This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Note
Access to this page requires authorization. You can trysigning in orchanging directories.
Access to this page requires authorization. You can trychanging directories.
The latest version of Microsoft Edge includes the following policies. You can use these policies to configure how Microsoft Edge runs in your organization.
For information about an additional set of policies used to control how and when Microsoft Edge is updated, check outMicrosoft Edge update policy reference.
You can download theMicrosoft Security Compliance Toolkit for the recommended security configuration baseline settings for Microsoft Edge. For more information, see theMicrosoft Security Baselines Blog.
Starting in Microsoft Edge version 116, certain policies will not be applied to a profile that is signed in with a Microsoft account. For more information, please check an individual policy for details on whether it applies to a profile that is signed in with a Microsoft account.
Note
This article applies to Microsoft Edge version 77 or later.
The following table lists the new policies for Microsoft Edge version 146.
| Policy Name | Caption |
|---|---|
| LocalNetworkAccessIpAddressSpaceOverrides | Override IP address space mappings |
| StandardizedBrowserZoomEnabled | Enable Standardized Browser Zoom Behavior |
| WarnBeforeQuittingEnabled | Show a warning dialog when the user is attempting to quit |
The following table lists the new policies for Microsoft Edge version 145.
| Policy Name | Caption |
|---|---|
| DefaultIdleDetectionSetting | Default idle detection setting |
| IdleDetectionAllowedForUrls | Allow idle detection on these sites |
| IdleDetectionBlockedForUrls | Block idle detection on these sites |
| EdgeSafeHostingExtensionEnabled | Control Microsoft Edge Safe Hosting Extension |
| EditProfileEnabled | Enable editing profile in settings |
| ManagedTopSites | Configure managed top sites on New Tab Page |
| PasswordManagerPasskeysEnabled | Enable saving passkeys to the password manager |
| ProxyOverrideRules | Proxy override rules |
| ManagedNtpShortcuts | Configure managed shortcuts on the New Tab Page |
| StaticStorageQuotaEnabled | Control whether storage quota APIs will return static values |
| WebAppInstallByUserEnabled | Enable User Web App Install From Browser |
The following table lists all deprecated policies.
| Policy Name | Caption |
|---|---|
| ProxyBypassList | Configure proxy bypass rules (deprecated) |
| ProxyMode | Configure proxy server settings (deprecated) |
| ProxyPacUrl | Set the proxy .pac file URL (deprecated) |
| ProxyServer | Configure address or URL of proxy server (deprecated) |
| RelatedWebsiteSetsEnabled | Enable Related Website Sets (deprecated) |
| RelatedWebsiteSetsOverrides | Override Related Website Sets. (deprecated) |
| AllowGamesMenu | Allow users to access the games menu (deprecated) |
| BackgroundTemplateListUpdatesEnabled | Enables background updates to the list of available templates for Collections and other features that use templates (deprecated) |
| ForceCertificatePromptsOnMultipleMatches | Configure whether Microsoft Edge should automatically select a certificate when there are multiple certificate matches for a site configured with "AutoSelectCertificateForUrls" (deprecated) |
| InsecureFormsWarningsEnabled | Enable warnings for insecure forms (deprecated) |
| MicrosoftOfficeMenuEnabled | Allow users to access the Microsoft Office menu (deprecated) |
| NativeWindowOcclusionEnabled | Enable Native Window Occlusion (deprecated) |
| PromotionalTabsEnabled | Enable full-tab promotional content (deprecated) |
| ShowOfficeShortcutInFavoritesBar | Show Microsoft Office shortcut in favorites bar (deprecated) |
| UnthrottledNestedTimeoutEnabled | JavaScript setTimeout will not be clamped until a higher nesting threshold is set (deprecated) |
| WebWidgetAllowed | Enable the Search bar (deprecated) |
The following table lists the obsoleted policies for Microsoft Edge version 146.
| Policy Name | Caption |
|---|---|
| DefaultThirdPartyStoragePartitioningSetting | Default setting for third-party storage partitioning (obsolete) |
| ThirdPartyStoragePartitioningBlockedForOrigins | Disable third-party storage partitioning for specific top-level origins (obsolete) |
The following table lists the obsoleted policies for Microsoft Edge version 145.
| Policy Name | Caption |
|---|---|
| LocalNetworkAccessRestrictionsEnabled | Specifies whether to block requests from public websites to devices on a user's local network. (obsolete) |
| UserAgentReduction | Enable or disable the User-Agent Reduction (obsolete) |
These tables list all of the browser-related group policies available in this release of Microsoft Edge. Use the links in the table to get more details about specific policies.
| Policy Name | Caption |
|---|---|
| AccessibilityImageLabelsEnabled | Let screen reader users get image descriptions from Microsoft |
| AccessibilityPerformanceFilteringAllowed | Allow Accessibility Performance Filtering. |
| LiveCaptionsAllowed | Live captions allowed |
| Policy Name | Caption |
|---|---|
| AddressBarEditingEnabled | Configure address bar editing |
| AddressBarMicrosoftSearchInBingProviderEnabled | Enable Microsoft Search in Bing suggestions in the address bar (obsolete) |
| AddressBarTrendingSuggestEnabled | Enable Microsoft Bing trending suggestions in the address bar |
| AddressBarWorkSearchResultsEnabled | Enable Work Search suggestions in the address bar |
| Policy Name | Caption |
|---|---|
| ApplicationGuardContainerProxy | Application Guard Container Proxy |
| ApplicationGuardFavoritesSyncEnabled | Application Guard Favorites Sync Enabled |
| ApplicationGuardPassiveModeEnabled | Ignore Application Guard site list configuration and browse Microsoft Edge normally |
| ApplicationGuardTrafficIdentificationEnabled | Application Guard Traffic Identification |
| ApplicationGuardUploadBlockingEnabled | Prevents files from being uploaded while in Application Guard |
| Policy Name | Caption |
|---|---|
| EdgeDisableDialProtocolForCastDiscovery | Disable DIAL protocol for cast device discovery |
| EnableMediaRouter | Enable Google Cast |
| ShowCastIconInToolbar | Show the cast icon in the toolbar |
| Policy Name | Caption |
|---|---|
| CACertificateManagementAllowed | Allow users to manage installed CA certificates. |
| CACertificates | TLS server certificates that should be trusted by Microsoft Edge |
| CACertificatesWithConstraints | TLS certificates that should be trusted by Microsoft Edge for server authentication with constraints |
| CADistrustedCertificates | TLS certificates that should be distrusted by Microsoft Edge for server authentication |
| CAHintCertificates | TLS certificates that are not trusted or distrusted but can be used in path-building for server authentication |
| CAPlatformIntegrationEnabled | Use user-added TLS certificates from platform trust stores for server authentication |
| CertificateTransparencyEnforcementDisabledForCas | Disable Certificate Transparency enforcement for a list of subjectPublicKeyInfo hashes |
| CertificateTransparencyEnforcementDisabledForLegacyCas | Disable Certificate Transparency enforcement for a list of legacy certificate authorities (obsolete) |
| CertificateTransparencyEnforcementDisabledForUrls | Disable Certificate Transparency enforcement for specific URLs |
| ForceCertificatePromptsOnMultipleMatches | Configure whether Microsoft Edge should automatically select a certificate when there are multiple certificate matches for a site configured with "AutoSelectCertificateForUrls" (deprecated) |
| PromptOnMultipleMatchingCertificates | Prompt the user to select a certificate when multiple certificates match |
| Policy Name | Caption |
|---|---|
| OnBulkDataEntryEnterpriseConnector | Configuration policy for bulk data entry for Microsoft Edge for Business Data Loss Prevention Connectors |
| OnFileAttachedEnterpriseConnector | Configuration policy for files attached for Microsoft Edge for Business Data Loss Prevention Connectors |
| OnPrintEnterpriseConnector | Configuration policy for print for Microsoft Edge for Business Data Loss Prevention Connectors |
| OnSecurityEventEnterpriseConnector | Configuration policy for Microsoft Edge for Business Reporting Connectors |
| Policy Name | Caption |
|---|---|
| AutoSelectCertificateForUrls | Automatically select client certificates for these sites |
| AutomaticDownloadsAllowedForUrls | Allow multiple automatic downloads in quick succession on specific sites |
| AutomaticDownloadsBlockedForUrls | Block multiple automatic downloads in quick succession on specific sites |
| AutomaticFullscreenAllowedForUrls | Allow automatic full screen on specified sites |
| AutomaticFullscreenBlockedForUrls | Block automatic full screen on specified sites |
| CookiesAllowedForUrls | Allow cookies on specific sites |
| CookiesBlockedForUrls | Block cookies on specific sites |
| CookiesSessionOnlyForUrls | Limit cookies from specific websites to the current session |
| DataUrlInSvgUseEnabled | Data URL support for SVGUseElement |
| DefaultAutomaticDownloadsSetting | Default automatic downloads setting |
| DefaultCookiesSetting | Configure cookies |
| DefaultDesktopSiteSetting | Configure the default view mode for websites |
| DefaultFileSystemReadGuardSetting | Control use of the File System API for reading |
| DefaultFileSystemWriteGuardSetting | Control use of the File System API for writing |
| DefaultGeolocationSetting | Default geolocation setting |
| DefaultIdleDetectionSetting | Default idle detection setting |
| DefaultImagesSetting | Default images setting |
| DefaultInsecureContentSetting | Control use of insecure content exceptions |
| DefaultJavaScriptJitSetting | Control use of JavaScript JIT |
| DefaultJavaScriptOptimizerSetting | Control use of JavaScript optimizers |
| DefaultJavaScriptSetting | Default JavaScript setting |
| DefaultNotificationsSetting | Default notification setting |
| DefaultPluginsSetting | Default Adobe Flash setting (obsolete) |
| DefaultPopupsSetting | Default pop-up window setting |
| DefaultThirdPartyStoragePartitioningSetting | Default setting for third-party storage partitioning (obsolete) |
| DefaultWebBluetoothGuardSetting | Control use of the Web Bluetooth API |
| DefaultWebHidGuardSetting | Control use of the WebHID API |
| DefaultWebUsbGuardSetting | Control use of the WebUSB API |
| DefaultWindowManagementSetting | Default Window Management permission setting |
| DesktopSiteForceForUrls | Force Desktop Site for these sites |
| EdgeFileUploadAllowedForUrls | File upload allowed for urls |
| EdgeFileUploadBlockedForUrls | File upload blocked for urls |
| FileSystemReadAskForUrls | Allow read access via the File System API on these sites |
| FileSystemReadBlockedForUrls | Block read access via the File System API on these sites |
| FileSystemWriteAskForUrls | Allow write access to files and directories on these sites |
| FileSystemWriteBlockedForUrls | Block write access to files and directories on these sites |
| GeolocationBlockedForUrls | Block geolocation on these sites |
| IdleDetectionAllowedForUrls | Allow idle detection on these sites |
| IdleDetectionBlockedForUrls | Block idle detection on these sites |
| ImagesAllowedForUrls | Allow images on these sites |
| ImagesBlockedForUrls | Block images on specific sites |
| InsecureContentAllowedForUrls | Allow insecure content on specified sites |
| InsecureContentBlockedForUrls | Block insecure content on specified sites |
| IntranetFileLinksEnabled | Allow intranet zone file URL links from Microsoft Edge to open in Windows File Explorer |
| JavaScriptAllowedForUrls | Allow JavaScript on specific sites |
| JavaScriptBlockedForUrls | Block JavaScript on specific sites |
| JavaScriptJitAllowedForSites | Allow JavaScript to use JIT on these sites |
| JavaScriptJitBlockedForSites | Block JavaScript from using JIT on these sites |
| JavaScriptOptimizerAllowedForSites | Allow JavaScript optimization on these sites |
| JavaScriptOptimizerBlockedForSites | Block JavaScript optimizations on these sites |
| LegacySameSiteCookieBehaviorEnabled | Enable default legacy SameSite cookie behavior setting (obsolete) |
| LegacySameSiteCookieBehaviorEnabledForDomainList | Revert to legacy SameSite behavior for cookies on specified sites (obsolete) |
| MobileSiteForceForUrls | Force Mobile Site for these sites |
| NotificationsAllowedForUrls | Allow notifications on specific sites |
| NotificationsBlockedForUrls | Block notifications on specific sites |
| PartitionedBlobUrlUsage | Manage Blob URL Partitioning During Fetching and Navigation |
| PluginsAllowedForUrls | Allow the Adobe Flash plug-in on specific sites (obsolete) |
| PluginsBlockedForUrls | Block the Adobe Flash plug-in on specific sites (obsolete) |
| PopupsAllowedForUrls | Allow pop-up windows on specific sites |
| PopupsBlockedForUrls | Block pop-up windows on specific sites |
| PreciseGeolocationAllowedForUrls | Allow precise geolocation on these sites |
| RegisteredProtocolHandlers | Register protocol handlers |
| SerialAllowAllPortsForUrls | Automatically grant sites permission to connect all serial ports |
| SerialAllowUsbDevicesForUrls | Automatically grant sites permission to connect to USB serial devices |
| ShowPDFDefaultRecommendationsEnabled | Allow notifications to set Microsoft Edge as default PDF reader |
| SpotlightExperiencesAndRecommendationsEnabled | Choose whether users can receive customized background images and text, suggestions, notifications, and tips for Microsoft services |
| ThirdPartyStoragePartitioningBlockedForOrigins | Disable third-party storage partitioning for specific top-level origins (obsolete) |
| WebHidAllowAllDevicesForUrls | Allow listed sites to connect to any HID device |
| WebHidAllowDevicesForUrls | Allow listed sites connect to specific HID devices |
| WebHidAllowDevicesWithHidUsagesForUrls | Automatically grant permission to these sites to connect to HID devices containing top-level collections with the given HID usage |
| WebHidAskForUrls | Allow the WebHID API on these sites |
| WebHidBlockedForUrls | Block the WebHID API on these sites |
| WebUsbAllowDevicesForUrls | Grant access to specific sites to connect to specific USB devices |
| WebUsbAskForUrls | Allow WebUSB on specific sites |
| WebUsbBlockedForUrls | Block WebUSB on specific sites |
| WindowManagementAllowedForUrls | Allow Window Management permission on specified sites |
| WindowManagementBlockedForUrls | Block Window Management permission on specified sites |
| Policy Name | Caption |
|---|---|
| CopilotCDPPageContext | Control Copilot with Commercial Data Protection access to page context for Microsoft Entra ID profiles (obsolete) |
| CopilotPageContext | Control Copilot access to page context for Microsoft Entra ID profiles |
| EdgeCopilotEnabled | Enable Copilot |
| EdgeEntraCopilotPageContext | Control Copilot access to Microsoft Edge page content for Entra account user profiles when using Copilot in the Microsoft Edge sidepane |
| Microsoft365CopilotChatIconEnabled | Control whether Microsoft 365 Copilot Chat shows in the Microsoft Edge for Business toolbar |
| Policy Name | Caption |
|---|---|
| DefaultSearchProviderContextMenuAccessAllowed | Allow default search provider context menu search access |
| DefaultSearchProviderEnabled | Enable the default search provider |
| DefaultSearchProviderEncodings | Default search provider encodings |
| DefaultSearchProviderImageURL | Specifies the search-by-image feature for the default search provider |
| DefaultSearchProviderImageURLPostParams | Parameters for an image URL that uses POST |
| DefaultSearchProviderKeyword | Default search provider keyword |
| DefaultSearchProviderName | Default search provider name |
| DefaultSearchProviderSearchURL | Default search provider search URL |
| DefaultSearchProviderSuggestURL | Default search provider URL for suggestions |
| NewTabPageSearchBox | Configure the new tab page search box experience |
| Policy Name | Caption |
|---|---|
| DiagnosticData | Send required and optional diagnostic data about browser usage |
| UrlDiagnosticDataEnabled | URL reporting in Edge diagnostic data enabled |
| Policy Name | Caption |
|---|---|
| AutoOpenAllowedForURLs | URLs where AutoOpenFileTypes can apply |
| AutoOpenFileTypes | List of file types that should be automatically opened on download |
| DownloadDirectory | Set download directory |
| DownloadRestrictions | Allow download restrictions |
| ExemptFileTypeDownloadWarnings | Disable download file type extension-based warnings for specified file types on domains |
| PromptForDownloadLocation | Ask where to save downloaded files |
| ShowDownloadsInsecureWarningsEnabled | Enable insecure download warnings |
| Policy Name | Caption |
|---|---|
| PreventTyposquattingPromptOverride | Prevent bypassing Edge Website Typo Protection prompts for sites |
| TyposquattingAllowListDomains | Configure the list of domains for which Microsoft Edge Website Typo Protection won't trigger warnings |
| TyposquattingCheckerEnabled | Configure Edge Website Typo Protection |
| Policy Name | Caption |
|---|---|
| EdgeWorkspacesEnabled | Enable Workspaces |
| WorkspacesNavigationSettings | Configure navigation settings per groups of URLs in Microsoft Edge Workspaces |
| Policy Name | Caption |
|---|---|
| EnhanceSecurityMode | Enhance the security state in Microsoft Edge |
| EnhanceSecurityModeAllowUserBypass | Allow users to bypass Enhanced Security Mode |
| EnhanceSecurityModeBypassIntranet | Enhanced Security Mode configuration for Intranet zone sites |
| EnhanceSecurityModeBypassListDomains | Configure the list of domains for which enhance security mode will not be enforced |
| EnhanceSecurityModeEnforceListDomains | Configure the list of domains for which enhance security mode will always be enforced |
| EnhanceSecurityModeIndicatorUIEnabled | Manage the indicator UI of the Enhanced Security Mode (ESM) feature in Microsoft Edge |
| EnhanceSecurityModeOptOutUXEnabled | Manage opt-out user experience for Enhanced Security Mode (ESM) in Microsoft Edge (obsolete) |
| Policy Name | Caption |
|---|---|
| FeatureFlagOverridesControl | Configure users ability to override feature flags |
| Policy Name | Caption |
|---|---|
| BlockExternalExtensions | Blocks external extensions from being installed |
| ControlDefaultStateOfAllowExtensionFromOtherStoresSettingEnabled | Configure default state of Allow extensions from other stores setting |
| EdgeSafeHostingExtensionEnabled | Control Microsoft Edge Safe Hosting Extension |
| ExtensionAllowedTypes | Configure allowed extension types |
| ExtensionDeveloperModeSettings | Control the availability of developer mode on extensions page |
| ExtensionExtendedBackgroundLifetimeForPortConnectionsToUrls | Configure a list of origins that grant an extended background lifetime to connecting extensions. |
| ExtensionInstallAllowlist | Allow specific extensions to be installed |
| ExtensionInstallBlocklist | Control which extensions cannot be installed |
| ExtensionInstallForcelist | Control which extensions are installed silently |
| ExtensionInstallSources | Configure extension and user script install sources |
| ExtensionInstallTypeBlocklist | Blocklist for extension install types |
| ExtensionManifestV2Availability | Control Manifest v2 extension availability |
| ExtensionSettings | Configure extension management settings |
| MandatoryExtensionsForInPrivateNavigation | Specify extensions users must allow in order to navigate using InPrivate mode |
| Policy Name | Caption |
|---|---|
| AllowGamesMenu | Allow users to access the games menu (deprecated) |
| AllowSurfGame | Allow surf game |
| GamerModeEnabled | Enable Gamer Mode (obsolete) |
| Policy Name | Caption |
|---|---|
| AIGenThemesEnabled | Enables DALL-E themes generation |
| GenAILocalFoundationalModelSettings | Settings for GenAI local foundational model |
| Policy Name | Caption |
|---|---|
| AllHttpAuthSchemesAllowedForOrigins | List of origins that allow all HTTP authentication |
| AllowCrossOriginAuthPrompt | Allow cross-origin HTTP Authentication prompts |
| AuthAndroidNegotiateAccountType | Account type for HTTP Negotiate authentication |
| AuthNegotiateDelegateAllowlist | Specifies a list of servers that Microsoft Edge can delegate user credentials to |
| AuthSchemes | Supported authentication schemes |
| AuthServerAllowlist | Configure list of allowed authentication servers |
| BasicAuthOverHttpEnabled | Allow Basic authentication for HTTP |
| DisableAuthNegotiateCnameLookup | Disable CNAME lookup when negotiating Kerberos authentication |
| EnableAuthNegotiatePort | Include non-standard port in Kerberos SPN |
| GloballyScopeHTTPAuthCacheEnabled | Enable globally scoped HTTP auth cache |
| NtlmV2Enabled | Control whether NTLMv2 authentication is enabled |
| WindowsHelloForHTTPAuthEnabled | Windows Hello For HTTP Auth Enabled |
| Policy Name | Caption |
|---|---|
| AutomaticProfileSwitchingSiteList | Configure the automatic profile switching site list |
| EdgeBlockSignInEnabled | Block Sign In to Edge |
| EdgeDefaultProfileEnabled | Default Profile Setting Enabled |
| EdgeOpenExternalLinksWithAppSpecifiedProfile | Prioritize App specified profile to open external links |
| EdgeOpenExternalLinksWithPrimaryWorkProfileEnabled | Use Primary Work Profile as default to open external links |
| EditProfileEnabled | Enable editing profile in settings |
| GuidedSwitchEnabled | Guided Switch Enabled |
| ImplicitSignInEnabled | Enable implicit sign-in |
| LinkedAccountEnabled | Enable the linked account feature (obsolete) |
| OneAuthAuthenticationEnforced | OneAuth Authentication Flow Enforced for signin |
| OnlyOnPremisesImplicitSigninEnabled | Only on-premises account enabled for implicit sign-in |
| ProactiveAuthWorkflowEnabled | Enable proactive authentication |
| SeamlessWebToBrowserSignInEnabled | Seamless Web To Browser Sign-in Enabled |
| SignInCtaOnNtpEnabled | Enable sign in click to action dialog (obsolete) |
| SwitchIntranetSitesToWorkProfile | Switch intranet sites to a work or school profile |
| SwitchSitesOnIEModeSiteListToWorkProfile | Switch sites on the IE mode site list to a work or school profile |
| WAMAuthBelowWin10RS3Enabled | WAM for authentication below Windows 10 RS3 enabled |
| WebSSOInIframeEnabled | Enable Web SSO for iframe requests |
| WebToBrowserSignInEnabled | Web To Browser Sign-in Enabled |
| Policy Name | Caption |
|---|---|
| IdleTimeout | Delay before running idle actions |
| IdleTimeoutActions | Actions to run when the computer is idle |
| Policy Name | Caption |
|---|---|
| ImmersiveReaderGrammarToolsEnabled | Enable Grammar Tools feature within Immersive Reader in Microsoft Edge (obsolete) |
| ImmersiveReaderPictureDictionaryEnabled | Enable Picture Dictionary feature within Immersive Reader in Microsoft Edge (obsolete) |
| Policy Name | Caption |
|---|---|
| ImportAutofillFormData | Allow importing of autofill form data |
| ImportBrowserSettings | Allow importing of browser settings |
| ImportCookies | Allow importing of Cookies |
| ImportExtensions | Allow importing of extensions |
| ImportFavorites | Allow importing of favorites |
| ImportHistory | Allow importing of browsing history |
| ImportHomepage | Allow importing of home page settings |
| ImportOnEachLaunch | Allow import of data from other browsers on each Microsoft Edge launch |
| ImportOpenTabs | Allow importing of open tabs |
| ImportPasswordsDisabled | Prevent importing passwords from Password Manager |
| ImportPaymentInfo | Allow importing of payment info |
| ImportSavedPasswords | Allow importing of saved passwords |
| ImportSearchEngine | Allow importing of search engine settings |
| ImportShortcuts | Allow importing of shortcuts |
| ImportStartupPageSettings | Allow importing of startup page settings |
| Policy Name | Caption |
|---|---|
| InternetExplorerIntegrationAlwaysUseOSCapture | Always use the OS capture engine to avoid issues with capturing Internet Explorer mode tabs |
| InternetExplorerIntegrationAlwaysWaitForUnload | Wait for Internet Explorer mode tabs to completely unload before ending the browser session |
| InternetExplorerIntegrationCloudNeutralSitesReporting | Configure reporting of potentially misconfigured neutral site URLs to the M365 Admin Center Site Lists app |
| InternetExplorerIntegrationCloudSiteList | Configure the Enterprise Mode Cloud Site List |
| InternetExplorerIntegrationCloudUserSitesReporting | Configure reporting of IE Mode user list entries to the M365 Admin Center Site Lists app |
| InternetExplorerIntegrationComplexNavDataTypes | Configure whether form data and HTTP headers will be sent when entering or exiting Internet Explorer mode |
| InternetExplorerIntegrationEnhancedHangDetection | Configure enhanced hang detection for Internet Explorer mode |
| InternetExplorerIntegrationLevel | Configure Internet Explorer integration |
| InternetExplorerIntegrationLocalFileAllowed | Allow launching of local files in Internet Explorer mode |
| InternetExplorerIntegrationLocalFileExtensionAllowList | Open local files in Internet Explorer mode file extension allow list |
| InternetExplorerIntegrationLocalFileShowContextMenu | Show context menu to open a file:// link in Internet Explorer mode |
| InternetExplorerIntegrationLocalMhtFileAllowed | Allow local MHTML files to open automatically in Internet Explorer mode |
| InternetExplorerIntegrationLocalSiteListExpirationDays | Specify the number of days that a site remains on the local IE mode site list |
| InternetExplorerIntegrationReloadInIEModeAllowed | Allow unconfigured sites to be reloaded in Internet Explorer mode |
| InternetExplorerIntegrationSiteList | Configure the Enterprise Mode Site List |
| InternetExplorerIntegrationSiteListRefreshInterval | Configure how frequently the Enterprise Mode Site List is refreshed |
| InternetExplorerIntegrationSiteRedirect | Specify how "in-page" navigations to unconfigured sites behave when started from Internet Explorer mode pages |
| InternetExplorerIntegrationTestingAllowed | Allow Internet Explorer mode testing (obsolete) |
| InternetExplorerIntegrationWindowOpenHeightAdjustment | Configure the pixel adjustment between window.open heights sourced from IE mode pages vs. Edge mode pages |
| InternetExplorerIntegrationWindowOpenWidthAdjustment | Configure the pixel adjustment between window.open widths sourced from IE mode pages vs. Edge mode pages |
| InternetExplorerIntegrationZoneIdentifierMhtFileAllowed | Automatically open downloaded MHT or MHTML files from the web in Internet Explorer mode |
| InternetExplorerModeClearDataOnExitEnabled | Clear history for IE and IE mode every time you exit |
| InternetExplorerModeEnableSavePageAs | Allow Save page as in Internet Explorer mode |
| InternetExplorerModeTabInEdgeModeAllowed | Allow sites configured for Internet Explorer mode to open in Microsoft Edge |
| InternetExplorerModeToolbarButtonEnabled | Show the Reload in Internet Explorer mode button in the toolbar |
| InternetExplorerSetForegroundWhenActive | Keep the active Microsoft Edge window with an Internet Explorer mode tab always in the foreground. |
| InternetExplorerZoomDisplay | Display zoom in IE Mode tabs with DPI Scale included like it is in Internet Explorer |
| Policy Name | Caption |
|---|---|
| EdgeEnableKioskMode | Enable Microsoft Edge kiosk mode on Android |
| EdgeShowAddressBarInKioskMode | Show address bar in Microsoft Edge Android kiosk mode |
| EdgeShowBottomBarInKioskMode | Show bottom action bar in Microsoft Edge Android kiosk mode |
| KioskAddressBarEditingEnabled | Configure address bar editing for kiosk mode public browsing experience |
| KioskDeleteDownloadsOnExit | Delete files downloaded as part of kiosk session when Microsoft Edge closes |
| KioskSwipeGesturesEnabled | Swipe gestures in Microsoft Edge kiosk mode enabled |
| Policy Name | Caption |
|---|---|
| AllowEdgeDataInBackups | Allow backup of Microsoft Edge data |
| EdgeAllowedAccountOnly | Restrict sign-in to allowed accounts only |
| EdgeAllowedAccountUPN | Configure allowed account UPN pattern for sign-in |
| EdgeManagementEnabled | Microsoft Edge management enabled |
| EdgeManagementEnrollmentToken | Microsoft Edge management enrollment token |
| EdgeManagementExtensionsFeedbackEnabled | Microsoft Edge management extensions feedback enabled |
| EdgeManagementPolicyOverridesPlatformPolicy | Microsoft Edge management service policy overrides platform policy. |
| EdgeManagementUserPolicyOverridesCloudMachinePolicy | Allow cloud-based Microsoft Edge management service user policies to override local user policies. |
| MAMEnabled | Mobile App Management Enabled |
| ManagedTopSites | Configure managed top sites on New Tab Page |
| Policy Name | Caption |
|---|---|
| MicrosoftOfficeMenuEnabled | Allow users to access the Microsoft Office menu (deprecated) |
| OutlookHubMenuEnabled | Allow users to access the Outlook menu (obsolete) |
| QuickViewOfficeFilesEnabled | Manage QuickView Office files capability in Microsoft Edge |
| ShowOfficeShortcutInFavoritesBar | Show Microsoft Office shortcut in favorites bar (deprecated) |
| Policy Name | Caption |
|---|---|
| NativeMessagingAllowlist | Control which native messaging hosts users can use |
| NativeMessagingBlocklist | Configure native messaging block list |
| NativeMessagingUserLevelHosts | Allow user-level native messaging hosts (installed without admin permissions) |
| Policy Name | Caption |
|---|---|
| AccessControlAllowMethodsInCORSPreflightSpecConformant | Make Access-Control-Allow-Methods matching in CORS preflight spec conformant |
| AdditionalDnsQueryTypesEnabled | Allow DNS queries for more DNS record types |
| BlockTruncatedCookies | Block truncated cookies (obsolete) |
| BuiltInDnsClientEnabled | Use built-in DNS client |
| CompressionDictionaryTransportEnabled | Enable compression dictionary transport support |
| DataURLWhitespacePreservationEnabled | DataURL Whitespace Preservation for all media types |
| DnsOverHttpsMode | Control the mode of DNS-over-HTTPS |
| DnsOverHttpsTemplates | Specify URI template of desired DNS-over-HTTPS resolver |
| EdgeNetworkStackPref | Switch network stack between Chromium and iOS |
| ExplicitlyAllowedNetworkPorts | Explicitly allowed network ports |
| FetchKeepaliveDurationSecondsOnShutdown | Fetch keepalive duration on shutdown |
| HappyEyeballsV3Enabled | Use the Happy Eyeballs V3 algorithm for connection attempts |
| IPv6ReachabilityOverrideEnabled | Enable IPv6 reachability check override |
| LocalNetworkAccessAllowedForUrls | Allow sites to make requests to local network endpoints. |
| LocalNetworkAccessBlockedForUrls | Block sites from making requests to local network endpoints. |
| LocalNetworkAccessIpAddressSpaceOverrides | Override IP address space mappings |
| LocalNetworkAccessRestrictionsEnabled | Specifies whether to block requests from public websites to devices on a user's local network. (obsolete) |
| LocalNetworkAccessRestrictionsTemporaryOptOut | Specifies whether to opt out of Local Network Access restrictions |
| NetworkPredictionOptions | Enable network prediction |
| QuicAllowed | Allow QUIC protocol |
| ZstdContentEncodingEnabled | Enable zstd content encoding support (obsolete) |
| Policy Name | Caption |
|---|---|
| AlwaysOpenPdfExternally | Always open PDF files externally |
| NewPDFReaderEnabled | Microsoft Edge built-in PDF reader powered by Adobe Acrobat enabled |
| PDFSecureMode | Secure mode and Certificate-based Digital Signature validation in native PDF reader |
| PDFXFAEnabled | XFA support in native PDF reader enabled |
| PdfViewerOutOfProcessIframeEnabled | Use out-of-process iframe PDF Viewer |
| RestorePdfView | Restore PDF view |
| ShowAcrobatSubscriptionButton | Shows button on native PDF viewer in Microsoft Edge that allows users to sign up for Adobe Acrobat subscription |
| ViewXFAPDFInIEModeAllowedFileHash | View XFA-based PDF files using IE Mode for allowed file hash. |
| ViewXFAPDFInIEModeAllowedOrigins | View XFA-based PDF files using IE Mode for allowed file origin. |
| Policy Name | Caption |
|---|---|
| BiometricAuthenticationBeforeFilling | Enable Device authentication for password autofill |
| DeletingUndecryptablePasswordsEnabled | Enable deleting undecryptable passwords |
| PasswordDeleteOnBrowserCloseEnabled | Prevent passwords from being deleted if any Edge settings is enabled to delete browsing data when Microsoft Edge closes |
| PasswordExportEnabled | Enable exporting saved passwords from Password Manager |
| PasswordGeneratorEnabled | Allow users to get a strong password suggestion whenever they are creating an account online |
| PasswordManagerBlocklist | Configure the list of domains for which the password manager UI (Save and Fill) will be disabled |
| PasswordManagerEnabled | Enable saving passwords to the password manager |
| PasswordManagerPasskeysEnabled | Enable saving passkeys to the password manager |
| PasswordManagerRestrictLengthEnabled | Restrict the length of passwords that can be saved in the Password Manager |
| PasswordMonitorAllowed | Allow users to be alerted if their passwords are found to be unsafe |
| PasswordProtectionChangePasswordURL | Configure the change password URL |
| PasswordProtectionLoginURLs | Configure the list of enterprise login URLs where the password protection service should capture salted hashes of a password |
| PasswordProtectionWarningTrigger | Configure password protection warning trigger |
| PasswordRevealEnabled | Enable Password reveal button |
| PrimaryPasswordSetting | Configures a setting that asks users to enter their device password while using password autofill |
| Policy Name | Caption |
|---|---|
| EfficiencyMode | Configure when energy saver (previously named efficiency mode) should become active |
| EfficiencyModeEnabled | Efficiency mode enabled |
| EfficiencyModeOnPowerEnabled | Enable efficiency mode when the device is connected to a power source |
| ExtensionsPerformanceDetectorEnabled | Extensions Performance Detector enabled |
| IntensiveWakeUpThrottlingEnabled | Control the IntensiveWakeUpThrottling feature |
| PerformanceDetectorEnabled | Performance Detector Enabled |
| PinBrowserEssentialsToolbarButton | Pin browser essentials toolbar button |
| RAMResourceControlsEnabled | Enable RAM (memory) resource controls |
| StartupBoostEnabled | Enable startup boost |
| TotalMemoryLimitMb | Set limit on megabytes of memory a single Microsoft Edge instance can use |
| Policy Name | Caption |
|---|---|
| AudioCaptureAllowed | Allow or block audio capture |
| AudioCaptureAllowedUrls | Sites that can access audio capture devices without requesting permission |
| DisableScreenshots | Disable taking screenshots |
| SameOriginTabCaptureAllowedByOrigins | Allow Same Origin Tab capture by these origins |
| ScreenCaptureAllowed | Allow or deny screen capture |
| ScreenCaptureAllowedByOrigins | Allow Desktop, Window, and Tab capture by these origins |
| ScreenCaptureWithoutGestureAllowedForOrigins | Allow screen capture without prior user gesture |
| TabCaptureAllowedByOrigins | Allow Tab capture by these origins |
| VideoCaptureAllowed | Allow or block video capture |
| VideoCaptureAllowedUrls | Sites that can access video capture devices without requesting permission |
| WebCaptureEnabled | Enable the Screenshot (previously named Web Capture) feature in Microsoft Edge |
| WindowCaptureAllowedByOrigins | Allow Window and Tab capture by these origins |
| Policy Name | Caption |
|---|---|
| PersonalizationReportingEnabled | Allow personalization of ads, Microsoft Edge, search, news and other Microsoft services by sending browsing history, favorites and collections, usage and other browsing data to Microsoft |
| PersonalizeTopSitesInCustomizeSidebarEnabled | Personalize my top sites in Customize Sidebar enabled by default |
| Policy Name | Caption |
|---|---|
| DefaultPrinterSelection | Default printer selection rules |
| OopPrintDriversAllowed | Out-of-process print drivers allowed |
| PrintHeaderFooter | Print headers and footers |
| PrintPdfAsImageDefault | Print PDF as Image Default |
| PrintPostScriptMode | Print PostScript Mode |
| PrintPreviewStickySettings | Configure the sticky print preview settings |
| PrintPreviewUseSystemDefaultPrinter | Set the system default printer as the default printer |
| PrintRasterizationMode | Print Rasterization Mode |
| PrintRasterizePdfDpi | Print Rasterize PDF DPI |
| PrintStickySettings | Print preview sticky settings |
| PrinterTypeDenyList | Disable printer types on the deny list |
| PrintingAllowedBackgroundGraphicsModes | Restrict background graphics printing mode |
| PrintingBackgroundGraphicsDefault | Default background graphics printing mode |
| PrintingEnabled | Enable printing |
| PrintingLPACSandboxEnabled | Enable Printing LPAC Sandbox |
| PrintingPaperSizeDefault | Default printing page size |
| PrintingWebpageLayout | Sets layout for printing |
| UseSystemPrintDialog | Print using system print dialog |
| Policy Name | Caption |
|---|---|
| InsecurePrivateNetworkRequestsAllowed | Specifies whether to allow websites to make requests to any network endpoint in an insecure manner. (obsolete) |
| InsecurePrivateNetworkRequestsAllowedForUrls | Allow the listed sites to make requests to more-private network endpoints from in an insecure manner (obsolete) |
| PrivateNetworkAccessRestrictionsEnabled | Specifies whether to apply restrictions to requests to more private network endpoints (obsolete) |
| Policy Name | Caption |
|---|---|
| ProfileTypeInProfileButtonEnabled | Controls the display of the profile button label for the work or school profile |
| Policy Name | Caption |
|---|---|
| ProxyBypassList | Configure proxy bypass rules (deprecated) |
| ProxyMode | Configure proxy server settings (deprecated) |
| ProxyOverrideRules | Proxy override rules |
| ProxyPacUrl | Set the proxy .pac file URL (deprecated) |
| ProxyServer | Configure address or URL of proxy server (deprecated) |
| ProxySettings | Proxy settings |
| Policy Name | Caption |
|---|---|
| RelatedWebsiteSetsEnabled | Enable Related Website Sets (deprecated) |
| RelatedWebsiteSetsOverrides | Override Related Website Sets. (deprecated) |
| Policy Name | Caption |
|---|---|
| ScarewareBlockerAllowListDomains | Configure the list of domains where Microsoft Edge Scareware blockers don't run |
| ScarewareBlockerBlocksDetectedSitesEnabled | Configure Microsoft Edge scareware blocker to block sites detected as potential tech scams |
| ScarewareBlockerProtectionEnabled | Configure Microsoft Edge Scareware blocker protection |
| ScarewareBlockerSendDetectedSitesToSmartScreenEnabled | Configure Microsoft Edge Scareware blocker to share URLs of sites detected as potential tech scams with Microsoft Defender SmartScreen |
| Policy Name | Caption |
|---|---|
| AutoDiscardSleepingTabsEnabled | Configure auto discard sleeping tabs |
| SleepingTabsBlockedForUrls | Block sleeping tabs on specific sites |
| SleepingTabsEnabled | Configure sleeping tabs |
| SleepingTabsTimeout | Set the background tab inactivity timeout for sleeping tabs |
| Policy Name | Caption |
|---|---|
| ExemptSmartScreenDownloadWarnings | Disable SmartScreen AppRep based warnings for specified file types on specified domains |
| NewSmartScreenLibraryEnabled | Enable new SmartScreen library (obsolete) |
| PreventSmartScreenPromptOverride | Prevent bypassing Microsoft Defender SmartScreen prompts for sites |
| PreventSmartScreenPromptOverrideForFiles | Prevent bypassing of Microsoft Defender SmartScreen warnings about downloads |
| SmartScreenAllowListDomains | Configure the list of domains for which Microsoft Defender SmartScreen won't trigger warnings |
| SmartScreenDnsRequestsEnabled | Enable Microsoft Defender SmartScreen DNS requests |
| SmartScreenEnabled | Configure Microsoft Defender SmartScreen |
| SmartScreenForTrustedDownloadsEnabled | Force Microsoft Defender SmartScreen checks on downloads from trusted sources |
| SmartScreenPuaEnabled | Configure Microsoft Defender SmartScreen to block potentially unwanted apps |
| Policy Name | Caption |
|---|---|
| HomepageIsNewTabPage | Set the new tab page as the home page |
| HomepageLocation | Configure the home page URL |
| NewTabPageAllowedBackgroundTypes | Configure the background types allowed for the new tab page layout |
| NewTabPageAppLauncherEnabled | Hide App Launcher on Microsoft Edge new tab page |
| NewTabPageBingChatEnabled | Disable Bing chat entry-points on Microsoft Edge Enterprise new tab page |
| NewTabPageCompanyLogo | Set new tab page company logo (obsolete) |
| NewTabPageCompanyLogoBackplateColor | Set the company logo backplate color on the new tab page. |
| NewTabPageCompanyLogoEnabled | Hide the company logo on the Microsoft Edge new tab page |
| NewTabPageContentEnabled | Allow Microsoft content on the new tab page |
| NewTabPageHideDefaultTopSites | Hide the default top sites from the new tab page |
| NewTabPageLocation | Configure the new tab page URL |
| NewTabPageManagedQuickLinks | Set new tab page quick links |
| NewTabPagePrerenderEnabled | Enable preload of the new tab page for faster rendering |
| NewTabPageQuickLinksEnabled | Allow quick links on the new tab page |
| NewTabPageSetFeedType | Configure the Microsoft Edge new tab page experience (obsolete) |
| RestoreOnStartup | Action to take on Microsoft Edge startup |
| RestoreOnStartupURLs | Sites to open when the browser starts |
| RestoreOnStartupUserURLsEnabled | Allow users to add and remove their own sites during startup when the RestoreOnStartupURLs policy is configured |
| ShowHomeButton | Show Home button on toolbar |
| Policy Name | Caption |
|---|---|
| WebRtcAllowLegacyTLSProtocols | Allow legacy TLS/DTLS downgrade in WebRTC (obsolete) |
| WebRtcIPHandlingUrl | WebRTC IP Handling Policy for URL Patterns |
| WebRtcLocalIpsAllowedUrls | Manage exposure of local IP addresses by WebRTC |
| WebRtcLocalhostIpHandling | Restrict exposure of local IP address by WebRTC |
| WebRtcPostQuantumKeyAgreement | Enable post-quantum key agreement for WebRTC |
| WebRtcRespectOsRoutingTableEnabled | Enable support for Windows OS routing table rules when making peer to peer connections via WebRTC |
| WebRtcUdpPortRange | Restrict the range of local UDP ports used by WebRTC |
| Policy Name | Caption |
|---|---|
| AADWebSiteSSOUsingThisProfileEnabled | Single sign-on for work or school sites using this profile enabled |
| AdHocCodeSigningForPWAsEnabled | Native application signing during Progressive Web Application installation |
| AdditionalSearchBoxEnabled | Enable additional search box in browser |
| AdsSettingForIntrusiveAdsSites | Ads setting for sites with intrusive ads |
| AdsTransparencyEnabled | Configure if the ads transparency feature is enabled |
| AllowBackForwardCacheForCacheControlNoStorePageEnabled | Allow pages with Cache-Control: no-store header to enter back/forward cache |
| AllowDeletingBrowserHistory | Enable deleting browser and download history |
| AllowFileSelectionDialogs | Allow file selection dialogs |
| AllowPopupsDuringPageUnload | Allows a page to show popups during its unloading (obsolete) |
| AllowSyncXHRInPageDismissal | Allow pages to send synchronous XHR requests during page dismissal (obsolete) |
| AllowSystemNotifications | Allows system notifications |
| AllowTokenBindingForUrls | Configure the list of sites for which Microsoft Edge will attempt to establish a Token Binding with (obsolete) |
| AllowTrackingForUrls | Configure tracking prevention exceptions for specific sites |
| AllowWebAuthnWithBrokenTlsCerts | Allow Web Authentication requests on sites with broken TLS certificates. |
| AllowedDomainsForApps | Define domains allowed to access Google Workspace |
| AlternateErrorPagesEnabled | Suggest similar pages when a webpage can't be found |
| AmbientAuthenticationInPrivateModesEnabled | Enable Ambient Authentication for InPrivate and Guest profiles |
| AppCacheForceEnabled | Allows the AppCache feature to be re-enabled, even if it's turned off by default (obsolete) |
| ApplicationBoundEncryptionEnabled | Enable Application Bound Encryption |
| ApplicationLocaleValue | Set application locale |
| AskBeforeCloseEnabled | Get user confirmation before closing a browser window with multiple tabs |
| AudioProcessHighPriorityEnabled | Allow the audio process to run with priority above normal on Windows |
| AudioSandboxEnabled | Allow the audio sandbox to run |
| AutoImportAtFirstRun | Automatically import another browser's data and settings at first run |
| AutoLaunchProtocolsComponentEnabled | AutoLaunch Protocols Component Enabled |
| AutoLaunchProtocolsFromOrigins | Define a list of protocols that can launch an external application from listed origins without prompting the user |
| AutofillAddressEnabled | Enable AutoFill for addresses |
| AutofillCreditCardEnabled | Enable AutoFill for payment instruments |
| AutofillMembershipsEnabled | Save and fill memberships |
| AutomaticHttpsDefault | Configure Automatic HTTPS (obsolete) |
| AutoplayAllowed | Allow media autoplay for websites |
| AutoplayAllowlist | Allow media autoplay on specific sites |
| BackForwardCacheEnabled | Control the BackForwardCache feature. |
| BackgroundModeEnabled | Continue running background apps after Microsoft Edge closes |
| BackgroundTemplateListUpdatesEnabled | Enables background updates to the list of available templates for Collections and other features that use templates (deprecated) |
| BeforeunloadEventCancelByPreventDefaultEnabled | Control the behavior for the cancel dialog produced by the beforeunload event (obsolete) |
| BingAdsSuppression | Block all ads on Bing search results |
| BlockThirdPartyCookies | Block third party cookies |
| BrowserAddProfileEnabled | Enable profile creation from the Identity flyout menu or the Settings page |
| BrowserCodeIntegritySetting | Configure browser process code integrity guard setting |
| BrowserGuestModeEnabled | Enable guest mode |
| BrowserLegacyExtensionPointsBlockingEnabled | Enable browser legacy extension point blocking |
| BrowserNetworkTimeQueriesEnabled | Allow queries to a Browser Network Time service |
| BrowserSignin | Browser sign-in settings |
| BrowsingDataLifetime | Browsing Data Lifetime Settings |
| BuiltInAIAPIsEnabled | Allow pages to use the built-in AI APIs. |
| BuiltinCertificateVerifierEnabled | Determines whether the built-in certificate verifier will be used to verify server certificates (obsolete) |
| CECPQ2Enabled | CECPQ2 post-quantum key-agreement enabled for TLS (obsolete) |
| CORSNonWildcardRequestHeadersSupport | CORS non-wildcard request header support enabled |
| CSSCustomStateDeprecatedSyntaxEnabled | Controls whether the deprecated :--foo syntax for CSS custom state is enabled (obsolete) |
| ClearBrowsingDataOnExit | Clear browsing data when Microsoft Edge closes |
| ClearCachedImagesAndFilesOnExit | Clear cached images and files when Microsoft Edge closes |
| ClickOnceEnabled | Allow users to open files using the ClickOnce protocol |
| ClipboardAllowedForUrls | Allow clipboard use on specific sites |
| ClipboardBlockedForUrls | Block clipboard use on specific sites |
| CollectionsServicesAndExportsBlockList | Block access to a specified list of services and export targets in Collections |
| CommandLineFlagSecurityWarningsEnabled | Enable security warnings for command-line flags |
| ComponentUpdatesEnabled | Enable component updates in Microsoft Edge |
| ComposeInlineEnabled | Control access to Microsoft 365 Copilot writing assistance in Microsoft Edge for Business |
| ConfigureDoNotTrack | Configure Do Not Track |
| ConfigureFriendlyURLFormat | Configure the default paste format of URLs copied from Microsoft Edge, and determine if additional formats will be available to users |
| ConfigureKeyboardShortcuts | Configure the list of commands for which to disable keyboard shortcuts |
| ConfigureOnPremisesAccountAutoSignIn | Configure automatic sign in with an Active Directory domain account when there is no Azure AD domain account |
| ConfigureOnlineTextToSpeech | Configure Online Text To Speech |
| ConfigureShare | Configure the Share experience |
| ConfigureViewInFileExplorer | Configure the View in File Explorer feature for SharePoint pages in Microsoft Edge |
| CreatePasskeysInICloudKeychain | Control whether passkey creation will default to iCloud Keychain. |
| CrossOriginWebAssemblyModuleSharingEnabled | Specifies whether WebAssembly modules can be sent cross-origin (obsolete) |
| CryptoWalletEnabled | Enable CryptoWallet feature (obsolete) |
| CustomHelpLink | Specify custom help link |
| DNSInterceptionChecksEnabled | DNS interception checks enabled |
| DefaultBrowserSettingEnabled | Set Microsoft Edge as default browser |
| DefaultBrowserSettingsCampaignEnabled | Enables default browser settings campaigns |
| DefaultClipboardSetting | Default clipboard site permission |
| DefaultSensorsSetting | Default sensors setting |
| DefaultSerialGuardSetting | Control use of the Serial API |
| DefaultShareAdditionalOSRegionSetting | Set the default "share additional operating system region" setting |
| DefinePreferredLanguages | Define an ordered list of preferred languages that websites should display in if the site supports the language |
| DelayNavigationsForInitialSiteListDownload | Require that the Enterprise Mode Site List is available before tab navigation |
| DeleteDataOnMigration | Delete old browser data on migration |
| DeveloperToolsAvailability | Control where developer tools can be used |
| DirectInvokeEnabled | Allow users to open files using the DirectInvoke protocol |
| Disable3DAPIs | Disable support for 3D graphics APIs |
| DisabledMiniApps | List of disabled Mini Apps |
| DiscoverPageContextEnabled | Enable Discover access to page contents for AAD profiles (obsolete) |
| DiskCacheDir | Set disk cache directory |
| DiskCacheSize | Set disk cache size, in bytes |
| DisplayCapturePermissionsPolicyEnabled | Specifies whether the display-capture permissions-policy is checked or skipped (obsolete) |
| DoNotSilentlyBlockProtocolsFromOrigins | Define a list of protocols that can not be silently blocked by anti-flood protection |
| DoubleClickCloseTabEnabled | Double Click feature in Microsoft Edge enabled (only available in China) |
| DynamicCodeSettings | Dynamic Code Settings |
| Edge3PSerpTelemetryEnabled | Edge 3P SERP Telemetry Enabled |
| EdgeAssetDeliveryServiceEnabled | Allow features to download assets from the Asset Delivery Service |
| EdgeAutofillMlEnabled | Machine learning powered autofill suggestions |
| EdgeBrandColor | Configure the organization color shown on the New Tab Page for iOS and Android |
| EdgeBrandLogo | Configure the organization logo shown on the New Tab Page for iOS and Android |
| EdgeCollectionsEnabled | Enable the Collections feature |
| EdgeDisableShareUsageData | Disable data sharing usage data for personalization for iOS and Android |
| EdgeDiscoverEnabled | Discover feature In Microsoft Edge (obsolete) |
| EdgeEDropEnabled | Enable Drop feature in Microsoft Edge |
| EdgeEnhanceImagesEnabled | Enhance images enabled (obsolete) |
| EdgeFollowEnabled | Enable Follow service in Microsoft Edge (obsolete) |
| EdgeHistoryAISearchEnabled | Control access to AI-enhanced search in History |
| EdgeLockedViewModeAllowedActions | Configure allowed actions in locked view mode |
| EdgeLockedViewModeEnabled | Configure locked view mode on iOS and Android |
| EdgeMyApps | Display My Apps bookmark |
| EdgeOneAuthProxy | OneAuth Proxy Server For Microsoft Edge Android |
| EdgeOpenInSidebarEnabled | Enable open in sidebar |
| EdgeProxyPacFailOpenEnabled | Enable fail-open behavior for Proxy PAC on iOS |
| EdgeProxyPacUrl | Configure Proxy Auto-Config (PAC) URL on iOS |
| EdgeSharedDeviceSupportEnabled | Enable Shared Device Support |
| EdgeShoppingAssistantEnabled | Shopping in Microsoft Edge Enabled |
| EdgeSidebarAppUrlHostAllowList | Allow specific apps to be opened in Microsoft Edge sidebar |
| EdgeSidebarAppUrlHostBlockList | Control which apps cannot be opened in Microsoft Edge sidebar |
| EdgeSidebarAppUrlHostForceList | Control which apps are forced to be shown in Microsoft Edge sidebar |
| EdgeSidebarCustomizeEnabled | Enable sidebar customize |
| EdgeWalletCheckoutEnabled | Enable Wallet Checkout feature |
| EdgeWalletEtreeEnabled | Edge Wallet E-Tree Enabled |
| EditFavoritesEnabled | Allows users to edit favorites |
| EnableDeprecatedWebPlatformFeatures | Re-enable deprecated web platform features for a limited time (obsolete) |
| EnableDomainActionsDownload | Enable Domain Actions Download from Microsoft (obsolete) |
| EnableOnlineRevocationChecks | Enable online OCSP/CRL checks |
| EnableSha1ForLocalAnchors | Allow certificates signed using SHA-1 when issued by local trust anchors (obsolete) |
| EnableUnsafeSwiftShader | Allow software WebGL fallback using SwiftShader |
| EncryptedClientHelloEnabled | TLS Encrypted ClientHello Enabled |
| EnforceLocalAnchorConstraintsEnabled | Determines whether the built-in certificate verifier will enforce constraints encoded into trust anchors loaded from the platform trust store (obsolete) |
| EnterpriseHardwarePlatformAPIEnabled | Allow managed extensions to use the Enterprise Hardware Platform API |
| EnterpriseModeSiteListManagerAllowed | Allow access to the Enterprise Mode Site List Manager tool |
| EventPathEnabled | Re-enable the Event.path API until Microsoft Edge version 115 (obsolete) |
| ExemptDomainFileTypePairsFromFileTypeDownloadWarnings | Disable download file type extension-based warnings for specified file types on domains (obsolete) |
| ExperimentationAndConfigurationServiceControl | Control communication with the Experimentation and Configuration Service |
| ExternalProtocolDialogShowAlwaysOpenCheckbox | Show an "Always open" checkbox in external protocol dialog |
| FamilySafetySettingsEnabled | Allow users to configure Family safety and Kids Mode |
| FavoritesBarEnabled | Enable favorites bar |
| FileOrDirectoryPickerWithoutGestureAllowedForOrigins | Allow file or directory picker APIs to be called without prior user gesture |
| ForceBingSafeSearch | Enforce Bing SafeSearch |
| ForceBuiltInPushMessagingClient | Forces Microsoft Edge to use its built-in WNS push client to connect to the Windows Push Notification Service. |
| ForceEphemeralProfiles | Enable use of ephemeral profiles |
| ForceGoogleSafeSearch | Enforce Google SafeSearch |
| ForceLegacyDefaultReferrerPolicy | Use a default referrer policy of no-referrer-when-downgrade (obsolete) |
| ForceMajorVersionToMinorPositionInUserAgent | Enable or disable freezing the User-Agent string at major version 99 (obsolete) |
| ForceNetworkInProcess | Force networking code to run in the browser process (obsolete) |
| ForcePermissionPolicyUnloadDefaultEnabled | Controls whether unload event handlers can be disabled. |
| ForceSync | Force synchronization of browser data and do not show the sync consent prompt |
| ForceSyncTypes | Configure the list of types that are included for synchronization |
| ForceYouTubeRestrict | Force minimum YouTube Restricted Mode |
| FullscreenAllowed | Allow full screen mode |
| GoToIntranetSiteForSingleWordEntryInAddressBar | Force direct intranet site navigation instead of searching on single word entries in the Address Bar |
| HSTSPolicyBypassList | Configure the list of names that will bypass the HSTS policy check |
| HardwareAccelerationModeEnabled | Use graphics acceleration when available |
| HeadlessModeEnabled | Control use of the Headless Mode |
| HideFirstRunExperience | Hide the First-run experience and splash screen |
| HideInternetExplorerRedirectUXForIncompatibleSitesEnabled | Hide the one-time redirection dialog and the banner on Microsoft Edge |
| HideRestoreDialogEnabled | Hide restore pages dialog after browser crash |
| HttpAllowlist | HTTP Allowlist |
| HttpsOnlyMode | Allow HTTPS-Only Mode to be enabled |
| HttpsUpgradesEnabled | Enable automatic HTTPS upgrades |
| HubsSidebarEnabled | Show Hubs Sidebar |
| InAppSupportEnabled | In-app support Enabled |
| InPrivateModeAvailability | Configure InPrivate mode availability |
| InsecureFormsWarningsEnabled | Enable warnings for insecure forms (deprecated) |
| IntranetRedirectBehavior | Intranet Redirection Behavior |
| IsolateOrigins | Enable site isolation for specific origins |
| KeyboardFocusableScrollersEnabled | Enable keyboard focusable scrollers (obsolete) |
| LiveVideoTranslationEnabled | Allows users to translate videos to different languages. |
| LocalBrowserDataShareEnabled | Enable Windows to search local Microsoft Edge browsing data |
| LocalProvidersEnabled | Allow suggestions from local providers |
| MAUEnabled | Always use Microsoft AutoUpdate as the updater for Microsoft Edge (obsolete) |
| MSAWebSiteSSOUsingThisProfileAllowed | Allow single sign-on for Microsoft personal sites using this profile |
| ManagedConfigurationPerOrigin | Sets managed configuration values for websites to specific origins |
| ManagedFavorites | Configure favorites |
| ManagedNtpShortcuts | Configure managed shortcuts on the New Tab Page |
| ManagedSearchEngines | Manage Search Engines |
| MathSolverEnabled | Let users snip a Math problem and get the solution with a step-by-step explanation in Microsoft Edge (obsolete) |
| MaxConnectionsPerProxy | Maximum number of concurrent connections to the proxy server |
| MediaRouterCastAllowAllIPs | Allow Google Cast to connect to Cast devices on all IP addresses |
| MetricsReportingEnabled | Enable usage and crash-related data reporting (obsolete) |
| MicrosoftEdgeInsiderPromotionEnabled | Microsoft Edge Insider Promotion Enabled |
| MicrosoftEditorProofingEnabled | Spell checking provided by Microsoft Editor |
| MicrosoftEditorSynonymsEnabled | Synonyms are provided when using Microsoft Editor spell checker |
| MicrosoftRootStoreEnabled | Determines whether the Microsoft Root Store and built-in certificate verifier will be used to verify server certificates (obsolete) |
| MouseGestureEnabled | Mouse Gesture Enabled |
| MutationEventsEnabled | Enable deprecated/removed Mutation Events (obsolete) |
| NTPContentSuggestionsEnabled | Show content suggestions on the New Tab page |
| NativeHostsExecutablesLaunchDirectly | Force Windows executable Native Messaging hosts to launch directly |
| NativeWindowOcclusionEnabled | Enable Native Window Occlusion (deprecated) |
| NavigationDelayForInitialSiteListDownloadTimeout | Set a timeout for delay of tab navigation for the Enterprise Mode Site List |
| NetworkServiceSandboxEnabled | Enable the network service sandbox |
| NewBaseUrlInheritanceBehaviorAllowed | Allows enabling the feature NewBaseUrlInheritanceBehavior (obsolete) |
| NonRemovableProfileEnabled | Configure whether a user always has a default profile automatically signed in with their work or school account |
| OrganizationLogoOverlayOnAppIconEnabled | Allow your organization's logo from Microsoft Entra to be overlaid on the Microsoft Edge app icon of a work or school profile |
| OrganizationalBrandingOnWorkProfileUIEnabled | Allow the use of your organization's branding assets from Microsoft Entra on the profile-related UI of a work or school profile |
| OriginAgentClusterDefaultEnabled | Origin-keyed agent clustering enabled by default |
| OriginKeyedProcessesEnabled | Enable origin-keyed process isolation for improved security |
| OverlayPermissionDetectionEnabled | Enable Overlay Permission Detection |
| OverrideSecurityRestrictionsOnInsecureOrigin | Control where security restrictions on insecure origins apply |
| PaymentMethodQueryEnabled | Allow websites to query for available payment methods |
| PictureInPictureOverlayEnabled | Enable Picture in Picture overlay feature on supported webpages in Microsoft Edge |
| PinningWizardAllowed | Allow Pin to taskbar wizard |
| PolicyRefreshRate | Refresh rate for user policy |
| PostQuantumKeyAgreementEnabled | Enable post-quantum key agreement for TLS |
| PrefetchWithServiceWorkerEnabled | Allow SpeculationRules prefetch for ServiceWorker-controlled URLs |
| ProactiveAuthEnabled | Enable Proactive Authentication (obsolete) |
| PromotionalTabsEnabled | Enable full-tab promotional content (deprecated) |
| QRCodeGeneratorEnabled | Enable QR Code Generator |
| QuickSearchShowMiniMenu | Enables Microsoft Edge mini menu |
| RSAKeyUsageForLocalAnchorsEnabled | Check RSA key usage for server certificates issued by local trust anchors (obsolete) |
| ReadAloudEnabled | Enable Read Aloud feature in Microsoft Edge |
| ReadExtendedCertificateLocationsEnabled | Enable Extended Keychain Certificate Authentication |
| RedirectSitesFromInternetExplorerPreventBHOInstall | Prevent install of the BHO to redirect incompatible sites from Internet Explorer to Microsoft Edge |
| RedirectSitesFromInternetExplorerRedirectMode | Redirect incompatible sites from Internet Explorer to Microsoft Edge |
| ReduceIPAddressChangeNotificationEnabled | Enable Reduce IP Address Change Notification |
| RelatedMatchesCloudServiceEnabled | Configure Related Matches in Find on Page (obsolete) |
| RelaunchFastIfOutdated | Relaunch browser quickly when the current version is outdated |
| RelaunchNotification | Notify a user that a browser restart is recommended or required for pending updates |
| RelaunchNotificationPeriod | Set the time period for update notifications |
| RelaunchWindow | Set the time interval for relaunch |
| RemoteDebuggingAllowed | Allow remote debugging |
| RendererAppContainerEnabled | Enable renderer in app container |
| RendererCodeIntegrityEnabled | Enable renderer code integrity (obsolete) |
| RequireOnlineRevocationChecksForLocalAnchors | Specify if online OCSP/CRL checks are required for local trust anchors |
| ResolveNavigationErrorsUseWebService | Enable resolution of navigation errors using a web service |
| RestrictCoreSharingOnRenderer | Restrict CPU core sharing for renderer process |
| RestrictSigninToPattern | Restrict which accounts can be used to sign in to Microsoft Edge |
| RoamingProfileLocation | Set the roaming profile directory |
| RoamingProfileSupportEnabled | Enable using roaming copies for Microsoft Edge profile data |
| RunAllFlashInAllowMode | Extend Adobe Flash content setting to all content (obsolete) |
| SSLErrorOverrideAllowed | Allow users to proceed from the HTTPS warning page |
| SSLErrorOverrideAllowedForOrigins | Allow users to proceed from the HTTPS warning page for specific origins |
| SSLVersionMin | Minimum TLS version enabled (obsolete) |
| SandboxExternalProtocolBlocked | Allow Microsoft Edge to block navigations to external protocols in a sandboxed iframe |
| SaveCookiesOnExit | Save cookies when Microsoft Edge closes |
| SavingBrowserHistoryDisabled | Disable saving browser history |
| ScrollToTextFragmentEnabled | Enable scrolling to text specified in URL fragments |
| SearchFiltersEnabled | Search Filters Enabled |
| SearchForImageEnabled | Search for image enabled |
| SearchInSidebarEnabled | Search in Sidebar enabled |
| SearchSuggestEnabled | Enable search suggestions |
| SearchbarAllowed | Enable the Search bar |
| SearchbarIsEnabledOnStartup | Allow the Search bar at Windows startup |
| SecurityKeyPermitAttestation | Websites or domains that don't need permission to use direct Security Key attestation |
| SelectParserRelaxationEnabled | Controls whether the new HTML parser behavior for the <select> element is enabled (obsolete) |
| SendIntranetToInternetExplorer | Send all intranet sites to Internet Explorer |
| SendMouseEventsDisabledFormControlsEnabled | Control the new behavior for event dispatching on disabled form controls (obsolete) |
| SendSiteInfoToImproveServices | Send site information to improve Microsoft services (obsolete) |
| SensorsAllowedForUrls | Allow access to sensors on specific sites |
| SensorsBlockedForUrls | Block access to sensors on specific sites |
| SerialAskForUrls | Allow the Serial API on specific sites |
| SerialBlockedForUrls | Block the Serial API on specific sites |
| ServiceWorkerAutoPreloadEnabled | Allow ServiceWorker to dispatch navigation requests without waiting for its startup |
| ServiceWorkerToControlSrcdocIframeEnabled | Allow ServiceWorker to control srcdoc iframes |
| SetTimeoutWithout1MsClampEnabled | Control Javascript setTimeout() function minimum timeout (obsolete) |
| ShadowStackCrashRollbackBehavior | Configure ShadowStack crash rollback behavior (obsolete) |
| ShareBrowsingHistoryWithCopilotSearchAllowed | Allow sharing tenant-approved browsing history with Microsoft 365 Copilot Search |
| SharedArrayBufferUnrestrictedAccessAllowed | Specifies whether SharedArrayBuffers can be used in a non cross-origin-isolated context |
| SharedLinksEnabled | Show links shared from Microsoft 365 apps in History |
| SharedWorkerBlobURLFixEnabled | Make SharedWorker blob URL behavior aligned with the specification |
| ShowDownloadsToolbarButton | Show Downloads button on the toolbar |
| ShowHistoryThumbnails | Show thumbnail images for browsing history |
| ShowMicrosoftRewards | Show Microsoft Rewards experiences |
| ShowRecommendationsEnabled | Allow feature recommendations and browser assistance notifications from Microsoft Edge |
| ShowTabPreviewEnabled | Enable tab preview on hover |
| SignedHTTPExchangeEnabled | Enable Signed HTTP Exchange (SXG) support |
| SilentPrintingEnabled | Enable Silent Printing |
| SitePerProcess | Enable site isolation for every site |
| SiteSafetyServicesEnabled | Allow users to configure Site safety services (obsolete) |
| SmartActionsBlockList | Block smart actions for a list of services |
| SpeechRecognitionEnabled | Configure Speech Recognition |
| SpellcheckEnabled | Enable spellcheck |
| SpellcheckLanguage | Enable specific spellcheck languages |
| SpellcheckLanguageBlocklist | Force disable spellcheck languages |
| SplitScreenEnabled | Enable split screen feature in Microsoft Edge |
| StandaloneHubsSidebarEnabled | Standalone Sidebar Enabled |
| StandardizedBrowserZoomEnabled | Enable Standardized Browser Zoom Behavior |
| StaticStorageQuotaEnabled | Control whether storage quota APIs will return static values |
| StricterMixedContentTreatmentEnabled | Enable stricter treatment for mixed content (obsolete) |
| SuperDragDropEnabled | Super Drag Drop Enabled |
| SuppressUnsupportedOSWarning | Suppress the unsupported OS warning |
| SyncDisabled | Disable synchronization of data using Microsoft sync services |
| SyncTypesListDisabled | Configure the list of types that are excluded from synchronization |
| TLS13EarlyDataEnabled | Control whether TLS 1.3 Early Data is enabled in Microsoft Edge |
| TLS13HardeningForLocalAnchorsEnabled | Enable a TLS 1.3 security feature for local trust anchors (obsolete) |
| TLSCipherSuiteDenyList | Specify the TLS cipher suites to disable |
| TabFreezingEnabled | Allow freezing of background tabs (obsolete) |
| TabServicesEnabled | Enable tab organization suggestions |
| TargetBlankImpliesNoOpener | Do not set window.opener for links targeting _blank (obsolete) |
| TaskManagerEndProcessEnabled | Enable ending processes in the Browser task manager |
| TextPredictionEnabled | Text prediction enabled by default |
| ThrottleNonVisibleCrossOriginIframesAllowed | Allows enabling throttling of non-visible, cross-origin iframes (obsolete) |
| TrackingPrevention | Block tracking of users' web-browsing activity |
| TranslateEnabled | Enable Translate |
| TravelAssistanceEnabled | Enable travel assistance (obsolete) |
| TripleDESEnabled | Enable 3DES cipher suites in TLS (obsolete) |
| TwaDisclosureUiMode | Configure Trusted Web Activity disclosure UI mode |
| U2fSecurityKeyApiEnabled | Allow using the deprecated U2F Security Key API (obsolete) |
| URLAllowlist | Define a list of allowed URLs |
| URLBlocklist | Block access to a list of URLs |
| UnthrottledNestedTimeoutEnabled | JavaScript setTimeout will not be clamped until a higher nesting threshold is set (deprecated) |
| UpdatePolicyOverride | Specifies how Microsoft Edge Update handles available updates from Microsoft Edge |
| UploadFromPhoneEnabled | Enable upload files from mobile in Microsoft Edge desktop |
| UserAgentClientHintsEnabled | Enable the User-Agent Client Hints feature (obsolete) |
| UserAgentClientHintsGREASEUpdateEnabled | Control the User-Agent Client Hints GREASE Update feature (obsolete) |
| UserAgentReduction | Enable or disable the User-Agent Reduction (obsolete) |
| UserDataDir | Set the user data directory |
| UserDataSnapshotRetentionLimit | Limits the number of user data snapshots retained for use in case of emergency rollback |
| UserFeedbackAllowed | Allow user feedback |
| VerticalTabsAllowed | Configures availability of a vertical layout for tabs on the side of the browser |
| VisualSearchEnabled | Visual search enabled |
| WPADQuickCheckEnabled | Set WPAD optimization |
| WalletDonationEnabled | Wallet Donation Enabled |
| WarnBeforeQuittingEnabled | Show a warning dialog when the user is attempting to quit |
| WebAppInstallByUserEnabled | Enable User Web App Install From Browser |
| WebAppInstallForceList | Configure list of force-installed Web Apps |
| WebAppSettings | Web App management settings |
| WebAudioOutputBufferingEnabled | Enable adaptive buffering for Web Audio |
| WebAuthenticationRemoteDesktopAllowedOrigins | Allowed Origins for Proxied WebAuthn Requests from Remote Desktop Applications. |
| WebComponentsV0Enabled | Re-enable Web Components v0 API until M84 (obsolete) |
| WebContentFilteringBlockedCategories | Configure Web Content Filtering |
| WebDriverOverridesIncompatiblePolicies | Allow WebDriver to Override Incompatible Policies (obsolete) |
| WebSQLAccess | Force WebSQL to be enabled (obsolete) |
| WebSQLInThirdPartyContextEnabled | Force WebSQL in third-party contexts to be re-enabled (obsolete) |
| WebSQLNonSecureContextEnabled | Force WebSQL in non-secure contexts to be enabled (obsolete) |
| WebSelectEnabled | Web Select Enabled (obsolete) |
| WebWidgetAllowed | Enable the Search bar (deprecated) |
| WebWidgetIsEnabledOnStartup | Allow the Search bar at Windows startup (obsolete) |
| WhatsNewPageForEntraProfilesEnabled | Control whether an informational webpage for Edge for Business is shown in the new tab after major browser updates |
| WinHttpProxyResolverEnabled | Use Windows proxy resolver |
| WindowOcclusionEnabled | Enable Window Occlusion |
Was this page helpful?
Need help with this topic?
Want to try using Ask Learn to clarify or guide you through this topic?
Was this page helpful?
Want to try using Ask Learn to clarify or guide you through this topic?