Microsoft Edge

com.microsoft.Edge

Microsoft Edge Managed Settings

macOS

combined

Configuration Keys (248)

Showing 248 of 248 keys

Key	Type	Description	Default	Range
`PFC_SegmentedControl_0`string required	string	—	Default: —	Range: —
`DefaultCookiesSetting`integer Default cookies setting	integer	Allows you to set whether websites are allowed to set local data. Setting local data can be either allowed for all websites or denied for all websites.	Default: —	Range: Allow all sites to set local data (1), Do not allow any site to set local data (2), Keep cookies for the duration of the session (4)
`BlockThirdPartyCookies`boolean Block third party cookies	boolean	Enabling this setting prevents cookies from being set by web page elements that are not from the domain that is in the browser's address bar.	Default: —	Range: —
`CookiesAllowedForUrls`array Allow cookies on these sites	array	Allows you to set a list of url patterns that specify sites which are allowed to set cookies.	Default: —	Range: —
string	string	—	Default: —	Range: —
`CookiesBlockedForUrls`array Block cookies on these sites	array	Allows you to set a list of url patterns that specify sites which are not allowed to set cookies.	Default: —	Range: —
string	string	—	Default: —	Range: —
`CookiesSessionOnlyForUrls`array Limit cookies from matching URLs to the current session	array	Cookies set by pages matching these URL patterns will be limited to the current session, i.e. they will be deleted when the browser exits.	Default: —	Range: —
string	string	—	Default: —	Range: —
`DefaultImagesSetting`integer Default images setting	integer	Allows you to set whether websites are allowed to display images. Displaying images can be either allowed for all websites or denied for all websites.	Default: —	Range: Allow all sites to show all images (1), Do not allow any site to show images (2)
`DefaultInsecureContentSetting`integer Default insecure content setting	integer	Control use of insecure content exceptions	Default: —	Range: Do not allow any site to load blockable mixed content (2), Allow users to add exceptions to allow blockable mixed content (3)
`InsecureContentAllowedForUrls`array	array	List of URLs to allow insecure content	Default: —	Range: —
string Allowed URLs	string	—	Default: —	Range: —
`InsecureContentBlockedForUrls`array	array	List of URLs to block insecure content	Default: —	Range: —
string Blocked URLs	string	—	Default: —	Range: —
`DefaultJavaScriptSetting`integer Default JavaScript setting	integer	Allows you to set whether websites are allowed to run JavaScript. Running JavaScript can be either allowed for all websites or denied for all websites.	Default: —	Range: Allow all sites to run JavaScript (1), Do not allow any site to run JavaScript (2)
`DefaultPluginsSetting`integer Default Flash setting	integer	Allows you to set whether websites are allowed to automatically run the Flash plugin. Automatically running the Flash plugin can be either allowed for all websites or denied for all websites.	Default: —	Range: Allow all sites to automatically run the Flash plugin (1), Block the Flash plugin (2), Click to play (3)
`DefaultPopupsSetting`integer Default popups setting	integer	Allows you to set whether websites are allowed to show pop-ups. Showing popups can be either allowed for all websites or denied for all websites.	Default: —	Range: Allow all sites to show pop-ups (1), Do not allow any site to show popups (2)
`DefaultWebBluetoothGuardSetting`integer Control use of the Web Bluetooth API	integer	Allows you to set whether websites are allowed to get access to nearby Bluetooth devices. Access can be completely blocked, or the user can be asked every time a website wants to get access to nearby Bluetooth devices.	Default: 3	Range: Do not allow any site to request access to Bluetooth devices via the Web Bluetooth API (2), Allow sites to ask the user to grant access to a nearby Bluetooth device (3)
`DefaultWebUsbGuardSetting`integer Control use of the WebUSB API	integer	Allows you to set whether websites are allowed to get access to connected USB devices. Access can be completely blocked, or the user can be asked every time a website wants to get access to connected USB devices.	Default: 3	Range: Do not allow any site to request access to USB devices via the WebUSB API (2), Allow sites to ask the user to grant access to a connected USB device (3)
`ImagesAllowedForUrls`array Allow images on these sites	array	Allows you to set a list of url patterns that specify sites which are allowed to display images.	Default: —	Range: —
string	string	—	Default: —	Range: —
`ImagesBlockedForUrls`array Block images on these sites	array	Allows you to set a list of url patterns that specify sites which are not allowed to display images.	Default: —	Range: —
string	string	—	Default: —	Range: —
`JavaScriptAllowedForUrls`array Allow JavaScript on these sites	array	Allows you to set a list of url patterns that specify sites which are allowed to run JavaScript.	Default: —	Range: —
string	string	—	Default: —	Range: —
`JavaScriptBlockedForUrls`array Block JavaScript on these sites	array	Allows you to set a list of url patterns that specify sites which are not allowed to run JavaScript.	Default: —	Range: —
string	string	—	Default: —	Range: —
`LegacySameSiteCookieBehaviorEnabled`integer Legacy SameSite cookie behavior	integer	Enable default legacy SameSite cookie behavior setting	Default: —	Range: Revert to legacy SameSite behavior for cookies on all sites (1), Use SameSite-by-default behavior for cookies on all sites (2)
`LegacySameSiteCookieBehaviorEnabledForDomainList`array Legacy SameSite cookie allowed list	array	Revert to legacy SameSite behavior for cookies on specified sites	Default: —	Range: —
string Allowed URLs	string	—	Default: —	Range: —
`PluginsAllowedForUrls`array Allow the Flash plugin on these sites	array	Allows you to set a list of url patterns that specify sites which are allowed to run the Flash plugin.	Default: —	Range: —
string	string	—	Default: —	Range: —
`PluginsBlockedForUrls`array Block the Flash plugin on these sites	array	Allows you to set a list of url patterns that specify sites which are not allowed to run the Flash plugin.	Default: —	Range: —
string	string	—	Default: —	Range: —
`DefaultThirdPartyStoragePartitioningSetting`integer Default setting for third-party storage partitioning	integer	Third-party storage partitioning is on by default for some users starting with Microsoft Edge version 115, but it can be disabled with edge://flags. If this policy is configured to "AllowPartitioning" or not configured, third-party storage partitioning can be enabled. If this policy is set to "BlockPartitioning", third-party storage partitioning can't be enabled.	Default: —	Range: Let third-party storage partitioning to be enabled (1), Block third-party storage partitioning from being enabled (2)
`ThirdPartyStoragePartitioningBlockedForOrigins`array Block third-party storage partitioning for these origins	array	Lets you set a list of url patterns that specify top-level origins (the url in the tab's address bar) that block third-party (cross-origin iframe) storage partitioning. If this policy isn't set or a top-level origin doesn't match, then the value from DefaultThirdPartyStoragePartitioningSetting will be used.	Default: —	Range: —
`ThirdPartyStoragePartitioningBlockedForOriginsElement`string	string	—	Default: —	Range: —
`PopupsAllowedForUrls`array Allow popups on these sites	array	Allows you to set a list of url patterns that specify sites which are allowed to open popups.	Default: —	Range: —
string	string	—	Default: —	Range: —
`PopupsBlockedForUrls`array Block popups on these sites	array	Allows you to set a list of url patterns that specify sites which are not allowed to open popups.	Default: —	Range: —
string	string	—	Default: —	Range: —
`AutoSelectCertificateForUrls`array Automatically select client certificates for these sites	array	Allows you to specify a list of url patterns that specify sites for which Google Chrome should automatically select a client certificate, if the site requests a certificate.	Default: —	Range: —
string	string	—	Default: —	Range: —
`DefaultGeolocationSetting`integer Default geolocation setting	integer	Allows you to set whether websites are allowed to track the users' physical location. Tracking the users' physical location can be allowed by default, denied by default or the user can be asked every time a website requests the physical location.	Default: —	Range: Allow sites to track the users' physical location (1), Do not allow any site to track the users' physical location (2), Ask whenever a site wants to track the users' physical location (3)
`RegisteredProtocolHandlers`array Register protocol handlers	array	Allows you to register a list of protocol handlers. This can only be a recommended policy. The property \|protocol\| should be set to the scheme such as 'mailto' and the property \|url\| should be set to the URL pattern of the application that handles the scheme. The pattern can include a '%s', which if present will be replaced by the handled URL.	Default: —	Range: —
dict RegisteredProtocolDictionary	dict	—	Default: —	Range: —
`default`boolean	boolean	—	Default: true	Range: —
`protocol`string	string	—	Default: —	Range: —
`url`string	string	—	Default: —	Range: —
`WebUsbAllowDevicesForUrls`dict Automatically grant permission to these sites to connect to USB devices with the given vendor and product IDs	dict	Allows you to set a list of urls that specify which sites will automatically be granted permission to access a USB device with the given vendor and product IDs.	Default: —	Range: —
`urls`array URLs	array	—	Default: —	Range: —
string URL	string	—	Default: —	Range: —
`devices`dict Devices	dict	—	Default: —	Range: —
`product_id`integer Product ID	integer	—	Default: —	Range: —
`vendor_id`integer Vendor ID	integer	—	Default: —	Range: —
`AutoplayAllowed`boolean Allow media autoplay	boolean	Allows you to control if videos can play automatically (without user consent) with audio content in Google Chrome.	Default: —	Range: —
`BackgroundModeEnabled`boolean Enable background mode	boolean	Continue running background apps after Microsoft Edge closes.	Default: —	Range: —
`BackgroundTemplateListUpdatesEnabled`boolean Enable background updates for templates	boolean	If you enable this setting or the setting is unconfigured, the list of available templates will be downloaded in the background from a Microsoft service every 24 hours.	Default: true	Range: —
`BingAdsSuppression`boolean Suppress Bing Ads	boolean	Block all ads on Bing search results.	Default: false	Range: —
`DefaultNotificationsSetting`integer Default notification setting	integer	Allows you to set whether websites are allowed to display desktop notifications. Displaying desktop notifications can be allowed by default, denied by default or the user can be asked every time a website wants to show desktop notifications.	Default: —	Range: Allow sites to show desktop notifications (1), Do not allow any site to show desktop notifications (2), Ask every time a site wants to show desktop notifications (3)
`NotificationsAllowedForUrls`array Allow notifications on these sites	array	Allows you to create a list of url patterns to specify sites that are allowed to display notifications.	Default: —	Range: —
string	string	—	Default: —	Range: —
`NotificationsBlockedForUrls`array Block notifications on these sites	array	Allows you to create a list of url patterns to specify sites that are not allowed to display notifications.	Default: —	Range: —
string	string	—	Default: —	Range: —
`DefaultSearchProviderEnabled`boolean Enable the default search provider	boolean	Enables the use of a default search provider.	Default: —	Range: —
`DefaultSearchProviderEncodings`array Default search provider encodings	array	Specifies the character encodings supported by the search provider. Encodings are code page names like UTF-8, GB2312, and ISO-8859-1. They are tried in the order provided.	Default: —	Range: —
string	string	—	Default: —	Range: —
`DefaultSearchProviderImageURL`string Parameter providing search-by-image feature for the default search provider	string	Specifies the URL of the search engine used to provide image search. Search requests will be sent using the GET method. If the DefaultSearchProviderImageURLPostParams policy is set then image search requests will use the POST method instead.	Default: —	Range: —
`DefaultSearchProviderImageURLPostParams`string Parameters for image URL which uses POST	string	Specifies the parameters used when doing image search with POST. It consists of comma-separated name/value pairs. If a value is a template parameter, like {imageThumbnail} in above example, it will be replaced with real image thumbnail data.	Default: —	Range: —
`DefaultSearchProviderKeyword`string Default search provider keyword	string	Specifies the keyword, which is the shortcut used in the omnibox to trigger the search for this provider.	Default: —	Range: —
`DefaultSearchProviderName`string Default search provider name	string	Specifies the name of the default search provider. If left empty or not set, the host name specified by the search URL will be used.	Default: —	Range: —
`DefaultSearchProviderSearchURL`string Default search provider search URL	string	Specifies the URL of the search engine used when doing a default search. The URL should contain the string '{searchTerms}', which will be replaced at query time by the terms the user is searching for.	Default: —	Range: —
`DefaultSearchProviderSuggestURL`string Default search provider suggest URL	string	Specifies the URL of the search engine used to provide search suggestions. The URL should contain the string '{searchTerms}', which will be replaced at query time by the text the user has entered so far.	Default: —	Range: —
`BlockExternalExtensions`boolean Block External Extensions	boolean	Controls the installation of external extensions.	Default: false	Range: —
`ExtensionAllowedTypes`array Types of extensions/apps that are allowed to be installed	array	Controls which app/extension types are allowed to be installed and limits runtime access.	Default: —	Range: —
string	string	—	Default: —	Range: Extension (extension), Hosted App (hosted_app), Legacy Packaged App (legacy_packaged_app), Platform App (platform_app), Theme (theme), User Script (user_script)
`ExtensionInstallSources`array URL patterns to allow extension, app, and user script installs from	array	Allows you to specify which URLs are allowed to install extensions, apps, and themes.	Default: —	Range: —
string	string	—	Default: —	Range: —
`ExtensionInstallBlocklist`array Extension IDs the user should be prevented from installing (or * for all)	array	Allows you to specify which extensions the users can NOT install. Extensions already installed will be disabled if denied, without a way for the user to enable them. Once an extension is disabled due to the denylist being removed, it will automatically get re-enabled.	Default: —	Range: —
string	string	—	Default: —	Range: —
`ExtensionInstallAllowlist`array Extension ID Allowlist	array	Allows you to specify which extensions are not subject to the denylist.	Default: —	Range: —
string	string	—	Default: —	Range: —
`ExtensionInstallForcelist`array Extension/App IDs and update URLs to be silently installed	array	Specifies a list of apps and extensions that are installed silently, without user interaction, and which cannot be uninstalled nor disabled by the user. All permissions requested by the apps/extensions are granted implicitly, without user interaction, including any additional permissions requested by future versions of the app/extension. Furthermore, permissions are granted for the enterprise.deviceAttributes and enterprise.platformKeys extension APIs. (These two APIs are not available to apps/extensions that are not force-installed.)	Default: —	Range: —
string	string	—	Default: —	Range: —
`ExtensionSettings`dict Extension management settings	dict	Configures extension management settings for Google Chrome. A default configuration can be set for the special ID "*"	Default: —	Range: —
`{{key}}`string Extension ID	string	—	Default: —	Range: —
`{{value}}`dict	dict	—	Default: —	Range: —
`installation_mode`string	string	Maps to a string indicating the installation mode for the extension.	Default: —	Range: Allowed (allowed), Blocked (blocked), Force Installed (force_installed), Normal Installed (normal_installed)
`update_url`string	string	Maps to a string indicating where Chrome can download a force_installed or normal_installed extension.	Default: —	Range: —
`blocked_permissions`array	array	Maps to a list of strings indicating the blocked API permissions for the extension.	Default: —	Range: —
string	string	—	Default: —	Range: activeTab, alarms, background, bookmarks, browsingData, certificateProvider, clipboardRead, clipboardWrite, contentSettings, contextMenus, cookies, debugger, declarativeContent, declarativeNetRequest, declarativeWebRequest, desktopCapture, displaySource, dns, documentScan, downloads, enterprise.deviceAttributes, enterprise.hardwarePlatform, enterprise.platformKeys, experimental, fileBrowserHandler, fileSystemProvider, fontSettings, gcm, geolocation, history, identity, idle, idltest, management, nativeMessaging, networking.config, notifications, pageCapture, platformKeys, power, printerProvider, privacy, processes, proxy, sessions, signedInDevices, storage, system.cpu, system.display, system.memory, system.storage, tabCapture, tabs, topSites, tts, ttsEngine, unlimitedStorage, vpnProvider, wallpaper, webNavigation, webRequest, webRequestBlocking
`minimum_version_required`string	string	Maps to a version string.	Default: —	Range: —
`install_sources`array	array	Each item in this list is an extension-style match pattern.	Default: —	Range: —
string	string	—	Default: —	Range: —
`allowed_types`array	array	This setting sets the allowed types of extension/apps that can be installed in Google Chrome.	Default: —	Range: —
string	string	—	Default: —	Range: extension, theme, user_script, hosted_app, legacy_packaged_app, platform_app
`blocked_install_message`string	string	This maps to a string specifying the error message to display to users if they're blocked from installing an extension.	Default: —	Range: —
`runtime_blocked_hosts`array	array	Maps to a list of strings representing hosts whose webpages the extension will be blocked from modifying.	Default: —	Range: —
string	string	—	Default: —	Range: —
`runtime_allowed_hosts`array	array	Maps to a list of strings representing hosts that an extension can interact with regardless of whether they are listed in "runtime_blocked_hosts".	Default: —	Range: —
string	string	—	Default: —	Range: —
`EnableMediaRouter`boolean Enable Google Cast	boolean	If this policy is set to true or is not set, Google Cast will be enabled, and users will be able to launch it from the app menu, page context menus, media controls on Cast-enabled websites, and (if shown) the Cast toolbar icon.	Default: true	Range: —
`ShowCastIconInToolbar`boolean Show the Google Cast toolbar icon	boolean	If this policy is set to true, the Cast toolbar icon will always be shown on the toolbar or the overflow menu, and users will not be able to remove it.	Default: false	Range: —
`AllowCrossOriginAuthPrompt`boolean Cross-origin HTTP Basic Auth prompts	boolean	Controls whether third-party sub-content on a page is allowed to pop-up an HTTP Basic Auth dialog box.	Default: false	Range: —
`AuthNegotiateDelegateAllowlist`string Kerberos delegation server allowlist	string	Servers that Microsoft Edge may delegate to.	Default: —	Range: —
`AuthSchemes`string Supported authentication schemes	string	Specifies which HTTP authentication schemes are supported by Microsoft Edge. Possible values are 'basic', 'digest', 'ntlm' and 'negotiate'. Separate multiple values with commas.	Default: —	Range: —
`AuthServerAllowlist`string Authentication server allowlist	string	Specifies which servers should be allowed for integrated authentication. Integrated authentication is only enabled when Microsoft Edge receives an authentication challenge from a proxy or from a server which is in this permitted list.	Default: —	Range: —
`DisableAuthNegotiateCnameLookup`boolean Disable CNAME lookup when negotiating Kerberos authentication	boolean	Specifies whether the generated Kerberos SPN is based on the canonical DNS name or the original name entered.	Default: false	Range: —
`EnableAuthNegotiatePort`boolean Include non-standard port in Kerberos SPN	boolean	Specifies whether the generated Kerberos SPN should include a non-standard port.	Default: false	Range: —
`NtlmV2Enabled`boolean Enable NTLMv2 authentication	boolean	If you don't configure this policy, NTLMv2 is enabled by default.	Default: true	Range: —
`AdsSettingForIntrusiveAdsSites`integer Ads setting for sites with intrusive ads	integer	Allows you to set whether ads should be blocked on sites with intrusive ads.	Default: —	Range: Allow ads on all sites (1), Do not allow ads on sites with intrusive ads (2)
`AllowDeletingBrowserHistory`boolean Enable deleting browser and download history	boolean	Enables deleting browser history and download history in Microsoft Edge and prevents users from changing this setting.	Default: true	Range: —
`AllowFileSelectionDialogs`boolean Allow invocation of file selection dialogs	boolean	Allows access to local files on the machine by allowing Microsoft Edge to display file selection dialogs.	Default: true	Range: —
`AllowPopupsDuringPageUnload`boolean Allow a page to show popups during its unloading	boolean	This policy allows an admin to specify that a page may show popups during its unloading.	Default: false	Range: —
`AllowSurfGame`boolean Allow Surf Game	boolean	Enables or disables the built-in surf game. Game accessible via edge://surf.	Default: true	Range: —
`AllowSyncXHRInPageDismissal`boolean Allow pages to send synchronous XHR requests during page dismissal	boolean	This policy lets you specify that a page can send synchronous XHR requests during page dismissal.	Default: false	Range: —
`AllowTrackingForUrls`array Configure tracking prevention exceptions for specific sites	array	Configure the list of URL patterns that are excluded from tracking prevention.	Default: —	Range: —
string	string	—	Default: —	Range: —
`AlternateErrorPagesEnabled`boolean Enable alternate error pages	boolean	Enables the use of alternate error pages that are built into Microsoft Edge (such as 'page not found') and prevents users from changing this setting.	Default: —	Range: —
`AlwaysOpenPdfExternally`boolean Always Open PDF files externally	boolean	Disables the internal PDF viewer in Microsoft Edge. Instead it treats it as download and allows the user to open PDF files with the default application.	Default: false	Range: —
`AppCacheForceEnabled`boolean Force Enable AppCache	boolean	Allows the AppCache feature to be re-enabled, even if it's turned off by default	Default: false	Range: —
`ApplicationLocaleValue`string Application locale value	string	Set application locale	Default: "en"	Range: —
`AudioCaptureAllowed`boolean Allow or deny audio capture	boolean	If enabled or not configured (default), the user will be prompted for audio capture access except for URLs configured in the AudioCaptureAllowedUrls list which will be granted access without prompting.	Default: true	Range: —
`AudioCaptureAllowedUrls`array URLs that will be granted access to audio capture devices without prompt	array	Patterns in this list will be matched against the security origin of the requesting URL. If a match is found, access to audio capture devices will be granted without prompt.	Default: —	Range: —
string	string	—	Default: —	Range: —
`AutoImportAtFirstRun`integer Automatically import browser data and settings at first run	integer	If you enable this policy, Microsoft Edge automatically imports all supported datatypes and settings from either the default browser or another specified browser. This also forces Microsoft Edge to skip the import section of the first-run experience.	Default: —	Range: Import all supported datatypes and settings from the default browser (0), Import all supported datatypes and settings from Google Chrome (2), Import all supported datatypes and settings from Safari (3), Disable automatic import & skip import section of the first-run experience (4)
`AutoOpenAllowedForURLs`array Allowed URLs for Auto Open	array	URLs where AutoOpenFileTypes can apply. If you set URLs in this policy, files will only automatically open by policy if the URL is part of this set and the file type is listed in AutoOpenFileTypes. If either condition is false, the download won't automatically open by policy.	Default: —	Range: —
string URLs	string	—	Default: —	Range: —
`AutoOpenFileTypes`array Auto Open File Types	array	List of file types that should be automatically opened on download. Note: The leading separator should not be included when listing the file type, so list "txt" instead of ".txt".	Default: —	Range: —
string File Types	string	—	Default: —	Range: —
`AutofillAddressEnabled`boolean Enable AutoFill for addresses	boolean	Enables Microsoft Edge's AutoFill feature and allows users to auto complete address information in web forms using previously stored information.	Default: true	Range: —
`AutofillCreditCardEnabled`boolean Enable AutoFill for credit cards	boolean	Enables Microsoft Edge's AutoFill feature and allows users to auto complete credit card information in web forms using previously stored information.	Default: true	Range: —
`FavoritesBarEnabled`boolean Enable Bookmark Bar	boolean	If you enable this setting, Microsoft Edge will show a bookmark bar.	Default: —	Range: —
`BrowserAddProfileEnabled`boolean Enable add person in user manager	boolean	Enable profile creation from the Identity flyout menu or the Settings page	Default: true	Range: —
`BrowserGuestModeEnabled`boolean Enable guest mode in browser	boolean	Enable the option to allow the use of guest profiles in Microsoft Edge. In a guest profile, the browser doesn't import browsing data from existing profiles, and it deletes browsing data when all guest profiles are closed.	Default: true	Range: —
`BrowserNetworkTimeQueriesEnabled`boolean Allow queries to a network time service	boolean	If set to false, prevents Microsoft Edge from occasionally sending queries to a browser network time service to retrieve an accurate timestamp.	Default: true	Range: —
`BrowserSignin`integer Browser Signin	integer	Specify whether a user can sign into Microsoft Edge with their account and use account-related services like sync and single sign on.	Default: —	Range: Disable browser sign-in (0), Enable browser sign-in (1), Force users to sign-in to use the browser (2)
`BuiltinCertificateVerifierEnabled`boolean Use built-in certificate verifier	boolean	Determines whether the built-in certificate verifier will be used to verify server certificates.	Default: —	Range: —
`BuiltInDnsClientEnabled`boolean Use built-in DNS client	boolean	Controls whether to use the built-in DNS client.	Default: —	Range: —
`DnsOverHttpsMode`string DNS-over-HTTPS mode	string	Controls the mode of DNS-over-HTTPS	Default: —	Range: Disable DNS-over-HTTPS (off), Enable DNS-over-HTTPS with insecure fallback (automatic), Enable DNS-over-HTTPS without insecure fallback (secure)
`DnsOverHttpsTemplates`string DNS-over-HTTPS Template	string	Specify URI template of desired DNS-over-HTTPS resolver. To specify multiple DNS-over-HTTPS resolvers, separate the corresponding URI templates with spaces.	Default: —	Range: —
`CertificateTransparencyEnforcementDisabledForCas`array Disable Certificate Transparency enforcement for a list of subjectPublicKeyInfo hashes	array	Disables enforcing Certificate Transparency requirements for a list of subjectPublicKeyInfo hashes.	Default: —	Range: —
string	string	—	Default: —	Range: —
`CertificateTransparencyEnforcementDisabledForLegacyCas`array Disable Certificate Transparency enforcement for a list of Legacy Certificate Authorities	array	Disables enforcing Certificate Transparency requirements for a list of Legacy Certificate Authorities.	Default: —	Range: —
string	string	—	Default: —	Range: —
`CertificateTransparencyEnforcementDisabledForUrls`array Disable Certificate Transparency enforcement for a list of URLs	array	Disables enforcing Certificate Transparency requirements to the listed URLs. Form your URL pattern according to https://go.microsoft.com/fwlink/?linkid=2095322	Default: —	Range: —
string	string	—	Default: —	Range: —
`ClearBrowsingDataOnExit`boolean Clear browsing data when Microsoft Edge closes	boolean	If you enable this policy, all browsing data is deleted each time Microsoft Edge closes.	Default: false	Range: —
`ClearCachedImagesAndFilesOnExit`boolean Clear cached images and files when Edge quits	boolean	Clear cached images and files when Microsoft Edge closes.	Default: —	Range: —
`CollectionsServicesAndExportsBlockList`array Services and Export Collection Blocklist	array	Block user access to a specified list of services and export targets in Collections. This includes displaying additional data from Bing and exporting collections to Microsoft products or external partners.	Default: —	Range: —
string Blocklist Item	string	—	Default: —	Range: —
`CommandLineFlagSecurityWarningsEnabled`boolean Command Line Flag Security Warnings Enabled	boolean	If disabled, prevents security warnings from appearing when Edge is launched with some potentially dangerous command-line flags.	Default: true	Range: —
`ComponentUpdatesEnabled`boolean Edge component updates	boolean	Enables component updates for all components in Microsoft Edge when not set or set to True.	Default: true	Range: —
`ConfigureDoNotTrack`boolean Configure Do Not Track	boolean	Specify whether to send Do Not Track requests to websites that ask for tracking info.	Default: —	Range: —
`ConfigureOnlineTextToSpeech`boolean Configure Online Text To Speech	boolean	If you enable or don't configure this policy, web-based applications that use the SpeechSynthesis API can use Online Text to Speech voice fonts.	Default: true	Range: —
`CustomHelpLink`string Specify custom help link	string	Specify a link for the Help menu or the F1 key.	Default: —	Range: —
`DNSInterceptionChecksEnabled`boolean DNS interception checks enabled	boolean	This policy configures a local switch that can be used to disable DNS interception checks. These checks attempt to discover whether the browser is behind a proxy that redirects unknown host names.	Default: true	Range: —
`DefaultBrowserSettingEnabled`boolean Set Microsoft Edge as Default Browser	boolean	Configures the default browser checks in Microsoft Edge and prevents users from changing them. If set to true, Edge will always checks on startup whether it is the default browser and automatically registers itself, if possible.	Default: —	Range: —
`DefaultSearchProviderContextMenuAccessAllowed`boolean Allow Default Search Provider on Context Menu	boolean	Allow default search provider context menu search access	Default: true	Range: —
`DeveloperToolsAvailability`integer Control where Developer Tools can be used	integer	Allows you to control where Developer Tools can be used.	Default: —	Range: Disallow usage of the Developer Tools on extensions installed by enterprise policy, allow usage of the Developer Tools in other contexts (0), Allow usage of the Developer Tools (1), Disallow usage of the Developer Tools (2)
`DiagnosticData`integer Send Edge Browser Diagnostic Data	integer	Send required and optional diagnostic data about browser usage. 'RequiredData' sends required diagnostic data but turns off optional diagnostic data collection. Microsoft Edge will send required diagnostic data to keep Microsoft Edge secure, up to date and performing as expected. 'OptionalData' sends optional diagnostic data includes data about browser usage, websites that are visited, crash reports sent to Microsoft for product and service improvement.	Default: —	Range: Off (not recommended) (0), Required data (1), Optional data (2)
`Disable3DAPIs`boolean Disable support for 3D graphics APIs	boolean	Enabling this setting prevents web pages from accessing the graphics processing unit (GPU). Specifically, web pages can not access the WebGL API and plugins can not use the Pepper 3D API.	Default: false	Range: —
`DisableScreenshots`boolean Disable taking screenshots	boolean	If enabled, screenshots cannot be taken using keyboard shortcuts or extension APIs.	Default: false	Range: —
`DiskCacheDir`string Set disk cache directory	string	Configures the directory that Microsoft Edge will use for storing cached files on the disk. See https://www.chromium.org/administrators/policy-list-3/user-data-directory-variables for a list of variables that can be used. To avoid data loss or other unexpected errors this policy should not be set to a volume's root directory or to a directory used for other purposes, because Edge manages its contents	Default: —	Range: —
`DiskCacheSize`integer Set disk cache size	integer	Configures the cache size that Microsoft Edge will use for storing cached files on the disk. The value specified in this policy is not a hard boundary but rather a suggestion to the caching system, any value below a few megabytes is too small and will be rounded up to a sane minimum. If the value of this policy is 0, the default cache size will be used but the user will not be able to change it.	Default: —	Range: —
`DownloadDirectory`string Set download directory	string	Configures the directory that Microsoft Edge will use for downloading files. If you set this policy, Edge will use the provided directory regardless whether the user has specified one or enabled the flag to be prompted for download location every time. If this policy is left not set the default download directory will be used and the user will be able to change it. See https://go.microsoft.com/fwlink/?linkid=2095041 for a list of variables that can be used.	Default: —	Range: —
`DownloadRestrictions`integer Download restrictions	integer	Configures the type of downloads that Microsoft Edge will completely block, without letting users override the security decision.	Default: —	Range: No special restrictions (0), Block dangerous downloads (1), Block potentially dangerous downloads (2), Block all downloads (3)
`EdgeCollectionsEnabled`boolean Enable the Collections feature	boolean	Lets you allow users to access the Collections feature, where they can collect, organize, share, and export content more efficiently and with Office integration.	Default: true	Range: —
`EditFavoritesEnabled`boolean Enable or disable favorites editing	boolean	If you enable this setting, favorites can be added, removed or modified. This is the default also when this policy is not set.	Default: true	Range: —
`EnableDeprecatedWebPlatformFeatures`array Enable deprecated web platform features for a limited time	array	ExampleDeprecatedFeature_EffectiveUntil20080902 - Enable ExampleDeprecatedFeature API through 2008/09/02 Specify a list of deprecated web platform features to re-enable temporarily.	Default: —	Range: —
string	string	—	Default: —	Range: —
`EnableDomainActionsDownload`boolean Enable Domain Actions Download from Microsoft	boolean	If you enable this policy, the list of Domain Actions will continue to be downloaded from the Experimentation and Configuration Service.	Default: —	Range: —
`EnableOnlineRevocationChecks`boolean Whether online OCSP/CRL checks are performed	boolean	In light of the fact that soft-fail, online revocation checks provide no effective security benefit, they are disabled by default in Google Chrome version 19 and later. By setting this policy to true, the previous behavior is restored and online OCSP/CRL checks will be performed.	Default: false	Range: —
`EnableSha1ForLocalAnchors`boolean Enable SHA-1 for Local Anchors	boolean	Allow certificates signed using SHA-1 when issued by local trust anchors (deprecated).	Default: false	Range: —
`EnterpriseHardwarePlatformAPIEnabled`boolean Enable Managed Extensions to use the Enterprise Hardware API	boolean	When this policy is set to enabled, extensions installed by enterprise policy are allowed to use the Enterprise Hardware Platform API.	Default: false	Range: —
`ExperimentationAndConfigurationServiceControl`integer Control Experimentation and Configuration Service	integer	Control communication with the Experimentation and Configuration Service	Default: —	Range: Retrieve configurations and experiments (0), Retrieve configurations only (1), Disable communication with the Experimentation and Configuration Service (2)
`ExternalProtocolDialogShowAlwaysOpenCheckbox`boolean Show an "Always open" checkbox in external protocol dialog	boolean	If you set to True, when an external protocol confirmation prompt is shown, the user can select "Always open". The user won't get any future confirmation prompts for this protocol.	Default: false	Range: —
`ForceEphemeralProfiles`boolean Ephemeral profile	boolean	If set to enabled this policy forces the profile to be switched to ephemeral mode. If this policy is specified as an OS policy (e.g. GPO on Windows) it will apply to every profile on the system; if the policy is set as a Cloud policy it will apply only to a profile signed in with a managed account.	Default: false	Range: —
`ForceBingSafeSearch`integer Force Bing SafeSearch	integer	Forces queries in Google Web Search to be done with SafeSearch set to active and prevents users from changing this setting.	Default: —	Range: Don't configure search restrictions in Bing (0), Configure moderate search restrictions in Bing (1), Configure strict search restrictions in Bing (2)
`ForceCertificatePromptsOnMultipleMatches`boolean Force Certificate Prompt on Multiple Matches	boolean	Configure whether Microsoft Edge should automatically select a certificate when there are multiple certificate matches for a site configured with "AutoSelectCertificateForUrls" (https://docs.microsoft.com/en-us/deployedge/microsoft-edge-policies#autoselectcertificateforurls).	Default: —	Range: —
`ForceGoogleSafeSearch`boolean Force Google SafeSearch	boolean	Forces queries in Google Web Search to be done with SafeSearch set to active and prevents users from changing this setting.	Default: false	Range: —
`ForceLegacyDefaultReferrerPolicy`boolean Force Legacy Default Referrer Policy	boolean	Use a default referrer policy of no-referrer-when-downgrade.	Default: false	Range: —
`ForceYouTubeRestrict`integer Force minimum YouTube Restricted Mode	integer	Enforces a minimum Restricted Mode on YouTube and prevents users from picking a less restricted mode.	Default: —	Range: Do not enforce Restricted Mode on YouTube (0), Enforce at least Moderate Restricted Mode on YouTube (1), Enforce Strict Restricted Mode for YouTube (2)
`FullscreenAllowed`boolean	boolean	Allow full screen mode	Default: true	Range: —
`GoToIntranetSiteForSingleWordEntryInAddressBar`boolean Force direct intranet site navigation instead of searching on single word entries in the Address Bar	boolean	If you enable this policy, the top auto-suggest result in the address bar suggestion list will navigate to intranet sites if the text entered in the address bar is a single word without punctuation.	Default: false	Range: —
`HSTSPolicyBypassList`array Configure the list of names that will bypass the HSTS policy check	array	Hostnames specified in this list will be exempt from the HSTS policy check that could potentially upgrade requests from "http://" to "https://". Only single-label hostnames are allowed in this policy.	Default: —	Range: —
string	string	—	Default: —	Range: —
`HardwareAccelerationModeEnabled`boolean Use hardware acceleration when available	boolean	If this policy is set to true or left unset, hardware acceleration will be enabled unless a certain GPU feature is on the denylist.	Default: true	Range: —
`HideFirstRunExperience`boolean Hide the First-run experience and splash screen	boolean	If you enable this policy, the First-run experience and the splash screen will not be shown to users when they run Microsoft Edge for the first time.	Default: false	Range: —
`HubsSidebarEnabled`boolean Show Hubs Sidebar	boolean	Show the Sidebar launcher bar.	Default: true	Range: —
`ImportAutofillFormData`boolean Import autofill form data from default browser on first run	boolean	This policy forces the autofill form data to be imported from the previous default browser if enabled. If enabled, this policy also affects the import dialog.	Default: —	Range: —
`ImportBrowserSettings`boolean Allow importing of browser settings	boolean	Allows users to import browser settings from another browser into Microsoft Edge.	Default: —	Range: —
`ImportCookies`boolean Allow importing of cookies	boolean	Allow importing of cookies.	Default: —	Range: —
`ImportExtensions`boolean Allow importing of extensions	boolean	Allow importing of extensions.	Default: —	Range: —
`ImportFavorites`boolean Import Favorites from default browser on first run	boolean	This policy forces bookmarks to be imported from the current default browser if enabled. If enabled, this policy also affects the import dialog.	Default: true	Range: —
`ImportHistory`boolean Import browsing history from default browser on first run	boolean	This policy forces the browsing history to be imported from the current default browser if enabled. If enabled, this policy also affects the import dialog.	Default: —	Range: —
`ImportHomepage`boolean Import of homepage from default browser on first run	boolean	This policy forces the home page to be imported from the current default browser if enabled.	Default: —	Range: —
`ImportOpenTabs`boolean Allow importing of open tabs	boolean	Allows users to import open and pinned tabs from another browser into Microsoft Edge.	Default: —	Range: —
`ImportPaymentInfo`boolean Allow importing of payment info	boolean	Allows users to import payment info from another browser into Microsoft Edge.	Default: —	Range: —
`ImportSavedPasswords`boolean Import saved passwords from default browser on first run	boolean	This policy forces the saved passwords to be imported from the previous default browser if enabled. If enabled, this policy also affects the import dialog.	Default: —	Range: —
`ImportSearchEngine`boolean Import search engines from default browser on first run	boolean	This policy forces search engines to be imported from the current default browser if enabled. If enabled, this policy also affects the import dialog.	Default: —	Range: —
`ImportShortcuts`boolean Import shortcuts	boolean	Allow importing of shortcuts.	Default: —	Range: —
`InPrivateModeAvailability`integer Private mode availability	integer	Specifies whether the user may open pages in Private mode in Microsoft Edge.	Default: —	Range: Private mode available (0), Private mode disabled (1), Private mode forced (2)
`IsolateOrigins`string Enable Site Isolation for specified origins	string	Specify origins to run in isolation, in their own process. This policy also isolates origins named by subdomains - for example, specifying https://contoso.com/ will cause https://foo.contoso.com/ to be isolated as part of the https://contoso.com/ site. If the policy is enabled, each of the named origins in a comma-separated list will run in its own process. If you disable this policy, then both the 'IsolateOrigins' and 'SitePerProcess' features are disabled. Users can still enable 'IsolateOrigins' policy manually, via command line flags. If you don't configure the policy, the user can change this setting.	Default: —	Range: —
`ManagedFavorites`array Managed Favorites	array	Configures a list of managed bookmarks.	Default: —	Range: —
dict	dict	—	Default: —	Range: —
`name`string	string	Name of the favorite.	Default: —	Range: —
`url`string	string	URL for the favorite.	Default: —	Range: —
dict Managed Favorites Folder Name	dict	The top-level managed favorites folder name.	Default: —	Range: —
`toplevel_name`string Top Level Name	string	—	Default: —	Range: —
`ManagedSearchEngines`array Managed search engines	array	Manage Search Engines	Default: —	Range: —
dict Search engine	dict	—	Default: —	Range: —
`is_default`boolean Default?	boolean	—	Default: —	Range: —
`name`string	string	—	Default: —	Range: —
`keyword`string	string	—	Default: —	Range: —
`search_url`string	string	—	Default: —	Range: —
`suggest_url`string	string	—	Default: —	Range: —
`image_search_url`string	string	—	Default: —	Range: —
`encoding`string	string	—	Default: —	Range: —
`NewTabPageSearchBox`string New Tab Page Search Box	string	Configure the new tab page search box experience. You can configure the new tab page search box to use "Search box (Recommended)" or "Address bar" to search on new tabs.	Default: —	Range: Search box (bing), Address bar (redirect)
`MaxConnectionsPerProxy`integer Maximal number of concurrent connections to the proxy server	integer	Specifies the maximal number of simultaneous connections to the proxy server.	Default: 32	Range: —
`MediaRouterCastAllowAllIPs`boolean Allow Google Cast to connect to Cast devices on all IP addresses.	boolean	If this policy is set to true, Google Cast will connect to Cast devices on all IP addresses, not just RFC1918/RFC4913 private addresses.	Default: —	Range: —
`MetricsReportingEnabled`boolean Enable reporting of usage and crash-related data	boolean	Enables anonymous reporting of usage and crash-related data about Microsoft Edge to Microsoft and prevents users from changing this setting.	Default: —	Range: —
`MicrosoftEdgeInsiderPromotionEnabled`boolean Enable Microsoft Edge Insider promotions	boolean	Shows content promoting the Microsoft Edge Insider channels on the About Microsoft Edge settings page.	Default: true	Range: —
`OmniboxMSBProviderEnabled`boolean Enable Microsoft Search for Business provider in omnibox	boolean	Enables the display of relevant MSB suggestions in omnibox when user types a search string in the addressbar	Default: true	Range: —
`PaymentMethodQueryEnabled`boolean Allow websites to query for available payment methods	boolean	Allows you to set whether websites can check if the user has payment methods saved.	Default: true	Range: —
`PersonalizationReportingEnabled`boolean Allow personalization of ads, search and news by sending browsing history to Microsoft	boolean	This policy prevents Microsoft from collecting a user's Microsoft Edge browsing history to be used for personalizing advertising, search, news and other Microsoft services.	Default: true	Range: —
`ProactiveAuthEnabled`boolean Enable Proactive Authentication	boolean	Lets you configure whether to turn on Proactive Authentication.	Default: true	Range: —
`NetworkPredictionOptions`integer Enable network prediction	integer	Enables network prediction and prevents users from changing this setting. This controls DNS prefetching, TCP and SSL preconnection, and prerendering of web pages.	Default: —	Range: Predict network actions on any network connection (0), Do not predict network actions on any network connection (2)
`OverrideSecurityRestrictionsOnInsecureOrigin`array Origins or hostname patterns to be treated as secure context	array	The policy specifies a list of origins (URLs) or hostname patterns (such as "*.example.com") to be treated as secure contexts. The intent is to allow organizations to set up a staging server for internal web development, so that their developers can test out features requiring secure contexts without having to deploy TLS on the staging server. Setting a list of URLs in this policy has the same effect as setting the command-line flag '--unsafely-treat-insecure-origin-as-secure' to a comma-separated list of the same URLs. If the policy is set, it will override the command-line flag. For more information on secure contexts, see https://www.w3.org/TR/secure-contexts/	Default: —	Range: —
string	string	—	Default: —	Range: —
`PolicyRefreshRate`integer Policy Refresh Rate	integer	Refresh rate for user policy. Specifies the period in milliseconds at which the device management service is queried for user policy information. Setting this policy overrides the default value of 3 hours. Valid values for this policy are in the range from 1800000 (30 minutes) to 86400000 (1 day).	Default: 10800000	Range: 1800000 – 86400000
`PromotionalTabsEnabled`boolean Enable showing full-tab promotional content	boolean	Allows you to control the presentation of full-tab promotional and/or educational content in Microsoft Edge.	Default: true	Range: —
`PromptForDownloadLocation`boolean Ask where to save each file before downloading	boolean	If the policy is enabled, the user will be asked where to save each file before downloading. If the policy is disabled, downloads will start immediately, and the user will not be asked where to save the file. If the policy is not configured, the user will be able to change this setting.	Default: —	Range: —
`ProxySettings`dict Proxy Settings	dict	Configures the proxy settings for Google Chrome. These proxy settings will be available for ARC-apps too. If you enable this setting, Google Chrome and ARC-apps ignore all proxy-related options specified from the command line.	Default: —	Range: —
`ProxyMode`string Proxy Mode	string	Specifies the proxy server Microsoft Edge uses and prevents users from changing proxy settings. Microsoft Edge ignores all proxy-related options specified from the command line.	Default: —	Range: Never use proxy (ignores other fields) (direct), System (ignores other fields) (system), Auto Detect (ignores other fields) (auto_detect), Fixed (Uses ProxyServer & ProxyBypassList) (fixed_servers), Pac Script (Uses ProxyPacUrl & ProxyBypassList) (pac_script)
`ProxyServer`string Proxy Server URL	string	Specifies the URL of the proxy server	Default: —	Range: —
`ProxyBypassList`string Proxy Bypass List	string	Defines a comma-separated list of hosts for which Microsoft Edge bypasses any proxy.	Default: —	Range: —
`ProxyPacUrl`string Proxy PAC URL	string	Specifies the URL for a proxy auto-config (PAC) file.	Default: —	Range: —
`ProxyPacMandatory`boolean Proxy PAC Mandatory	boolean	Prevents the network stack from falling back to direct connections with invalid or unavailable PAC script.	Default: —	Range: —
`QuicAllowed`boolean Allow QUIC protocol	boolean	QUIC is a transport layer network protocol that can improve performance of web applications that currently use TCP.	Default: true	Range: —
`RelaunchNotification`integer Notify a user that a browser relaunch is recommended or required	integer	Notify users that Microsoft Edge must be relaunched to apply a pending update.	Default: —	Range: Show a recurring prompt to the user indicating that a relaunch is recommended (1), Show a recurring prompt to the user indicating that a relaunch is required (2)
`RelaunchNotificationPeriod`integer Update time period	integer	Allows you to set the time period, in milliseconds, over which users are notified that Microsoft Edge must be relaunched to apply a pending update.	Default: —	Range: —
`ResolveNavigationErrorsUseWebService`boolean Enable resolution of navigation errors using a web service	boolean	Allow Microsoft Edge to issue a dataless connection to a web service to probe networks for connectivity in cases like hotel and airport Wi-Fi.	Default: —	Range: —
`RestrictSigninToPattern`string Restrict which users are allowed to sign in to Google Chrome	string	Determines which accounts can be set as browser primary accounts in Microsoft Edge (the account that is chosen during the Sync opt-in flow)	Default: —	Range: —
`RunAllFlashInAllowMode`boolean Extend Flash content setting to all content	boolean	If you enable this setting, all Flash content embedded on websites that have been set to allow Flash in content settings -- either by the user or by enterprise policy -- will be run, including content from other origins or small content.	Default: false	Range: —
`SSLErrorOverrideAllowed`boolean Allow proceeding from the SSL warning page	boolean	Edge shows a warning page when users navigate to sites that have SSL errors. By default or when this policy is set to true, users are allowed to click through these warning pages. Setting this policy to false disallows users to click through any warning page.	Default: true	Range: —
`SSLVersionMin`string Minimum SSL version enabled	string	If this policy is not configured then Microsoft Edge uses a default minimum version which is TLS 1.0.	Default: —	Range: TLS 1.0 (tls1), TLS 1.1 (tls1.1), TLS 1.2 (tls1.2)
`SaveCookiesOnExit`array Save Cookies on Exit	array	Save cookies when Microsoft Edge closes. When this policy is enabled, the specified set of cookies is exempt from deletion when the browser closes.	Default: —	Range: —
string URL	string	—	Default: —	Range: —
`SavingBrowserHistoryDisabled`boolean Disable saving browser history	boolean	Disables saving browser history in Microsft Edge and prevents users from changing this setting.	Default: false	Range: —
`SearchSuggestEnabled`boolean Enable search suggestions	boolean	Enables search suggestions in Microsoft Edge's omnibox and prevents users from changing this setting.	Default: —	Range: —
`SecurityKeyPermitAttestation`array URLs/domains automatically permitted direct Security Key attestation	array	Specifies URLs and domains for which no prompt will be shown when attestation certificates from Security Keys are requested. Additionally, a signal will be sent to the Security Key indicating that individual attestation may be used. Without this, users will be prompted in Chrome 65+ when sites request attestation of Security Keys.	Default: —	Range: —
string	string	—	Default: —	Range: —
`SendSiteInfoToImproveServices`boolean Send site information to improve Microsoft services	boolean	This policy enables sending info about websites visited in Microsoft Edge to Microsoft to improve services like search.	Default: —	Range: —
`ShowOfficeShortcutInFavoritesBar`boolean Show Microsoft Office shortcut in favorites bar	boolean	Specifies whether to include a shortcut to Office.com in the favorites bar. For users signed into Microsoft Edge the shortcut takes users to their Microsoft Office apps and docs.	Default: true	Range: —
`SignedHTTPExchangeEnabled`boolean Enabled Signed HTTP Exchange (SXG) support	boolean	Enable support for Signed HTTP Exchange (SXG).	Default: true	Range: —
`SitePerProcess`boolean Enable Site Isolation for every site	boolean	You might want to look at the IsolateOrigins policy setting to get the best of both worlds, isolation and limited impact for users, by using IsolateOrigins with a list of the sites you want to isolate. This setting, SitePerProcess, isolates all sites. If the policy is enabled, each site will run in its own process. If the policy is disabled, no explicit Site Isolation will happen and field trials of IsolateOrigins and SitePerProcess will be disabled. Users will still be able to enable SitePerProcess manually. If the policy is not configured, the user will be able to change this setting. On Google Chrome OS, it is recommended to also set the DeviceLoginScreenSitePerProcess device policy to the same value. If the values specified by the two policies don't match, a delay may be incurred when entering a user session while the value specified by user policy is being applied.	Default: —	Range: —
`SpellcheckEnabled`boolean Enable spellcheck	boolean	If this policy is not set or enabled, the user is allowed to use spellcheck.	Default: —	Range: —
`StricterMixedContentTreatmentEnabled`boolean Enable stricter mixed content treatment	boolean	Enable stricter treatment for mixed content.	Default: —	Range: —
`SuppressUnsupportedOSWarning`boolean Suppress the unsupported OS warning	boolean	Suppresses the warning that appears when Microsoft Edge is running on a computer or operating system that is no longer supported.	Default: —	Range: —
`SyncDisabled`boolean Disable synchronization of data with Google	boolean	Disables data synchronization in Google Chrome using Google-hosted synchronization services and prevents users from changing this setting.	Default: —	Range: —
`SyncTypesListDisabled`array Disable synchronization of selected data types	array	Configure the list of types that are excluded from synchronization.	Default: —	Range: —
string Types	string	—	Default: —	Range: Addresses and more (addressesAndMore), Collections (collections), Extensions (extensions), Favorites (favorites), Passwords (passwords), Settings (settings)
`TLS13HardeningForLocalAnchorsEnabled`boolean Enable TLS 1.3 Hardening	boolean	Enable a TLS 1.3 security feature for local trust anchors	Default: —	Range: —
`TLSCipherSuiteDenyList`array TLS Cipher Suite Deny List	array	Specify the TLS cipher suites to disable. If you don't configure this policy, the browser will choose which TLS cipher suites to use. This policy does not affect QUIC-based connections.	Default: —	Range: —
string TLS Cipher Suites	string	—	Default: —	Range: TLS_CHACHA20_POLY1305_SHA256 (0x1303), TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 (0xcca9), TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (0xcca8)
`TabFreezingEnabled`boolean Allow freezing of background tabs	boolean	Controls whether Microsoft Edge can freeze tabs that are in the background for at least 5 minutes.	Default: true	Range: —
`TaskManagerEndProcessEnabled`boolean Enable ending processes in Task Manager	boolean	If set to false, the 'End process' button is disabled in the Task Manager.	Default: true	Range: —
`TotalMemoryLimitMb`integer Set limit on megabytes of memory a single Microsoft Edge instance can use.	integer	Configures the amount of memory that a single Microsoft Edge instance can use before tabs start getting discarded to save memory. The memory used by the tab will be freed and the tab will have to be reloaded when switched to.	Default: —	Range: —
`TrackingPrevention`integer Tracking Prevention	integer	Block tracking of users' web-browsing activity	Default: —	Range: Off (no tracking prevention) (0), Basic (blocks harmful trackers, content and ads will be personalized) (1), Balanced (blocks harmful trackers and trackers from sites user has not visited; content and ads will be less personalized) (2), Strict (blocks harmful trackers and majority of trackers from all sites; content and ads will have minimal personalization. Some parts of sites might not work) (3)
`TyposquattingCheckerEnabled`boolean Enable Typosquatting Checker	boolean	Enables the integrated Typosquatting Checker on Microsoft Edge.	Default: true	Range: —
`TranslateEnabled`boolean Enable Translate	boolean	Enables the integrated Microsoft translation service on Microsoft Edge.	Default: —	Range: —
`URLBlocklist`array Block access to a list of URLs	array	Define a list of sites, based on URL patterns, that are blocked (your users can't load them). Format the URL pattern according to https://go.microsoft.com/fwlink/?linkid=2095322.	Default: —	Range: —
string	string	—	Default: —	Range: —
`UserAgentClientHintsEnabled`boolean Enable User-Agent Client Hints	boolean	Enable the User-Agent Client Hints feature.	Default: true	Range: —
`URLAllowlist`array Allow access to a list of URLs	array	Allow access to the listed URLs, as exceptions to the URL denylist. Format the URL pattern according to https://go.microsoft.com/fwlink/?linkid=2095322.	Default: —	Range: —
string	string	—	Default: —	Range: —
`UserFeedbackAllowed`boolean Allow user feedback	boolean	Allow user feedback. If the policy is set to false, users can not send feedback to Microsoft.	Default: true	Range: —
`UserDataDir`string Set user data directory	string	Configures the directory that Microsoft Edge will use for storing user data. See https://go.microsoft.com/fwlink/?linkid=2095041 for a list of variables that can be used.	Default: —	Range: —
`VideoCaptureAllowed`boolean Allow or deny video capture	boolean	If enabled or not configured (default), the user will be prompted for video capture access except for URLs configured in the VideoCaptureAllowedUrls list which will be granted access without prompting.	Default: true	Range: —
`VideoCaptureAllowedUrls`array URLs that will be granted access to video capture devices without prompt	array	Patterns in this list will be matched against the security origin of the requesting URL. If a match is found, access to audio capture devices will be granted without prompt.	Default: —	Range: —
string	string	—	Default: —	Range: —
`WPADQuickCheckEnabled`boolean Enable WPAD optimization	boolean	Allows you to turn off WPAD (Web Proxy Auto-Discovery) optimization in Microsoft Edge	Default: true	Range: —
`WebAppInstallForceList`array WebApp Force Install List	array	Specifies a list of websites that are installed silently, without user interaction, and which cannot be uninstalled nor disabled by the user.	Default: —	Range: —
dict	dict	—	Default: —	Range: —
`url`string URL	string	—	Default: —	Range: —
`create_desktop_shortcut`boolean Create Desktop Shortcut	boolean	—	Default: —	Range: —
`default_launch_container`string Default Launch Container	string	—	Default: —	Range: Window (window), Tab (tab)
`fallback_app_name`string Fallback App Name	string	—	Default: —	Range: —
`custom_name`string Custom Name	string	—	Default: —	Range: —
`custom_icon`dict Custom Icon	dict	—	Default: —	Range: —
`hash`string Custom Icon Hash	string	—	Default: —	Range: —
`url`string Custom Icon URL	string	—	Default: —	Range: —
`install_as_shortcut`boolean Install as Shortcut	boolean	—	Default: —	Range: —
`WebComponentsV0Enabled`boolean	boolean	Re-enable Web Components v0 API until M84.	Default: false	Range: —
`WebDriverOverridesIncompatiblePolicies`boolean Allow WebDriver to Override Incompatible Policies	boolean	This policy allows users of the WebDriver feature to override policies which can interfere with its operation. This policy is deprecated. It is currently supported but will become obsolete in a future release.	Default: false	Range: —
`WebRtcLocalIpsAllowedUrls`array	array	Manage exposure of local IP addressess by WebRTC	Default: —	Range: —
string URLs	string	—	Default: —	Range: —
`WebRtcLocalhostIpHandling`string	string	Manage exposure of local IP addressess by WebRTC	Default: —	Range: Allow all interfaces (default), Allow public and private interfaces over http default route (default_public_and_private_interfaces), Allow public interface over http default route, but don't expose local IP (default_public_interface_only), Use TCP unless proxy server supports UDP and don't expose local IP (disable_non_proxied_udp)
`WebRtcUdpPortRange`string Restrict the range of local UDP ports used by WebRTC	string	If the policy is set, the UDP port range used by WebRTC is restricted to the specified port interval (endpoints included).	Default: —	Range: —
`NativeMessagingBlocklist`array Names of the forbidden native messaging hosts (or * for all)	array	Allows you to specify which native messaging hosts that should not be loaded. A denylist value of '*' means all native messaging hosts are on the denylist unless they are explicitly listed in the allowlist.	Default: —	Range: —
string	string	—	Default: —	Range: —
`NativeMessagingUserLevelHosts`boolean Allow user-level Native Messaging hosts (installed without admin permissions)	boolean	Enables user-level installation of Native Messaging hosts.	Default: —	Range: —
`NativeMessagingAllowlist`array Native Messaging Host Denylist	array	Allows you to specify which native messaging hosts are not subject to the denylist. A denylist value of * means all native messaging hosts are on the denylist and only native messaging hosts listed in the allowlist will be loaded.	Default: —	Range: —
string	string	—	Default: —	Range: —
`PasswordManagerEnabled`boolean Enable saving passwords to the password manager	boolean	If this setting is enabled, users can have Microsoft Edge memorize passwords and provide them automatically the next time they log in to a site.	Default: —	Range: —
`PasswordMonitorAllowed`boolean Allow Password Monitor	boolean	Allow Microsoft Edge to monitor user passwords.	Default: —	Range: —
`DefaultPrinterSelection`string Default printer selection rules	string	Overrides Microsoft Edge default printer selection rules.	Default: —	Range: —
`PrintHeaderFooter`boolean Print Headers & Footers	boolean	Force 'headers and footers' to be on or off in the printing dialog.	Default: —	Range: —
`PrintingEnabled`boolean Enable printing	boolean	Enables printing in Microsoft Edge and prevents users from changing this setting.	Default: true	Range: —
`UseSystemPrintDialog`boolean Print using system print dialog	boolean	If you enable this policy, Microsoft Edge opens the system print dialog instead of the built-in print preview when a user prints a page.	Default: false	Range: —
`PrintPreviewUseSystemDefaultPrinter`boolean Use System Default Printer as Default	boolean	Causes Microsoft Edge to use the system default printer as the default choice in Print Preview instead of the most recently used printer.	Default: false	Range: —
`ProxyBypassList`string Comma-separated list of proxy bypass rules	string	Microsoft Edge will bypass any proxy for the list of hosts given here.	Default: —	Range: —
`ProxyMode`string Choose how to specify proxy server settings	string	Allows you to specify the proxy server used by Microsoft Edge and prevents users from changing proxy settings.	Default: —	Range: Never use a proxy (direct), Auto detect proxy settings (auto_detect), Use a .pac proxy script (pac_script), Use fixed proxy servers (fixed_servers), Use system proxy settings (system)
`ProxyPacUrl`string URL to a proxy .pac file	string	You can specify a URL to a proxy .pac file here.	Default: —	Range: —
`ProxyServer`string Address or URL of proxy server	string	You can specify the URL of the proxy server here.	Default: —	Range: —
`SmartScreenEnabled`boolean SmartScreen Enabled	boolean	Configure Microsoft Defender SmartScreen	Default: —	Range: —
`PreventSmartScreenPromptOverride`boolean Prevent SmartScreen prompt override	boolean	Lets you decide whether users can override the Microsoft Defender SmartScreen warnings about potentially malicious websites.	Default: false	Range: —
`PreventSmartScreenPromptOverrideForFiles`boolean Prevent SmartScreen prompt override for files	boolean	Lets you determine whether users can override Microsoft Defender SmartScreen warnings about unverified downloads.	Default: false	Range: —
`SmartScreenAllowListDomains`array Prevent SmartScreen prompt override for files	array	Configure the list of domains for which Microsoft Defender SmartScreen won't trigger warnings.	Default: —	Range: —
string Allowed Domains	string	—	Default: —	Range: —
`SmartScreenForTrustedDownloadsEnabled`boolean Enable SmartScreen Trusted Downloads	boolean	Force Microsoft Defender SmartScreen checks on downloads from trusted sources	Default: true	Range: —
`SmartScreenPuaEnabled`boolean Enable SmartScreen potentially unwanted apps	boolean	Configure Microsoft Defender SmartScreen to block potentially unwanted apps	Default: —	Range: —
`PasswordProtectionChangePasswordURL`string Change password URL	string	Configure the change password URL (HTTP and HTTPS schemes only). Password protection service will send users to this URL to change their password after seeing a warning in the browser.	Default: —	Range: —
`PasswordProtectionLoginURLs`array Enterprise login URLs	array	Configure the list of enterprise login URLs (HTTP and HTTPS schemes only) where Microsoft Edge should capture the salted hashes of passwords and use it for password reuse detection.	Default: —	Range: —
string	string	—	Default: —	Range: —
`PasswordProtectionWarningTrigger`integer Password protection warning trigger	integer	Allows you to control the triggering of passwore protection warning. Password protection alerts users when they reuse their protected password on potentially suspicious sites.	Default: —	Range: Password protection warning is off (0), Password protection warning is triggered by password reuse (1), Password protection warning is triggered by password reuse on phishing page (2)
`HomepageIsNewTabPage`boolean Use New Tab Page as homepage	boolean	Configures the type of the default home page in Microsoft Edge and prevents users from changing home page preferences. The home page can either be set to a URL you specify or set to the New Tab Page.	Default: —	Range: —
`HomepageLocation`string Home page URL	string	Configures the default home page URL in Microsoft Edge and prevents users from changing it.	Default: —	Range: —
`NewTabPageAllowedBackgroundTypes`integer New Tab Page Allowed Background Types	integer	Configures the background types allowed for the new tab page layout.	Default: 0	Range: Enable all background images (0), Disable daily background image (1), Disable custom background image (2), Disable all background images (3)
`NewTabPageCompanyLogo`array New Tab Page Company Logo	array	Set new tab page company logo. The logo must be in PNG or SVG format, and its file size must not exceed 16 MB. For help with determining the SHA-256 hash, see https://docs.microsoft.com/powershell/module/microsoft.powershell.utility/get-filehash.	Default: —	Range: —
dict NewTabPageCompanyLogoDictionary	dict	—	Default: —	Range: —
`default_logo`dict Default Logo	dict	—	Default: —	Range: —
`hash`string	string	—	Default: —	Range: —
`url`string	string	—	Default: —	Range: —
`light_logo`dict Light Logo	dict	—	Default: —	Range: —
`hash`string	string	—	Default: —	Range: —
`url`string	string	—	Default: —	Range: —
`NewTabPageContentEnabled`boolean Allow Microsoft News content on the new tab page	boolean	Allow Microsoft News content on the new tab page in Microsoft Edge.	Default: true	Range: —
`NewTabPageHideDefaultTopSites`boolean Hide the default top sites from the new tab page	boolean	Hides the default top sites from the new tab page in Microsoft Edge.	Default: false	Range: —
`NewTabPageLocation`string New Tab page URL	string	Configures the default New Tab page URL and prevents users from changing it.	Default: —	Range: —
`NewTabPageManagedQuickLinks`array New Tab page managed quick links	array	Set new tab page managed quick links	Default: —	Range: —
dict Links	dict	—	Default: —	Range: —
`url`string URL	string	—	Default: —	Range: —
`title`string Title	string	—	Default: —	Range: —
`pinned`boolean Pinned	boolean	—	Default: —	Range: —
`NewTabPageSetFeedType`integer New Tab Page Feed Type	integer	Configure the Microsoft Edge new tab page experience	Default: —	Range: Microsoft News feed experience (0), Office 365 feed experience (1)
`RestoreOnStartup`integer Action on startup	integer	Allows you to specify the behavior on startup.	Default: —	Range: Open New Tab Page (5), Restore the last session (1), Open a list of URLs (4), Open a list of URLs and restore the last session (6)
`RestoreOnStartupURLs`array URLs to open on startup	array	If 'Open a list of URLs' is selected as the startup action, this allows you to specify the list of URLs that are opened. If left not set no URL will be opened on start up.	Default: —	Range: —
`URL`string	string	—	Default: —	Range: —
`ShowHomeButton`boolean Show Home button on toolbar	boolean	Shows the Home button on Microsoft Edge's toolbar.	Default: —	Range: —
`WebUsbAskForUrls`array Allow WebUSB on these sites	array	Allows you to set a list of url patterns that specify sites which are allowed to ask the user to grant them access to a USB device.	Default: —	Range: —
string	string	—	Default: —	Range: —
`WebUsbBlockedForUrls`array Block WebUSB on these sites	array	Allows you to set a list of url patterns that specify sites which are prevented from asking the user to grant them access to a USB device.	Default: —	Range: —
string	string	—	Default: —	Range: —
`AutoLaunchProtocolsFromOrigins`array Allow protocols to auto launch external applications	array	Define a list of protocols that can launch an external application from listed origins without prompting the user. If this policy is set, a protocol will only be permitted to launch an external application without prompting by policy if the protocol is listed, and the origin of the site trying to launch the protocol matches one of the origin patterns in that protocol's allowed_origins list.	Default: —	Range: —
dict	dict	—	Default: —	Range: —
`allowed_origins`array Allowed Origins	array	A list of allowed origin patterns for the specified protocol.	Default: —	Range: —
`allowed_originsItem`string	string	—	Default: —	Range: —
`protocol`string Protocol	string	—	Default: —	Range: —
`AutoLaunchProtocolsComponentEnabled`boolean Enable the AutoLaunch Protocols component	boolean	Specifies whether the AutoLaunch Protocols component should be enabled. This component allows Microsoft to provide a list similar to that of the AutoLaunchProtocolsFromOrigins policy, allowing certain external protocols to launch without prompt or blocking certain protocols (on specified origins). By default, this component is enabled.	Default: true	Range: —
`LocalNetworkAccessRestrictionsEnabled`boolean Local Network Access Restrictions Enabled	boolean	A policy to control whether users are prompted to allow sites to ask for Local Network Access.	Default: false	Range: —
`LocalNetworkAccessAllowedForUrls`array Local Network Access Allowed For URLs	array	A policy to automatically grant specific sites Local Network Access.	Default: —	Range: —
string	string	—	Default: —	Range: —
`LocalNetworkAccessBlockedForUrls`array Local Network Access Blocked For URLs	array	A policy to automatically deny specific sites Local Network Access.	Default: —	Range: —
string	string	—	Default: —	Range: —