The "automatic" mode will send DNS-over-HTTPS queries first if a DNS-over-HTTPS server is available and may fallback to sending insecure queries on error. This policy only affects access to USB devices through the Web Serial API. The account you use would not be stored in the Email and accounts page. Define a list of sites, based on URL patterns, that are allowed to run JavaScript. Each item in the list must contain both devices and urls in order for the policy to be valid. This setting lets you enable reporting of sites that might need to be configured as a neutral site on the Enterprise Mode Site List. From Microsoft Edge 93 onwards, if policy ImplicitSignInEnabled is disabled, this policy will not take any effect. This policy lets you specify that a page can send synchronous XHR requests during page dismissal. If you disable or don't configure this policy, users can't select the "Save page as" option in "More tools". It also has a frequency control where users can specify how often they would like to be prompted for authentication. Upgrade from on-premises accounts to AAD accounts will be stopped as well. If you don't configure this policy, the global default value from the DefaultSerialGuardSetting policy (if set) or the user's personal configuration is used for all sites. If you enable this policy, the second auto-suggest result in the address bar suggestion list will conduct a web search exactly as it was entered, provided that this text is a single word without punctuation. For example, increasing CPU load. If you don't configure this policy, Cookies are imported on first run. Microsoft Edge Update 1.2.145.5 and later. See https://go.microsoft.com/fwlink/?linkid=2133918 for more information. If you enable this policy, the proxy server configured by this policy will be used for all URLs. Previously this messaging was done on the address bar. If you enable this policy HTTP auth credentials entered in the context of one site will automatically be used in the context of another site. There will be no 'Paste as' context menu item in Microsoft Edge and the only format available to paste will be the plain text URL format. 2. I've updated my answer for Edge Chromium, please check it. If you enable or don't configure this policy, users may use remote debugging by specifying --remote-debug-port and --remote-debugging-pipe command line switches. If you set this policy to 'WithDevicePassword', users will have to enter their device password (or preferred mode of authentication under Windows) to prove their identity before their password is auto filled. "Search box (Recommended)" ('bing'), the new tab page uses the search box to search on new tabs. See the BackgroundModeEnabled policy for information about what happens after configuring Microsoft Edge background mode behavior. If you enable this setting, WAM will be used in the authentication flow on Windows 10 RS1 and RS2. If the EnableMediaRouter policy is disabled, then this policy has no effect. This policy controls the handling of insecure forms (forms submitted over HTTP) embedded in secure (HTTPS) sites in the browser. This policy controls the availability of the --ie-mode-file-url command line argument which is used to launch Microsoft Edge with a local file specified on the command line into Internet Explorer mode. Popular, single-word search terms will require manual selection of search suggestions to properly conduct a search. Set to 'Strict' to enforce Strict Restricted Mode on YouTube. When the policy is set to Enabled, the Javascript setTimeout() with a timeout of 0ms will no longer be fixed to 1ms to schedule timer-based callbacks. Restricts the UDP port range used by WebRTC to a specified port interval (endpoints included). If you disable this policy, the button won't be visible on the native PDF viewer in Microsoft Edge. If we set this to True the scale percentage and scale type both uses the recent choice oherwise it will set to default value. For text in particular, text will always be rendered using Type 3 fonts. The Microsoft Edge implementation of the Web Speech API uses Azure Cognitive Services, so voice data will leave the machine. OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 93. If you don't configure this policy, DefaultAutomaticDownloadsSetting applies for all sites, if it's set. When this policy is disabled or not configured, the default behavior for requests to more-private network endpoints will depend on the user's personal configuration for the BlockInsecurePrivateNetworkRequests, PrivateNetworkAccessSendPreflights, and PrivateNetworkAccessRespectPreflightResults feature flags. Starting with Microsoft Edge version 89, Microsoft Search in Bing suggestions will be available even if Bing isn't the user's default search provider. It won't work in Microsoft Edge as soon as version 107. BlockFileSystemRead (2) = Don't allow any site to request read access to files and directories via the File System API, AskFileSystemRead (3) = Allow sites to ask the user to grant read access to files and directories via the File System API. This policy is obsolete and doesn't work in Microsoft Edge after version 109. This policy is applied only if you enable the DefaultSearchProviderEnabled and DefaultSearchProviderSearchURL policies. If you disable this policy, Microsoft Edge will use the old SmartScreen library (libSmartScreen). This policy overrides the user's ClickOnce setting in the edge://flags/ page. This policy lets you configure the Drop feature in Microsoft Edge. RestoreOnStartupIsNewTabPage (5) = Open a new tab, RestoreOnStartupIsLastSession (1) = Restore the last session, RestoreOnStartupIsURLs (4) = Open a list of URLs. For detailed information on configuring kiosk mode, see https://go.microsoft.com/fwlink/?linkid=2137578. The search bar will be automatically enabled for all profiles. If you set this policy to 3, websites can ask for read access to the host operating system's filesystem using the File System API. These features can also be configured by a field trial or the same-site-by-default-cookies flag, the cookies-without-same-site-must-be-secure flag, or the schemeful-same-site flag in edge://flags. Attempting to programmatically set the default browser on macOS causes a prompt to appear for the end user. The hash is of a subjectPublicKeyInfo that appears in a CA certificate in the certificate chain, that CA certificate is constrained via the X.509v3 nameConstraints extension, one or more directoryName nameConstraints are present in the permittedSubtrees, and the directoryName contains an organizationName attribute. Allows you to create a list of protocols, and for each protocol an associated list of allowed origin patterns. Don't configure this policy if you have selected a proxy setting other than manual in the 'Choose how to specify a proxy server settings' policy. User settings to enable or disable the Pin to taskbar wizard aren't available. Lets you specify whether or not automatic updates are enabled for the WebView2 Runtime. If you don't configure this policy, users with Microsoft Edge versions before Microsoft Edge 87 can't open files using the ClickOnce protocol by default. Note that the policy is applied per renderer process, with the most recent value of the policy setting in force when a renderer process starts. Enables native window occlusion in Microsoft Edge. Configure the list of cipher suites that are disabled for TLS connections. If you disable this policy, users can't enable the Get Image Descriptions from Microsoft feature. Set whether websites can show pop-up windows. OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 94. A minor scale definition: am I missing something? If you enable: If you enable or don't configure this policy, the User-Agent Client Hints feature is enabled. Each item in the list requires both usages and urls fields for the policy to be valid. If you configure this policy, a protocol will only be permitted to launch an external application without prompting by policy if: the origin of the site trying to launch the protocol matches one of the origin patterns in that protocol's allowed_origins list. This Enterprise policy is temporary; it's intended to be removed after Microsoft Edge version 117. What's the cheapest way to buy out a sibling's share of our parents house if I have no cash and want to pay less than the appraised value? For URL patterns that don't match this policy, the following order of precedence is used: The SerialBlockedForUrls policy (if there is a match), the DefaultSerialGuardSetting policy (if set), or the user's personal settings. For URL patterns that don't match this policy, the following order of precedence is used: The SerialAskForUrls policy (if there is a match), the DefaultSerialGuardSetting policy (if set), or the user's personal settings. Go to Microsoft Edge in Computer Configuration. GP unique name: RedirectSitesFromInternetExplorerRedirectMode, GP name: Redirect incompatible sites from Internet Explorer to Microsoft Edge, Value Name: RedirectSitesFromInternetExplorerRedirectMode, GP unique name: RelatedMatchesCloudServiceEnabled, GP name: Configure Related Matches in Find on Page, Value Name: RelatedMatchesCloudServiceEnabled, Preference Key Name: RelatedMatchesCloudServiceEnabled, GP name: Notify a user that a browser restart is recommended or required for pending updates, Preference Key Name: RelaunchNotification, GP unique name: RelaunchNotificationPeriod, GP name: Set the time period for update notifications, Preference Key Name: RelaunchNotificationPeriod, GP name: Set the time interval for relaunch, Preference Key Name: RemoteDebuggingAllowed, GP unique name: RendererAppContainerEnabled, GP name: Enable renderer in app container, GP unique name: RendererCodeIntegrityEnabled, GP unique name: RequireOnlineRevocationChecksForLocalAnchors, GP name: Specify if online OCSP/CRL checks are required for local trust anchors, Value Name: RequireOnlineRevocationChecksForLocalAnchors, GP unique name: ResolveNavigationErrorsUseWebService, GP name: Enable resolution of navigation errors using a web service, Value Name: ResolveNavigationErrorsUseWebService, Preference Key Name: ResolveNavigationErrorsUseWebService, GP name: Restrict which accounts can be used to sign in to Microsoft Edge, Preference Key Name: RestrictSigninToPattern, GP name: Set the roaming profile directory, GP unique name: RoamingProfileSupportEnabled, GP name: Enable using roaming copies for Microsoft Edge profile data, GP name: Extend Adobe Flash content setting to all content (obsolete), Preference Key Name: RunAllFlashInAllowMode, GP name: Allow users to proceed from the HTTPS warning page, Preference Key Name: SSLErrorOverrideAllowed, GP unique name: SSLErrorOverrideAllowedForOrigins, GP name: Allow users to proceed from the HTTPS warning page for specific origins, Path (Mandatory): SOFTWARE\Policies\Microsoft\Edge\SSLErrorOverrideAllowedForOrigins, Preference Key Name: SSLErrorOverrideAllowedForOrigins, GP unique name: SandboxExternalProtocolBlocked, GP name: Allow Microsoft Edge to block navigations to external protocols in a sandboxed iframe, Value Name: SandboxExternalProtocolBlocked, Preference Key Name: SandboxExternalProtocolBlocked, The 'Cookies and other site data' toggle is configured in Settings/Privacy and services/Clear browsing data on close or, GP name: Save cookies when Microsoft Edge closes, Path (Mandatory): SOFTWARE\Policies\Microsoft\Edge\SaveCookiesOnExit, GP unique name: SavingBrowserHistoryDisabled, Preference Key Name: SavingBrowserHistoryDisabled, Preference Key Name: ScreenCaptureAllowed, GP unique name: ScrollToTextFragmentEnabled, GP name: Enable scrolling to text specified in URL fragments, Preference Key Name: ScrollToTextFragmentEnabled, Preference Key Name: SearchFiltersEnabled, Preference Key Name: SearchInSidebarEnabled, Preference Key Name: SearchSuggestEnabled, GP unique name: SecurityKeyPermitAttestation, GP name: Websites or domains that don't need permission to use direct Security Key attestation, Path (Mandatory): SOFTWARE\Policies\Microsoft\Edge\SecurityKeyPermitAttestation, Preference Key Name: SecurityKeyPermitAttestation, GP unique name: SendIntranetToInternetExplorer, GP name: Send all intranet sites to Internet Explorer, Value Name: SendIntranetToInternetExplorer, GP unique name: SendSiteInfoToImproveServices, GP name: Send site information to improve Microsoft services (obsolete), Value Name: SendSiteInfoToImproveServices, Preference Key Name: SendSiteInfoToImproveServices, GP name: Allow access to sensors on specific sites, Path (Mandatory): SOFTWARE\Policies\Microsoft\Edge\SensorsAllowedForUrls, Preference Key Name: SensorsAllowedForUrls, GP name: Block access to sensors on specific sites, Path (Mandatory): SOFTWARE\Policies\Microsoft\Edge\SensorsBlockedForUrls, Preference Key Name: SensorsBlockedForUrls, GP name: Allow the Serial API on specific sites, Path (Mandatory): SOFTWARE\Policies\Microsoft\Edge\SerialAskForUrls, GP name: Block the Serial API on specific sites, Path (Mandatory): SOFTWARE\Policies\Microsoft\Edge\SerialBlockedForUrls, Preference Key Name: SerialBlockedForUrls, On Windows and macOS since 101, until 109, GP unique name: SetTimeoutWithout1MsClampEnabled, GP name: Control Javascript setTimeout() function minimum timeout (deprecated), Value Name: SetTimeoutWithout1MsClampEnabled, Preference Key Name: SetTimeoutWithout1MsClampEnabled, GP unique name: ShadowStackCrashRollbackBehavior, GP name: Configure ShadowStack crash rollback behavior (obsolete), Value Name: ShadowStackCrashRollbackBehavior, GP unique name: SharedArrayBufferUnrestrictedAccessAllowed, GP name: Specifies whether SharedArrayBuffers can be used in a non cross-origin-isolated context, Value Name: SharedArrayBufferUnrestrictedAccessAllowed, Preference Key Name: SharedArrayBufferUnrestrictedAccessAllowed, GP name: Show links shared from Microsoft 365 apps in History, GP unique name: ShowAcrobatSubscriptionButton, GP name: Shows button on native PDF viewer in Microsoft Edge that allows users to sign up for Adobe Acrobat subscription, Value Name: ShowAcrobatSubscriptionButton, Preference Key Name: ShowAcrobatSubscriptionButton, GP unique name: ShowDownloadsToolbarButton, GP name: Show Downloads button on the toolbar, Preference Key Name: ShowDownloadsToolbarButton.
