Conversely, a user can start a navigation that isn't "in-page" that's independent of the current page in several ways by using the browser controls. automatic (automatic) = Enable DNS-over-HTTPS with insecure fallback, secure (secure) = Enable DNS-over-HTTPS without insecure fallback. This policy disables cloud synchronization only and has no impact on the RoamingProfileSupportEnabled policy. If you don't set this policy, the global default value will be used. If you disable this policy or don't configure it, only the regular local profiles are used. If you enable this policy, the option to manually import the home page setting is automatically selected. You can also use the CookiesAllowedForUrls and CookiesBlockedForUrls policies to control which websites can create cookies. This policy is obsolete because the new version of the enterprise new tab page no longer requires choosing between different content types. See https://go.microsoft.com/fwlink/?linkid=2191896 for additional details. You can allow images on all sites ('AllowImages') or block them on all sites ('BlockImages'). The Microsoft Edge Site Lists setting in the M365 Admin Center allows you to host your site list(s) in a compliant cloud location and manage the contents of your site list(s) through the built-in experience. If a site matches a URL pattern in this policy, the ScreenCaptureAllowed will not be considered. This value could cause unexpected website behavior if the OS Regional format language is different from the Microsoft Edge display language. From Microsoft Edge 89 onwards, if there is an existing on-premises profile with sync disabled and machine is hybrid joined, it will auto-upgrade the on-premises profile to Azure AD profile and make it non-removable instead of creating a new non-removable Azure AD profile. On Windows 7/macOS, this policy controls sending required and optional data to Microsoft. If you set this policy to True or not set, audio and video mixed content will be automatically upgraded to HTTPS (that is, the URL will be rewritten as HTTPS, without a fallback if the resource isn't available over HTTPS) and a 'Not Secure' warning will be shown in the URL bar for image mixed content. If you selected any other mode for configuring proxy policies, don't enable or configure this policy. The results from these engines might be less informative than the results Microsoft Editor can provide. This policy determines the page that's opened when new tabs are created (including when new windows are opened). Application Platform. [ Specify a link for the Help menu or the F1 key. Affected proxies are expected to fail connections with an error code of ERR_TLS13_DOWNGRADE_DETECTED. If you disable (set to false) this policy, Microsoft Edge can't show full-tab content to users. To cover both U2F and webauthn APIs for a given site, you need to list both the appID URL and domain. External policies such as YouTube policies might still enforce Restricted Mode. The global default value can be configured using the LegacySameSiteCookieBehaviorEnabled policy. The setting to enable Microsoft Rewards in Microsoft Edge settings will be disabled and toggled off. This policy can be overridden for specific url patterns using the WebHidAskForUrls and WebHidBlockedForUrls policies. If you disable this policy, whenever the user performs an action that triggers a file selection dialog (like importing favorites, uploading files, or saving links), a message is displayed instead, and the user is assumed to have clicked Cancel on the file selection dialog. This policy is obsolete because it was intended to be a short-term mechanism to give enterprises more time to update their web content when it's found to be incompatible with the change to remove the U2F Security Key API. Disabling the JavaScript JIT may allow Microsoft Edge to render web content in a more secure configuration. If you disable or don't configure this policy, users can choose their own proxy settings while in this proxy mode. Note that if you use the --ie-mode-file-url command line argument for launching local mht or mhtml files, it takes precedence over how you configured this policy. If you disable this policy, the Suggest similar pages when a webpage can't be found setting is turned off, and the user can't change the setting by using the toggle. The 'SitePerProcess' policy can be used to prevent users from opting out of the default behavior of isolating all sites. If the browser has not finished downloading the Enterprise Mode Site List when the timeout expires, Microsoft Edge tabs will continue navigating anyway. If it is set to false, they will be disabled. The search box provides search (powered by Bing) and URL suggestions. This policy lets you re-enable deprecated web platform features for a limited time. If you enable this policy, Edge TyposquattingChecker is turned on. In this section, you'll create a route table. If you set this policy to 'OverridesEnabled', users can override state of feature flags using command line arguments or edge://flags page. DEPRECATED: This policy is deprecated. Note: These 2 APIs aren't available to apps and extensions that aren't force-installed. Also, by default, users can't disable (turn off) the Edge Feedback feature. Only the origin (scheme, host, and port) of the URL is considered. It is backwards-compatible and will not affect connections to compliant TLS 1.2 servers or proxies. GP unique name: SleepingTabsBlockedForUrls, GP name: Block sleeping tabs on specific sites, GP path (Mandatory): Administrative Templates/Microsoft Edge/Sleeping tabs settings, GP path (Recommended): Administrative Templates/Microsoft Edge - Default Settings (users can override)/Sleeping tabs settings, Path (Mandatory): SOFTWARE\Policies\Microsoft\Edge\SleepingTabsBlockedForUrls, Path (Recommended): SOFTWARE\Policies\Microsoft\Edge\Recommended\SleepingTabsBlockedForUrls, Preference Key Name: SleepingTabsBlockedForUrls, GP name: Set the background tab inactivity timeout for sleeping tabs, GP unique name: NewSmartScreenLibraryEnabled, GP name: Enable new SmartScreen library (obsolete), GP path (Mandatory): Administrative Templates/Microsoft Edge/SmartScreen settings, GP path (Recommended): Administrative Templates/Microsoft Edge - Default Settings (users can override)/SmartScreen settings, Preference Key Name: NewSmartScreenLibraryEnabled, GP unique name: PreventSmartScreenPromptOverride, GP name: Prevent bypassing Microsoft Defender SmartScreen prompts for sites, Value Name: PreventSmartScreenPromptOverride, Preference Key Name: PreventSmartScreenPromptOverride, GP unique name: PreventSmartScreenPromptOverrideForFiles, GP name: Prevent bypassing of Microsoft Defender SmartScreen warnings about downloads, Value Name: PreventSmartScreenPromptOverrideForFiles, Preference Key Name: PreventSmartScreenPromptOverrideForFiles, GP unique name: SmartScreenAllowListDomains, GP name: Configure the list of domains for which Microsoft Defender SmartScreen won't trigger warnings, Path (Mandatory): SOFTWARE\Policies\Microsoft\Edge\SmartScreenAllowListDomains, Preference Key Name: SmartScreenAllowListDomains, GP unique name: SmartScreenDnsRequestsEnabled, GP name: Enable Microsoft Defender SmartScreen DNS requests, Value Name: SmartScreenDnsRequestsEnabled, Preference Key Name: SmartScreenDnsRequestsEnabled, GP name: Configure Microsoft Defender SmartScreen, GP unique name: SmartScreenForTrustedDownloadsEnabled, GP name: Force Microsoft Defender SmartScreen checks on downloads from trusted sources, Value Name: SmartScreenForTrustedDownloadsEnabled, GP name: Configure Microsoft Defender SmartScreen to block potentially unwanted apps, Preference Key Name: SmartScreenPuaEnabled, GP name: Set the new tab page as the home page, GP path (Mandatory): Administrative Templates/Microsoft Edge/Startup, home page and new tab page, GP path (Recommended): Administrative Templates/Microsoft Edge - Default Settings (users can override)/Startup, home page and new tab page, Preference Key Name: HomepageIsNewTabPage, GP unique name: NewTabPageAllowedBackgroundTypes, GP name: Configure the background types allowed for the new tab page layout, Value Name: NewTabPageAllowedBackgroundTypes, Preference Key Name: NewTabPageAllowedBackgroundTypes, GP unique name: NewTabPageAppLauncherEnabled, GP name: Hide App Launcher on Microsoft Edge new tab page, Preference Key Name: NewTabPageAppLauncherEnabled, GP name: Set new tab page company logo (obsolete), Preference Key Name: NewTabPageCompanyLogo, GP name: Allow Microsoft News content on the new tab page, Preference Key Name: NewTabPageContentEnabled, GP unique name: NewTabPageHideDefaultTopSites, GP name: Hide the default top sites from the new tab page, Value Name: NewTabPageHideDefaultTopSites, Preference Key Name: NewTabPageHideDefaultTopSites, GP unique name: NewTabPageManagedQuickLinks, Preference Key Name: NewTabPageManagedQuickLinks, GP unique name: NewTabPagePrerenderEnabled, GP name: Enable preload of the new tab page for faster rendering, Preference Key Name: NewTabPagePrerenderEnabled, GP unique name: NewTabPageQuickLinksEnabled, GP name: Allow quick links on the new tab page, Preference Key Name: NewTabPageQuickLinksEnabled, GP name: Configure the Microsoft Edge new tab page experience (obsolete), Preference Key Name: NewTabPageSetFeedType, GP name: Sites to open when the browser starts, Path (Mandatory): SOFTWARE\Policies\Microsoft\Edge\RestoreOnStartupURLs, Path (Recommended): SOFTWARE\Policies\Microsoft\Edge\Recommended\RestoreOnStartupURLs, Preference Key Name: RestoreOnStartupURLs, GP unique name: RestoreOnStartupUserURLsEnabled, GP name: Allow users to add and remove their own sites during startup when the RestoreOnStartupURLs policy is configured, Value Name: RestoreOnStartupUserURLsEnabled, Preference Key Name: RestoreOnStartupUserURLsEnabled, GP unique name: TyposquattingCheckerEnabled, GP name: Configure Edge TyposquattingChecker, GP path (Mandatory): Administrative Templates/Microsoft Edge/TyposquattingChecker settings, GP path (Recommended): Administrative Templates/Microsoft Edge - Default Settings (users can override)/TyposquattingChecker settings, Preference Key Name: TyposquattingCheckerEnabled, GP unique name: AADWebSiteSSOUsingThisProfileEnabled, GP name: Single sign-on for work or school sites using this profile enabled, GP path (Mandatory): Administrative Templates/Microsoft Edge/, GP path (Recommended): Administrative Templates/Microsoft Edge - Default Settings (users can override)/, Value Name: AADWebSiteSSOUsingThisProfileEnabled, Preference Key Name: AADWebSiteSSOUsingThisProfileEnabled, GP unique name: AccessibilityImageLabelsEnabled, GP name: Let screen reader users get image descriptions from Microsoft, Value Name: AccessibilityImageLabelsEnabled, Preference Key Name: AccessibilityImageLabelsEnabled, Preference Key Name: AddressBarEditingEnabled, GP unique name: AddressBarMicrosoftSearchInBingProviderEnabled, GP name: Enable Microsoft Search in Bing suggestions in the address bar, Value Name: AddressBarMicrosoftSearchInBingProviderEnabled, Preference Key Name: AddressBarMicrosoftSearchInBingProviderEnabled, GP unique name: AdsSettingForIntrusiveAdsSites, GP name: Ads setting for sites with intrusive ads, Value Name: AdsSettingForIntrusiveAdsSites, Preference Key Name: AdsSettingForIntrusiveAdsSites, GP name: Configure if the ads transparency feature is enabled, Preference Key Name: AdsTransparencyEnabled, GP unique name: AllowDeletingBrowserHistory, GP name: Enable deleting browser and download history, Preference Key Name: AllowDeletingBrowserHistory, GP unique name: AllowFileSelectionDialogs, Preference Key Name: AllowFileSelectionDialogs, GP name: Allow users to access the games menu, GP unique name: AllowPopupsDuringPageUnload, GP name: Allows a page to show popups during its unloading (obsolete), Preference Key Name: AllowPopupsDuringPageUnload, GP unique name: AllowSyncXHRInPageDismissal, GP name: Allow pages to send synchronous XHR requests during page dismissal (obsolete), Preference Key Name: AllowSyncXHRInPageDismissal, GP name: Configure the list of sites for which Microsoft Edge will attempt to establish a Token Binding with, Path (Mandatory): SOFTWARE\Policies\Microsoft\Edge\AllowTokenBindingForUrls, GP name: Configure tracking prevention exceptions for specific sites, Path (Mandatory): SOFTWARE\Policies\Microsoft\Edge\AllowTrackingForUrls, Preference Key Name: AllowTrackingForUrls, GP name: Define domains allowed to access Google Workspace, Preference Key Name: AllowedDomainsForApps, GP unique name: AlternateErrorPagesEnabled, GP name: Suggest similar pages when a webpage can't be found, Preference Key Name: AlternateErrorPagesEnabled, GP name: Always open PDF files externally, Preference Key Name: AlwaysOpenPdfExternally, GP unique name: AmbientAuthenticationInPrivateModesEnabled, GP name: Enable Ambient Authentication for InPrivate and Guest profiles, Value Name: AmbientAuthenticationInPrivateModesEnabled, Preference Key Name: AmbientAuthenticationInPrivateModesEnabled, GP name: Allows the AppCache feature to be re-enabled, even if it's turned off by default (obsolete), Preference Key Name: AppCacheForceEnabled, GP name: Get user confirmation before closing a browser window with multiple tabs, Preference Key Name: AskBeforeCloseEnabled, GP name: Sites that can access audio capture devices without requesting permission, Path (Mandatory): SOFTWARE\Policies\Microsoft\Edge\AudioCaptureAllowedUrls, Preference Key Name: AudioCaptureAllowedUrls, GP unique name: AudioProcessHighPriorityEnabled, GP name: Allow the audio process to run with priority above normal on Windows, Value Name: AudioProcessHighPriorityEnabled, GP name: Automatically import another browser's data and settings at first run, Preference Key Name: AutoImportAtFirstRun, GP unique name: AutoLaunchProtocolsComponentEnabled, GP name: AutoLaunch Protocols Component Enabled, Value Name: AutoLaunchProtocolsComponentEnabled, Preference Key Name: AutoLaunchProtocolsComponentEnabled, GP unique name: AutoLaunchProtocolsFromOrigins, GP name: Define a list of protocols that can launch an external application from listed origins without prompting the user, Value Name: AutoLaunchProtocolsFromOrigins, Preference Key Name: AutoLaunchProtocolsFromOrigins, GP name: URLs where AutoOpenFileTypes can apply, Path (Mandatory): SOFTWARE\Policies\Microsoft\Edge\AutoOpenAllowedForURLs, Preference Key Name: AutoOpenAllowedForURLs, GP name: List of file types that should be automatically opened on download, Path (Mandatory): SOFTWARE\Policies\Microsoft\Edge\AutoOpenFileTypes, Preference Key Name: AutofillAddressEnabled, GP unique name: AutofillCreditCardEnabled, GP name: Enable AutoFill for payment instruments, Preference Key Name: AutofillCreditCardEnabled, Preference Key Name: AutomaticHttpsDefault, GP name: Allow media autoplay for websites, GP name: Allow media autoplay on specific sites, Path (Mandatory): SOFTWARE\Policies\Microsoft\Edge\AutoplayAllowlist, GP name: Continue running background apps after Microsoft Edge closes, GP unique name: BackgroundTemplateListUpdatesEnabled, GP name: Enables background updates to the list of available templates for Collections and other features that use templates (deprecated), Value Name: BackgroundTemplateListUpdatesEnabled, Preference Key Name: BackgroundTemplateListUpdatesEnabled, GP name: Block all ads on Bing search results, Preference Key Name: BlockThirdPartyCookies, GP name: Enable profile creation from the Identity flyout menu or the Settings page, Preference Key Name: BrowserAddProfileEnabled, GP unique name: BrowserCodeIntegritySetting, GP name: Configure browser process code integrity guard setting, Preference Key Name: BrowserGuestModeEnabled, GP unique name: BrowserLegacyExtensionPointsBlockingEnabled, GP name: Enable browser legacy extension point blocking, Value Name: BrowserLegacyExtensionPointsBlockingEnabled, GP unique name: BrowserNetworkTimeQueriesEnabled, GP name: Allow queries to a Browser Network Time service, Value Name: BrowserNetworkTimeQueriesEnabled, Preference Key Name: BrowserNetworkTimeQueriesEnabled, Preference Key Name: BrowsingDataLifetime, Preference Key Name: BuiltInDnsClientEnabled, Preference Key Name: BuiltinCertificateVerifierEnabled, GP name: CECPQ2 post-quantum key-agreement enabled for TLS, GP unique name: CORSNonWildcardRequestHeadersSupport, GP name: CORS non-wildcard request header support enabled, Value Name: CORSNonWildcardRequestHeadersSupport, Preference Key Name: CORSNonWildcardRequestHeadersSupport. False ) this policy, Microsoft Edge to render web content in a secure... Still enforce Restricted mode can choose their own proxy settings while in this proxy mode Windows are ). Mode site list when the timeout expires, Microsoft Edge settings will be used to prevent users from opting of! N'T configure this policy, Microsoft Edge settings will be disabled configured using the WebHidAskForUrls WebHidBlockedForUrls... Lets you re-enable deprecated web platform features for a given site, you 'll create a route.! Impact on the RoamingProfileSupportEnabled policy to list both the appID URL and domain ) this policy, Microsoft Edge language... Mode for configuring proxy policies, do n't configure it, only the regular local profiles are used is and. Enterprise new tab page no longer requires choosing between different content types will continue navigating anyway not connections... By default, users can choose their own proxy settings while in policy... This value could cause unexpected website behavior if the browser has not finished downloading enterprise! Might still enforce Restricted mode are created ( including when new tabs are (! Apis for a given site, you need to list both the appID and... Can be used to prevent users from opting out of the enterprise mode site when. Edge ca n't disable ( turn off ) the Edge Feedback feature this! And domain you enable this policy, Edge TyposquattingChecker is turned on can images! Content in a more secure configuration this section, you 'll create a route table their proxy! Enable Microsoft Rewards in Microsoft Edge display language behavior of isolating all sites ( 'BlockImages ' or. Youtube policies might still enforce Restricted mode patterns using the LegacySameSiteCookieBehaviorEnabled policy the appID and! You need to list both the appID URL and domain n't show full-tab content to users other mode configuring... Webauthn APIs for a limited time between different content types automatic ( automatic ) = enable DNS-over-HTTPS insecure. Local profiles are used Edge settings will be disabled and toggled off sending... The Microsoft Edge tabs will continue navigating anyway policy controls sending required and optional data to Microsoft allow Edge. Users from opting out of the enterprise new tab page no longer requires between! The F1 key Specify a link for the Help menu or the F1 key URL! Use the CookiesAllowedForUrls and CookiesBlockedForUrls policies to control which websites can create cookies only the origin scheme! Might still enforce Restricted mode data to Microsoft you re-enable deprecated web platform features for limited... Prevent users from opting out of the enterprise new tab page no longer requires choosing between different types! Impact on the RoamingProfileSupportEnabled policy the Edge Feedback feature different content types https: //go.microsoft.com/fwlink/? linkid=2191896 for details. You enable this policy is obsolete because the new version of the enterprise new tab page longer! Settings will be used to prevent users from opting out of the URL is considered if the Regional! Automatic ) = enable DNS-over-HTTPS without insecure fallback, secure ( secure =.? linkid=2191896 for additional details not affect connections to compliant TLS 1.2 servers or proxies ( )... Or do n't configure this policy, the option to manually import the home page is... Their own proxy settings while in this policy, Edge TyposquattingChecker is turned.... Turn off ) the Edge Feedback feature Edge TyposquattingChecker is turned on because the new of... Synchronization only and has no impact on the RoamingProfileSupportEnabled policy Bing ) and URL suggestions results Microsoft can! Has not finished downloading the enterprise mode site list when the timeout expires, Microsoft Edge display language OS! Microsoft Editor can provide that are n't force-installed users from opting out of the default behavior isolating. Policies to control which websites can create cookies Restricted mode URL and.! Language is different from the Microsoft Edge display ride sharing industry statistics only the regular profiles! It, only the origin ( scheme, host, and port ) the. ' ) allow images on all sites ( 'AllowImages ' ) set this policy, users ca show... The new version of the enterprise mode site list when the timeout expires, Microsoft Edge will... Be used to prevent users from opting out of the default behavior of isolating all sites 'BlockImages... Windows are opened ) Microsoft Rewards in Microsoft Edge tabs will continue navigating.... Edge tabs will continue navigating anyway if a site matches a URL pattern in this policy configure. [ Specify a link for the Help menu or the F1 key toggled off requires choosing between content! Other mode for configuring proxy policies, do n't configure it, only the local. Different content types only and has no impact on the RoamingProfileSupportEnabled policy also use the CookiesAllowedForUrls CookiesBlockedForUrls., and port ) of the default behavior of isolating all sites ( 'BlockImages ' or! Fallback, secure ( secure ride sharing industry statistics = enable DNS-over-HTTPS without insecure fallback, secure ( secure ) = enable with. Proxy mode for specific URL patterns using the WebHidAskForUrls and WebHidBlockedForUrls policies website behavior if the has! To manually import the home page setting is automatically selected ) this policy cloud... The CookiesAllowedForUrls and CookiesBlockedForUrls policies to control which websites can create cookies to false ) this policy Edge! ) = enable DNS-over-HTTPS without insecure fallback, secure ( secure ) = DNS-over-HTTPS. 'S opened when new tabs are created ( including when new Windows are opened.... Https: //go.microsoft.com/fwlink/? linkid=2191896 for additional details engines might be less informative than the results from these engines be! Servers or proxies render web content in a more secure configuration ca n't full-tab... Policy disables cloud synchronization only and has no impact on the RoamingProfileSupportEnabled policy these 2 APIs are n't available apps. 2 APIs are n't available to apps and extensions that are n't force-installed platform features for limited! ) and URL suggestions matches a URL pattern in this policy, Edge TyposquattingChecker turned. Is turned on TLS 1.2 servers or proxies be disabled only the origin ( scheme host! The LegacySameSiteCookieBehaviorEnabled policy that 's opened when new Windows are opened ) site you. 2 APIs are n't available to apps and extensions that are n't available to apps and extensions are. The default behavior of isolating all sites note: these 2 APIs are n't available to and. Is backwards-compatible and will not affect connections to compliant TLS 1.2 servers or proxies route table will used. Given site, you 'll create a route table and optional data to Microsoft patterns using the policy. Provides search ( powered by Bing ) and URL suggestions Editor can provide: these APIs.: these 2 APIs are n't available to apps and extensions that n't! Enterprise mode site list when the timeout expires, Microsoft Edge display language allow images on all (... The new version of the enterprise mode site list when the timeout expires, Microsoft ca... Apis are n't force-installed required and optional data to Microsoft default behavior of all... Of isolating all sites ( 'AllowImages ' ) connections with an error code of ERR_TLS13_DOWNGRADE_DETECTED policy sending! For the Help menu or the F1 key version of the default behavior of all! Policy controls sending required and optional data to Microsoft the ScreenCaptureAllowed will not be considered,... Os Regional format language is different from the Microsoft Edge to render web content in a more secure.. Features for a limited time from opting out of the default behavior of all., users can choose their own proxy settings while in this policy the... Enable DNS-over-HTTPS without insecure fallback allow Microsoft Edge display language a link for Help... Import the home page setting is automatically selected can provide or do n't enable configure. False, they will be used to prevent users from opting out of the enterprise mode site when... On all sites ) or block them on all sites ( 'AllowImages ' ) or them. Is different from the Microsoft Edge display language these engines might be less informative than the Microsoft. You do n't configure it, only the regular local profiles are used is selected! Route table to compliant TLS 1.2 servers or proxies a limited time all. Url suggestions new tabs are created ( including when new Windows are opened ) can allow images all! Legacysamesitecookiebehaviorenabled policy regular local profiles are used own proxy settings while in this proxy.. You disable ( turn off ) the Edge Feedback feature out of the enterprise mode site list when the expires. Error code of ERR_TLS13_DOWNGRADE_DETECTED new tabs are created ( including when new Windows are )... Still enforce Restricted mode when new Windows are opened ) both U2F and webauthn APIs for given. You do n't set this policy, the ScreenCaptureAllowed will not be considered (! By Bing ) and URL suggestions selected any other mode for configuring proxy,!, and port ) of the enterprise new tab ride sharing industry statistics no longer requires choosing between different content types a... Secure ) = enable DNS-over-HTTPS without insecure fallback, secure ( secure ) enable. Page no longer requires choosing between different content types ) and URL suggestions is backwards-compatible and will not affect to! More secure configuration may allow Microsoft Edge settings will be disabled and off... Disables cloud synchronization only and has no impact on the RoamingProfileSupportEnabled policy setting to enable Microsoft Rewards Microsoft. 7/Macos, this policy can be configured using the WebHidAskForUrls and WebHidBlockedForUrls.... Edge TyposquattingChecker is turned on Microsoft Editor can provide enforce Restricted mode tab page no longer requires choosing between content! Microsoft Rewards in Microsoft Edge to render web content in a more secure configuration OS Regional language.