ExtensionsExtensions

备注

你已获得 Microsoft Edge 版本 45 及更早版本的文档。You've reached the documentation for Microsoft Edge version 45 and earlier. 若要查看 Microsoft Edge 版本 77 或更高版本的文档,请转到 Microsoft Edge 文档登录页面To see the documentation for Microsoft Edge version 77 or later, go to the Microsoft Edge documentation landing page.

目前,Microsoft Edge 允许用户添加或个性化扩展,并卸载扩展。Currently, Microsoft Edge allows users to add or personalize, and uninstall extensions. 可防止用户卸载扩展或旁加载扩展,这并不妨碍使用 Add-AppxPackage 通过 PowerShell 进行旁加载。You can prevent users from uninstalling extensions or sideloading of extensions, which does not prevent sideloading using Add-AppxPackage via PowerShell. 允许旁加载扩展安装和运行未验证的扩展。Allowing sideloading of extensions installs and runs unverified extensions.

除非策略中另有说明,否则你可以在组策略编辑器的以下位置找到 Microsoft Edge 组策略设置:You can find the Microsoft Edge Group Policy settings in the following location of the Group Policy Editor unless otherwise noted in the policy:

      Computer Configuration\Administrative Templates\Windows Components\Microsoft Edge\      Computer Configuration\Administrative Templates\Windows Components\Microsoft Edge\

允许扩展Allow Extensions

支持的版本:Windows 10 版 Microsoft Edge,1607 版本或更高版本Supported versions: Microsoft Edge on Windows 10, version 1607 or later
默认设置:已启用或未配置(允许)Default setting: Enabled or not configured (Allowed)

默认情况下,Microsoft Edge 允许用户在 Microsoft Edge 中添加或个性化扩展。Microsoft Edge allows users to add or personalize extensions in Microsoft Edge by default. 通过此策略,你可以配置 Microsoft 以防止用户添加或个性化扩展。With this policy, you can configure Microsoft to prevent users from adding or personalizing extensions.

支持的数值Supported values

组策略Group Policy MDMMDM 注册表Registry 描述Description
DisabledDisabled 00 00 已阻止Prevented
已启用或未配置Enabled or not configured
(默认值)(default)
11 11 允许Allowed

ADMX 信息和设置ADMX info and settings

ADMX 信息ADMX info

  • GP 中文名称: 允许扩展GP English name: Allow Extensions
  • GP 名称: AllowExtensionsGP name: AllowExtensions
  • GP 路径: Windows Components/Microsoft EdgeGP path: Windows Components/Microsoft Edge
  • GP ADMX 文件名: MicrosoftEdge.admxGP ADMX file name: MicrosoftEdge.admx

MDM 设置MDM settings

  • MDM 名称: Browser/AllowExtensionsMDM name: Browser/AllowExtensions
  • 受支持的设备: 桌面设备Supported devices: Desktop
  • URI 完整路径:./Vendor/MSFT/Policy/Config/Browser/AllowExtensionsURI full path: ./Vendor/MSFT/Policy/Config/Browser/AllowExtensions
  • 数据类型: 整数Data type: Integer

注册表设置Registry settings

  • 路径: HKLM\Software\Policies\Microsoft\MicrosoftEdge\ExtensionsPath: HKLM\Software\Policies\Microsoft\MicrosoftEdge\Extensions
  • 值名称: ExtensionsEnabledValue name: ExtensionsEnabled
  • 值类型: REG_DWORDValue type: REG_DWORD

Microsoft 浏览器扩展策略:本文介绍了扩展或修改 Microsoft Edge 和 Internet Explorer 的行为或用户体验的受支持的机制,或这些浏览器显示的内容。Microsoft browser extension policy: This article describes the supported mechanisms for extending or modifying the behavior or user experience of Microsoft Edge and Internet Explorer, or the content these browsers display. 本文中未明确列出的技术被视为 不受支持Techniques that aren't explicitly listed in this article are considered to be unsupported.


允许旁加载扩展Allow sideloading of extensions

支持的版本:Windows 10 版 Microsoft Edge、版本 1809Supported versions: Microsoft Edge on Windows 10, version 1809
默认设置:已启用(允许)Default setting: Enabled (Allowed)

默认情况下,Microsoft Edge 允许旁加载,这将安装和运行未经验证的扩展。By default, Microsoft Edge allows sideloading, which installs and runs unverified extensions. 禁用此策略可阻止旁加载扩展,但不阻止通过 PowerShell Add-AppxPackage旁加载。Disabling this policy prevents sideloading of extensions but does not prevent sideloading using Add-AppxPackage via PowerShell. 仅可以通过 Microsoft Store (使用 Add-AppxPackage) 安装扩展,包括适用于企业) 的应用商店 (如公司门户) 或 PowerShell) (。You can only install extensions through Microsoft store (including a store for business), enterprise storefront (such as Company Portal) or PowerShell (using Add-AppxPackage).

支持的数值Supported values

组策略Group Policy MDMMDM 注册表Registry 描述Description 最受限制Most restricted
已禁用或未配置Disabled or not configured 00 00 已阻止。Prevented. 禁用不会阻止使用 Add-AppxPackage 通过 PowerShell 来旁加载扩展名。Disabling does not prevent sideloading of extensions using Add-AppxPackage via PowerShell. 为了避免这种情况,必须启用“允许开发 Windows 应用商店应用并从集成开发环境 (IDE) 安装这些应用”**** 组策略,可在以下位置找到这一组策略:To prevent this, you must enable the Allows development of Windows Store apps and installing them from an integrated development environment (IDE) group policy, which you can find:

计算机配置\管理模板\Windows 组件\应用包部署Computer Configuration\Administrative Templates\Windows Components\App Package Deployment\

对于 MDM 设置,请将“ApplicationManagement/AllowDeveloperUnlock”**** 策略设置为 1(已启用)。For the MDM setting, set the ApplicationManagement/AllowDeveloperUnlock policy to 1 (enabled).

最受限制的数值
已启用Enabled
(默认值)(default)
11 11 允许。Allowed.

ADMX 信息和设置ADMX info and settings

ADMX 信息ADMX info

  • GP 中文名称: 允许旁加载扩展GP English name: Allow sideloading of Extensions
  • GP 名称: AllowSideloadingOfExtensionsGP name: AllowSideloadingOfExtensions
  • GP 路径: Windows Components/Microsoft EdgeGP path: Windows Components/Microsoft Edge
  • GP ADMX 文件名: MicrosoftEdge.admxGP ADMX file name: MicrosoftEdge.admx

MDM 设置MDM settings

  • MDM 名称: Browser/AllowSideloadingExtensionsMDM name: Browser/AllowSideloadingExtensions
  • 受支持的设备: 桌面设备Supported devices: Desktop
  • URI 完整路径:./Vendor/MSFT/Policy/Config/Browser/AllowSideloadingExtensionsURI full path: ./Vendor/MSFT/Policy/Config/Browser/AllowSideloadingExtensions
  • 数据类型: 整数Data type: Integer

注册表设置Registry settings

  • 路径: HKLM\Software\Policies\Microsoft\MicrosoftEdge\ExtensionsPath: HKLM\Software\Policies\Microsoft\MicrosoftEdge\Extensions
  • 值名称: AllowSideloadingOfExtensionsValue name: AllowSideloadingOfExtensions
  • 值类型: REG_DWORDValue type: REG_DWORD

启用设备进行开发:访问开发功能以及其他针对开发人员的设置,以使你能够开发、测试和调试应用。Enable your device for development: Access development features, along with other developer-focused settings to make it possible for you to develop, test, and debug apps. 了解如何配置开发环境、开发人员模式和旁加载之间的区别以及开发人员模式的安全风险。Learn how to configure your environment for development, the difference between Developer Mode and sideloading, and the security risks of Developer mode.


阻止关闭所需扩展Prevent turning off required extensions

支持的版本:Windows 10 版 Microsoft Edge、版本 1809Supported versions: Microsoft Edge on Windows 10, version 1809
默认设置:已禁用或未配置(允许)Default setting: Disabled or not configured (Allowed)

Microsoft Edge默认情况下,用户可以卸载扩展。Microsoft Edge allows users to uninstall extensions by default. 启用此策略可阻止用户卸载扩展,但允许用户配置此策略中定义的扩展选项,例如允许 InPrivate 浏览。Enabling this policy prevents users from uninstalling extensions but lets them configure options for extensions defined in this policy, such as allowing InPrivate browsing. 扩展的未来更新请求的其他任何权限将自动授予。Any additional permissions requested by future updates of the extension gets granted automatically. 如果已启用此策略并且现在要禁用它,则禁用此策略 (此策略中) PFN 的扩展包系列名称列表将被忽略。If you enabled this policy and now you want to disable it, the list of extension package family names (PFNs) defined in this policy get ignored after disabling this policy.

支持的数值Supported values

组策略Group Policy 描述Description
已禁用或未配置Disabled or not configured
(默认值)(default)
允许。Allowed. 用户可以卸载扩展。Users can uninstall extensions. 如果以前启用了此策略,并决定禁用它,则该策略中定义的 PFN 扩展列表将被忽略。If you previously enabled this policy and you decide to disable it, the list of extension PFNs defined in this policy get ignored.
已启用Enabled 提供用分号分隔的 PFN 扩展列表。Provide a semi-colon delimited list of extension PFNs. 例如,添加以下 OneNote Web Clipper 和 Office 扩展会阻止用户将其关闭:For example, adding the following OneNote Web Clipper and Office extension prevents users from turning it off:

Microsoft.OneNoteWebClipper8wekyb3d8bbwe;Microsoft.OfficeOnline8wekyb3d8bbweMicrosoft.OneNoteWebClipper8wekyb3d8bbwe;Microsoft.OfficeOnline8wekyb3d8bbwe

定义扩展列表后,可通过任何可用的企业部署通道(如 Microsoft Intune)进行部署。After defining the list of extensions, you deploy them through any available enterprise deployment channel, such as Microsoft Intune.

从列表中删除扩展不会自动从用户的计算机中卸载扩展。Removing extensions from the list does not uninstall the extension from the user’s computer automatically. 若要卸载扩展,请使用任何可用的企业部署通道。To uninstall the extension, use any available enterprise deployment channel. 如果启用“允许使用开发人员工具”策略,则此策略不会阻止用户调试和更改扩展上的逻辑。If you enable the Allow Developer Tools policy, then this policy does not prevent users from debugging and altering the logic on an extension.


ADMX 信息和设置ADMX info and settings

ADMX 信息ADMX info

  • GP 中文名称: 阻止关闭所需的扩展GP English name: Prevent turning off required extensions
  • GP 名称: PreventTurningOffRequiredExtensionsGP name: PreventTurningOffRequiredExtensions
  • GP 路径: Windows Components/Microsoft EdgeGP path: Windows Components/Microsoft Edge
  • GP ADMX 文件名: MicrosoftEdge.admxGP ADMX file name: MicrosoftEdge.admx

MDM 设置MDM settings

注册表设置Registry settings

  • 路径: HKLM\Software\Policies\Microsoft\MicrosoftEdge\ExtensionsPath: HKLM\Software\Policies\Microsoft\MicrosoftEdge\Extensions
  • 值名称: PreventTurningOffRequiredExtensionsValue name: PreventTurningOffRequiredExtensions
  • 值类型: REG_SZValue type: REG_SZ

允许使用开发人员工具Allow Developer Tools: Microsoft Edge 允许用户在默认情况下使用 F12 开发人员工具来构建和调试网页。Microsoft Edge allows users to use the F12 developer tools to build and debug web pages by default. 使用此策略,你可以配置 Microsoft Edge 以防止用户使用 F12 开发人员工具。With this policy, you can configure Microsoft Edge to prevent users from using the F12 developer tools.