Microsoft Edge 管理Microsoft Edge Management

适用范围:Configuration Manager (Current Branch)Applies to: Configuration Manager (Current Branch)

全新的 Microsoft Edge 已准备好应用于业务。The all-new Microsoft Edge is ready for business. 从 Configuration Manager 版本 1910 开始,现可为你的用户部署 Microsoft Edge 版本 77 及更高版本Starting in Configuration Manager version 1910, you can now deploy Microsoft Edge, version 77 and later to your users. PowerShell 脚本用于安装选定 Edge 版本。A PowerShell script is used to install the Edge build selected. 此脚本还为 Edge 禁用自动更新,这样就能使用 Configuration Manager 管理它们。The script also turns off automatic updates for Edge so they can be managed with Configuration Manager.

部署 Microsoft EdgeDeploy Microsoft Edge

管理员可以选择 Beta、Dev 或 Stable 通道,以及要部署的 Microsoft Edge 客户端版本。Admins can pick the Beta, Dev, or Stable channel, along with a version of the Microsoft Edge client to deploy. 每个版本都包含来自客户和社区的经验学习和改进。Each release incorporates learnings and improvements from our customers and community.

部署先决条件Prerequisites for deploying

对于目标为 Microsoft Edge 部署的客户端:For clients targeted with a Microsoft Edge deployment:

  • PowerShell 执行策略不能设置为“受限”。PowerShell Execution Policy can't be set to Restricted.

    • 执行 PowerShell 以执行安装。PowerShell is executed to perform the installation.
  • Microsoft Edge 安装程序和 CMPivot 通过 Microsoft 代码签名证书进行签名。The Microsoft Edge installer and CMPivot are signed with the Microsoft Code Signing certificate. 如果“受信任的发行者”存储中未列出该证书,则需要添加它。If that certificate isn't listed in the Trusted Publishers store, you'll need to add it. 否则,当 PowerShell 执行策略设置为“AllSigned”时,Microsoft Edge 安装程序和 CMPivot 不会运行。Otherwise, the Microsoft Edge installer and CMPivot won’t run when the PowerShell execution policy is set to AllSigned.

运行 Configuration Manager 控制台的设备需要能够访问以下终结点才能部署 Microsoft Edge:The device running the Configuration Manager console needs access to the following endpoints for deploying Microsoft Edge:

位置Location 用途Use
https://aka.ms/cmedgeapi Microsoft Edge 的版本信息Information about releases of Microsoft Edge
https://edgeupdates.microsoft.com/api/products?view=enterprise Microsoft Edge 的版本信息Information about releases of Microsoft Edge
http://dl.delivery.mp.microsoft.com Microsoft Edge 版本的内容Content for Microsoft Edge releases

验证 Microsoft Edge 更新策略Verify Microsoft Edge update policies

Configuration Manager 版本 1910Configuration Manager version 1910

在版本 1910 中,当部署 Microsoft Edge 时,安装脚本会关闭 Microsoft Edge 的自动更新,因此可通过 Configuration Manager 对其进行管理。In version 1910, when Microsoft Edge is deployed, the installation script turns off automatic updates for Microsoft Edge so they can be managed with Configuration Manager. 可以使用组策略来更改此行为。You can change this behavior using Group Policy. 有关详细信息,请参阅计划 Microsoft Edge 部署Microsoft Edge 更新策略For more information, see Plan your deployment of Microsoft Edge and Microsoft Edge update policies.

Configuration Manager 版本 2002 及更高版本Configuration Manager version 2002 and later

从版本 2002 开始,可以创建 Microsoft Edge 应用程序,并将其设置为接收自动更新而不是禁用自动更新。Starting in version 2002, you can create a Microsoft Edge application that's set up to receive automatic updates rather than having automatic updates disabled. 此更改允许你选择使用 Configuration Manager 管理 Microsoft Edge 更新或允许 Microsoft Edge 自动更新。This change allows you to choose to manage updates for Microsoft Edge with Configuration Manager or allow Microsoft Edge to automatically update. 创建应用程序时,选择“Microsoft Edge 设置”页上的“允许 Microsoft Edge 自动更新最终用户设备上的客户端版本” 。When creating the application, select Allow Microsoft Edge to automatically update the version of the client on the end user's device on the Microsoft Edge Settings page. 如果以前使用过组策略来更改此行为,组策略将在安装 Microsoft Edge 的过程中覆盖由 Configuration Manager 进行的设置。If you previously used Group Policy to change this behavior, Group Policy will overwrite the setting made by Configuration Manager during installation of Microsoft Edge.

Microsoft Edge 自动更新设置Microsoft Edge automatic update setting

创建部署Create a deployment

使用内置应用程序体验创建 Microsoft Edge 应用程序,使 Microsoft Edge 更易于管理:Create a Microsoft Edge application using the built-in application experience, which makes Microsoft Edge easier to manage:

  1. 在控制台中的“软件库”下存在一个名为“Microsoft Edge 管理”的新节点 。In the console, under Software Library, there's a new node called Microsoft Edge Management.

  2. 从功能区中选择“创建 Microsoft Edge 应用程序”,或右键单击“Microsoft Edge 管理”节点 。Select Create Microsoft Edge Application from either the ribbon, or by right-clicking on the Microsoft Edge Management node.

    “Microsoft Edge 管理”节点右键单击操作

  3. 在向导的“应用程序设置”页上,指定应用内容的名称、说明和位置。On the Application Settings page of the wizard, specify a name, description, and location for the content for the app. 确保指定的内容位置文件夹为空。Ensure the content location folder you specify is empty.

  4. 在“Microsoft Edge 设置”页面上,选择:On the Microsoft Edge Settings page, select:

    • 要部署的通道The channel to deploy
    • 要部署的版本The version to deploy
    • 是否“允许 Microsoft Edge 自动更新最终用户设备上的客户端版本”(版本 2002 中已添加)If you want to Allow Microsoft Edge to automatically update the version of the client on the end user's device (added in version 2002)
  5. 在“部署”页上,确定是否要部署该应用程序。On the Deployment page, decide if you want to deploy the application. 如果选择“是”,则可以指定应用程序的部署设置。If you select Yes, you can specify your deployment settings for the application. 有关部署设置的详细信息,请参阅部署应用程序For more information about deployment settings, see Deploy applications.

  6. 在客户端设备上的“软件中心”中,用户可以查看和安装该应用程序。In Software Center on the client device, the user can see and install the application.

    部署向导中的“Microsoft Edge 设置”页

部署日志文件Log files for deployment

位置Location 日志Log 使用Use
站点服务器Site server SMSProv.logSMSProv.log 如果应用或部署创建失败,则显示详细信息。Shows details if the creation of the app or deployment fails.
变化不定Varies PatchDownloader.logPatchDownloader.log 如果内容下载失败,则显示详细信息Shows details if the content download fails
客户端Client AppEnforce.logAppEnforce.log 显示安装信息Shows installation information

更新 Microsoft EdgeUpdate Microsoft Edge

从 Configuration Manager 版本 1910 开始,“Microsoft Edge 管理”下将显示名为“所有 Microsoft Edge 更新”的节点 。Starting in Configuration Manager version 1910, you'll see a node called All Microsoft Edge updates under Microsoft Edge Management. 此节点有助于管理所有 Microsoft Edge 通道的更新。This node helps you manage updates for all Microsoft Edge channels.

  1. 若要获取 Microsoft Edge 的更新,请选中“更新”分类和“Microsoft Edge 产品”以进行同步To get updates for Microsoft Edge, ensure you have the Updates classification and the Microsoft Edge product selected for synchronization.

    在软件更新点属性中选择 Microsoft Edge 产品Select Microsoft Edge as product in software update point properties

  2. 在“软件库”工作区中,展开“Microsoft Edge 管理”,然后单击“所有 Microsoft Edge 更新”节点 。In the Software Library workspace, expand Microsoft Edge Management and click on the All Microsoft Edge Updates node.

  3. 如果需要,请单击功能区中的“同步软件更新”,开始同步。If needed, click Synchronize Software Updates in the ribbon to start a synchronization. 有关详细信息,请参阅同步软件更新For more information, see Synchronize software updates.

    所有 Microsoft Edge 更新节点

  4. 管理和部署 Microsoft Edge 更新,方式与任何其他更新一样,例如将其添加到自动部署规则中。Manage and deploy Microsoft Edge updates like any other update, such as adding them to your automatic deployment rule. 可以通过“所有 Microsoft Edge 更新”节点执行的一些常见更新任务包括:Some of the common updates tasks you can do from the All Microsoft Edge Updates node include:

Microsoft Edge 管理仪表板Microsoft Edge Management dashboard

(从版本 2002 中引入)(Introduced in version 2002)

从 Configuration Manager 2002 开始,Microsoft Edge 管理仪表板可让你深入了解 Microsoft Edge 和其他浏览器的使用情况。Starting in Configuration Manager 2002, the Microsoft Edge Management dashboard provides you insights on the usage of Microsoft Edge and other browsers. 在此仪表板中,你可以:In this dashboard, you can:

  • 查看已安装 Microsoft Edge 的设备数See how many of your devices have Microsoft Edge installed
  • 查看安装了不同 Microsoft Edge 版本的客户端数。See how many clients have different versions of Microsoft Edge installed.
    • 此图表不包括 Canary 通道。This chart doesn't include Canary Channel.
  • 查看跨设备安装的浏览器Have a view of the installed browsers across devices
  • 查看设备的首选浏览器Have a view of preferred browser by device
    • 目前对于 2002 版本,此图表为空。Currently for the 2002 release, this chart will be empty.

仪表板的先决条件Prerequisites for the dashboard

在下面的 Microsoft Edge 管理仪表板中的硬件清单类中启用以下属性:Enable the following properties in the below hardware inventory classes for the Microsoft Edge Management dashboard:

  • 已安装的软件 - 资产智能 (SMS_InstalledSoftware)Installed Software - Asset Intelligence (SMS_InstalledSoftware)

    • 软件代码Software Code
    • 产品名称Product Name
    • 产品版本Product Version
  • 默认浏览器 (SMS_DefaultBrowser)Default Browser (SMS_DefaultBrowser)

    • 浏览器程序 IDBrowser Program ID
  • 浏览器使用情况 (SMS_BrowserUsage)Browser Usage (SMS_BrowserUsage)

    • BrowserNameBrowserName
    • UsagePercentageUsagePercentage

查看仪表板View the dashboard

在“软件库”工作区中,单击“Microsoft Edge 管理”以查看仪表板 。From the Software Library workspace, click Microsoft Edge Management to see the dashboard. 单击“浏览”并选择其他集合,更改关系图数据的集合。Change the collection for the graph data by clicking Browse and choosing another collection. 下拉列表中默认包含五个最大的集合。By default your five largest collections are in the drop-down list. 如果选择的集合不在列表中,则新选择的集合将位于下拉列表中的底部位置。When you select a collection that isn't in the list, the newly selected collection takes the bottom spot on your drop-down list.

Microsoft Edge 管理仪表板Microsoft Edge Management dashboard

已知问题Known issues

硬件清单可能处理失败Hardware inventory may fail to process

设备的硬件清单可能处理失败。Hardware inventory for devices might fail to process. Dataldr.log 文件中可能会出现类似如下的错误:Errors similar to the one below may be seen in the Dataldr.log file:

Begin transaction: Machine=<machine>
*** [23000][2627][Microsoft][SQL Server Native Client 11.0][SQL Server]Violation of PRIMARY KEY constraint 'BROWSER_USAGE_HIST_PK'. Cannot insert duplicate key in object 'dbo.BROWSER_USAGE_HIST'. The duplicate key value is (XXXX, Y). : dbo.dBROWSER_USAGE_DATA
ERROR - SQL Error in
ERROR - is NOT retyrable.
Rollback transaction: XXXX

缓解措施: 若要暂时避开此问题,请禁止收集浏览器使用情况 (SMS_BrowerUsage) 硬件清单类。Mitigation: To work around this issue, disable the collection of the Browser Usage (SMS_BrowerUsage) hardware inventory class.

后续步骤Next steps

监视应用程序Monitor applications

监视软件更新Monitor software updates

管理和监视分阶段部署Manage and monitor phased deployments