How to Configure Edge GPO Settings?

In Windows 10 Microsoft introduced its new default web-browser Microsoft Edge. Let’s try to figure out how to centrally manage Microsoft Edge GPO settings in the enterprise Active Directory domain environment.

If you open the Local Group Policy Editor console (gpedit.msc) on the current branch Windows 10 1903, then under section Computer Configuration > Administrative Template > Windows Components > Microsoft Edge (and User Settings > Administrative Template > Windows Components > Microsoft Edge) you can find 55 different Group Policy settings (in earlier Windows 10 RTM build there available only 10 policy settings for Edge). However, it is quite a small amount compared to almost 1500 different GPO settings for the Internet Explorer browser). The following policies are available to manage Microsoft Edge settings:

  • Allow Address bar drop-down list suggestions;
  • Configure Autofill;
  • Allow Microsoft Compatibility List;
  • Allow clearing browsing data on exit;
  • Allow configuration updates for the Books Library;
  • Allow Developer Tools;
  • Configure Do Not Track;
  • Allow Extensions;
  • Allow Adobe Flash;
  • Configure the Adobe Flash Click-to-Run setting;
  • Allow FullScreen Mode;
  • Allow InPrivate browsing;
  • For PDF files that have both landscape and portrait pages, print each in its own orientation;
  • Configure Password Manager;
  • Configure Pop-up Blocker;
  • Allow Microsoft Edge to pre-launch at Windows startup, when the system is idle, and each time Microsoft Edge is closed;
  • Allow printing;
  • Allow Saving History;
  • Allow search engine customization;
  • Configure search suggestions in Address bar;
  • Allow Sideloading of extension;
  • Configure Windows Defender SmartScreen;
  • Allow Microsoft Edge to start and load the Start and New Tab page at Windows startup and each time Microsoft Edge is closed;
  • Allow web content on New Tab page;
  • Always show the Books Library in Microsoft Edge;
  • Configure additional search engines;
  • Configure Favorites Bar;
  • Configure Home Button;
  • Configure kiosk mode;
  • Configure kiosk reset after idle timeout;
  • Configure Open Microsoft Edge With;
  • Provision Favorites;
  • Configure cookies;
  • Disable lockdown of Start pages;
  • Allow extended telemetry for the Books tab;
  • Configure the Enterprise Mode Site List;
  • Configure Favorites;
  • Prevent using Localhost IP address for WebRTC;
  • Configure Start pages;
  • Prevent changes to Favorites on Microsoft Edge;
  • Prevent access to the about:flags page in Microsoft Edge;
  • Prevent certificate error overrides;
  • Prevent the First Run webpage from opening on Microsoft Edge;
  • Prevent Microsoft Edge from gathering Live Tile information when pinning a site to Start;
  • Prevent bypassing Windows Defender SmartScreen prompts for sites;
  • Prevent bypassing Windows Defender SmartScreen prompts for files;
  • Prevent turning off required extensions;
  • Send all intranet sites to Internet Explorer 11;
  • Set default search engine;
  • Set Home Button URL;
  • Set New Tab page URL;
  • Show message when opening sites in Internet Explorer;
  • Keep favorites in sync between Internet Explorer and Microsoft Edge;
  • Unlock Home Button;
  • Allow a shared Books folder.
READ ALSO  FSMO Role: Domain Naming Master

edge gpo settings

In the each next Windows 10 build, the number of Microsoft Edge settings that can be managed via Group Policy progressively increased.

You can get the actual list of all available Microsoft Edge policies to manage your browser settings with the detailed description here.

Updating Microsoft Edge Group Policy Administrative Template

To get the later Edge group policies for your Windows 10, you need:

edge gpo

  • If you want to manage Microsoft Edge settings using local Group Policy, copy all content (or only two files: MicrosoftEdge.admx and en-USMicrosoftEdge.adml) from a folder C:\Program Files (x86)\Microsoft Group Policy\Administrative Templates (.admx) for Windows 10 May 2019 Update v3\Policy Definitions to the local directory C:\Windows\PolicyDefinitions;

microsoft edge group policy

  • If you want to use new administrative templates to manage Edge settings on computers in the AD domain, copy the content of a local folder C:\Program Files (x86)\Microsoft Group Policy\Administrative Templates (.admx) for Windows 10 May 2019 Update v3\Policy Definitions to the Group Policy Central Store folder on the domain controller. Now you can create a new domain GPOs with Edge settings using Group Policy Management Console (GPMC).
READ ALSO  How to Add, Edit and Remove Registry Keys Using Group Policy?

After installing new administrative templates under section Computer Configuration > Administrative Template > Windows Components > Microsoft Edge, you will get all currently available Edge policy settings.

Group Policies for Chromium-based Edge

Microsoft recently released a preliminary version of local group policies to support the new Microsoft Edge based on the Chromium project. These administrative templates set that will allow administrators to manage certain browser features in a production environment.

You can download a preview of ADMX files for Chromium-based Edge here.

It’s interestingly enough that over 180 GPO settings were provided for the Chromium-based Edge version since the classical Edge had only about 60 policy parameters.

edge group policy

A full description of the Chromium-based Edge policies can be found in the microsoftedge_policy_list.html file in the archive with ADMX templates.

How to Enable/Disable History Saving in Microsoft Edge using GPO?

To disable browsing history in Microsoft Edge through Group Policy, use the following steps:

  1. Run the local (gpedit.msc) or domain group policy editor (gpmc.msc);
  2. Go to the GPO section Computer Configuration > Administrative Template > Windows Components > Microsoft Edge;
  3. Find a policy with the name Allow Saving History;
  4. Change its value from Not Configured to Disabled;
    microsoft edge gpo settings
  5. Run the gpupdate command and restart Edge. Now the browser should not be saving the user’s browsing history.
READ ALSO  How to Deploy Printers to Users or Computers via Group Policy?

How to Disable Microsoft Edge Pre-launch in Windows 10?

One of the features Microsoft is trying to draw attention to is the Edge browser’s ability to get started quickly. Immediately after the Windows 10 boot, you can click on the Edge icon and it will open almost instantly.

You can disable pre-launch of the Microsoft Edge browser in Windows 10 through GPO. This will help to reduce the consumption of RAM and CPU on the computer.

To disable Microsoft Edge pre-launch on Windows 10 1809 and later:

  1. Open the policy “Allow Microsoft Edge to pre-launch at Windows startup, when the system is idle, and each time Microsoft Edge is closed”. Set its value to Enabled;
  2. In the Configure pre-launching option, select Prevent pre-launching;
    edge admx
  3. Save the change and restart your computer to take effect.
Cyril Kardashevsky

3 comments

  1. Please I need youre help please I have tried so many things and nothing works I I’m trying to disable inPrivate from Microsoft Edge I’am running windows 10 home 64 bit I fallow everything step by step computer configuration>administrative template>windows components> and Microsoft edge is next but I don’t have it its not in my list please can you help me

    1. Hi Yasmine. You need to copy the .admx file to your computer’s C:\Windows\PolicyDefinitions folder or, if you are on a domain, the \\yourdomain.com\SYSVOL\yourdomain.com\Policies\PolicyDefinitions folder. Then, when you open gpedit, it should show up as available.

  2. Hi Elizabeth,

    on Windows 10 home (any edition), gpedit.msc does not exist – and if you copy it over from a W10pro or so, then there is an error message which states that gpedit.msc is not allowed to run on a home edition.

    So on a home edition of Win10, this unfortunately does not work.

    If you want to have this functionality, you will have to upgrade to W10pro.

    (M$ is active crippling the home edition – compared with earlier versions like XP, where they just have removed the domain join but left it otherwise fully functional.)

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.