Policy CSP - Browser

Warning

Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.


Browser policies

Browser/AllowAddressBarDropdown
Browser/AllowAutofill
Browser/AllowBrowser
Browser/AllowConfigurationUpdateForBooksLibrary
Browser/AllowCookies
Browser/AllowDeveloperTools
Browser/AllowDoNotTrack
Browser/AllowExtensions
Browser/AllowFlash
Browser/AllowFlashClickToRun
Browser/AllowFullScreenMode
Browser/AllowInPrivate
Browser/AllowMicrosoftCompatibilityList
Browser/AllowPasswordManager
Browser/AllowPopups
Browser/AllowPrelaunch
Browser/AllowPrinting
Browser/AllowSavingHistory
Browser/AllowSearchEngineCustomization
Browser/AllowSearchSuggestionsinAddressBar
Browser/AllowSideloadingOfExtensions
Browser/AllowSmartScreen
Browser/AllowTabPreloading
Browser/AllowWebContentOnNewTabPage
Browser/AlwaysEnableBooksLibrary
Browser/ClearBrowsingDataOnExit
Browser/ConfigureAdditionalSearchEngines
Browser/ConfigureFavoritesBar
Browser/ConfigureHomeButton
Browser/ConfigureKioskMode
Browser/ConfigureKioskResetAfterIdleTimeout
Browser/ConfigureOpenMicrosoftEdgeWith
Browser/ConfigureTelemetryForMicrosoft365Analytics
Browser/DisableLockdownOfStartPages
Browser/EnableExtendedBooksTelemetry
Browser/EnterpriseModeSiteList
Browser/EnterpriseSiteListServiceUrl
Browser/FirstRunURL
Browser/HomePages
Browser/LockdownFavorites
Browser/PreventAccessToAboutFlagsInMicrosoftEdge
Browser/PreventCertErrorOverrides
Browser/PreventFirstRunPage
Browser/PreventLiveTileDataCollection
Browser/PreventSmartScreenPromptOverride
Browser/PreventSmartScreenPromptOverrideForFiles
Browser/PreventUsingLocalHostIPAddressForWebRTC
Browser/ProvisionFavorites
Browser/SendIntranetTraffictoInternetExplorer
Browser/SetDefaultSearchEngine
Browser/SetHomeButtonURL
Browser/SetNewTabPageURL
Browser/ShowMessageWhenOpeningSitesInInternetExplorer
Browser/SyncFavoritesBetweenIEAndMicrosoftEdge
Browser/UnlockHomeButton
Browser/UseSharedFolderForBooks

Browser/AllowAddressBarDropdown

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark2 check mark2 check mark2 check mark2 cross mark cross mark

Scope:

  • User
  • Device

Supported versions: Microsoft Edge on Windows 10, version 1703

Microsoft Edge shows the Address bar drop-down list and makes it available by default, which takes precedence over the Configure search suggestions in Address bar policy. We recommend disabling this policy if you want to minimize network connections from Microsoft Edge to Microsoft service, which hides the functionality of the Address bar drop-down list. When you disable this policy, Microsoft Edge also disables the Show search and site suggestions as I type toggle in Settings.

ADMX Info:

  • GP English name: Allow Address bar drop-down list suggestions
  • GP name: AllowAddressBarDropdown
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • 0 – Prevented/not allowed. Hide the Address bar drop-down functionality and disable the Show search and site suggestions as I type toggle in Settings.
  • 1 (default) – Allowed. Show the Address bar drop-down list and make it available.

Most restricted value: 0


Browser/AllowAutofill

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark check mark check mark check mark cross mark cross mark

Scope:

  • User
  • Device

By default, users can choose to use the Autofill feature to populate the form fields automatically. With this policy, you can configure Microsoft Edge, when enabled to use Autofill or, when disabled to prevent using Autofill.

ADMX Info:

  • GP English name: Configure Autofill
  • GP name: AllowAutofill
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • Blank - Users can choose to use AutoFill.
  • 0 – Prevented/not allowed.
  • 1 (default) – Allowed.

Most restricted value: 0

To verify AllowAutofill is set to 0 (not allowed):

  1. Open Microsoft Edge.
  2. In the upper-right corner of the browser, click .
  3. Click Settings in the drop down list, and select View Advanced Settings.
  4. Verify the setting Save form entries is greyed out.

Browser/AllowBrowser

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark cross mark cross mark cross mark cross mark check mark check mark

Scope:

  • User
  • Device

Note

This policy is only enforced in Windows 10 Mobile and not supported in Windows 10 for desktop. For desktop devices, use the AppLocker CSP instead.

The device allows Microsoft Edge on Windows 10 Mobile by default. With this policy, you can disable the Microsoft Edge tile, and when clicking the tile, a message opens indicating that the administrator disabled Internet browsing.

Supported values:

  • 0 – Prevented/not allowed.
  • 1 (default) – Allowed.

Most restricted value: 0


Browser/AllowConfigurationUpdateForBooksLibrary

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark4 check mark4 check mark4 check mark4 cross mark cross mark

Scope:

  • User
  • Device

Microsoft Edge automatically updates the configuration data for the Books library. Disabling this policy prevents Microsoft Edge from updating the configuration data. If Microsoft receives feedback about the amount of data about the Books library, the data comes as a JSON file.

ADMX Info:

  • GP English name: Allow configuration updates for the Books Library
  • GP name: AllowConfigurationUpdateForBooksLibrary
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • 0 - Prevented/not allowed.
  • 1 (default). Allowed. Microsoft Edge updates the configuration data for the Books Library automatically.

Browser/AllowCookies

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark check mark check mark check mark check mark check mark

Scope:

  • User
  • Device

Microsoft Edge allows all cookies from all websites by default. With this policy, you can configure Microsoft to block only 3rd-party cookies or block all cookies.

ADMX Info:

  • GP English name: Configure cookies
  • GP name: Cookies
  • GP element: CookiesListBox
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • 0 – Block all cookies from all sites
  • 1 – Block only cookies from third party websites
  • 2 - Allow all cookies from all sites

Most restricted value: 0

To verify AllowCookies is set to 0 (not allowed):

  1. Open Microsoft Edge or Microsoft Edge for Windows 10 Mobile.
  2. In the upper-right corner of the browser, click .
  3. Click Settings in the drop down list, and select View Advanced Settings.
  4. Verify the setting Cookies is disabled.

Browser/AllowDeveloperTools

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark check mark check mark check mark cross mark cross mark

Scope:

  • User
  • Device

Note

This policy is only enforced in Windows 10 for desktop and not supported in Windows 10 Mobile.

Microsoft Edge allows users to use the F12 developer tools to build and debug web pages by default. With this policy, you can configure Microsoft Edge to prevent users from using the F12 developer tools.

ADMX Info:

  • GP English name: Allow Developer Tools
  • GP name: AllowDeveloperTools
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • 0 – Prevented/not allowed.
  • 1 (default) – Allowed.

Most restricted value: 0


Browser/AllowDoNotTrack

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark check mark check mark check mark check mark check mark

Scope:

  • User
  • Device

Microsoft Edge does not send ‘Do Not Track’ requests to websites asking for tracking information, but users can choose to send tracking information to sites they visit. With this policy, you can configure Microsoft Edge to send or never send tracking information.

ADMX Info:

  • GP English name: Configure Do Not Track
  • GP name: AllowDoNotTrack
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • Blank (default) - Do not send tracking information but let users choose to send tracking information to sites they visit.
  • 0 - Never send tracking information.
  • 1 - Send tracking information.

Most restricted value: 1

To verify AllowDoNotTrack is set to 0 (not allowed):

  1. Open Microsoft Edge or Microsoft Edge for Windows 10 Mobile.
  2. In the upper-right corner of the browser, click .
  3. Click Settings in the drop down list, and select View Advanced Settings.
  4. Verify the setting Send Do Not Track requests is greyed out.

Browser/AllowExtensions

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark1 check mark1 check mark1 check mark1 cross mark cross mark

Scope:

  • User
  • Device

Supported versions: Microsoft Edge on Windows 10, version 1607

Microsoft Edge allows users to add or personalize extensions in Microsoft Edge by default. With this policy, you can configure Microsoft to prevent users from adding or personalizing extensions.

ADMX Info:

  • GP English name: Allow Extensions
  • GP name: AllowExtensions
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • 0 – Prevented/not allowed
  • 1 (default) – Allowed

Browser/AllowFlash

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark check mark check mark check mark cross mark cross mark

Scope:

  • User
  • Device

Adobe Flash is integrated with Microsoft Edge and runs Adobe Flash content by default. With this policy, you can configure Microsoft Edge to prevent Adobe Flash content from running.

ADMX Info:

  • GP English name: Allow Adobe Flash
  • GP name: AllowFlash
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • 0 – Prevented/not allowed
  • 1 (default) – Allowed

Browser/AllowFlashClickToRun

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark2 check mark2 check mark2 check mark2 cross mark cross mark

Scope:

  • User
  • Device

Supported versions: Microsoft Edge on Windows 10, version 1703 or later

Microsoft Edge supports Adobe Flash as a built-in feature rather than as an external add-on and updates automatically via Windows Update. By default, Microsoft Edge prevents Adobe Flash content from loading automatically, requiring action from the user, for example, clicking the Click-to-Run button. Depending on how often the content loads and runs, the sites for the content gets added to the auto-allowed list. Disable this policy if you want Adobe Flash content to load automatically.

ADMX Info:

  • GP English name: Configure the Adobe Flash Click-to-Run setting
  • GP name: AllowFlashClickToRun
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • 0 – Load and run Adobe Flash content automatically.
  • 1 (default) – Does not load or run Adobe Flash content automatically. Requires action from the user.

Most restricted value: 1


Browser/AllowFullScreenMode

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark5 check mark5 check mark5 check mark5

Scope:

  • User
  • Device

Microsoft Edge allows fullscreen mode by default, which shows only the web content and hides the Microsoft Edge UI. When allowing fullscreen mode, users and extensions must have the proper permissions. Disabling this policy prevents fullscreen mode in Microsoft Edge.

ADMX Info:

  • GP English name: Allow FullScreen Mode
  • GP name: AllowFullScreenMode
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • 0 - Prevented/not allowed
  • 1 (default) - Allowed

Most restricted value: 0


Browser/AllowInPrivate

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark check mark check mark check mark check mark check mark

Scope:

  • User
  • Device

By default, Microsoft Edge allows InPrivate browsing, and after closing all InPrivate tabs, Microsoft Edge deletes the browsing data from the device. With this policy, you can configure Microsoft Edge to prevent InPrivate web browsing.

ADMX Info:

  • GP English name: Allow InPrivate browsing
  • GP name: AllowInPrivate
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • 0 – Prevented/not allowed
  • 1 (default) – Allowed

Most restricted value: 0


Browser/AllowMicrosoftCompatibilityList

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark2 check mark2 check mark2 check mark2 check mark2 check mark2

Scope:

  • User
  • Device

Supported versions: Microsoft Edge on Windows 10, version 1703 or later

During browser navigation, Microsoft Edge checks the Microsoft Compatibility List for websites with known compatibility issues. If found, users are prompted to use Internet Explorer, where the site loads and displays correctly. Periodically during browser navigation, Microsoft Edge downloads the latest version of the list and applies the updates. With this policy, you can configure Microsoft Edge to ignore the compatibility list. You can view the compatibility list at about:compat.

ADMX Info:

  • GP English name: Allow Microsoft Compatibility List
  • GP name: AllowCVList
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • 0 – Prevented/not allowed
  • 1 (default) – Allowed

Most restricted value: 0


Browser/AllowPasswordManager

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark check mark check mark check mark check mark check mark

Scope:

  • User
  • Device

By default, Microsoft Edge uses Password Manager automatically, allowing users to manager passwords locally. Disabling this policy restricts Microsoft Edge from using Password Manager. Don’t configure this policy if you want to let users choose to save and manage passwords locally using Password Manager.

ADMX Info:

  • GP English name: Configure Password Manager
  • GP name: AllowPasswordManager
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • Blank - Users can choose to save and manage passwords locally.
  • 0 – Not allowed.
  • 1 (default) – Allowed.

Most restricted value: 0

To verify AllowPasswordManager is set to 0 (not allowed):

  1. Click or tap More (…) and select Settings > View Advanced settings.
  2. Verify the settings Save Password is disabled.

Browser/AllowPopups

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark check mark check mark check mark cross mark cross mark

Scope:

  • User
  • Device

By default, Microsoft Edge turns off Pop-up Blocker, which opens pop-up windows. Enabling this policy turns on Pop-up Blocker preventing pop-up windows from opening. If you want users to choose to use Pop-up Blocker, don’t configure this policy.

ADMX Info:

  • GP English name: Configure Pop-up Blocker
  • GP name: AllowPopups
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • Blank - Users can choose to use Pop-up Blocker.
  • 0 (default) – Turn off Pop-up Blocker letting pop-up windows open.
  • 1 – Turn on Pop-up Blocker stopping pop-up windows from opening.

Most restricted value: 1

To verify AllowPopups is set to 0 (not allowed):

  1. Click or tap More (…) and select Settings > View Advanced settings.
  2. Verify the setting Block pop-ups is disabled.

Browser/AllowPrelaunch

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark5 check mark5 check mark5 check mark5

Scope:

  • User
  • Device

Microsoft Edge pre-launches as a background process during Windows startup when the system is idle waiting to be launched by the user. Pre-launching helps the performance of Microsoft Edge and minimizes the amount of time required to start Microsoft Edge. You can also configure Microsoft Edge to prevent from pre-launching.

ADMX Info:

  • GP English name: Allow Microsoft Edge to pre-launch at Windows startup, when the system is idle, and each time Microsoft Edge is closed
  • GP name: AllowPrelaunch
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • 0 - Prevented/not allowed
  • 1 (default) - Allowed

Most restricted value: 0


Browser/AllowPrinting

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark5 check mark5 check mark5 check mark5

Scope:

  • User
  • Device

Microsoft Edge allows users to print web content by default. With this policy, you can configure Microsoft Edge to prevent users from printing web content.

ADMX Info:

  • GP English name: Allow printing
  • GP name: AllowPrinting
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • 0 - Prevented/not allowed
  • 1 (default) - Allowed

Most restricted value: 0


Browser/AllowSavingHistory

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark5 check mark5 check mark5 check mark5

Scope:

  • User
  • Device

Microsoft Edge saves the browsing history of visited websites and shows them in the History pane by default. Disabling this policy prevents Microsoft Edge from saving the browsing history. If browsing history existed before disabling this policy, the previous browsing history remains in the History pane. Disabling this policy does not stop roaming of existing browsing history or browsing history from other devices.

ADMX Info:

  • GP English name: Allow Saving History
  • GP name: AllowSavingHistory
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • 0 - Prevented/not allowed
  • 1 (default) - Allowed

Most restricted value: 0


Browser/AllowSearchEngineCustomization

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark2 check mark2 check mark2 check mark2 check mark2 check mark2

Scope:

  • User
  • Device

Supported versions: Microsoft Edge on Windows 10, version 1703 or later

By default, users can add new search engines or change the default search engine, in Settings. With this policy, you can prevent users from customizing the search engine in Microsoft Edge.

ADMX Info:

  • GP English name: Allow search engine customization
  • GP name: AllowSearchEngineCustomization
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • 0 – Prevented/not allowed
  • 1 (default) – Allowed

Most restricted value: 0


Browser/AllowSearchSuggestionsinAddressBar

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark check mark check mark check mark check mark check mark

Scope:

  • User
  • Device

By default, users can choose to see search suggestions in the Address bar of Microsoft Edge. Disabling this policy hides the search suggestions and enabling this policy shows the search suggestions.

ADMX Info:

  • GP English name: Configure search suggestions in Address bar
  • GP name: AllowSearchSuggestionsinAddressBar
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • Blank (default) - Users can choose to see search suggestions.
  • 0 – Prevented/not allowed. Hide the search suggestions.
  • 1 – Allowed. Show the search suggestions.

Most restricted value: 0


Browser/AllowSideloadingOfExtensions

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark5 check mark5 check mark5 check mark5

Scope:

  • User
  • Device

By default, Microsoft Edge allows sideloading, which installs and runs unverified extensions. Disabling this policy prevents sideloading of extensions but does not prevent sideloading using Add-AppxPackage via PowerShell. You can only install extensions through Microsoft store (including a store for business), enterprise storefront (such as Company Portal) or PowerShell (using Add-AppxPackage).

ADMX Info:

  • GP English name: Allow sideloading of Extensions
  • GP name: AllowSideloadingOfExtensions
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • 0 - Prevented/not allowed. Disabling does not prevent sideloading of extensions using Add-AppxPackage via PowerShell. To prevent this, set the ApplicationManagement/AllowDeveloperUnlock policy to 1 (enabled).
  • 1 (default) - Allowed.

Most restricted value: 0


Browser/AllowSmartScreen

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark check mark check mark check mark check mark check mark

Scope:

  • User
  • Device

Microsoft Edge uses Windows Defender SmartScreen (turned on) to protect users from potential phishing scams and malicious software by default. Also, by default, users cannot disable (turn off) Windows Defender SmartScreen. Enabling this policy turns off Windows Defender SmartScreen and prevent users from turning it on. Don’t configure this policy to let users choose to turn Windows defender SmartScreen on or off.

ADMX Info:

  • GP English name: Configure Windows Defender SmartScreen
  • GP name: AllowSmartScreen
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • Blank - Users can choose to use Windows Defender SmartScreen.
  • 0 – Turned off. Do not protect users from potential threats and prevent users from turning it on.
  • 1 (default) – Turned on. Protect users from potential threats and prevent users from turning it off.

Most restricted value: 1

To verify AllowSmartScreen is set to 0 (not allowed):

  1. Click or tap More (…) and select Settings > View Advanced settings.
  2. Verify the setting Help protect me from malicious sites and download with SmartScreen Filter is disabled.

Browser/AllowTabPreloading

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark5 check mark5 check mark5 check mark5

Scope:

  • User
  • Device

Microsoft Edge allows preloading of the Start and New Tab pages during Windows sign in, and each time Microsoft Edge closes by default. Preloading minimizes the amount of time required to start Microsoft Edge and load a new tab. With this policy, you can configure Microsoft Edge to prevent preloading of tabs.

ADMX Info:

  • GP English name: Allow Microsoft Edge to start and load the Start and New Tab pages in the background at Windows startup and each time Microsoft Edge is closed
  • GP name: AllowTabPreloading
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • 0 - Prevented/not allowed.
  • 1 (default) - Allowed. Preload Start and New tab pages.

Most restricted value: 1


Browser/AllowWebContentOnNewTabPage

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark5 check mark5 check mark5 check mark5

Scope:

  • User
  • Device

By default, Microsoft Edge loads the default New Tab page. Disabling this policy loads a blank page instead of the New Tab page and prevents users from changing it. Not configuring this policy lets users choose what loads on the New Tab page.

ADMX Info:

  • GP English name: Allow web content on New Tab page
  • GP name: AllowWebContentOnNewTabPage
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • Blank - Users can choose what loads on the New tab page.
  • 0 - Load a blank page instead of the default New tab page and prevent users from changing it.
  • 1 (default) - Load the default New tab page.

Browser/AlwaysEnableBooksLibrary

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark4 check mark4 check mark4 check mark4 cross mark cross mark

Scope:

  • User
  • Device

Microsoft Edge shows the Books Library only in countries or regions where supported. With this policy, you can configure Microsoft Edge to show the Books Library regardless of the device’s country or region.

ADMX Info:

  • GP English name: Always show the Books Library in Microsoft Edge
  • GP name: AlwaysEnableBooksLibrary
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • 0 (default) - Show the Books Library only in countries or regions where supported.
  • 1 - Show the Books Library, regardless of the device’s country or region.

Most restricted value: 0


Browser/ClearBrowsingDataOnExit

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark2 check mark2 check mark2 check mark2 check mark2 check mark2

Scope:

  • User
  • Device

Supported versions: Microsoft Edge on Windows 10, version 1703 or later

Microsoft Edge does not clear the browsing data on exit by default, but users can configure the Clear browsing data option in Settings. Browsing data includes information you entered in forms, passwords, and even the websites visited. With this policy, you can configure Microsoft Edge to clear the browsing data automatically each time Microsoft Edge closes.

ADMX Info:

  • GP English name: Allow clearing browsing data on exit
  • GP name: AllowClearingBrowsingDataOnExit
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • 0 – (default) Prevented/not allowed. Users can configure the Clear browsing data option in Settings.
  • 1 – Allowed. Clear the browsing data upon exit automatically.

Most restricted value: 1

To verify that browsing data is cleared on exit (ClearBrowsingDataOnExit is set to 1):

  1. Open Microsoft Edge and browse to websites.
  2. Close the Microsoft Edge window.
  3. Open Microsoft Edge and start typing the same URL in address bar.
  4. Verify that it does not auto-complete from history.

Browser/ConfigureAdditionalSearchEngines

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark2 check mark2 check mark2 check mark2 check mark2 check mark2

Scope:

  • User
  • Device

Supported versions: Microsoft Edge on Windows 10, version 1703 or later

By default, users cannot add, remove, or change any of the search engines in Microsoft Edge, but they can set a default search engine. You can set the default search engine using the Set default search engine policy. However, with this policy, you can configure up to five additional search engines and set any one of them as the default. If you previously enabled this policy and now want to disable it, disabling deletes all configured search engines.

Important

Due to Protected Settings (aka.ms/browserpolicy), this setting applies only on domain-joined machines or when the device is MDM-enrolled.

ADMX Info:

  • GP English name: Configure additional search engines
  • GP name: ConfigureAdditionalSearchEngines
  • GP element: ConfigureAdditionalSearchEngines_Prompt
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • 0 (default) – Prevented/not allowed. Microsoft Edge uses the search engine specified in App settings.

    If you enabled this policy and now want to disable it, disabling removes all previously configured search engines.

  • 1 – Allowed. Add up to five additional search engines and set any one of them as the default.

    For each search engine added you must specify a link to the OpenSearch XML file that contains, at a minimum, the short name and URL template (HTTPS) of the search engine. For more information about creating the OpenSearch XML file, see Search provider discovery.

Most restricted value: 0


Browser/ConfigureFavoritesBar

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark5 check mark5 check mark5 check mark5

Scope:

  • User
  • Device

Microsoft Edge hides the favorites bar by default but shows it on the Start and New Tab pages. Also, by default, the Favorites Bar toggle, in Settings, is set to Off but enabled letting users make changes. With this policy, you can configure Microsoft Edge to either show or hide the Favorites Bar on all pages.

ADMX Info:

  • GP English name: Configure Favorites Bar
  • GP name: ConfigureFavoritesBar
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • Blank (default) - Hide the favorites bar but show it on the Start and New tab pages. The favorites bar toggle, in Settings, is set to Off but enabled allowing users to make changes.
  • 0 - Hide the favorites bar on all pages. Also, the favorites bar toggle, in Settings, is set to Off and disabled preventing users from making changes. Microsoft Edge also hides the “show bar/hide bar” option in the context menu.
  • 1 - Show the favorites bar on all pages. Also, the favorites bar toggle, in Settings, is set to On and disabled preventing users from making changes. Microsoft Edge also hides the “show bar/hide bar” option in the context menu.

Browser/ConfigureHomeButton

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark5 check mark5 check mark5 check mark5

Scope:

  • User
  • Device

Microsoft Edge shows the home button and by clicking it the Start page loads by default. With this policy, you can configure the home button to load the New Tab page or a URL defined in the Set Home Button URL policy. You can also configure Microsoft Edge to hide the home button.

ADMX Info:

  • GP English name: Configure Home Button
  • GP name: ConfigureHomeButton
  • GP element: ConfigureHomeButtonDropdown
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • 0 (default) - Show home button and load the Start page.
  • 1 - Show home button and load the New tab page.
  • 2 - Show home button and load the custom URL defined in the Set Home Button URL policy.
  • 3 - Hide home button.

Tip

If you want to make changes to this policy:

  1. Set UnlockHomeButton to 1 (enabled).
  2. Make changes to ConfigureHomeButton or SetHomeButtonURL policy.
  3. Set UnlockHomeButton 0 (disabled).


Browser/ConfigureKioskMode

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark5 check mark5 check mark5 check mark5

Scope:

  • User
  • Device

Configure how Microsoft Edge behaves when it’s running in kiosk mode with assigned access, either as a single-app or as one of many apps running on the kiosk device. You can control whether Microsoft Edge runs InPrivate full screen, InPrivate multi-tab with a tailored experience for kiosks, or normal browsing in Microsoft Edge.

For this policy to work, you must configure Microsoft Edge in assigned access; otherwise, Microsoft Edge ignores the settings in this policy. To learn more about assigned access and kiosk configuration, see Configure kiosk and shared devices running Windows desktop editions.

ADMX Info:

  • GP English name: Configure kiosk mode
  • GP name: ConfigureKioskMode
  • GP element: ConfigureKioskMode_TextBox
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

0 (Default or not configured):

  • If it’s a single app, it runs InPrivate full screen for digital signage or interactive displays.
  • If it’s one of many apps, Microsoft Edge runs as normal.

1:

  • If it’s a single app, it runs a limited multi-tab version of InPrivate and is the only app available for public browsing. Users can’t minimize, close, or open windows or customize Microsoft Edge, but can clear browsing data and downloads and restart by clicking “End session.” You can configure Microsoft Edge to restart after a period of inactivity by using the “Configure kiosk reset after idle timeout” policy. For single-app public browsing: If you do not configure the Configure kiosk reset after idle timeout policy and you enable this policy, Microsoft Edge kiosk resets after 5 minutes of idle time.
  • If it’s one of many apps, it runs in a limited multi-tab version of InPrivate for public browsing with other apps. Users can minimize, close, and open multiple InPrivate windows, but they can’t customize Microsoft Edge.

Browser/ConfigureKioskResetAfterIdleTimeout

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark5 check mark5 check mark5 check mark5

Scope:

  • User
  • Device

You can configure Microsoft Edge kiosk mode to reset to the configured start experience after a specified amount of idle time in minutes (0-1440). The reset timer begins after the last user interaction. Once the idle time meets the time specified, a confirmation message prompts the user to continue, and if no user action, Microsoft Edge kiosk mode resets after 30 seconds. Resetting to the configured start experience deletes the current user’s browsing data.

You must set ConfigureKioskMode to enabled (1 - InPrivate public browsing) and configure Microsoft Edge as a single-app in assigned access for this policy to take effect; otherwise, Microsoft Edge ignores this setting. To learn more about assigned access and kiosk configuration, see Configure kiosk and shared devices running Windows desktop editions.

ADMX Info:

  • GP English name: Configure kiosk reset after idle timeout
  • GP name: ConfigureKioskResetAfterIdleTimeout
  • GP element: ConfigureKioskResetAfterIdleTimeout_TextBox
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • Any integer from 1-1440 (5 minutes is the default) – The time in minutes from the last user activity before Microsoft Edge kiosk mode resets to the default kiosk configuration. A confirmation dialog displays for the user to cancel or continue and automatically continues after 30 seconds.

  • 0 – No idle timer.


Browser/ConfigureOpenMicrosoftEdgeWith

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark5 check mark5 check mark5 check mark5

Scope:

  • User
  • Device

By default, Microsoft Edge loads a specific page or pages defined in the Configure Start Pages policy and allow users to make changes. With this policy, you can configure Microsoft Edge to load either the Start page, New Tab page, previously opened pages. You can also configure Microsoft Edge to prevent users from changing or customizing the Start page. For this policy to work correctly, you must also configure the Configure Start Pages. If you want to prevent users from making changes, don’t configure the Disable Lockdown of Start Pages policy.

Version 1703 or later:
If you don't want to send traffic to Microsoft, use the <about:blank> value, which honors both domain and non domain-joined devices when it's the only configured URL.

version 1809:
When you enable this policy and select an option, and also enter the URLs of the pages you want in HomePages, Microsoft Edge ignores HomePages.

ADMX Info:

  • GP English name: Configure Open Microsoft Edge With
  • GP name: ConfigureOpenEdgeWith
  • GP element: ConfigureOpenEdgeWithListBox
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • Blank - If you don't configure this policy and you set DisableLockdownOfStartPages to 1 (enabled), users can change or customize the Start page.
  • 0 - Load the Start page.
  • 1 - Load the New tab page.
  • 2 - Load the previous pages.
  • 3 (default) - Load a specific page or pages.

Tip

If you want to make changes to this policy:

  1. Set DisableLockdownOfStartPages to 0 (not configured).
  2. Make changes to ConfigureOpenEdgeWith.
  3. Set DisableLockdownOfStartPages to 1 (enabled).


Browser/ConfigureTelemetryForMicrosoft365Analytics

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark5 check mark5 check mark5 check mark5

Scope:

  • User
  • Device

Microsoft Edge does not send browsing history data to Microsoft 365 Analytics by default. With this policy though, you can configure Microsoft Edge to send intranet history only, internet history only, or both to Microsoft 365 Analytics for enterprise devices with a configured Commercial ID.

ADMX Info:

  • GP English name: Configure collection of browsing data for Microsoft 365 Analytics
  • GP name: ConfigureTelemetryForMicrosoft365Analytics
  • GP element: ZonesListBox
  • GP path: Data Collection and Preview Builds
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • 0 (default) - No data collected or sent
  • 1 - Send intranet history only
  • 2 - Send Internet history only
  • 3 - Send both intranet and Internet history

Most restricted value: 0


Browser/DisableLockdownOfStartPages

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark2 check mark2 check mark2 check mark2 cross mark cross mark

Scope:

  • User
  • Device

Supported versions: Microsoft Edge on Windows 10

By default, the Start pages configured in either the Configure Start Pages policy or Configure Open Microsoft Edge policies cannot be changed and remain locked down. Enabling this policy unlocks the Start pages, and lets users make changes to either all configured Start page or any Start page configured with the Configure Start pages policy.

Note

This policy has no effect when the Browser/HomePages policy is not configured.

Important

This setting can be used only with domain-joined or MDM-enrolled devices. For more information, see the Microsoft browser extension policy.

Most restricted value: 0

ADMX Info:

  • GP English name: Disable lockdown of Start pages
  • GP name: DisableLockdownOfStartPages
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • 0 – Lock down Start pages configured in either the ConfigureOpenEdgeWith policy and HomePages policy.
  • 1 (default) – Unlocked. Users can make changes to all configured start pages.

    When you enable this policy and define a set of URLs in the HomePages policy, Microsoft Edge uses the URLs defined in the ConfigureOpenEdgeWith policy.

Most restricted value: 0


Browser/EnableExtendedBooksTelemetry

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark4 check mark4 check mark4 check mark4 cross mark cross mark

Scope:

  • User
  • Device

By default, and depending on the device configuration, Microsoft Edge gathers basic diagnostic data about the books in the Books Library and sends it to Microsoft. Enabling this policy gathers and sends both basic and additional diagnostic data, such as usage data.

ADMX Info:

  • GP English name: Allow extended telemetry for the Books tab
  • GP name: EnableExtendedBooksTelemetry
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • 0 (default) - Gather and send only basic diagnostic data, depending on the device configuration.
  • 1 - Gather all diagnostic data.

Most restricted value: 0


Browser/EnterpriseModeSiteList

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark check mark check mark check mark check mark cross mark cross mark

Scope:

  • User
  • Device

Microsoft Edge does not support ActiveX controls, Browser Helper Objects, VBScript, or other legacy technology. If you have sites or apps that use this technology, you can configure Microsoft Edge to check the Enterprise Mode Site List XML file that lists the sites and domains with compatibility issues and switch to IE11 automatically. You can use the same site list for both Microsoft Edge and IE11, or you can use separate lists. By default, Microsoft Edge ignores the Enterprise Mode and the Enterprise Mode Site List XML file. In this case, users might experience problems while using legacy apps. These sites and domains must be viewed using Internet Explorer 11 and Enterprise Mode.

Note

This policy is only enforced in Windows 10 for desktop and not supported in Windows 10 Mobile.

ADMX Info:

  • GP English name: Configure the Enterprise Mode Site List
  • GP name: EnterpriseModeSiteList
  • GP element: EnterSiteListPrompt
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • 0 (default) - Turned off. Microsoft Edge does not check the Enterprise Mode Site List, and in this case, users might experience problems while using legacy apps.
  • Turned on. Microsoft Edge checks the Enterprise Mode Site List if configured. If an XML file exists in the cache container, IE11 waits 65 seconds and then checks the local cache for a new version from the server. If the server has a different version, Microsoft Edge uses the server file and stores it in the cache container. If you already use a site list, Enterprise Mode continues to work during the 65 second, but uses the existing file. To add the location to your site list, enter it in the {URI} box.

    For details on how to configure the Enterprise Mode Site List, see Interoperability and enterprise guidance.


Browser/EnterpriseSiteListServiceUrl

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark check mark check mark check mark check mark check mark

Scope:

  • User
  • Device

Important

Discontinued in Windows 10, version 1511. Use the Browser/EnterpriseModeSiteList policy instead.


Browser/FirstRunURL

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark cross mark cross mark cross mark cross mark check mark check mark

Scope:

  • User
  • Device

Note

This policy is only enforced in Windows 10 Mobile and not supported in Windows 10 for desktop.

Enter a URL in string format for the site you want to load when Microsoft Edge for Windows 10 Mobile opens for the first time, for example, contoso.com.


Browser/HomePages

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark check mark check mark check mark check mark cross mark cross mark

Scope:

  • User
  • Device

Note

This policy is only available for Windows 10 for desktop and not supported in Windows 10 Mobile.

By default, Microsoft Edge loads the pages specified in App settings as the default Start pages. With this policy, you can configure one or more Start pages when you enable this policy and enable the Configure Open Microsoft Edge With policy. Once you set the Start pages, either in this policy or Configure Open Microsoft Edge With policy, users cannot make changes.

Version 1607
Starting with this version, the HomePages policy enforces that users cannot change the Start pages settings.

Version 1703
If you don't want to send traffic to Microsoft, use the <about:blank> value, which honors both domain and non-domain-joined devices when it's the only configured URL.

Version 1809
When you enable the Configure Open Microsoft Edge With policy and select an option, and you enter the URLs of the pages your want to load as the Start pages in this policy, the Configure Open Microsoft Edge With policy takes precedence, ignoring the HomePages policy.

Note

Turning this setting off, or not configuring it, sets your default Start pages to the webpages specified in App settings.

ADMX Info:

  • GP English name: Configure Start pages
  • GP name: HomePages
  • GP element: HomePagesPrompt
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • Blank (default) - Load the pages specified in App settings as the default Start pages.
  • String - Enter the URLs of the pages you want to load as the Start pages, separating each page using angle brackets:

          <support.contoso.com> <support.microsoft.com>


Browser/LockdownFavorites

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark3 check mark3 check mark3 check mark3 check mark3 check mark3

Scope:

  • User
  • Device

Supported versions: Microsoft Edge on Windows 10, version 1709

By default, users can add, import, and make changes to the Favorites list in Microsoft Edge. Enabling this policy locks down the Favorites list in Microsoft Edge, preventing users from making changes. When enabled, Microsoft Edge turns off the Save a Favorite, Import settings, and context menu items, such as Create a new folder. Enable only this policy or the Keep favorites in sync between Internet Explorer and Microsoft Edge policy. If you enable both, Microsoft Edge prevents users from syncing their favorites between the two browsers.

ADMX Info:

  • GP English name: Prevent changes to Favorites on Microsoft Edge
  • GP name: LockdownFavorites
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • 0 (default) - Allowed/not locked down. Users can add, import, and make changes to the favorites.
  • 1 - Prevented/locked down.

Most restricted value: 1


Browser/PreventAccessToAboutFlagsInMicrosoftEdge

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark check mark check mark check mark cross mark cross mark

Scope:

  • User
  • Device

By default, users can access the about:flags page in Microsoft Edge, which is used to change developer settings and enable experimental features. Enabling this policy prevents users from accessing the about:flags page.

ADMX Info:

  • GP English name: Prevent access to the about:flags page in Microsoft Edge
  • GP name: PreventAccessToAboutFlagsInMicrosoftEdge
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • 0 (default) – Allowed.
  • 1 – Prevents users from accessing the about:flags page.

Most restricted value: 1


Browser/PreventCertErrorOverrides

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark5 check mark5 check mark5 check mark5

Scope:

  • User
  • Device

Microsoft Edge, by default, allows overriding of the security warnings to sites that have SSL errors, bypassing or ignoring certificate errors. Enabling this policy prevents overriding of the security warnings.

ADMX Info:

  • GP English name: Prevent certificate error overrides
  • GP name: PreventCertErrorOverrides
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • 0 (default) - Allowed/turned on. Override the security warning to sites that have SSL errors.
  • 1 - Prevented/turned on.

Most restricted value: 1


Browser/PreventFirstRunPage

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark2 check mark2 check mark2 check mark2 check mark2 check mark2

Scope:

  • User
  • Device

Supported versions: Microsoft Edge on Windows 10, version 1703

By default, when launching Microsoft Edge for the first time, the First Run webpage (a welcome page) hosted on Microsoft.com loads automatically via an FWLINK. The welcome page lists the new features and helpful tips of Microsoft Edge. With this policy, you can configure Microsoft Edge to prevent loading the welcome page on first explicit user-launch.

ADMX Info:

  • GP English name: Prevent the First Run webpage from opening on Microsoft Edge
  • GP name: PreventFirstRunPage
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • 0 (default) – Allowed. Load the First Run webpage.
  • 1 – Prevented/not allowed.

Most restricted value: 1


Browser/PreventLiveTileDataCollection

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark2 check mark2 check mark2 check mark2 check mark2 check mark2

Scope:

  • User
  • Device

Supported versions: Microsoft Edge on Windows 10, version 1703 or later

By default, Microsoft Edge collects the Live Tile metadata and sends it to Microsoft to help provide users a complete experience when they pin Live Tiles to the Start menu. However, with this policy, you can configure Microsoft Edge to prevent Microsoft from collecting Live Tile metadata, providing users with a limited experience.

ADMX Info:

  • GP English name: Prevent Microsoft Edge from gathering Live Tile information when pinning a site to Start
  • GP name: PreventLiveTileDataCollection
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • 0 (default) – Collect and send Live Tile metadata.
  • 1 – No data collected.

Most restricted value: 1


Browser/PreventSmartScreenPromptOverride

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark check mark check mark check mark check mark check mark

Scope:

  • User
  • Device

By default, Microsoft Edge allows users to bypass (ignore) the Windows Defender SmartScreen warnings about potentially malicious sites, allowing them to continue to the site. With this policy though, you can configure Microsoft Edge to prevent users from bypassing the warnings, blocking them from continuing to the site.

ADMX Info:

  • GP English name: Prevent bypassing Windows Defender SmartScreen prompts for sites
  • GP name: PreventSmartScreenPromptOverride
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • 0 (default) – Allowed/turned off. Users can ignore the warning and continue to the site.
  • 1 – Prevented/turned on.

Most restricted value: 1


Browser/PreventSmartScreenPromptOverrideForFiles

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark check mark check mark check mark check mark check mark

Scope:

  • User
  • Device

By default, Microsoft Edge allows users to bypass (ignore) the Windows Defender SmartScreen warnings about potentially malicious files, allowing them to continue downloading the unverified file(s). Enabling this policy prevents users from bypassing the warnings, blocking them from downloading of the unverified file(s).

ADMX Info:

  • GP English name: Prevent bypassing Windows Defender SmartScreen prompts for files
  • GP name: PreventSmartScreenPromptOverrideForFiles
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • 0 (default) – Allowed/turned off. Users can ignore the warning and continue to download the unverified file(s).
  • 1 – Prevented/turned on.

Most restricted value: 1


Browser/PreventTurningOffRequiredExtensions

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark5 check mark5 check mark5 check mark5

Scope:

  • User
  • Device

Microsoft Edge allows users to uninstall extensions by default. Enabling this policy prevents users from uninstalling extensions but lets them configure options for extensions defined in this policy, such as allowing InPrivate browsing. Any additional permissions requested by future updates of the extension gets granted automatically. If you enabled this policy and now you want to disable it, the list of extension package family names (PFNs) defined in this policy get ignored after disabling this policy.

ADMX Info:

  • GP English name: Prevent turning off required extensions
  • GP name: PreventTurningOffRequiredExtensions
  • GP element: PreventTurningOffRequiredExtensions_Prompt
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • Blank (default) - Allowed. Users can uninstall extensions. If you previously enabled this policy and you decide to disable it, the list of extension PFNs defined in this policy get ignored.

  • String - Provide a semi-colon delimited list of extension PFNs. For example, adding the following OneNote Web Clipper and Office Online extension prevents users from turning it off:

          Microsoft.OneNoteWebClipper8wekyb3d8bbwe;Microsoft.OfficeOnline8wekyb3d8bbwe

    After defining the list of extensions, you deploy them through any available enterprise deployment channel, such as Microsoft Intune.

    Removing extensions from the list does not uninstall the extension from the user’s computer automatically. To uninstall the extension, use any available enterprise deployment channel. If you enable the Allow Developer Tools policy, then this policy does not prevent users from debugging and altering the logic on an extension.


Browser/PreventUsingLocalHostIPAddressForWebRTC

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark check mark check mark check mark cross mark cross mark

Scope:

  • User
  • Device

Note

This policy is only enforced in Windows 10 for desktop and not supported in Windows 10 Mobile.

By default, Microsoft Edge shows localhost IP address while making calls using the WebRTC protocol. Enabling this policy hides the localhost IP addresses.

ADMX Info:

  • GP English name: Prevent using Localhost IP address for WebRTC
  • GP name: HideLocalHostIPAddress
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • 0 (default) – Allowed. Show localhost IP addresses.
  • 1 – Prevented/not allowed.

Most restricted value: 1


Browser/ProvisionFavorites

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark3 check mark3 check mark3 check mark3 check mark3 check mark3

Scope:

  • User
  • Device

Supported versions: Microsoft Edge on Windows 10, version 1709 or later

By default, users can customize the Favorites list in Microsoft Edge. With this policy though, you provision a standard list of favorites, which can include folders, to appear in the Favorites list in addition to the user’s favorites. Edge. Once you provision the Favorites list, users cannot customize it, such as adding folders for organizing, and adding or removing any of the favorites configured.

Define a default list of favorites in Microsoft Edge. In this case, the Save a Favorite, Import settings, and context menu options (such as Create a new folder) are turned off.

To define a default list of favorites:

  1. In the upper-right corner of Microsoft Edge, click the ellipses (...) and select Settings.
  2. Click Import from another browser, click Export to file and save the file.
  3. In the Options section of the Group Policy Editor, provide the location that points the file with the list of favorites to provision.

    Specify the URL as:

    • HTTP location: "SiteList"=http://localhost:8080/URLs.html
    • Local network: "SiteList"="\network\shares\URLs.html"
    • Local file: "SiteList"=file:///c:/Users/Documents/URLs.html

Important

Enable only this policy or the Keep favorites in sync between Internet Explorer and Microsoft Edge policy. If you enable both, Microsoft Edge prevents users from syncing their favorites between the two browsers.

ADMX Info:

  • GP English name: Provision Favorites
  • GP name: ConfiguredFavorites
  • GP element: ConfiguredFavoritesPrompt
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Browser/SendIntranetTraffictoInternetExplorer

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark check mark check mark check mark check mark cross mark cross mark

Scope:

  • User
  • Device

By default, all websites, including intranet sites, open in Microsoft Edge automatically. Only enable this policy if there are known compatibility problems with Microsoft Edge. Enabling this policy loads only intranet sites in Internet Explorer 11 automatically.

Note

This policy is only enforced in Windows 10 for desktop and not supported in Windows 10 Mobile.

ADMX Info:

  • GP English name: Send all intranet sites to Internet Explorer 11
  • GP name: SendIntranetTraffictoInternetExplorer
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • 0 (default) - All sites, including intranet sites, open in Microsoft Edge automatically.
  • 1 - Only intranet sites open in Internet Explorer 11 automatically.

    Enabling this policy automatically opens all intranet sites in IE11, even if the users have Microsoft Edge as their default browser.

    1. In Group Policy Editor, navigate to:

      Computer Configuration\Administrative Templates\Windows Components\File Explorer\Set a default associations configuration file and click Enable.

    2. Refresh the policy and then view the affected sites in Microsoft Edge.

      A message displays saying that the page needs to open in IE. At the same time, the page opens in IE11 automatically; in a new frame if it is not yet running, or in a new tab.

Most restricted value: 0


Browser/SetDefaultSearchEngine

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark2 check mark2 check mark2 check mark2 check mark2 check mark2

Scope:

  • User
  • Device

Supported versions: Microsoft Edge on Windows 10, version 1703

By default, Microsoft Edge uses the search engine specified in App settings, letting users make changes at any time unless the Allow search engine customization policy is disabled, which restricts users from making changes. With this policy, you can either remove or use the policy-set search engine. When you remove the policy-set search engine, Microsoft Edge uses the specified search engine for the market, which lets users make changes to the default search engine. You can use the policy-set search engine specified in the OpenSearch XML, which prevents users from making changes.

Important

This setting can be used only with domain-joined or MDM-enrolled devices. For more information, see the Microsoft browser extension policy.

Most restricted value: 0

ADMX Info:

  • GP English name: Set default search engine
  • GP name: SetDefaultSearchEngine
  • GP element: SetDefaultSearchEngine_Prompt
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • Blank (default) - Microsoft Edge uses the default search engine specified in App settings. If you don't configure this policy and disable the AllowSearchEngineCustomization policy, users cannot make changes.
  • 0 - Microsoft Edge removes the policy-set search engine and uses the Microsoft Edge specified engine for the market.
  • 1 - Microsoft Edge uses the policy-set search engine specified in the OpenSearch XML file. Users cannot change the default search engine.

    Specify a link to the OpenSearch XML file that contains, at a minimum, the short name and the URL template (HTTPS) of the search engine. For more information about creating the OpenSearch XML file, see Search provider discovery. Use this format to specify the link you want to add.

    If you want users to use the default Microsoft Edge settings for each market, set the string to EDGEDEFAULT.

    If you want users to use Microsoft Bing as the default search engine, then set the string to EDGEBING.

Most restricted value: 1


Browser/SetHomeButtonURL

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark5 check mark5 check mark5 check mark5

Scope:

  • User
  • Device

By default, Microsoft Edge shows the home button and loads the Start page, and locks down the home button to prevent users from changing what page loads. Enabling this policy loads a custom URL for the home button. When you enable this policy, and enable the Configure Home Button policy with the Show home button & set a specific page option selected, a custom URL loads when the user clicks the home button.

ADMX Info:

  • GP English name: Set Home Button URL
  • GP name: SetHomeButtonURL
  • GP element: SetHomeButtonURLPrompt
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • Blank (default) - Show the home button and loads the Start page and locks down the home button to prevent users from changing what page loads.
  • String - Load a custom URL for the home button. You must also enable the Configure Home Button policy and select the Show home button & set a specific page option.

    Enter a URL in string format, for example, https://www.msn.com.


Browser/SetNewTabPageURL

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark5 check mark5 check mark5 check mark5

Scope:

  • User
  • Device

Microsoft Edge loads the default New Tab page by default. Enabling this policy lets you set a New Tab page URL in Microsoft Edge, preventing users from changing it. When you enable this policy, and you disable the Allow web content on New Tab page policy, Microsoft Edge ignores any URL specified in this policy and opens about:blank.

ADMX Info:

  • GP English name: Set New Tab page URL
  • GP name: SetNewTabPageURL
  • GP element: SetNewTabPageURLPrompt
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • Blank (default) - Load the default New tab page.
  • String - Prevent users from changing the New tab page.

    Enter a URL in string format, for example, https://www.msn.com.


Browser/ShowMessageWhenOpeningSitesInInternetExplorer

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark check mark check mark check mark cross mark cross mark

Scope:

  • User
  • Device

Microsoft Edge does not show a notification before opening sites in Internet Explorer 11. However, with this policy, you can configure Microsoft Edge to display a notification before a site opens in IE11 or let users continue in Microsoft Edge. If you want users to continue in Microsoft Edge, enable this policy to show the Keep going in Microsoft Edge link in the notification. For this policy to work correctly, you must also enable the Configure the Enterprise Mode Site List or Send all intranet sites to Internet Explorer 11, or both.

Note

This policy is only enforced in Windows 10 for desktop and not supported in Windows 10 Mobile.

ADMX Info:

  • GP English name: Show message when opening sites in Internet Explorer
  • GP name: ShowMessageWhenOpeningSitesInInternetExplorer
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • 0 (default) – No additional message displays.
  • 1 – Show an additional message stating that a site has opened in IE11.
  • 2 - Show an additional message with a "Keep going in Microsoft Edge" link.

Most restricted value: 0


Browser/SyncFavoritesBetweenIEAndMicrosoftEdge

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark2 check mark2 check mark2 check mark2 cross mark cross mark

Scope:

  • User
  • Device

Supported versions: Microsoft Edge on Windows 10, version 1703 or later

By default, Microsoft Edge does not sync the user’s favorites between IE and Microsoft Edge. Enabling this policy syncs favorites between Internet Explorer and Microsoft Edge. Changes to favorites in one browser reflect in the other, including additions, deletions, modifications, and ordering of favorites.

Note

This policy is only enforced in Windows 10 for desktop and not supported in Windows 10 Mobile.

ADMX Info:

  • GP English name: Keep favorites in sync between Internet Explorer and Microsoft Edge
  • GP name: SyncFavoritesBetweenIEAndMicrosoftEdge
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • 0 (default) – Turned off/not syncing
  • 1 – Turned on/syncing

To verify that favorites are in synchronized between Internet Explorer and Microsoft Edge:

  1. Open Internet Explorer and add some favorites.
  2. Open Microsoft Edge, then select Hub > Favorites.
  3. Verify that the favorites added to Internet Explorer show up in the favorites list in Microsoft Edge.

Browser/UnlockHomeButton

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark5 check mark5 check mark5 check mark5

Scope:

  • User
  • Device

By default, when you enable the Configure Home Button policy or provide a URL in the Set Home Button URL policy, Microsoft Edge locks down the home button to prevent users from changing the settings. When you enable this policy, users can make changes to the home button even if you enabled the Configure Home Button or Set Home Button URL policies.

ADMX Info:

  • GP English name: Unlock Home Button
  • GP name: UnlockHomeButton
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • 0 (default) - Lock down and prevent users from making changes to the settings.
  • 1 - Let users make changes.

Browser/UseSharedFolderForBooks

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark4 check mark4 check mark4 check mark4 cross mark cross mark

Scope:

  • User
  • Device

Microsoft Edge does not use a shared folder by default but downloads book files to a per-user folder for each user. With this policy, you can configure Microsoft Edge to store books from the Books Library to a default, shared folder in Windows, which decreases the amount of storage used by book files. When you enable this policy, Microsoft Edge downloads books to a shared folder after user action to download the book to their device, which allows them to remove downloaded books at any time. For this policy to work correctly, you must also enable the Allow a Windows app to share application data between users group policy. Also, the users must be signed in with a school or work account.

ADMX Info:

  • GP English name: Allow a shared Books folder
  • GP name: UseSharedFolderForBooks
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

Supported values:

  • 0 - Prevented/not allowed, but Microsoft Edge downloads book files to a per-user folder for each user.
  • 1 - Allowed. Microsoft Edge downloads book files to a shared folder. For this policy to work correctly, you must also enable the Allow a Windows app to share application data between users group policy. Also, the users must be signed in with a school or work account.

Most restricted value: 0


Footnote:

  • 1 - Supported versions, version 1607.
  • 2 - Supported versions, version 1703.
  • 3 - Supported versions, version 1709.
  • 4 - Supported versions, version 1803.
  • 5 - Supported versions, version 1809.