Settings
Registry Value Name UnlockHomeButton
ADMX File Name MicrosoftEdge.admx

UseSharedFolderForBooks

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1803 [10.0.17134] and later
./User/Vendor/MSFT/Policy/Config/Browser/UseSharedFolderForBooks
./Device/Vendor/MSFT/Policy/Config/Browser/UseSharedFolderForBooks

This policy setting lets you decide whether Microsoft Edge stores books from the Books tab to a default, shared folder for Windows.

  • If you enable this setting, Microsoft Edge automatically downloads book files to a common, shared folder and prevents students and teachers from removing the book from the Books tab. For this to work properly, your students and teachers must be signed in using a school account.

  • If you disable or don't configure this setting, Microsoft Edge downloads book files to a per-user folder for each student or teacher.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 0

Allowed values:

Value Description
0 (Default) Prevented/not allowed, but Microsoft Edge downloads book files to a per-user folder for each user.
1 Allowed. Microsoft Edge downloads book files to a shared folder. For this policy to work correctly, you must also enable the Allow a Windows app to share application data between users group policy. Also, the users must be signed in with a school or work account.

Group policy mapping:

Name Value
Name UseSharedFolderForBooks
Friendly Name Allow a shared Books folder
Location Computer and User Configuration
Path Windows Components > Microsoft Edge
Registry Key Name Software\Policies\Microsoft\MicrosoftEdge\BooksLibrary
Registry Value Name UseSharedFolderForBooks
ADMX File Name MicrosoftEdge.admx

Policy configuration service provider