Ahoy Matey,
lately I had a great workshop at a customer site, where we talked about Windows 10 browsing options meaning Microsoft Edge and Internet Explorer 11 in detail. I would love to tell you that everything is working perfectly and is well documented here but …well. Nevertheless, we can talk about it.
As always – first things first:
With Windows 10 Microsoft released a new browser called Microsoft Edge. This Browser is natively installed as an application and is the default browser for Windows 10. Furthermore we got 17 new Policies for the configuration and managment of Edge, which you can find below.
Windows Components\Microsoft Edge
or in the local machine hive of the registry:
HKLM\Software\Policies\Microsoft\MicrosoftEdge\
| Turn off Autofill | This setting lets you decide whether employees can use Autofill to automatically fill in form fields while using Microsoft Edge.Turning this setting on or not configuring it lets employees use Autofill in form fields.Turning this setting off stops employees from using Autofill in form fields. |
| Turn off Developer Tools | This setting lets you decide whether employees can use F12 Developer Tools on Microsoft Edge.Turning this setting on or not configuring it lets employees use F12 Developer Tools.Turning this setting off stops employees from using F12 Developer Tools. |
| Allow employees to send Do Not Track headers | This setting lets you decide whether employees can send Do Not Track headers to websites that request tracking info.Turning this setting on lets your employees send Do Not Track headers.Turning this setting off or not configuring it stops your employees from sending Do Not Track headers. |
| Turn off InPrivate browsing | This setting lets you decide whether employees can browse using InPrivate website browsing.Turning this setting on or not configuring it lets employees use InPrivate browsing on the corporate network.Turning this setting off stops employees from using InPrivate website browsing. |
| Turn off Password Manager | This setting lets you decide whether employees can save their passwords locally using Password Manager.Turning this setting on or not configuring it lets your employees use Password Manager.Turning this setting off stops your employees from using Password Manager. |
| Turn off Pop-up Blocker | This setting lets you decide whether to turn on Pop-up Blocker and whether to allow pop-ups to appear in secondary windows.Turning this setting on or not configuring it turns on the Pop-up Blocker which stops pop-ups from appearing.Turning this setting off turns off Pop-up Blocker and lets pop-ups appear. |
| Turn off address bar search suggestions | This setting lets you decide whether search suggestions should appear in the Address bar of Microsoft Edge.Turning this setting on or not configuring it lets your employees see search suggestions in the Address bar.Turning this setting off stops employees from seeing search suggestions in the Address bar. |
| Turn off the SmartScreen Filter | This setting lets you decide whether to turn on SmartScreen Filter. SmartScreen Filter provides warning messages to help protect your employees from potential phishing scams and malicious software.Turning this setting on or not configuring it turns on SmartScreen Filter.Turning this setting off turns off SmartScreen Filter. |
| Open a new tab with an empty tab | This policy setting specifies what happens when Microsoft Edge opens a new tab. By default a new tab page appears. If you disable this policy setting Microsoft Edge opens a new empty tab. Employees can’t change this option. If you enable or don’t configure this policy setting Microsoft Edge opens a new tab with a new tab page including Top Sites Top Sites with suggested content or a blank page. Employees can change what type of tab page appears. |
| Configure Cookies | This setting lets you configure how your company deals with cookies.Turning this setting on lets you decide to:Allow all cookies (default). Allows all cookies from all websites.Block only 3rd-party cookies. Blocks only cookies from 3rd-party websites.Block all cookies. Blocks all cookies from all websites.Turning this setting off allows all cookies from all websites. |
| Configure the Enterprise Mode Site List | This setting lets you configure whether your company uses Enterprise Mode and the Enterprise Mode Site List to address common compatibility problems with legacy websites.Turning this setting on lets Microsoft Edge look for the Enterprise Mode Site List XML file. This file includes the sites and domains that need to be viewed using Internet Explorer 11 and Enterprise Mode.Turning this setting off or not configuring it stops Microsoft Edge from using the Enterprise Mode Site List file. In this case employees might experience compatibility problems while using legacy websites. |
| Don’t allow WebRTC to share the LocalHost IP address | This setting lets you decide whether an employee’s LocalHost IP address shows while making phone calls using the WebRTC protocol.Turning this setting on hides an employee’s LocalHost IP address while making phone calls using WebRTC.Turning this setting off or not configuring it shows an employee’s LocalHost IP address while making phone calls using WebRTC. |
| Configure corporate Home pages | This setting lets you configure your corporate Home pages for domain-joined devices. Your employees can change this setting.Turning this setting on lets you configure one or more corporate Home pages. If this setting is turned on you must also include URLs to the pages separating multiple pages by using angle brackets and this format: <support.contoso.com><support.microsoft.com>Turning this setting off or not configuring it sets your default Home page to the webpage you specified in App settings. |
| Don’t allow SmartScreen Filter warning overrides | This setting lets you decide whether employees can override the SmartScreen Filter warnings about potentially malicious websites.Turning this setting on stops employees from ignoring the SmartScreen Filter warnings and blocks them from going to the site.Turning this setting off or not configuring it lets employees ignore the SmartScreen Filter warnings about potentially malicious websites and to continue to the site. |
| Don’t allow SmartScreen Filter warning overrides for unverified files | This setting lets you decide whether employees can override the SmartScreen Filter warnings about downloading unverified files.Turning this setting on stops employees from ignoring the SmartScreen Filter warnings and blocks them from downloading unverified files.Turning this setting off or not configuring it lets employees ignore the SmartScreen Filter warnings about unverified files and lets them continue the download process. |
| Configure Favorites | This setting lets you configure the default list of Favorites that appear for your employees. Your employees can change this setting adding or removing favorites at any time.Turning this setting on lets you configure what default Favorites appear for your employees. If this setting is turned on you must provide a list of Favorites in the Options section. The list is imported after your policy is deployed.Turning this setting off or not configuring it employees will see the Favorites that they set in Favorites hub. |
| Send all intranet sites to Internet Explorer 11 | This setting lets you decide whether your intranet sites should all open using Internet Explorer 11. This setting should only be used if there are known compatibility problems with Microsoft Edge.Turning this setting on automatically opens all intranet sites using Internet Explorer 11.Turning this setting off or not configuring it automatically opens all intranet sites using Microsoft Edge. |
In the next post we will have a look on how you can configure a Internet Explorer SiteList.xml
Cheers
Cpt.
Submit a comment on “Windows 10 – Microsoft Edge – Browser Policies”