自动为这些站点选择客户端证书 (AutoSelectCertificateForUrls)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
根据 URL 模式指定一个站点列表,如果该站点请求客户端证书,Microsoft Edge 应自动为其选择一个客户端证书。
该值必须为字符串化的 JSON 字典的数组。每个字典的格式为 { "pattern": "$URL_PATTERN", "filter" : $FILTER },其中 $URL_PATTERN 是内容设置模式。$FILTER 限制浏览器可从哪些客户端证书自动选择。如果不依赖筛选器,只能使用与服务器证书请求匹配的证书。例如,如果 $FILTER 的格式为 { "ISSUER": { "CN": "$ISSUER_CN" } },则另外只能使用由具有 CommonName $ISSUER_CN 的证书颁发的客户端证书。如果 $FILTER 包含 "ISSUER" 和 "SUBJECT" 节,所选的客户端证书必须满足这两个条件。如果 $FILTER 指定组织("O"),证书必须具有至少一个与指定的值匹配的组织。如果 $FILTER 指定组织单位("OU"),证书必须具有至少一个与指定的值匹配的组织单位。如果 $FILTER 为空字典 {},则客户端证书的选择不受额外限制。
如果不配置此策略,不会为任何站点进行自动选择。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: AutoSelectCertificateForUrls
- GP name: 自动为这些站点选择客户端证书
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/内容设置
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\AutoSelectCertificateForUrls
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\AutoSelectCertificateForUrls\0 = "{"pattern":"https://www.contoso.com","filter":{"ISSUER":{"CN":"certificate issuer name", "L": "certificate issuer location", "O": "certificate issuer org", "OU": "certificate issuer org unit"}, "SUBJECT":{"CN":"certificate subject name", "L": "certificate subject location", "O": "certificate subject org", "OU": "certificate subject org unit"}}}"
Mac information and settings
- Preference Key Name: AutoSelectCertificateForUrls
- Example value:
<array>
<string>{"pattern":"https://www.contoso.com","filter":{"ISSUER":{"CN":"certificate issuer name", "L": "certificate issuer location", "O": "certificate issuer org", "OU": "certificate issuer org unit"}, "SUBJECT":{"CN":"certificate subject name", "L": "certificate subject location", "O": "certificate subject org", "OU": "certificate subject org unit"}}}</string>
</array>
Back to top
在特定站点上允许 Cookie (CookiesAllowedForUrls)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
根据 URL 模式定义被允许设置 Cookie 的站点列表。
如果未配置此策略,则对所有站点使用 "DefaultCookiesSetting" 策略(如果已设置)或用户个人配置中的全局默认值。
有关详细信息,请参阅 "CookiesBlockedForUrls" 和 "CookiesSessionOnlyForUrls" 策略。
请注意,在这三个策略之间不能设置冲突的 URL 模式:
- CookiesBlockedForUrls
- CookiesAllowedForUrls
- CookiesSesssionOnlyForUrls
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: CookiesAllowedForUrls
- GP name: 在特定站点上允许 Cookie
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/内容设置
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\CookiesAllowedForUrls
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\CookiesAllowedForUrls\0 = "https://www.contoso.com"
SOFTWARE\Policies\Microsoft\Edge\CookiesAllowedForUrls\1 = "[*.]contoso.edu"
Mac information and settings
- Preference Key Name: CookiesAllowedForUrls
- Example value:
<array>
<string>https://www.contoso.com</string>
<string>[*.]contoso.edu</string>
</array>
Back to top
在特定站点上阻止 Cookie (CookiesBlockedForUrls)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
根据 URL 模式定义无法设置 Cookie 的站点列表。
如果未配置此策略,则对所有站点使用 "DefaultCookiesSetting" 策略(如果已设置)或用户个人配置中的全局默认值。
有关详细信息,请参阅 "CookiesAllowedForUrls" 和 "CookiesSessionOnlyForUrls" 策略。
请注意,在这三个策略之间不能设置冲突的 URL 模式:
- CookiesBlockedForUrls
- CookiesAllowedForUrls
- CookiesSesssionOnlyForUrls
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: CookiesBlockedForUrls
- GP name: 在特定站点上阻止 Cookie
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/内容设置
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\CookiesBlockedForUrls
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\CookiesBlockedForUrls\0 = "https://www.contoso.com"
SOFTWARE\Policies\Microsoft\Edge\CookiesBlockedForUrls\1 = "[*.]contoso.edu"
Mac information and settings
- Preference Key Name: CookiesBlockedForUrls
- Example value:
<array>
<string>https://www.contoso.com</string>
<string>[*.]contoso.edu</string>
</array>
Back to top
将特定网站的 Cookie 限制为当前会话 (CookiesSessionOnlyForUrls)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
当会话结束(窗口关闭)时,将删除与你所定义的 URL 模式匹配的网站所创建的 Cookie。
与模式不匹配的网站所创建的 Cookie 由 "DefaultCookiesSetting" 策略(如果已设置)或用户个人配置所控制。如果未配置此策略,那么这也是默认行为。
如果 Microsoft Edge 在后台模式下运行,则在最后一个窗口关闭时,会话可能不会关闭,这意味着窗口关闭时不会清除 Cookie。有关配置 Microsoft Edge 在后台模式下运行时所发生情况的信息,请参阅 "BackgroundModeEnabled" 策略。
你还可以使用 "CookiesAllowedForUrls" 和 "CookiesBlockedForUrls" 策略控制哪些网站可以创建 Cookie。
请注意,在这三个策略之间不能设置冲突的 URL 模式:
- CookiesBlockedForUrls
- CookiesAllowedForUrls
- CookiesSesssionOnlyForUrls
如果你设置 "RestoreOnStartup" 策略以从以前的会话中恢复 URL,则会忽略此策略,并且会永久为那些站点存储 Cookie。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: CookiesSessionOnlyForUrls
- GP name: 将特定网站的 Cookie 限制为当前会话
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/内容设置
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\CookiesSessionOnlyForUrls
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\CookiesSessionOnlyForUrls\0 = "https://www.contoso.com"
SOFTWARE\Policies\Microsoft\Edge\CookiesSessionOnlyForUrls\1 = "[*.]contoso.edu"
Mac information and settings
- Preference Key Name: CookiesSessionOnlyForUrls
- Example value:
<array>
<string>https://www.contoso.com</string>
<string>[*.]contoso.edu</string>
</array>
Back to top
配置 Cookie (DefaultCookiesSetting)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
控制网站是否可以在用户的设备上创建 Cookie。此策略要么全部允许,要么全部不允许 - 你可以允许所有网站创建 Cookie,或者不允许任何网站创建 Cookie。你无法使用此策略启用来自特定网站的 Cookie。
将策略设置为 "SessionOnly" (4)可以在会话关闭时清除 Cookie。如果 Microsoft Edge 在后台模式下运行,则在最后一个窗口关闭时可能不会关闭会话,这意味着当窗口关闭时不会清除 Cookie。有关配置 Microsoft Edge 在后台模式下运行时所发生情况的信息,请参阅 "BackgroundModeEnabled" 策略。
如果你不配置此功能策略,则使用默认的 "AllowCookies" (1),用户可以在 Microsoft Edge 设置中更改此设置。(如果你不希望用户能够更改此设置,请设置此策略。)
* 1 = 允许所有站点创建 Cookie
* 2 = 不允许任何站点创建 Cookie
* 4 = 在会话期间保留 Cookie
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DefaultCookiesSetting
- GP name: 配置 Cookie
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/内容设置
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DefaultCookiesSetting
- Value Type:
REG_DWORD
Example value:
0x00000001
Mac information and settings
- Preference Key Name: DefaultCookiesSetting
- Example value:
1
Back to top
默认地理位置设置 (DefaultGeolocationSetting)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
设置是否网站可以跟踪用户的物理位置。你可以默认允许跟踪(1),默认拒绝跟踪(2),或者在每次网站请求用户位置时询问用户(3)。
如果未配置此策略,将使用 "AskGeolocation" 策略,并且用户可以更改此设置。
* 1 = 允许站点跟踪用户的物理位置
* 2 = 不允许任何站点跟踪用户的物理位置
* 3 = 在每次站点想要跟踪用户的物理位置时询问用户
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DefaultGeolocationSetting
- GP name: 默认地理位置设置
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/内容设置
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DefaultGeolocationSetting
- Value Type:
REG_DWORD
Example value:
0x00000001
Mac information and settings
- Preference Key Name: DefaultGeolocationSetting
- Example value:
1
Back to top
默认图像设置 (DefaultImagesSetting)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
设置网站是否可以显示图像。可以对所有站点允许(1)或阻止(2)图像。
如果未配置此策略,默认情况下允许显示图像,而且用户可以更改此设置。
* 1 = 允许所有站点显示所有图像
* 2 = 不允许任何站点显示图像
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DefaultImagesSetting
- GP name: 默认图像设置
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/内容设置
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DefaultImagesSetting
- Value Type:
REG_DWORD
Example value:
0x00000001
Mac information and settings
- Preference Key Name: DefaultImagesSetting
- Example value:
1
Back to top
默认 JavaScript 设置 (DefaultJavaScriptSetting)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
设置网站是否可以运行 JavaScript。可以对所有站点允许(1)或阻止(2)。
如果未配置此策略,所有站点默认都可以运行 JavaScript,而且用户可以更改此设置。
* 1 = 允许所有站点运行 JavaScript
* 2 = 不允许任何站点运行 JavaScript
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DefaultJavaScriptSetting
- GP name: 默认 JavaScript 设置
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/内容设置
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DefaultJavaScriptSetting
- Value Type:
REG_DWORD
Example value:
0x00000001
Mac information and settings
- Preference Key Name: DefaultJavaScriptSetting
- Example value:
1
Back to top
默认通知设置 (DefaultNotificationsSetting)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
设置网站是否可以显示桌面通知。你可以默认允许通知(1),默认拒绝通知(2),或者在每次网站要显示通知时询问用户(3)。
如果未配置此策略,默认允许通知,而且用户可以更改此设置。
* 1 = 允许站点显示桌面通知
* 2 = 不允许任何站点显示桌面通知
* 3 = 每次网站要显示桌面通知时询问用户
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DefaultNotificationsSetting
- GP name: 默认通知设置
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/内容设置
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DefaultNotificationsSetting
- Value Type:
REG_DWORD
Example value:
0x00000002
Mac information and settings
- Preference Key Name: DefaultNotificationsSetting
- Example value:
2
Back to top
Default Adobe Flash setting (DefaultPluginsSetting)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
Determines whether websites that aren't covered by 'PluginsAllowedForUrls' or 'PluginsBlockedForUrls' can automatically run the Adobe Flash plug-in. You can select 'BlockPlugins' (2) to block Adobe Flash on all sites, or you can select 'ClickToPlay' (3) to let Adobe Flash run but require the user to click the placeholder to start it. In any case, the 'PluginsAllowedForUrls' and 'PluginsBlockedForUrls' policies take precedence over 'DefaultPluginsSetting'.
Automatic playback is only allowed for domains explicitly listed in the 'PluginsAllowedForUrls' policy. If you want to enable automatic playback for all sites, consider adding http://* and https://* to this list.
If you don't configure this policy, the user can change this setting manually.
* 2 = Block the Adobe Flash plug-in
* 3 = Click to play
The former '1' option set allow-all, but this functionality is now only handled by the 'PluginsAllowedForUrls' policy. Existing policies using '1' will operate in Click-to-play mode.
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DefaultPluginsSetting
- GP name: Default Adobe Flash setting
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/内容设置
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DefaultPluginsSetting
- Value Type:
REG_DWORD
Example value:
0x00000002
Mac information and settings
- Preference Key Name: DefaultPluginsSetting
- Example value:
2
Back to top
默认的弹出窗口设置 (DefaultPopupsSetting)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
设置网站是否可显示弹出窗口。可以对所有站点允许(1)或阻止(2)。
如果未配置此策略,则默认阻止弹出窗口,而且用户可以更改此设置。
* 1 = 允许所有站点显示弹出窗口
* 2 = 不允许任何站点显示弹出窗口
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DefaultPopupsSetting
- GP name: 默认的弹出窗口设置
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/内容设置
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DefaultPopupsSetting
- Value Type:
REG_DWORD
Example value:
0x00000001
Mac information and settings
- Preference Key Name: DefaultPopupsSetting
- Example value:
1
Back to top
控制 Web 蓝牙 API 的使用 (DefaultWebBluetoothGuardSetting)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
控制网站是否可以访问附近的蓝牙设备。你可以完全阻止访问或要求站点在每次要访问蓝牙设备时都询问用户。
如果不配置此策略,则使用默认值(3,表示每次都询问用户),用户可以更改此值。
* 2 = 不允许任何站点使用 Web 蓝牙 API 请求访问蓝牙设备
* 3 = 允许站点请求用户授予附近蓝牙设备的访问权限
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DefaultWebBluetoothGuardSetting
- GP name: 控制 Web 蓝牙 API 的使用
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/内容设置
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DefaultWebBluetoothGuardSetting
- Value Type:
REG_DWORD
Example value:
0x00000002
Mac information and settings
- Preference Key Name: DefaultWebBluetoothGuardSetting
- Example value:
2
Back to top
控制 WebUSB API 的使用 (DefaultWebUsbGuardSetting)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
设置网站是否可以访问连接的 USB 设备。你可以完全阻止访问,或每次网站想要访问连接的 USB 时询问用户。
你可以对特定的 URL 模式覆盖此策略,方法是使用 "WebUsbAskForUrls" 和 "WebUsbBlockedForUrls" 策略。
如果未配置此策略,默认情况下站点可以询问用户是否可以访问连接的 USB 设备(3),并且用户可以更改此设置。
* 2 = 不允许任何站点通过 WebUSB API 请求对 USB 设备的访问
* 3 = 允许站点请求用户授予对连接的 USB 设备的访问权限
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DefaultWebUsbGuardSetting
- GP name: 控制 WebUSB API 的使用
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/内容设置
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DefaultWebUsbGuardSetting
- Value Type:
REG_DWORD
Example value:
0x00000002
Mac information and settings
- Preference Key Name: DefaultWebUsbGuardSetting
- Example value:
2
Back to top
允许使用这些站点上的图像 (ImagesAllowedForUrls)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
根据 URL 模式定义可显示图像的站点列表。
如果未配置此策略,则对所有站点使用 "DefaultImagesSetting" 策略(如果已设置)或用户个人配置中的全局默认值。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ImagesAllowedForUrls
- GP name: 允许使用这些站点上的图像
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/内容设置
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\ImagesAllowedForUrls
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\ImagesAllowedForUrls\0 = "https://www.contoso.com"
SOFTWARE\Policies\Microsoft\Edge\ImagesAllowedForUrls\1 = "[*.]contoso.edu"
Mac information and settings
- Preference Key Name: ImagesAllowedForUrls
- Example value:
<array>
<string>https://www.contoso.com</string>
<string>[*.]contoso.edu</string>
</array>
Back to top
在特定站点上阻止图像 (ImagesBlockedForUrls)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
根据 URL 模式定义不允许其显示图像的站点列表。
如果未配置此策略,则对所有站点使用 "DefaultImagesSetting" 策略(如果已设置)或用户个人配置中的全局默认值。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ImagesBlockedForUrls
- GP name: 在特定站点上阻止图像
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/内容设置
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\ImagesBlockedForUrls
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\ImagesBlockedForUrls\0 = "https://www.contoso.com"
SOFTWARE\Policies\Microsoft\Edge\ImagesBlockedForUrls\1 = "[*.]contoso.edu"
Mac information and settings
- Preference Key Name: ImagesBlockedForUrls
- Example value:
<array>
<string>https://www.contoso.com</string>
<string>[*.]contoso.edu</string>
</array>
Back to top
在特定站点上允许 JavaScript (JavaScriptAllowedForUrls)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
根据 URL 模式定义被允许运行 JavaScript 的站点列表。
如果未配置此策略,则对所有站点使用 "DefaultJavaScriptSetting" 策略(如果已设置)或用户个人配置中的全局默认值。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: JavaScriptAllowedForUrls
- GP name: 在特定站点上允许 JavaScript
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/内容设置
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\JavaScriptAllowedForUrls
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\JavaScriptAllowedForUrls\0 = "https://www.contoso.com"
SOFTWARE\Policies\Microsoft\Edge\JavaScriptAllowedForUrls\1 = "[*.]contoso.edu"
Mac information and settings
- Preference Key Name: JavaScriptAllowedForUrls
- Example value:
<array>
<string>https://www.contoso.com</string>
<string>[*.]contoso.edu</string>
</array>
Back to top
在特定站点上阻止 JavaScript (JavaScriptBlockedForUrls)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
根据 URL 模式定义不允许其运行 JavaScript 的站点列表。
如果未配置此策略,则对所有站点使用 "DefaultJavaScriptSetting" 策略(如果已设置)或用户个人配置中的全局默认值。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: JavaScriptBlockedForUrls
- GP name: 在特定站点上阻止 JavaScript
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/内容设置
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\JavaScriptBlockedForUrls
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\JavaScriptBlockedForUrls\0 = "https://www.contoso.com"
SOFTWARE\Policies\Microsoft\Edge\JavaScriptBlockedForUrls\1 = "[*.]contoso.edu"
Mac information and settings
- Preference Key Name: JavaScriptBlockedForUrls
- Example value:
<array>
<string>https://www.contoso.com</string>
<string>[*.]contoso.edu</string>
</array>
Back to top
在特定站点上允许通知 (NotificationsAllowedForUrls)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
根据 URL 模式定义可以显示通知的站点列表。
如果未配置此策略,则对所有站点使用 "DefaultNotificationsSetting" 策略(如果已设置)或用户个人配置中的全局默认值。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: NotificationsAllowedForUrls
- GP name: 在特定站点上允许通知
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/内容设置
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\NotificationsAllowedForUrls
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\NotificationsAllowedForUrls\0 = "https://www.contoso.com"
SOFTWARE\Policies\Microsoft\Edge\NotificationsAllowedForUrls\1 = "[*.]contoso.edu"
Mac information and settings
- Preference Key Name: NotificationsAllowedForUrls
- Example value:
<array>
<string>https://www.contoso.com</string>
<string>[*.]contoso.edu</string>
</array>
Back to top
在特定站点上阻止通知 (NotificationsBlockedForUrls)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
根据 URL 模式定义阻止显示通知的站点列表。
如果未配置此策略,则对所有站点使用 "DefaultNotificationsSetting" 策略(如果已设置)或用户个人配置中的全局默认值。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: NotificationsBlockedForUrls
- GP name: 在特定站点上阻止通知
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/内容设置
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\NotificationsBlockedForUrls
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\NotificationsBlockedForUrls\0 = "https://www.contoso.com"
SOFTWARE\Policies\Microsoft\Edge\NotificationsBlockedForUrls\1 = "[*.]contoso.edu"
Mac information and settings
- Preference Key Name: NotificationsBlockedForUrls
- Example value:
<array>
<string>https://www.contoso.com</string>
<string>[*.]contoso.edu</string>
</array>
Back to top
Allow the Adobe Flash plug-in on specific sites (PluginsAllowedForUrls)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
Define a list of sites, based on URL patterns, that can run the Adobe Flash plug-in.
If you don't configure this policy, the global default value from the 'DefaultPluginsSetting' policy (if set) or the user's personal configuration is used for all sites.
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: PluginsAllowedForUrls
- GP name: Allow the Adobe Flash plug-in on specific sites
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/内容设置
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\PluginsAllowedForUrls
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\PluginsAllowedForUrls\0 = "https://www.contoso.com"
SOFTWARE\Policies\Microsoft\Edge\PluginsAllowedForUrls\1 = "[*.]contoso.edu"
Mac information and settings
- Preference Key Name: PluginsAllowedForUrls
- Example value:
<array>
<string>https://www.contoso.com</string>
<string>[*.]contoso.edu</string>
</array>
Back to top
Block the Adobe Flash plug-in on specific sites (PluginsBlockedForUrls)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
Define a list of sites, based on URL patterns, that are blocked from running Adobe Flash.
If you don't configure this policy, the global default value from the 'DefaultPluginsSetting' policy (if set) or the user's personal configuration is used for all sites.
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: PluginsBlockedForUrls
- GP name: Block the Adobe Flash plug-in on specific sites
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/内容设置
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\PluginsBlockedForUrls
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\PluginsBlockedForUrls\0 = "https://www.contoso.com"
SOFTWARE\Policies\Microsoft\Edge\PluginsBlockedForUrls\1 = "[*.]contoso.edu"
Mac information and settings
- Preference Key Name: PluginsBlockedForUrls
- Example value:
<array>
<string>https://www.contoso.com</string>
<string>[*.]contoso.edu</string>
</array>
Back to top
在特定站点上允许弹出窗口 (PopupsAllowedForUrls)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
根据 URL 模式定义可打开弹出窗口的站点列表。
如果未配置此策略,则对所有站点使用 "DefaultPopupsSetting" 策略(如果已设置)或用户个人配置中的全局默认值。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: PopupsAllowedForUrls
- GP name: 在特定站点上允许弹出窗口
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/内容设置
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\PopupsAllowedForUrls
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\PopupsAllowedForUrls\0 = "https://www.contoso.com"
SOFTWARE\Policies\Microsoft\Edge\PopupsAllowedForUrls\1 = "[*.]contoso.edu"
Mac information and settings
- Preference Key Name: PopupsAllowedForUrls
- Example value:
<array>
<string>https://www.contoso.com</string>
<string>[*.]contoso.edu</string>
</array>
Back to top
在特定站点上阻止弹出窗口 (PopupsBlockedForUrls)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
根据 URL 模式定义被阻止打开弹出窗口的站点列表。
如果未配置此策略,则对所有站点使用 "DefaultPopupsSetting" 策略(如果已设置)或用户个人配置中的全局默认值。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: PopupsBlockedForUrls
- GP name: 在特定站点上阻止弹出窗口
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/内容设置
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\PopupsBlockedForUrls
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\PopupsBlockedForUrls\0 = "https://www.contoso.com"
SOFTWARE\Policies\Microsoft\Edge\PopupsBlockedForUrls\1 = "[*.]contoso.edu"
Mac information and settings
- Preference Key Name: PopupsBlockedForUrls
- Example value:
<array>
<string>https://www.contoso.com</string>
<string>[*.]contoso.edu</string>
</array>
Back to top
注册协议处理程序 (RegisteredProtocolHandlers)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
注册一个协议处理程序列表。将协议属性设置为方案(如 "mailto"),并将 URL 属性设置为处理该方案的应用程序的 URL 模式。该模式可包括“%s”,它将被替换为已处理的 URL。
你可以为此策略推荐特定值,但不能强制要求用户使用。
该策略注册的协议处理程序将与用户注册的处理程序合并,两者都可以使用。用户可以通过安装新的默认处理程序覆盖策略安装的协议处理程序,但他们不能删除策略注册的协议处理程序。
Supported features:
-
Can be mandatory:
No
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Dictionary
Windows information and settings
Group Policy (ADMX) info
- GP unique name: RegisteredProtocolHandlers
- GP name: 注册协议处理程序
- GP path (Mandatory):
N/A
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/内容设置
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
N/A
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
RegisteredProtocolHandlers
- Value Type:
REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\RegisteredProtocolHandlers = [
{
"default": true,
"protocol": "mailto",
"url": "https://mail.contoso.com/mail/?extsrc=mailto&url=%s"
}
]
Mac information and settings
- Preference Key Name: RegisteredProtocolHandlers
- Example value:
<key>RegisteredProtocolHandlers</key>
<array>
<dict>
<key>default</key>
<true/>
<key>protocol</key>
<string>mailto</string>
<key>url</key>
<string>https://mail.contoso.com/mail/?extsrc=mailto&url=%s</string>
</dict>
</array>
Back to top
授予对特定站点的访问权限,以连接到特定的 USB 设备。 (WebUsbAllowDevicesForUrls)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
定义可以自动访问包含给定供应商和产品 ID 的 USB 设备的站点列表。列表中的每个项目都必须包含设备和 URL,此策略才能有效。每个设备定义都包含供应商 ID 和产品 ID 字段。任何未定义的 ID 都将被视为通配符,但有一个例外: 如果没有供应商 ID,那么你无法指定产品 ID。如果你执行此操作,那么策略将无效并被忽略。
USB 权限模型使用请求站点的 URL (“请求 URL”)和顶级框架站点的 URL (“嵌入 URL”)为请求 URL 授予对 USB 设备的访问权限。将请求站点加载到 iframe 中时,请求 URL 可能与嵌入 URL 不同。因此,"urls" 字段最多可以包含两个以逗号分隔的 URL 字符串,分别用于指定请求 URL 和嵌入 URL。如果只指定了一个 URL,则无论嵌入状态如何,当请求站点的 URL 与此 URL 匹配时,都会授予对相应 USB 设备的访问权限。"urls" 中的 URL 必须是有效的 URL,否则将忽略此策略。
如果未配置此策略,则对所有站点使用 "DefaultWebUsbGuardSetting" 策略(如果已设置)或用户个人配置中的全局默认值。
此策略中的 URL 模式不应与 "WebUsbBlockedForUrls" 策略中配置的 URL 模式冲突。如果存在冲突,则此策略优先于 "WebUsbBlockedForUrls" 和 "WebUsbAskForUrls" 策略。
此策略的值与 DeviceWebUsbAllowDevicesForUrls 策略的值合并在一起。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Dictionary
Windows information and settings
Group Policy (ADMX) info
- GP unique name: WebUsbAllowDevicesForUrls
- GP name: 授予对特定站点的访问权限,以连接到特定的 USB 设备。
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/内容设置
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
WebUsbAllowDevicesForUrls
- Value Type:
REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\WebUsbAllowDevicesForUrls = [
{
"devices": [
{
"product_id": 5678,
"vendor_id": 1234
}
],
"urls": [
"https://contoso.com",
"https://fabrikam.com"
]
}
]
Mac information and settings
- Preference Key Name: WebUsbAllowDevicesForUrls
- Example value:
<key>WebUsbAllowDevicesForUrls</key>
<array>
<dict>
<key>devices</key>
<array>
<dict>
<key>product_id</key>
<integer>5678</integer>
<key>vendor_id</key>
<integer>1234</integer>
</dict>
</array>
<key>urls</key>
<array>
<string>https://contoso.com</string>
<string>https://fabrikam.com</string>
</array>
</dict>
</array>
Back to top
在特定站点上允许 WebUSB (WebUsbAskForUrls)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
根据 URL 模式定义可以请求用户提供 USB 设备访问权限的站点列表。
如果未配置此策略,则对所有站点使用 "DefaultWebUsbGuardSetting" 策略(如果已设置)或用户个人配置中的全局默认值。
此策略中定义的 URL 模式不能与 "WebUsbBlockedForUrls" 策略中配置的 URL 模式冲突 - 你不能同时允许和阻止 URL。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: WebUsbAskForUrls
- GP name: 在特定站点上允许 WebUSB
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/内容设置
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\WebUsbAskForUrls
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\WebUsbAskForUrls\0 = "https://www.contoso.com"
SOFTWARE\Policies\Microsoft\Edge\WebUsbAskForUrls\1 = "[*.]contoso.edu"
Mac information and settings
- Preference Key Name: WebUsbAskForUrls
- Example value:
<array>
<string>https://www.contoso.com</string>
<string>[*.]contoso.edu</string>
</array>
Back to top
在特定站点上阻止 WebUSB (WebUsbBlockedForUrls)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
根据 URL 模式定义无法请求用户授予 USB 设备访问权限的站点列表。
如果未配置此策略,则对所有站点使用 "DefaultWebUsbGuardSetting" 策略(如果已设置)或用户个人配置中的全局默认值。
此策略中的 URL 模式不能与 "WebUsbAskForUrls" 策略中配置的 URL 模式冲突。你不能同时允许和阻止 URL。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: WebUsbBlockedForUrls
- GP name: 在特定站点上阻止 WebUSB
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/内容设置
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\WebUsbBlockedForUrls
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\WebUsbBlockedForUrls\0 = "https://www.contoso.com"
SOFTWARE\Policies\Microsoft\Edge\WebUsbBlockedForUrls\1 = "[*.]contoso.edu"
Mac information and settings
- Preference Key Name: WebUsbBlockedForUrls
- Example value:
<array>
<string>https://www.contoso.com</string>
<string>[*.]contoso.edu</string>
</array>
Back to top
启用默认搜索提供程序 (DefaultSearchProviderEnabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
允许使用默认搜索提供程序。
如果启用此策略,用户可通过在地址栏中键入来搜索术语(只要键入的不是 URL)。
通过启用其余默认搜索策略,你可以指定要使用的默认搜索提供程序。如果留空(未配置),用户可以选择默认提供程序。
如果禁用此策略,用户不能从地址栏中搜索。
如果启用或禁用此策略,则用户无法更改或覆盖它。
如果未配置此策略,将启用默认搜索提供程序,用户可以选择默认搜索提供程序并设置搜索提供程序列表。
此策略仅适用于加入到 Microsoft Active Directory 域的 Windows 实例或注册用于设备管理的 Windows 10 专业版或企业版实例。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DefaultSearchProviderEnabled
- GP name: 启用默认搜索提供程序
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/默认的搜索提供程序
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DefaultSearchProviderEnabled
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: DefaultSearchProviderEnabled
- Example value:
True
Back to top
默认的搜索提供程序编码 (DefaultSearchProviderEncodings)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定搜索提供程序支持的字符编码。编码是 UTF-8、GB2312 和 ISO-8859-1 之类的代码页名称。系统按提供的顺序尝试它们。
此策略是可选的。如果未配置,将使用默认的 UTF-8。
此策略仅在启用 "DefaultSearchProviderEnabled" 和 "DefaultSearchProviderSearchURL" 策略时应用。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DefaultSearchProviderEncodings
- GP name: 默认的搜索提供程序编码
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/默认的搜索提供程序
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\DefaultSearchProviderEncodings
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\DefaultSearchProviderEncodings\0 = "UTF-8"
SOFTWARE\Policies\Microsoft\Edge\DefaultSearchProviderEncodings\1 = "UTF-16"
SOFTWARE\Policies\Microsoft\Edge\DefaultSearchProviderEncodings\2 = "GB2312"
SOFTWARE\Policies\Microsoft\Edge\DefaultSearchProviderEncodings\3 = "ISO-8859-1"
Mac information and settings
- Preference Key Name: DefaultSearchProviderEncodings
- Example value:
<array>
<string>UTF-8</string>
<string>UTF-16</string>
<string>GB2312</string>
<string>ISO-8859-1</string>
</array>
Back to top
为默认搜索提供程序指定“按图像搜索”功能 (DefaultSearchProviderImageURL)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定用于图像搜索的搜索引擎的 URL。使用 GET 方法发送搜索请求。
此策略是可选的。如果未配置此策略,则图像搜索不可用。
此策略仅在启用 "DefaultSearchProviderEnabled" 和 "DefaultSearchProviderSearchURL" 策略时应用。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DefaultSearchProviderImageURL
- GP name: 为默认搜索提供程序指定“按图像搜索”功能
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/默认的搜索提供程序
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DefaultSearchProviderImageURL
- Value Type:
REG_SZ
Example value:
"https://search.contoso.com/searchbyimage/upload"
Mac information and settings
- Preference Key Name: DefaultSearchProviderImageURL
- Example value:
"https://search.contoso.com/searchbyimage/upload"
Back to top
使用 POST 的图像 URL 的参数 (DefaultSearchProviderImageURLPostParams)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
如果启用此策略,它将指定在执行使用 POST 的图像搜索时使用的参数。该策略包含以逗号分隔的名称/值对。如果值为模板参数(例如前面示例中的 {imageThumbnail}),它将替换为实际图像缩略图数据。此策略仅在启用 "DefaultSearchProviderEnabled" 和 "DefaultSearchProviderSearchURL" 策略时应用。
如果未设置此策略,将使用 GET 方法发送图像搜索请求。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DefaultSearchProviderImageURLPostParams
- GP name: 使用 POST 的图像 URL 的参数
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/默认的搜索提供程序
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DefaultSearchProviderImageURLPostParams
- Value Type:
REG_SZ
Example value:
"content={imageThumbnail},url={imageURL},sbisrc={SearchSource}"
Mac information and settings
- Preference Key Name: DefaultSearchProviderImageURLPostParams
- Example value:
"content={imageThumbnail},url={imageURL},sbisrc={SearchSource}"
Back to top
默认的搜索提供程序关键字 (DefaultSearchProviderKeyword)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定关键字,这是在地址栏中用于触发搜索此提供程序的快捷方式。
此策略是可选的。如果未配置此策略,则关键字不会激活搜索提供程序。
此策略仅在启用 "DefaultSearchProviderEnabled" 和 "DefaultSearchProviderSearchURL" 策略时应用。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DefaultSearchProviderKeyword
- GP name: 默认的搜索提供程序关键字
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/默认的搜索提供程序
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DefaultSearchProviderKeyword
- Value Type:
REG_SZ
Example value:
"mis"
Mac information and settings
- Preference Key Name: DefaultSearchProviderKeyword
- Example value:
"mis"
Back to top
默认的搜索提供程序名称 (DefaultSearchProviderName)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定默认搜索提供程序的名称。
如果启用此策略,则设置默认搜索提供程序的名称。
如果不启用此策略或将其留空,将使用由搜索 URL 指定的主机名称。
"DefaultSearchProviderName" 应设置为组织批准的已加密搜索提供程序,并与在 DTBC-0008 中设置的已加密搜索提供程序相对应。此策略仅在启用 "DefaultSearchProviderEnabled" 和 "DefaultSearchProviderSearchURL" 策略时应用。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DefaultSearchProviderName
- GP name: 默认的搜索提供程序名称
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/默认的搜索提供程序
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DefaultSearchProviderName
- Value Type:
REG_SZ
Example value:
"My Intranet Search"
Mac information and settings
- Preference Key Name: DefaultSearchProviderName
- Example value:
"My Intranet Search"
Back to top
默认的搜索提供程序搜索 URL (DefaultSearchProviderSearchURL)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定用于默认搜索的搜索引擎的 URL。该 URL 包含字符串“{searchTerms}”,该字符串在查询时由用户搜索的术语替换。
将必应的搜索 URL 指定为:
'{bing:baseURL}search?q={searchTerms}'。
将 Google 的搜索 URL 指定为: '{google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}ie={inputEncoding}'。
在启用 "DefaultSearchProviderEnabled" 策略时,需要此策略;如果不启用后一策略,则忽略此策略。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DefaultSearchProviderSearchURL
- GP name: 默认的搜索提供程序搜索 URL
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/默认的搜索提供程序
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DefaultSearchProviderSearchURL
- Value Type:
REG_SZ
Example value:
"https://search.contoso.com/search?q={searchTerms}"
Mac information and settings
- Preference Key Name: DefaultSearchProviderSearchURL
- Example value:
"https://search.contoso.com/search?q={searchTerms}"
Back to top
建议的默认搜索提供程序 URL (DefaultSearchProviderSuggestURL)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定用于提供搜索建议的搜索引擎的 URL。该 URL 包含字符串 "{searchTerms}",该字符串在查询时被用户目前为止输入的文本所替换。
此策略是可选的。如果未配置此策略,用户将看不到搜索建议;他们将看到浏览历史记录和收藏夹中的建议。
必应的建议 URL 可以指定为:
'{bing:baseURL}qbox?query={searchTerms}'。
Google 的建议 URL 可以指定为: '{google:baseURL}complete/search?output=chrome&q={searchTerms}'。
此策略仅在启用 "DefaultSearchProviderEnabled" 和 "DefaultSearchProviderSearchURL" 策略时应用。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DefaultSearchProviderSuggestURL
- GP name: 建议的默认搜索提供程序 URL
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/默认的搜索提供程序
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DefaultSearchProviderSuggestURL
- Value Type:
REG_SZ
Example value:
"https://search.contoso.com/suggest?q={searchTerms}"
Mac information and settings
- Preference Key Name: DefaultSearchProviderSuggestURL
- Example value:
"https://search.contoso.com/suggest?q={searchTerms}"
Back to top
配置允许的扩展类型 (ExtensionAllowedTypes)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
控制可以安装哪些扩展类型并限制运行时访问。
此设置定义允许的扩展类型以及它们可以与之交互的主机。值是一个字符串列表,每个字符串都应为以下其中一项:“扩展”、“主题”、"user_script" 和 "hosted_app"。有关这些类型的详细信息,请参阅 Microsoft Edge 扩展文档。
请注意,此策略还影响将要使用 "ExtensionInstallForcelist" 策略强制安装的扩展。
如果你启用此策略,则仅安装与列表中的类型匹配的扩展。
如果未配置此策略,则不会强制实施针对可接受扩展类型的限制。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ExtensionAllowedTypes
- GP name: 配置允许的扩展类型
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/扩展
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\ExtensionAllowedTypes
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\ExtensionAllowedTypes\0 = "hosted_app"
Mac information and settings
- Preference Key Name: ExtensionAllowedTypes
- Example value:
<array>
<string>hosted_app</string>
</array>
Back to top
允许安装特定扩展 (ExtensionInstallAllowlist)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
默认情况下允许所有扩展。但是,如果通过将 "ExtensionInstallBlockList" 策略设置为 "*" 来阻止所有扩展,则用户只能安装此策略中定义的扩展。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ExtensionInstallAllowlist
- GP name: 允许安装特定扩展
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/扩展
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallAllowlist
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallAllowlist\0 = "extension_id1"
SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallAllowlist\1 = "extension_id2"
Mac information and settings
- Preference Key Name: ExtensionInstallAllowlist
- Example value:
<array>
<string>extension_id1</string>
<string>extension_id2</string>
</array>
Back to top
控制哪些扩展不能安装 (ExtensionInstallBlocklist)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
列出用户不能在 Microsoft Edge 中安装的特定扩展。在部署此策略时,所有出现在此名单上的已安装扩展都将被都禁用,并且用户将无法启用它们。如果从被阻止扩展名单中删除一个项目,该扩展将从之前安装的位置自动重新启用。
使用"*"阻止在允许名单中未显式列出的所有扩展。
如果未配置此策略,则用户可以在 Microsoft Edge 中安装任何扩展。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ExtensionInstallBlocklist
- GP name: 控制哪些扩展不能安装
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/扩展
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallBlocklist
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallBlocklist\0 = "extension_id1"
SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallBlocklist\1 = "extension_id2"
Mac information and settings
- Preference Key Name: ExtensionInstallBlocklist
- Example value:
<array>
<string>extension_id1</string>
<string>extension_id2</string>
</array>
Back to top
控制无提示安装的扩展 (ExtensionInstallForcelist)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定可静默安装、无需用户交互并且用户无法卸载或禁用(“强制安装”)的扩展。这些扩展请求的所有权限都隐式授予,无需用户交互,包括扩展未来版本请求的任何附加权限。此外,还为 enterprise.deviceAttributes 和 enterprise.platformKeys 扩展 API 授予权限。(这两个 API 只对强制安装的扩展可用。)
此策略优先于可能冲突的 "ExtensionInstallBlocklist" 策略。当你从强制安装列表中删除某个扩展时,它会被 Microsoft Edge 自动卸载。
对于未加入到 Microsoft Active Directory 域的 Windows 设备,强制安装仅限于 Microsoft Store 中可用的扩展。
请注意,用户可以使用开发人员工具修改任何扩展的源代码,这有可能导致扩展功能异常。如果担心这一点,请设置 "DeveloperToolsAvailability" 策略。
使用以下格式向列表添加扩展:
[extensionID];[updateURL]
- extensionID - 开发人员模式下,可在 edge://extensions 找到的含有 32 个字母的字符串。
- updateURL(可选)是应用或扩展的更新清单 XML 文档的地址,如 https://docs.microsoft.com/Placeholder07A 所述。如果未设置 updateURL,则将使用 Microsoft Store 更新的 URL(当前为 https://extensionwebstorebase.edgesv.net/v1/crx)。请注意,此策略中设置的更新 URL 仅用于初始安装;扩展的后续更新使用扩展清单中提供的更新 URL。
例如,gggmmkjegpiggikcnhidnjjhmicpibll;https://extensionwebstorebase.edgesv.net/v1/crx 从 Microsoft Store 的“更新”URL 安装 Microsoft Online 应用。有关托管扩展的详细信息,请参阅: https://docs.microsoft.com//Placeholder03B。
如果未配置此策略,则不会自动安装扩展,并且用户可以卸载 Microsoft Edge 中的任何扩展。
请注意,此策略不适用于 InPrivate 模式。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ExtensionInstallForcelist
- GP name: 控制无提示安装的扩展
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/扩展
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallForcelist
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallForcelist\0 = "gbchcmhmhahfdphkhkmpfmihenigjmpp;https://extensionwebstorebase.edgesv.net/v1/crx"
SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallForcelist\1 = "abcdefghijklmnopabcdefghijklmnop"
Mac information and settings
- Preference Key Name: ExtensionInstallForcelist
- Example value:
<array>
<string>gbchcmhmhahfdphkhkmpfmihenigjmpp;https://extensionwebstorebase.edgesv.net/v1/crx</string>
<string>abcdefghijklmnopabcdefghijklmnop</string>
</array>
Back to top
配置扩展和用户脚本安装源 (ExtensionInstallSources)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
定义可以安装扩展和主题的 URL。
默认情况下,用户必须为要安装的每个扩展或脚本下载 *.crx 文件,然后将其拖到 Microsoft Edge 设置页面上。此策略允许特定 URL 针对用户使用/安装扩展或脚本。
此列表中的每个项目都是扩展样式匹配模式(请参阅 https://docs.microsoft.com//Placeholder04)。用户可以从任何与此列表中的项匹配的 URL 轻松安装项目。这些模式必须允许 *.crx 文件的位置,以及下载开始的页面(也就是引用站点)。
"ExtensionInstallBlocklist" 策略优先于此策略。阻止名单中的任何扩展将不会安装,即使来自此列表中的站点也不例外。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ExtensionInstallSources
- GP name: 配置扩展和用户脚本安装源
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/扩展
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallSources
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallSources\0 = "https://corp.contoso.com/*"
Mac information and settings
- Preference Key Name: ExtensionInstallSources
- Example value:
<array>
<string>https://corp.contoso.com/*</string>
</array>
Back to top
配置扩展管理设置 (ExtensionSettings)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
配置 Microsoft Edge 的扩展管理设置。
此策略控制多个设置,包括任何现有扩展相关策略所控制的设置。如果同时设置了此策略和任何旧策略,则此策略将覆盖旧策略。
此策略会将扩展 ID 或更新 URL 映射到其配置。对于扩展 ID,此配置仅应用于指定的扩展。请设置特殊 ID "*" 的默认配置,以应用于此策略中未明确列出的所有扩展。对于更新 URL,此配置将应用于在扩展清单中声明了确切更新 URL 的所有扩展,如 https://docs.microsoft.com/Placeholder07A 中所述。
有关此策略可能具有的设置和结构的完整说明,请访问 https://docs.microsoft.com/Placeholder07B。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Dictionary
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ExtensionSettings
- GP name: 配置扩展管理设置
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/扩展
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
ExtensionSettings
- Value Type:
REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\ExtensionSettings = {
"*": {
"allowed_types": [
"hosted_app"
],
"blocked_install_message": "Custom error message.",
"blocked_permissions": [
"downloads",
"bookmarks"
],
"install_sources": [
"https://company-intranet/apps"
],
"installation_mode": "blocked",
"runtime_allowed_hosts": [
"*://good.contoso.com"
],
"runtime_blocked_hosts": [
"*://*.contoso.com"
]
},
"abcdefghijklmnopabcdefghijklmnop": {
"blocked_permissions": [
"history"
],
"installation_mode": "allowed",
"minimum_version_required": "1.0.1"
},
"bcdefghijklmnopabcdefghijklmnopa": {
"allowed_permissions": [
"downloads"
],
"installation_mode": "force_installed",
"runtime_allowed_hosts": [
"*://good.contoso.com"
],
"runtime_blocked_hosts": [
"*://*.contoso.com"
],
"update_url": "https://contoso.com/update_url"
},
"cdefghijklmnopabcdefghijklmnopab": {
"blocked_install_message": "Custom error message.",
"installation_mode": "blocked"
},
"defghijklmnopabcdefghijklmnopabc,efghijklmnopabcdefghijklmnopabcd": {
"blocked_install_message": "Custom error message.",
"installation_mode": "blocked"
},
"fghijklmnopabcdefghijklmnopabcde": {
"blocked_install_message": "Custom removal message.",
"installation_mode": "removed"
},
"update_url:https://www.contoso.com/update.xml": {
"allowed_permissions": [
"downloads"
],
"blocked_permissions": [
"wallpaper"
],
"installation_mode": "allowed"
}
}
Mac information and settings
- Preference Key Name: ExtensionSettings
- Example value:
<key>ExtensionSettings</key>
<dict>
<key>*</key>
<dict>
<key>allowed_types</key>
<array>
<string>hosted_app</string>
</array>
<key>blocked_install_message</key>
<string>Custom error message.</string>
<key>blocked_permissions</key>
<array>
<string>downloads</string>
<string>bookmarks</string>
</array>
<key>install_sources</key>
<array>
<string>https://company-intranet/apps</string>
</array>
<key>installation_mode</key>
<string>blocked</string>
<key>runtime_allowed_hosts</key>
<array>
<string>*://good.contoso.com</string>
</array>
<key>runtime_blocked_hosts</key>
<array>
<string>*://*.contoso.com</string>
</array>
</dict>
<key>abcdefghijklmnopabcdefghijklmnop</key>
<dict>
<key>blocked_permissions</key>
<array>
<string>history</string>
</array>
<key>installation_mode</key>
<string>allowed</string>
<key>minimum_version_required</key>
<string>1.0.1</string>
</dict>
<key>bcdefghijklmnopabcdefghijklmnopa</key>
<dict>
<key>allowed_permissions</key>
<array>
<string>downloads</string>
</array>
<key>installation_mode</key>
<string>force_installed</string>
<key>runtime_allowed_hosts</key>
<array>
<string>*://good.contoso.com</string>
</array>
<key>runtime_blocked_hosts</key>
<array>
<string>*://*.contoso.com</string>
</array>
<key>update_url</key>
<string>https://contoso.com/update_url</string>
</dict>
<key>cdefghijklmnopabcdefghijklmnopab</key>
<dict>
<key>blocked_install_message</key>
<string>Custom error message.</string>
<key>installation_mode</key>
<string>blocked</string>
</dict>
<key>defghijklmnopabcdefghijklmnopabc,efghijklmnopabcdefghijklmnopabcd</key>
<dict>
<key>blocked_install_message</key>
<string>Custom error message.</string>
<key>installation_mode</key>
<string>blocked</string>
</dict>
<key>fghijklmnopabcdefghijklmnopabcde</key>
<dict>
<key>blocked_install_message</key>
<string>Custom removal message.</string>
<key>installation_mode</key>
<string>removed</string>
</dict>
<key>update_url:https://www.contoso.com/update.xml</key>
<dict>
<key>allowed_permissions</key>
<array>
<string>downloads</string>
</array>
<key>blocked_permissions</key>
<array>
<string>wallpaper</string>
</array>
<key>installation_mode</key>
<string>allowed</string>
</dict>
</dict>
Back to top
启用 Google Cast (EnableMediaRouter)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
启用此策略以启用 Google Cast。用户将能够从应用程序菜单、页面上下文菜单、启用强制转换的网站上的媒体控件以及(如果显示)强制转换工具栏图标启动它。
停用此策略可停用 Google Cast。
默认情况下,Google Cast 已启用。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: EnableMediaRouter
- GP name: 启用 Google Cast
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/Cast
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
EnableMediaRouter
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: EnableMediaRouter
- Example value:
True
Back to top
在工具栏中显示投放图标 (ShowCastIconInToolbar)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
将此策略设为 true,可在工具栏或在溢出菜单上显示“投放工具栏”图标。用户将无法将其删除。
如果未配置或禁用此策略,用户可以使用其上下文菜单固定或删除此图标。
如果已将 "EnableMediaRouter" 策略设置为 false,则会忽略此策略,并且不显示工具栏图标。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ShowCastIconInToolbar
- GP name: 在工具栏中显示投放图标
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/Cast
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
ShowCastIconInToolbar
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: ShowCastIconInToolbar
- Example value:
False
Back to top
允许跨源 HTTP 基本身份验证提示 (AllowCrossOriginAuthPrompt)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
控制页面上的第三方子内容是否可以打开 HTTP 基本身份验证对话框。
通常,此项作为钓鱼防御功能处于禁用状态。如果未配置此策略,则会禁用该策略,并且第三方子内容无法打开 HTTP 基本身份验对话框。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: AllowCrossOriginAuthPrompt
- GP name: 允许跨源 HTTP 基本身份验证提示
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/HTTP 身份验证
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
AllowCrossOriginAuthPrompt
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: AllowCrossOriginAuthPrompt
- Example value:
False
Back to top
指定 Microsoft Edge 可向其委派用户凭据的服务器列表 (AuthNegotiateDelegateAllowlist)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
配置 Microsoft Edge 可委派的服务器列表。
请用逗号分隔多个服务器名称。允许使用通配符(*)。
如果你未配置此策略,则 Microsoft Edge 将不会委派用户凭据,即使检测到服务器为 Intranet 服务器也不例外。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: AuthNegotiateDelegateAllowlist
- GP name: 指定 Microsoft Edge 可向其委派用户凭据的服务器列表
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/HTTP 身份验证
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
AuthNegotiateDelegateAllowlist
- Value Type:
REG_SZ
Example value:
"contoso.com"
Mac information and settings
- Preference Key Name: AuthNegotiateDelegateAllowlist
- Example value:
"contoso.com"
Back to top
支持的身份验证方案 (AuthSchemes)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定受支持的 HTTP 身份验证方案。
可用于配置该策略的值: "basic"、"digest"、"ntlm" 和 "negotiate"。用逗号分隔多个值。
如果未配置此策略,则会使用所有四个方案。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: AuthSchemes
- GP name: 支持的身份验证方案
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/HTTP 身份验证
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
AuthSchemes
- Value Type:
REG_SZ
Example value:
"basic,digest,ntlm,negotiate"
Mac information and settings
- Preference Key Name: AuthSchemes
- Example value:
"basic,digest,ntlm,negotiate"
Back to top
配置允许的身份验证服务器列表 (AuthServerAllowlist)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定要启用集成身份验证的服务器。只有当 Microsoft Edge 从代理或此列表中的服务器接收到身份验证质询时,集成身份验证才会启用。
用逗号分隔多个服务器名称。允许通配符(*)。
如果不配置此策略,Microsoft Edge 会尝试检测服务器是否在 Intranet 中,只有这样它才会响应 IWA 请求。如果服务器在 Internet 上,来自它的 IWA 请求将被 Microsoft Edge 忽略。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: AuthServerAllowlist
- GP name: 配置允许的身份验证服务器列表
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/HTTP 身份验证
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
AuthServerAllowlist
- Value Type:
REG_SZ
Example value:
"*contoso.com,fabrikam.com,*baz"
Mac information and settings
- Preference Key Name: AuthServerAllowlist
- Example value:
"*contoso.com,fabrikam.com,*baz"
Back to top
协商 Kerberos 身份验证时禁用 CNAME 查找 (DisableAuthNegotiateCnameLookup)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
确定生成的 Kerberos SPN 是否基于规范的 DNS 名称(CNAME)或输入的原始名称。
如果启用此策略,将跳过 CNAME 查找,使用服务器名称(作为输入)。
如果禁用或未配置此策略,则使用服务器的规范名称。这通过 CNAME 查找来确定。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DisableAuthNegotiateCnameLookup
- GP name: 协商 Kerberos 身份验证时禁用 CNAME 查找
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/HTTP 身份验证
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DisableAuthNegotiateCnameLookup
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: DisableAuthNegotiateCnameLookup
- Example value:
False
Back to top
在 Kerberos SPN 中包含非标准端口 (EnableAuthNegotiatePort)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定生成的 Kerberos SPN 是否应包括非标准端口。
如果启用此策略,并且用户在 URL 中包含非标准端口(非 80 或 443 的端口),则该端口包含在生成的 Kerberos SPN 中。
如果不配置或禁用此策略,生成的 Kerberos SPN 在任何情况下都不包含端口。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: EnableAuthNegotiatePort
- GP name: 在 Kerberos SPN 中包含非标准端口
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/HTTP 身份验证
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
EnableAuthNegotiatePort
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: EnableAuthNegotiatePort
- Example value:
False
Back to top
控制是否启用 NTLMv2 身份验证 (NtlmV2Enabled)
Supported Versions: Microsoft Edge on Mac since version 77 or later
Description
控制是否启用 NTLMv2。
所有最新版本的 Samba 和 Windows 服务器都支持 NTLMv2。你应该只禁用 NTLMv2 来解决向后兼容性问题,因为它会降低身份验证的安全性。
如果未配置此策略,则默认情况下会启用 NTLMv2。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Mac information and settings
- Preference Key Name: NtlmV2Enabled
- Example value:
True
Back to top
控制用户可以使用的本机消息传递主机 (NativeMessagingAllowlist)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
列出用户可在 Microsoft Edge 中使用的特定本机消息传递主机。
默认情况下,允许所有本机消息传递主机。如果将 "NativeMessagingBlocklist" 策略设置为 *,则会阻止所有本机消息传递主机,仅加载此处列出的本机消息传递主机。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: NativeMessagingAllowlist
- GP name: 控制用户可以使用的本机消息传递主机
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/本机消息
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\NativeMessagingAllowlist
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\NativeMessagingAllowlist\0 = "com.native.messaging.host.name1"
SOFTWARE\Policies\Microsoft\Edge\NativeMessagingAllowlist\1 = "com.native.messaging.host.name2"
Mac information and settings
- Preference Key Name: NativeMessagingAllowlist
- Example value:
<array>
<string>com.native.messaging.host.name1</string>
<string>com.native.messaging.host.name2</string>
</array>
Back to top
配置本机消息传递阻止名单 (NativeMessagingBlocklist)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定不应使用的本机消息传递主机。
使用 "*" 可阻止所有本机消息传递主机,除非它们显式列在允许名单中。
如果未配置此策略,则 Microsoft Edge 将加载安装的所有本机消息传递主机。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: NativeMessagingBlocklist
- GP name: 配置本机消息传递阻止名单
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/本机消息
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\NativeMessagingBlocklist
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\NativeMessagingBlocklist\0 = "com.native.messaging.host.name1"
SOFTWARE\Policies\Microsoft\Edge\NativeMessagingBlocklist\1 = "com.native.messaging.host.name2"
Mac information and settings
- Preference Key Name: NativeMessagingBlocklist
- Example value:
<array>
<string>com.native.messaging.host.name1</string>
<string>com.native.messaging.host.name2</string>
</array>
Back to top
允许用户级本机消息传递主机(安装时不带管理员权限) (NativeMessagingUserLevelHosts)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
启用本机消息传递主机的用户级安装。
如果禁用此策略,则 Microsoft Edge 将仅使用在系统级别安装的本机消息传递主机。
默认情况下,如果未配置此策略,则 Microsoft Edge 将允许使用用户级本机消息传递主机。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: NativeMessagingUserLevelHosts
- GP name: 允许用户级本机消息传递主机(安装时不带管理员权限)
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/本机消息
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
NativeMessagingUserLevelHosts
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: NativeMessagingUserLevelHosts
- Example value:
False
Back to top
启用将密码保存到密码管理器 (PasswordManagerEnabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
允许 Microsoft Edge 保存用户密码。
如果启用此策略,则用户可以在 Microsoft Edge 中保存其密码。下次访问该站点时,Microsoft Edge 将自动输入密码。
如果禁用此策略,用户无法保存新密码,但他们仍可以使用以前保存的密码。
如果启用或禁用此策略,用户将无法在 Microsoft Edge 中更改或覆盖该策略。如果未配置此策略,用户将可以保存密码,也可以关闭此功能。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: PasswordManagerEnabled
- GP name: 启用将密码保存到密码管理器
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/密码管理器和保护
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/密码管理器和保护
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
PasswordManagerEnabled
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: PasswordManagerEnabled
- Example value:
True
Back to top
配置更改密码 URL (PasswordProtectionChangePasswordURL)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
配置更改密码 URL(仅限 HTTP 和 HTTPS 方案)。
密码保护服务会将用户定向到此 URL,以便用户在浏览器中看到警告后更改其密码。为了让 Microsoft Edge 正确捕获更改密码页面上的新密码指纹,请确保此页面符合 https://docs.microsoft.com/Placeholder10 上的准则。
如果启用此策略,则密码保护服务会将用户定向到此 URL 以便更改其密码。
如果禁用或未配置此策略,则密码保护服务不会将用户重定向到更改密码 URL。
此策略仅适用于已加入 Microsoft Active Directory 域的 Windows 实例,或为设备管理注册的 Windows 10 专业版或 Enterprise 实例。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: PasswordProtectionChangePasswordURL
- GP name: 配置更改密码 URL
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/密码管理器和保护
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
PasswordProtectionChangePasswordURL
- Value Type:
REG_SZ
Example value:
"https://contoso.com/change_password.html"
Mac information and settings
- Preference Key Name: PasswordProtectionChangePasswordURL
- Example value:
"https://contoso.com/change_password.html"
Back to top
配置密码保护服务应捕获密码指纹的企业登录 URL 列表 (PasswordProtectionLoginURLs)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
配置企业登录 URL 列表(仅限 HTTP 和 HTTPS 方案),其中 Microsoft Edge 应捕获密码指纹并将其用于密码重用检测。为了让 Microsoft Edge 正确捕获密码指纹,请确保登录页面符合 https://docs.microsoft.com/Placeholder10 上的准则。
如果启用此策略,则密码保护服务将捕获已定义 URL 的密码指纹。
如果禁用或不配置此策略,则不会捕获密码指纹。
此策略仅适用于已加入 Microsoft Active Directory 域的 Windows 实例,或为设备管理注册的 Windows 10 专业版或 Enterprise 实例。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: PasswordProtectionLoginURLs
- GP name: 配置密码保护服务应捕获密码指纹的企业登录 URL 列表
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/密码管理器和保护
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\PasswordProtectionLoginURLs
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\PasswordProtectionLoginURLs\0 = "https://contoso.com/login.html"
SOFTWARE\Policies\Microsoft\Edge\PasswordProtectionLoginURLs\1 = "https://login.contoso.com"
Mac information and settings
- Preference Key Name: PasswordProtectionLoginURLs
- Example value:
<array>
<string>https://contoso.com/login.html</string>
<string>https://login.contoso.com</string>
</array>
Back to top
配置密码保护警告触发器 (PasswordProtectionWarningTrigger)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
允许你控制何时触发密码保护警告。用户在潜在可疑站点上重复使用受保护的密码时,密码保护功能会提醒用户。
你可以使用 "PasswordProtectionLoginURLs" 和 "PasswordProtectionChangePasswordURL" 策略来配置要保护的密码。
例外: "PasswordProtectionLoginURLs" 和 "PasswordProtectionChangePasswordURL" 中所列站点以及 "SmartScreenAllowListDomains" 中所列站点的密码不会触发密码保护警告。
如果设置为 "PasswordProtectionWarningOff" (0),则不会显示密码保护警告。
如果设置为 "PasswordProtectionWarningOnPasswordReuse" (1),则当用户在未列入允许列表的站点上重复使用受保护的密码时,会显示密码保护警告。
如果禁用或未配置此策略,则不显示警告触发器。
* 0 = 密码保护警告处于关闭状态。
* 1 = 重复使用密码会触发密码保护警告。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: PasswordProtectionWarningTrigger
- GP name: 配置密码保护警告触发器
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/密码管理器和保护
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
PasswordProtectionWarningTrigger
- Value Type:
REG_DWORD
Example value:
0x00000001
Mac information and settings
- Preference Key Name: PasswordProtectionWarningTrigger
- Example value:
1
Back to top
默认打印机选择规则 (DefaultPrinterSelection)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
覆盖 Microsoft Edge 的默认打印机选择规则。此策略将决定用户第一次尝试在 Microsoft Edge 中打印页面时选择默认打印机的规则。
如果配置此策略,Microsoft Edge 将尝试查找匹配所有指定属性的打印机,并将其用作默认打印机。如果有多台符合条件的打印机,则使用第一个相匹配的打印机。
如果未配置此策略,或查找匹配的打印机超时,则将内置的 PDF 打印机作为默认打印机,如果无 PDF 打印机,则默认无打印机。
此值被解析为 JSON 对象,遵循以下架构: { "type": "object", "properties": { "idPattern": { "description": "Regular expression to match printer id.", "type": "string" }, "namePattern": { "description": "Regular expression to match printer display name.", "type": "string" } } }
省略字段表示所有值都匹配;例如,如果没有指定连接,打印预览将启动查找所有类型的本地打印机。正则表达式模式必须遵循 JavaScript RegExp 语法,并且匹配项区分大小写。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DefaultPrinterSelection
- GP name: 默认打印机选择规则
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/打印
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DefaultPrinterSelection
- Value Type:
REG_SZ
Example value:
"{ "idPattern": ".*public", "namePattern": ".*Color" }"
Mac information and settings
- Preference Key Name: DefaultPrinterSelection
- Example value:
"{ "idPattern": ".*public", "namePattern": ".*Color" }"
Back to top
打印页眉和页脚 (PrintHeaderFooter)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
在打印对话框中强制开启或关闭“页眉和页脚”。
如果未配置此策略,则用户可以决定是否打印页眉和页脚。
如果禁用此策略,则用户无法打印页眉和页脚。
如果启用此策略,则用户始终打印页眉和页脚。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: PrintHeaderFooter
- GP name: 打印页眉和页脚
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/打印
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/打印
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
PrintHeaderFooter
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: PrintHeaderFooter
- Example value:
False
Back to top
将系统的默认打印机设置为默认打印机 (PrintPreviewUseSystemDefaultPrinter)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
告知 Microsoft Edge“打印预览”中的默认选项是系统默认打印机,而不是最近使用的打印机。
如果禁用或未配置此策略,“打印预览”使用最近使用的打印机作为默认目标选项。
如果启用此策略,则“打印预览”使用操作系统的默认打印机作为默认目标选项。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: PrintPreviewUseSystemDefaultPrinter
- GP name: 将系统的默认打印机设置为默认打印机
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/打印
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/打印
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
PrintPreviewUseSystemDefaultPrinter
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: PrintPreviewUseSystemDefaultPrinter
- Example value:
False
Back to top
启用打印 (PrintingEnabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
Enables printing in Microsoft Edge and prevents users from changing this setting.
If you enable this policy or don't configure it, users can print.
If you disable this policy, users can't print from Microsoft Edge. Printing is disabled in the wrench menu, extensions, JavaScript applications, and so on. Users can still print from plug-ins that bypass Microsoft Edge while printing. For example, certain Adobe Flash applications have the print option in their context menu, which isn't covered by this policy.
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: PrintingEnabled
- GP name: 启用打印
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/打印
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
PrintingEnabled
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: PrintingEnabled
- Example value:
True
Back to top
使用系统打印对话框打印 (UseSystemPrintDialog)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
显示系统打印对话框,而不是打印预览。
如果启用此策略,用户打印网页时,Microsoft Edge 将打开系统打印对话框,而不是内置的打印预览。
如果未配置或禁用此策略,则打印命令触发 Microsoft Edge 打印预览屏幕。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: UseSystemPrintDialog
- GP name: 使用系统打印对话框打印
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/打印
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
UseSystemPrintDialog
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: UseSystemPrintDialog
- Example value:
False
Back to top
配置代理绕过规则 (ProxyBypassList)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
Defines a list of hosts for which Microsoft Edge bypasses any proxy.
This policy is applied only if you have selected 'Use fixed proxy servers' in the 'ProxyMode' policy. If you selected any other mode for configuring proxy policies, don't enable or configure this policy.
If you enable this policy, you can create a list of hosts for which Microsoft Edge doesn't use a proxy.
If you don't configure this policy, no list of hosts is created for which Microsoft Edge bypasses a proxy. Leave this policy unconfigured if you've specified any other method for setting proxy policies.
For more detailed examples go to https://docs.microsoft.com/Placeholder05.
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ProxyBypassList
- GP name: 配置代理绕过规则
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/代理服务器
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
ProxyBypassList
- Value Type:
REG_SZ
Example value:
"https://www.contoso.com, https://www.fabrikam.com"
Mac information and settings
- Preference Key Name: ProxyBypassList
- Example value:
"https://www.contoso.com, https://www.fabrikam.com"
Back to top
配置代理服务器设置 (ProxyMode)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定 Microsoft Edge 使用的代理服务器设置。如果启用此策略,则用户无法更改代理设置。
如果选择从不使用代理服务器且始终直接连接,则会忽略所有其他选项。
如果选择使用系统代理设置,则会忽略所有其他选项。
如果选择自动检测代理服务器,则会忽略所有其他选项。
如果选择固定服务器代理模式,则可以在 "ProxyServer" 和“逗号分隔的代理跳过规则列表”中指定更多选项。n
如果选择使用 .pac 代理脚本,则必须在“代理 .pac 文件的 URL”中指定该脚本的 URL。
有关详细的示例,请转到 https://docs.microsoft.com/Placeholder05。
如果启用此策略,Microsoft Edge 将忽略命令行中指定的所有代理相关选项。
如果未配置此策略,用户可以选择自己的代理设置。
* "direct" = 从不使用代理
* "auto_detect" = 自动检测代理设置
* "pac_script" = 使用 .pac 代理脚本
* "fixed_servers" = 使用固定的代理服务器
* "system" = 使用系统代理设置
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ProxyMode
- GP name: 配置代理服务器设置
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/代理服务器
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
ProxyMode
- Value Type:
REG_SZ
Example value:
"direct"
Mac information and settings
- Preference Key Name: ProxyMode
- Example value:
"direct"
Back to top
设置代理 .pac 文件的 URL (ProxyPacUrl)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
Specifies the URL for a proxy auto-config (PAC) file.
This policy is applied only if you selected 'Use a .pac proxy script' in the 'ProxyMode' policy. If you selected any other mode for configuring proxy policies, don't enable or configure this policy.
If you enable this policy, you can specify the URL for a PAC file, which defines how the browser automatically chooses the appropriate proxy server for fetching a particular website.
If you disable or don't configure this policy, no PAC file is specified. Leave this policy unconfigured if you've specified any other method for setting proxy policies.
For detailed examples, see https://docs.microsoft.com/Placeholder05.
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ProxyPacUrl
- GP name: 设置代理 .pac 文件的 URL
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/代理服务器
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
ProxyPacUrl
- Value Type:
REG_SZ
Example value:
"https://internal.contoso.com/example.pac"
Mac information and settings
- Preference Key Name: ProxyPacUrl
- Example value:
"https://internal.contoso.com/example.pac"
Back to top
配置代理服务器的地址或 URL (ProxyServer)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
Specifies the URL of the proxy server.
This policy is applied only if you have selected 'Use fixed proxy servers' in the 'ProxyMode' policy. If you selected any other mode for configuring proxy policies, don't enable or configure this policy.
If you enable this policy, the proxy server configured by this policy will be used for all URLs.
If you disable or don't configure this policy, users can choose their own proxy settings while in this proxy mode. Leave this policy unconfigured if you've specified any other method for setting proxy policies.
For more options and detailed examples, see https://docs.microsoft.com/Placeholder05.
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ProxyServer
- GP name: 配置代理服务器的地址或 URL
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/代理服务器
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
ProxyServer
- Value Type:
REG_SZ
Example value:
"123.123.123.123:8080"
Mac information and settings
- Preference Key Name: ProxyServer
- Example value:
"123.123.123.123:8080"
Back to top
代理服务器设置 (ProxySettings)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
配置 Microsoft Edge 的代理设置。
如果启用此策略,Microsoft Edge 将忽略从命令行指定的所有代理相关选项。
如果未配置此策略,用户可以选择其自己的代理设置。
此策略将替代以下单独策略:
ProxyMode
ProxyPacUrl
ProxyServer
ProxyBypassList
ProxyMode 字段允许你指定由 Microsoft Edge 使用的代理服务器,并阻止用户更改代理设置。
ProxyPacUrl 字段是指向代理 .pac 文件的 URL。
ProxyServer 字段是代理服务器的 URL。
ProxyBypassList 字段是 Microsoft Edge 旁路的代理主机列表。
如果选择 "direct" 值作为 "ProxyMode",将永不使用代理并且将忽略所有其他字段。
如果选择 "system" 值作为 "ProxyMode",将使用系统的代理并且将忽略所有其他字段。
如果选择 "auto_detect" 值作为 "ProxyMode",将忽略所有其他字段。
如果选择 "fixed_server" 值作为 "ProxyMode",将使用 "ProxyServer" 和 "ProxyBypassList" 字段。
如果选择 "pac_script" 值作为 "ProxyMode",将使用 "ProxyPacUrl" 和 "ProxyBypassList" 字段。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Dictionary
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ProxySettings
- GP name: 代理服务器设置
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/代理服务器
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
ProxySettings
- Value Type:
REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\ProxySettings = {
"ProxyBypassList": "https://www.example1.com,https://www.example2.com,https://internalsite/",
"ProxyMode": "direct",
"ProxyPacUrl": "https://internal.site/example.pac",
"ProxyServer": "123.123.123.123:8080"
}
Mac information and settings
- Preference Key Name: ProxySettings
- Example value:
<key>ProxySettings</key>
<dict>
<key>ProxyBypassList</key>
<string>https://www.example1.com,https://www.example2.com,https://internalsite/</string>
<key>ProxyMode</key>
<string>direct</string>
<key>ProxyPacUrl</key>
<string>https://internal.site/example.pac</string>
<key>ProxyServer</key>
<string>123.123.123.123:8080</string>
</dict>
Back to top
阻止绕过 Microsoft Defender SmartScreen 对站点的提示 (PreventSmartScreenPromptOverride)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
此策略设置让你决定员工是否可以忽略关于潜在恶意网站的 Microsoft Defender SmartScreen 警告。
如果启用此设置,员工将无法忽略 Microsoft Defender SmartScreen 警告并被阻止继续访问该站点。
如果禁用或未配置此设置,则员工可以忽略 Microsoft Defender SmartScreen 警告并继续访问该站点。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: PreventSmartScreenPromptOverride
- GP name: 阻止绕过 Microsoft Defender SmartScreen 对站点的提示
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/Smartscreen 设置
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
PreventSmartScreenPromptOverride
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: PreventSmartScreenPromptOverride
- Example value:
True
Back to top
阻止绕过有关下载的 Microsoft Defender SmartScreen 警告 (PreventSmartScreenPromptOverrideForFiles)
Supported Versions: Microsoft Edge on Windows since version 77 or later
Description
此策略允许你确定用户是否可以覆盖有关未验证下载的 Microsoft Defender SmartScreen 警告。
如果启用此策略,组织中的用户无法忽略 Microsoft Defender SmartScreen 警告,并且用户无法完成未验证的下载。
如果禁用或未配置此策略,用户可以忽略 Microsoft Defender SmartScreen 警告并完成未验证的下载。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: PreventSmartScreenPromptOverrideForFiles
- GP name: 阻止绕过有关下载的 Microsoft Defender SmartScreen 警告
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/Smartscreen 设置
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
PreventSmartScreenPromptOverrideForFiles
- Value Type:
REG_DWORD
Example value:
True
Back to top
配置 SmartScreen 无法触发警告的域的列表 (SmartScreenAllowListDomains)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
配置 SmartScreen 信任的域列表。这意味着:
如果源 URL 与这些域匹配,SmartScreen 不会检查潜在的恶意资源(例如钓鱼软件和其他恶意软件)。
SmartScreen 下载保护服务不会检查在这些域上托管的下载。
如果启用此策略,SmartScreen 将信任这些域。
如果禁用或未设置此策略,默认的 SmartScreen 保护将适用于所有资源。
此策略仅在加入 Microsoft Active Directory 域的 Windows 实例上或注册设备管理的 Windows 10 专业版或企业版实例上可用。
另请注意,如果你的组织已启用 Microsoft Defender 高级威胁防护,则此策略不适用。相反,你必须在 Microsoft Defender 安全中心中配置允许和阻止名单。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: SmartScreenAllowListDomains
- GP name: 配置 SmartScreen 无法触发警告的域的列表
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/Smartscreen 设置
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\SmartScreenAllowListDomains
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\SmartScreenAllowListDomains\0 = "mydomain.com"
SOFTWARE\Policies\Microsoft\Edge\SmartScreenAllowListDomains\1 = "myuniversity.edu"
Mac information and settings
- Preference Key Name: SmartScreenAllowListDomains
- Example value:
<array>
<string>mydomain.com</string>
<string>myuniversity.edu</string>
</array>
Back to top
配置 Microsoft Defender SmartScreen (SmartScreenEnabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
此策略设置用于配置是否启用 Microsoft Defender SmartScreen。Microsoft Defender SmartScreen 提供警告消息,可帮助员工免受潜在的钓鱼诈骗和恶意软件的危害。默认情况下,Microsoft Defender SmartScreen 处于启用状态。
如果启用此设置,则将启用 Microsoft Defender SmartScreen,并且员工无法将其关闭。
如果禁用此设置,则将关闭 Microsoft Defender SmartScreen,并且员工无法启用它。
如果未配置此设置,则员工可以选择是否使用 Microsoft Defender SmartScreen。
此策略仅在已加入 Microsoft Active Director 域的 Windows 实例或为设备管理而注册的 Windows 10 专业版或企业版实例上可用。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: SmartScreenEnabled
- GP name: 配置 Microsoft Defender SmartScreen
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/Smartscreen 设置
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/Smartscreen 设置
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
SmartScreenEnabled
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: SmartScreenEnabled
- Example value:
True
Back to top
将新标签页设置为主页 (HomepageIsNewTabPage)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
在 Microsoft Edge 中配置默认主页。你可以将主页设置为你指定的 URL 或新选项卡页。
如果启用此策略,则新选项卡页将始终用作主页,并且会忽略主页 URL 位置。
如果禁用此策略,则用户的主页不能是新选项卡页,除非 URL 设置为 "edge://newtab"。
如果未配置,则用户可以选择新选项卡页是否是其主页。
此策略仅适用于已加入 Microsoft Active Directory 域的 Windows 实例,或为设备管理注册的 Windows 10 专业版或 Enterprise 实例。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: HomepageIsNewTabPage
- GP name: 将新标签页设置为主页
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/启动、主页和新选项卡页
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/启动、主页和新选项卡页
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
HomepageIsNewTabPage
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: HomepageIsNewTabPage
- Example value:
True
Back to top
配置主页 URL (HomepageLocation)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
在 Microsoft Edge 中配置默认主页 URL。
主页是通过主页按钮打开的页面。启动时打开的页面由 "RestoreOnStartup" 策略进行控制。
你可以在此处设置 URL 或设置主页以打开新建标签页。如果选择打开新建标签页,则此策略不会生效。
如果启用此策略,则用户无法更改其主页 URL,但他们可以选择使用新建标签页作为其主页。
如果禁用或不配置此策略,则只要未启用 "HomepageIsNewTabPage" 策略,用户就可以选择他们自己的主页。
此策略仅适用于已加入 Microsoft Active Directory 域的 Windows 实例或为设备管理注册的 Windows 10 专业版或企业版实例。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: HomepageLocation
- GP name: 配置主页 URL
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/启动、主页和新选项卡页
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/启动、主页和新选项卡页
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
HomepageLocation
- Value Type:
REG_SZ
Example value:
"https://www.contoso.com"
Mac information and settings
- Preference Key Name: HomepageLocation
- Example value:
"https://www.contoso.com"
Back to top
从新选项卡页中隐藏默认的热门站点 (NewTabPageHideDefaultTopSites)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
从 Microsoft Edge 的新选项卡页中隐藏默认的热门站点。
如果将此策略设置为 True,将隐藏默认的热门站点磁贴。
如果将此策略设置为 False 或未配置此策略,默认的热门站点磁贴将仍然可见。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: NewTabPageHideDefaultTopSites
- GP name: 从新选项卡页中隐藏默认的热门站点
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/启动、主页和新选项卡页
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
NewTabPageHideDefaultTopSites
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: NewTabPageHideDefaultTopSites
- Example value:
True
Back to top
配置新的选项卡页 URL (NewTabPageLocation)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
配置新选项卡页的默认 URL。
此策略可确定在创建新选项卡时(包括在打开新窗口时)打开的页面。如果将它设置为打开到新选项卡页,它还会影响启动页面。
此策略不确定在启动时打开哪些页面;这将由 "RestoreOnStartup" 策略控制。如果将它设置为打开到新选项卡页,它也不会影响主页。
如果未配置此策略,将使用默认的新选项卡页。
如果配置此策略*和* "NewTabPageSetFeedType" 策略,则优先使用此策略。
此策略仅在加入 Microsoft Active Directory 域的 Windows 实例或注册设备管理的 Windows 10 专业版或企业版实例上可用。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: NewTabPageLocation
- GP name: 配置新的选项卡页 URL
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/启动、主页和新选项卡页
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/启动、主页和新选项卡页
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
NewTabPageLocation
- Value Type:
REG_SZ
Example value:
"https://www.fabrikam.com"
Mac information and settings
- Preference Key Name: NewTabPageLocation
- Example value:
"https://www.fabrikam.com"
Back to top
要在启动时执行的操作 (RestoreOnStartup)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定 Microsoft Edge 启动时的行为。
如果你想要在启动时始终打开一个新标签页,选择“打开新标签页”(5)。
如果要重新打开上次关闭时打开的 URL,请选择 Microsoft Edge“还原上一个会话”(1)。浏览会话将恢复原样。请注意,此选项禁用某些依赖会话或在退出时执行操作的设置(如退出时清除浏览数据或仅会话 Cookie)。
如果想打开一组特定的 URL,请选择“打开 URL 列表”(4)。
禁用此设置相当于不配置。用户将能够在 Microsoft Edge 中更改。
此策略仅适用于加入到 Microsoft Active Directory 域的 Windows 实例,或注册用于设备管理的 Windows 10 专业版或企业版实例。
* 5 = 打开新标签页
* 1 = 还原上一个会话
* 4 = 打开 URL 列表
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: RestoreOnStartup
- GP name: 要在启动时执行的操作
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/启动、主页和新选项卡页
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/启动、主页和新选项卡页
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
RestoreOnStartup
- Value Type:
REG_DWORD
Example value:
0x00000004
Mac information and settings
- Preference Key Name: RestoreOnStartup
- Example value:
4
Back to top
浏览器启动时打开的站点 (RestoreOnStartupURLs)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定要在浏览器启动时自动打开的网站的列表。如果未配置此策略,在启动时不打开任何站点。
此策略仅在将 RestoreOnStartup 策略设置为“打开 URL 列表”(4)时有效。
此策略仅适用于加入到 Microsoft Active Directory 域的 Windows 实例,或注册用于设备管理的 Windows 10 专业版或企业版实例。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: RestoreOnStartupURLs
- GP name: 浏览器启动时打开的站点
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/启动、主页和新选项卡页
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/启动、主页和新选项卡页
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\RestoreOnStartupURLs
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended\RestoreOnStartupURLs
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\RestoreOnStartupURLs\0 = "https://contoso.com"
SOFTWARE\Policies\Microsoft\Edge\RestoreOnStartupURLs\1 = "https://www.fabrikam.com"
Mac information and settings
- Preference Key Name: RestoreOnStartupURLs
- Example value:
<array>
<string>https://contoso.com</string>
<string>https://www.fabrikam.com</string>
</array>
Back to top
在工具栏上显示“主页”按钮 (ShowHomeButton)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
在 Microsoft Edge 的工具栏上显示“主页”按钮。
启用此策略将始终显示“主页”按钮。禁用该策略将不会显示该按钮。
如果未配置此策略,则用户可以选择是否显示“主页”按钮。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ShowHomeButton
- GP name: 在工具栏上显示“主页”按钮
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/启动、主页和新选项卡页
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/启动、主页和新选项卡页
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
ShowHomeButton
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: ShowHomeButton
- Example value:
True
Back to top
启用删除浏览器和下载历史记录 (AllowDeletingBrowserHistory)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
启用删除浏览器历史记录和下载历史记录,并阻止用户更改此设置。
请注意,即使禁用此策略,也不能确保浏览和下载历史记录被保留: 用户可以直接编辑或删除历史记录数据库文件,浏览器本身可以随时删除(基于过期时间)或归档任意或全部历史记录项目。
如果启用或未配置此策略,则用户可以删除浏览和下载历史记录。
如果禁用此策略,则用户无法删除浏览和下载历史记录。
如果启用此策略,则不要启用“Microsoft Edge 关闭时清除浏览数据”的策略,因为这两个策略都负责删除数据。如果同时启用两者,“Microsoft Edge 关闭时清除浏览数据”策略优先,并会在 Microsoft Edge 关闭时删除所有数据,而不受此策略配置的影响。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: AllowDeletingBrowserHistory
- GP name: 启用删除浏览器和下载历史记录
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
AllowDeletingBrowserHistory
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: AllowDeletingBrowserHistory
- Example value:
True
Back to top
允许文件选择对话框 (AllowFileSelectionDialogs)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
允许 Microsoft Edge 显示文件选择对话框,从而允许访问本地文件。
如果启用或未配置此策略,则用户可以正常打开文件选择对话框。
如果禁用此策略,则每当用户执行触发文件选择对话框的操作(如导入收藏夹、上传文件或保存链接)时,就会显示一条消息,并且会假定用户在文件选择对话框中单击了“取消”。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: AllowFileSelectionDialogs
- GP name: 允许文件选择对话框
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
AllowFileSelectionDialogs
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: AllowFileSelectionDialogs
- Example value:
True
Back to top
始终在外部打开 PDF 文件 (AlwaysOpenPdfExternally)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
禁用 Microsoft Edge 中的内部 PDF 查看器。
如果启用此策略,Microsoft Edge 会将 PDF 文件视为下载文件,并允许用户使用默认应用程序将其打开。
如果未配置或禁用此策略,Microsoft Edge 会自行打开 PDF 文件(除非用户禁用)。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: AlwaysOpenPdfExternally
- GP name: 始终在外部打开 PDF 文件
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
AlwaysOpenPdfExternally
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: AlwaysOpenPdfExternally
- Example value:
True
Back to top
设置应用程序的区域设置 (ApplicationLocaleValue)
Supported Versions: Microsoft Edge on Windows since version 77 or later
Description
在 Microsoft Edge 中配置应用程序区域设置,并阻止用户更改区域设置。
如果启用此策略,则 Microsoft Edge 使用指定的区域设置。如果不支持配置的区域设置,则改用 "en-US"。
如果禁用或未配置此设置,则 Microsoft Edge 使用用户指定的首选区域设置(如果已配置)或回退区域设置 "en-US"。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ApplicationLocaleValue
- GP name: 设置应用程序的区域设置
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
ApplicationLocaleValue
- Value Type:
REG_SZ
Example value:
"en"
Back to top
允许或阻止音频捕获 (AudioCaptureAllowed)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
允许你设置是否提示用户授予网站访问其音频捕获设备的权限。此策略适用于除 "AudioCaptureAllowedUrls" 列表中配置的 URL 以外的所有 URL。
如果启用或未配置此策略(默认设置),则会提示用户提供音频捕获访问权限,但这不适用于 "AudioCaptureAllowedUrls" 列表中的 URL。这些列出的 URL 已被授予访问权限,但未给出任何提示。
如果禁用此策略,则不会提示用户,并且只有 "AudioCaptureAllowedUrls" 中配置的 URL 才能访问音频捕获。
此策略会影响所有类型的音频输入,而不仅仅是内置麦克风。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: AudioCaptureAllowed
- GP name: 允许或阻止音频捕获
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
AudioCaptureAllowed
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: AudioCaptureAllowed
- Example value:
False
Back to top
无需请求许可即可访问音频捕获设备的站点 (AudioCaptureAllowedUrls)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
根据 URL 模式指定无需用户许可即可使用音频捕获设备的网站。该列表中的模式将与请求 URL 的安全来源进行匹配。如果匹配,站点将自动获得音频捕获设备的访问权限。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: AudioCaptureAllowedUrls
- GP name: 无需请求许可即可访问音频捕获设备的站点
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\AudioCaptureAllowedUrls
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\AudioCaptureAllowedUrls\0 = "https://www.contoso.com/"
SOFTWARE\Policies\Microsoft\Edge\AudioCaptureAllowedUrls\1 = "https://[*.]contoso.edu/"
Mac information and settings
- Preference Key Name: AudioCaptureAllowedUrls
- Example value:
<array>
<string>https://www.contoso.com/</string>
<string>https://[*.]contoso.edu/</string>
</array>
Back to top
Automatically import another browser's data and settings at first run (AutoImportAtFirstRun)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
If you enable this policy, Microsoft Edge automatically imports all supported datatypes and settings from either the default browser or another specified browser. This also forces Microsoft Edge to skip the import section of the first-run experience.
If you set this policy to 'DisabledAutoImport' (4), the import section of the first-run experience is skipped entirely and Microsoft Edge doesn't import browser data and settings automatically.
* 0 = Automatically imports all supported datatypes and settings from the default browser
* 1 = Automatically imports all supported datatypes and settings from Internet Explorer
* 2 = Automatically imports all supported datatypes and settings from Google Chrome
* 3 = Automatically imports all supported datatypes and settings from Safari
* 4 = Disables automatic import, and the import section of the first-run experience is skipped
**Note**: This policy currently supports importing from Internet Explorer (on Windows 7, 8, and 10), Google Chrome (on Windows 7, 8, and 10 and on macOS) and Apple Safari (on macOS) browsers.
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: AutoImportAtFirstRun
- GP name: Automatically import another browser's data and settings at first run
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
AutoImportAtFirstRun
- Value Type:
REG_DWORD
Example value:
0x00000002
Mac information and settings
- Preference Key Name: AutoImportAtFirstRun
- Example value:
2
Back to top
启用地址自动填充 (AutofillAddressEnabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
启用自动填充功能,并允许用户使用以前存储的信息自动填写 Web 窗体中的地址信息。
如果禁用此策略,自动填充不会建议或填充地址信息,也不会保存用户在浏览 Web 时可能提交的其他地址信息。
如果启用或未配置此策略,则用户可以在用户界面中控制地址的自动填充。
请注意,禁用此策略还会停止除付款和密码窗体之外的所有 Web 窗体的所有活动。不会保存其他输入,并且 Microsoft Edge 不会建议或自动填充任何先前的输入。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: AutofillAddressEnabled
- GP name: 启用地址自动填充
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
AutofillAddressEnabled
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: AutofillAddressEnabled
- Example value:
False
Back to top
启用信用卡的自动填充功能 (AutofillCreditCardEnabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
启用 Microsoft Edge 的自动填充功能,并允许用户使用以前存储的信息在 Web 表单中自动填写信用卡信息。
如果禁用此策略,自动填充功能不会建议或填充信用卡信息,也不会保存用户在浏览 Web 时可能提交的其他信用卡信息。
如果启用或未配置此策略,用户可以控制信用卡信息的自动填充。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: AutofillCreditCardEnabled
- GP name: 启用信用卡的自动填充功能
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
AutofillCreditCardEnabled
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: AutofillCreditCardEnabled
- Example value:
False
Back to top
在关闭 Microsoft Edge 后继续运行后台应用 (BackgroundModeEnabled)
Supported Versions: Microsoft Edge on Windows since version 77 or later
Description
允许在登录操作系统时启动 Microsoft Edge 进程,并在关闭最后一个浏览器窗口后保持运行。在此情况下,后台应用和当前浏览会话仍然处于活动状态,包括任何会话 Cookie。打开的后台进程在系统托盘中显示图标,并且始终可以从此处关闭。
如果启用此策略,将打开后台模式。
如果禁用此策略,将关闭后台模式。
如果未配置此策略,后台模式最初处于关闭状态,用户可以在 edge://settings/system 中配置其行为。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: BackgroundModeEnabled
- GP name: 在关闭 Microsoft Edge 后继续运行后台应用
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
BackgroundModeEnabled
- Value Type:
REG_DWORD
Example value:
True
Back to top
阻止第三方 Cookie (BlockThirdPartyCookies)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
阻止不是来自地址栏中的域的网页元素设置 Cookie。
如果启用此策略,则不是来自地址栏中的域的网页元素无法设置 Cookie。
如果禁用此策略,则来自地址栏以外的域的网页元素可以设置 Cookie。
如果未配置此策略,则启用第三方 Cookie,但用户可以更改此设置。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: BlockThirdPartyCookies
- GP name: 阻止第三方 Cookie
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
BlockThirdPartyCookies
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: BlockThirdPartyCookies
- Example value:
False
Back to top
从“标识”浮出菜单或“设置”页面启用配置文件创建 (BrowserAddProfileEnabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
允许用户使用**添加配置文件**选项创建新的配置文件。
如果启用或未配置此策略,Microsoft Edge 将允许用户在“标识”浮出菜单或“设置”页面上使用**添加配置文件**创建新的配置文件。
如果禁用此策略,则用户无法从“标识”弹出菜单或“设置”页面上添加新的配置文件。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: BrowserAddProfileEnabled
- GP name: 从“标识”浮出菜单或“设置”页面启用配置文件创建
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
BrowserAddProfileEnabled
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: BrowserAddProfileEnabled
- Example value:
True
Back to top
启用来宾模式 (BrowserGuestModeEnabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
启用该选项即可在 Microsoft Edge 中使用来宾配置文件。浏览器不会从当前来宾配置文件中导入浏览数据,并且会在关闭所有来宾配置文件后删除浏览数据。
如果启用或未配置此策略,Microsoft Edge 将允许用户在来宾配置文件中浏览。
如果禁用此策略,Microsoft Edge 将不允许用户在来宾配置文件中浏览。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: BrowserGuestModeEnabled
- GP name: 启用来宾模式
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
BrowserGuestModeEnabled
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: BrowserGuestModeEnabled
- Example value:
True
Back to top
允许查询浏览器网络时间服务 (BrowserNetworkTimeQueriesEnabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
阻止 Microsoft Edge 不定时向浏览器网络时间服务发送查询以检索准确的时间戳。
如果禁用此策略,则 Microsoft Edge 将停止向浏览器网络时间服务发送查询。
如果启用或未配置此策略,Microsoft Edge 将不定时向浏览器网络时间服务发送查询。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: BrowserNetworkTimeQueriesEnabled
- GP name: 允许查询浏览器网络时间服务
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
BrowserNetworkTimeQueriesEnabled
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: BrowserNetworkTimeQueriesEnabled
- Example value:
True
Back to top
浏览器登录设置 (BrowserSignin)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定用户是否可以使用其帐户登录 Microsoft Edge 并使用与帐户相关的服务,例如同步和单一登录。要控制同步的可用性,请使用 "SyncDisabled" 策略。
如果将此策略设置为“禁用浏览器登录”(0),则用户无法登录浏览器和使用基于帐户的服务。在此情况下,用户无法使用浏览器级别的功能,例如同步 - 它们不可用。如果用户在你将策略设置为“已禁用”时已登录,则他们将在下次运行 Microsoft Edge 时注销,但他们的本地配置文件数据(如收藏夹和密码)得以保留。用户仍然可以登录并使用 bing.com 和 Office.com 等 Microsoft Web 属性。
如果将此策略设置为“启用浏览器登录”(1),则用户可以登录浏览器。登录浏览器意味着用户的帐户信息由浏览器保存,但这并不意味着默认情况下打开同步;用户必须单独选择使用此功能。启用此策略可防止用户关闭允许浏览器登录的设置。
如果将此策略设置为“强制浏览器登录”(2),则用户必须登录配置文件才能使用浏览器。这可以确保应用并强制执行与托管帐户关联的策略。默认情况下,这将为帐户打开同步,除非由域管理员或通过 "SyncDisabled" 策略禁用了同步。"BrowserGuestModeEnabled" 策略的默认值为设置为 false。请注意,启用此策略后,现有的未签名配置文件将被锁定且无法访问。有关详细信息,请参阅帮助中心文章: https://docs.microsoft.com/Placeholder12。
如果未配置此策略,则用户可以决定是否要启用浏览器登录选项并在他们认为合适时使用它。
* 0 = 禁用浏览器登录
* 1 = 启用浏览器登录
* 2 = 强制用户登录以使用浏览器
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: BrowserSignin
- GP name: 浏览器登录设置
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
BrowserSignin
- Value Type:
REG_DWORD
Example value:
0x00000002
Mac information and settings
- Preference Key Name: BrowserSignin
- Example value:
2
Back to top
使用内置 DNS 客户端 (BuiltInDnsClientEnabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
控制是否使用内置 DNS 客户端。
如果启用此策略,则使用内置 DNS 客户端(如果可用)。
如果禁用此策略,则从不使用客户端。
如果未配置此策略,则默认情况下在 MacOS 上启用内置 DNS 客户端,通过编辑 edge://flags 或指定命令行标志,用户可以对是否使用内置 DNS 客户端进行更改。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: BuiltInDnsClientEnabled
- GP name: 使用内置 DNS 客户端
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
BuiltInDnsClientEnabled
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: BuiltInDnsClientEnabled
- Example value:
True
Back to top
对 subjectPublicKeyInfo 哈希列表禁用强制证书透明度 (CertificateTransparencyEnforcementDisabledForCas)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
对列出的 subjectPublicKeyInfo 哈希禁用强制的证书透明度要求。
此策略允许你对包含具有指定 subjectPublicKeyInfo 哈希之一的证书的证书链禁用证书透明度公开要求。这允许证书继续用于企业主机,否则这些证书因未被适当公开而不受信任。
为了在设置此策略时禁用强制证书透明度,必须满足以下条件集之一:
1. 哈希具有服务器证书的 subjectPublicKeyInfo。
2. 哈希具有出现在证书链中的 CA 证书的 subjectPublicKeyInfo,该 CA 证书通过 X.509v3 nameConstraints 扩展进行约束,permittedSubtrees 中包含一个或多个 directoryName nameConstraints,且 directoryName 包含一个 organizationName 属性。
3. 哈希具有出现在证书链中的 CA 证书的 subjectPublicKeyInfo,该 CA 证书在证书使用者中有一个或多个 organizationName 属性,并且服务器的证书包含相同数量的 organizationName 属性,顺序相同,并且具有逐字节相同的值。
指定 subjectPublicKeyInfo 哈希的方式是: 拼接哈希算法名称、"/" 字符和用于指定证书的 DER 编码 subjectPublicKeyInfo 的哈希算法的 Base64 编码。该 Base64 编码与 SPKI 指纹的格式相同,如 RFC 7469 第 2.4 节所定义。无法识别的哈希算法将被忽略。目前唯一支持的哈希算法是 "sha256"。
如果禁用或未配置此策略,则任何需要通过证书透明度公开的证书,如果没有根据证书透明度策略公开,将被视为不受信任。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: CertificateTransparencyEnforcementDisabledForCas
- GP name: 对 subjectPublicKeyInfo 哈希列表禁用强制证书透明度
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\CertificateTransparencyEnforcementDisabledForCas
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\CertificateTransparencyEnforcementDisabledForCas\0 = "sha256/AAAAAAAAAAAAAAAAAAAAAA=="
SOFTWARE\Policies\Microsoft\Edge\CertificateTransparencyEnforcementDisabledForCas\1 = "sha256//////////////////////w=="
Mac information and settings
- Preference Key Name: CertificateTransparencyEnforcementDisabledForCas
- Example value:
<array>
<string>sha256/AAAAAAAAAAAAAAAAAAAAAA==</string>
<string>sha256//////////////////////w==</string>
</array>
Back to top
对列出的旧证书颁发机构禁用证书透明度强制 (CertificateTransparencyEnforcementDisabledForLegacyCas)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
对列出的旧证书颁发机构(CA)禁用强制的证书透明度要求。
此策略允许你对包含具有指定 subjectPublicKeyInfo 哈希之一的证书的证书链禁用证书透明度公开要求。这允许证书继续用于企业主机,否则这些证书因未被适当公开而不受信任。
为了禁用证书透明度强制,必须将哈希设置为被识别为旧证书颁发机构(CA)的 CA 证书中出现的 subjectPublicKeyInfo。旧证书颁发机构是默认情况下由 Microsoft Edge 支持的一个或多个操作系统公开信任的证书颁发机构。
指定 subjectPublicKeyInfo 哈希的方式是: 拼接哈希算法名称、"/" 字符和用于指定证书的 DER 编码 subjectPublicKeyInfo 的哈希算法的 Base64 编码。该 Base64 编码与 SPKI 指纹的格式相同,如 RFC 7469 第 2.4 节所定义。无法识别的哈希算法将被忽略。目前唯一支持的哈希算法是 "sha256"。
如果未配置此策略,则任何需要通过证书透明度公开的证书,如果没有根据证书透明度策略公开,将被视为不受信任。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: CertificateTransparencyEnforcementDisabledForLegacyCas
- GP name: 对列出的旧证书颁发机构禁用证书透明度强制
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\CertificateTransparencyEnforcementDisabledForLegacyCas
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\CertificateTransparencyEnforcementDisabledForLegacyCas\0 = "sha256/AAAAAAAAAAAAAAAAAAAAAA=="
SOFTWARE\Policies\Microsoft\Edge\CertificateTransparencyEnforcementDisabledForLegacyCas\1 = "sha256//////////////////////w=="
Mac information and settings
- Preference Key Name: CertificateTransparencyEnforcementDisabledForLegacyCas
- Example value:
<array>
<string>sha256/AAAAAAAAAAAAAAAAAAAAAA==</string>
<string>sha256//////////////////////w==</string>
</array>
Back to top
对特定 URL 禁用强制证书透明度 (CertificateTransparencyEnforcementDisabledForUrls)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
对列出的 URL 禁用强制的证书透明度要求。
此策略允许你通过证书透明度不公开指定 URL 中的主机名的证书。因而你可以使用未受信任的证书,因为它们没有被适当地公开,但是这会导致更加难以为这些主机检测错误颁发的证书。
根据 https://docs.microsoft.com//Placeholder01 填写你的 URL 模式。由于证书仅对给定的主机名有效,因此独立于模式、端口或路径,仅考虑该 URL 的主机名部分。主机名不支持通配符。
如果未配置此策略,则任何应通过证书透明度公开但未公开的证书将被视为不受信任。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: CertificateTransparencyEnforcementDisabledForUrls
- GP name: 对特定 URL 禁用强制证书透明度
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\CertificateTransparencyEnforcementDisabledForUrls
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\CertificateTransparencyEnforcementDisabledForUrls\0 = "contoso.com"
SOFTWARE\Policies\Microsoft\Edge\CertificateTransparencyEnforcementDisabledForUrls\1 = ".contoso.com"
Mac information and settings
- Preference Key Name: CertificateTransparencyEnforcementDisabledForUrls
- Example value:
<array>
<string>contoso.com</string>
<string>.contoso.com</string>
</array>
Back to top
即便使用客户端证书,也允许对这些主机进行 HTTP/2 连接合并 (CoalesceH2ConnectionsWithClientCertificatesForHosts)
This is a future policy
Description
如果启用此策略,则即便使用的是客户端证书,也会允许 HTTP/2 连接合并。
如果不配置此策略,则不允许对使用客户端证书的连接进行 HTTP/2 连接合并。这是默认行为。
为了合并,潜在新连接的主机名和现有连接的主机名都必须匹配此策略描述的一个或多个模式。该策略使用 URLBlocklist 筛选器格式指定主机列表: "contoso.com" 匹配 "contoso.com" 和所有子域(例如 "sub.contoso.com"),而 ".contoso.net" 完全匹配 "contoso.net"。
通过使用客户端证书的连接将请求合并到不同的主机可能会产生安全和隐私问题,因为环境权限将传递给所有请求,即使用户没有明确授权。因此,此策略是临时的,将在未来版本中删除。有关详细信息,请参阅 https://crbug.com/855690。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: CoalesceH2ConnectionsWithClientCertificatesForHosts
- GP name: 即便使用客户端证书,也允许对这些主机进行 HTTP/2 连接合并
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\CoalesceH2ConnectionsWithClientCertificatesForHosts
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\CoalesceH2ConnectionsWithClientCertificatesForHosts\0 = "contoso.com"
Mac information and settings
- Preference Key Name: CoalesceH2ConnectionsWithClientCertificatesForHosts
- Example value:
<array>
<string>contoso.com</string>
</array>
Back to top
在 Microsoft Edge 中启用组件更新 (ComponentUpdatesEnabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
如果启用或未配置此策略,则会在 Microsoft Edge 中启用组件更新。
如果禁用此策略或将其设置为 false,则将对 Microsoft Edge 中的所有组件禁用组件更新。
但是,某些组件不受此策略约束。这包括任何不包含可执行代码的组件、不会显著改变浏览器行为的组件或对于安全性至关重要的组件。也就是说,即使禁用此策略,也仍会应用被视为“对安全性至关重要”的更新。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ComponentUpdatesEnabled
- GP name: 在 Microsoft Edge 中启用组件更新
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
ComponentUpdatesEnabled
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: ComponentUpdatesEnabled
- Example value:
True
Back to top
配置“禁止跟踪” (ConfigureDoNotTrack)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定是否向要求跟踪信息的网站发送“禁止跟踪”请求。“禁止跟踪”请求可让你访问的网站知道你不希望浏览活动被跟踪。默认情况下,Microsoft Edge 不会发送“禁止跟踪”请求,但用户可以打开此功能以发送请求。
如果启用此策略,“禁止跟踪”请求将始终发送到要求跟踪信息的网站。
如果禁用此策略,则从不发送请求。
如果未配置此策略,用户可以选择是否发送这些请求。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ConfigureDoNotTrack
- GP name: 配置“禁止跟踪”
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
ConfigureDoNotTrack
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: ConfigureDoNotTrack
- Example value:
False
Back to top
配置在线文本到语音转换 (ConfigureOnlineTextToSpeech)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
设置浏览器是否可以利用在线文本到语音的语音字体,这是 Azure 认知服务的一部分。这些语音字体比预先安装的系统语音字体质量更高。
如果启用或未配置此策略,则使用 SpeechSynthesis API 的基于 Web 的应用程序可以使用在线文本到语音的语音字体。
如果禁用此策略,则语音字体不可用。
可在此处了解有关此功能的详细信息:
SpeechSynthesis API: https://developer.mozilla.org/en-US/docs/Web/API/SpeechSynthesis
认知服务: https://azure.microsoft.com/en-us/services/cognitive-services/text-to-speech/
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ConfigureOnlineTextToSpeech
- GP name: 配置在线文本到语音转换
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
ConfigureOnlineTextToSpeech
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: ConfigureOnlineTextToSpeech
- Example value:
True
Back to top
设置 Microsoft Edge 为默认浏览器 (DefaultBrowserSettingEnabled)
Supported Versions: Microsoft Edge on Windows 7 and Mac since version 77 or later
Description
配置 Microsoft Edge 中的默认浏览器检查,并阻止用户更改它们。
如果你启用此策略,则 Microsoft Edge 始终会在启动时检查它是否为默认浏览器,并在可能的情况下自动注册。
如果你禁用此策略,则 Microsoft Edge 永远不会检查和禁用用于设置此选项的用户控制。
如果你不配置此策略,则 Microsoft Edge 会让用户来控制它是否为默认浏览器,以及不是默认浏览器时是否向用户显示通知。
Windows 管理员注意事项: 此策略仅适用于运行 Windows 7 的电脑。对于更高版本的 Windows,你必须部署“默认应用程序关联”文件,该文件将 Microsoft Edge 设为 https 和 http 协议(以及可选的 ftp 协议和文件格式,如 .html、.htm、.pdf、.svg、.webp)的处理程序。有关详细信息,请参阅 https://docs.microsoft.com//Placeholder02。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DefaultBrowserSettingEnabled
- GP name: 设置 Microsoft Edge 为默认浏览器
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DefaultBrowserSettingEnabled
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: DefaultBrowserSettingEnabled
- Example value:
True
Back to top
控制可以使用开发人员工具的位置 (DeveloperToolsAvailability)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
控制可以使用开发人员工具的位置。
如果将此策略设置为 "DeveloperToolsDisallowedForForceInstalledExtensions"(0,默认值),则用户通常可以访问开发人员工具和 JavaScript 控制台,但不能在按企业策略安装的扩展环境中访问。
如果将此策略设置为 "DeveloperToolsAllowed" (1),则用户可以在所有环境中访问开发人员工具和 JavaScript 控制台,还能在按企业策略安装的扩展中访问。
如果将此策略设置为 "DeveloperToolsDisallowed" (2),则用户无法访问开发人员工具或检查网站元素。用于打开开发人员工具或 JavaScript 控制台的键盘快捷方式和菜单或上下文菜单条目处于禁用状态。
* 0 = 在按企业策略安装的扩展中阻止使用开发人员工具,允许在其他环境中使用
* 1 = 允许使用开发人员工具
* 2 = 不允许使用开发人员工具
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DeveloperToolsAvailability
- GP name: 控制可以使用开发人员工具的位置
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DeveloperToolsAvailability
- Value Type:
REG_DWORD
Example value:
0x00000002
Mac information and settings
- Preference Key Name: DeveloperToolsAvailability
- Example value:
2
Back to top
禁用对 3D 图形 API 的支持 (Disable3DAPIs)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
阻止网页访问图形处理单元(GPU)。具体来说,网页不能访问 WebGL API,插件不能使用 Pepper 3D API。
如果未配置或禁用此策略,它可能会允许网页使用 WebGL API 和插件以使用 Pepper 3D API。Microsoft Edge 默认情况下仍需要传递命令行参数才能使用这些 API。
当 HardwareAccelerationModeEnabled 策略设置为 false 时,Disable3DAPIs 策略的设置将被忽略 - 等效于 Disable3DAPIs 策略设置为 true。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: Disable3DAPIs
- GP name: 禁用对 3D 图形 API 的支持
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
Disable3DAPIs
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: Disable3DAPIs
- Example value:
False
Back to top
禁用进行屏幕截图 (DisableScreenshots)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
控制用户是否可以截取浏览器页面的屏幕截图。
如果启用,则用户无法使用键盘快捷方式或扩展 API 截取屏幕截图。
如果禁用或不配置此策略,则用户可以截取屏幕截图。
请注意,此策略控制从浏览器本身内部截取的屏幕截图。即使启用此策略,用户或许仍可以在浏览器之外使用某些方法(例如使用操作系统功能或其他应用程序)截取屏幕截图。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DisableScreenshots
- GP name: 禁用进行屏幕截图
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DisableScreenshots
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: DisableScreenshots
- Example value:
True
Back to top
设置磁盘缓存目录 (DiskCacheDir)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
配置用于存储缓存文件的目录。
如果启用此策略,那么无论用户是否已指定 "--disk-cache-dir" 标志,Microsoft Edge 都将使用提供的目录。为避免数据丢失或其他意外错误,请不要将此策略配置为使用卷的根目录或用于其他用途的目录,因为 Microsoft Edge 会管理其内容。
有关在指定目录和路径时可以使用的变量列表,请参阅 https://docs.microsoft.com/Placeholder08。
如果你未配置此策略,则使用默认缓存目录,用户可以使用 "--disk-cache-dir" 命令行标志覆盖该默认值。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DiskCacheDir
- GP name: 设置磁盘缓存目录
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DiskCacheDir
- Value Type:
REG_SZ
Example value:
"${user_home}/Edge_cache"
Mac information and settings
- Preference Key Name: DiskCacheDir
- Example value:
"${user_home}/Edge_cache"
Back to top
设置磁盘缓存大小(字节) (DiskCacheSize)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
配置缓存大小(以字节为单位),用于在磁盘上存储文件。
如果启用此策略,那么无论用户是否指定了 "--disk-cache-size" 标志,Microsoft Edge 都会使用提供的缓存大小。此策略中指定的值不是严格界限,而是针对缓存系统的建议;低于几兆字节的任何值都将被舍入为合理的最小值。
如果将此策略的值设置为 0,则使用默认缓存大小,用户无法更改它。
如果未配置此策略,则使用默认大小,但用户可以使用 "--disk-cache-size" 标志覆盖它。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DiskCacheSize
- GP name: 设置磁盘缓存大小(字节)
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DiskCacheSize
- Value Type:
REG_DWORD
Example value:
0x06400000
Mac information and settings
- Preference Key Name: DiskCacheSize
- Example value:
104857600
Back to top
设置下载目录 (DownloadDirectory)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
配置要在下载文件时使用的目录。
如果启用此策略,那么无论用户是指定了目录,还是选择每次都被提示指定下载位置,Microsoft Edge 都会使用提供的目录。有关可以使用的变量列表,请参阅 https://docs.microsoft.com/Placeholder08。
如果禁用或未配置此策略,则使用默认下载目录,但用户可以更改它。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DownloadDirectory
- GP name: 设置下载目录
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
DownloadDirectory
- Value Type:
REG_SZ
Example value:
"/home/${user_name}/Downloads"
Mac information and settings
- Preference Key Name: DownloadDirectory
- Example value:
"/home/${user_name}/Downloads"
Back to top
允许使用下载限制 (DownloadRestrictions)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
配置 Microsoft Edge 完全阻止的下载类型,不让用户覆盖安全决策。
设置“阻止危险下载”(1)允许所有下载,但带有 Microsoft Defender SmartScreen 警告的下载除外。
设置“阻止潜在危险下载”(2)允许所有下载,但带有 Microsoft Defender SmartScreen 潜在危险下载警告的下载除外。
设置“阻止所有下载”(3)阻止所有下载。
如果未配置此策略或设置“无特殊限制”(0)选项,则下载将根据 Microsoft Defender SmartScreen 的分析结果受到普通安全限制。
请注意,这些限制适用于网页内容下载以及“下载链接...”上下文菜单选项。这些限制不适用于保存或下载当前显示的页面,也不适用于打印选项中的“另存为 PDF”选项。
有关 Microsoft Defender SmartScreen 的详细信息,请参阅 https://docs.microsoft.com/Placeholder09。
* 0 = 无特殊限制
* 1 = 阻止危险下载
* 2 = 阻止潜在危险下载
* 3 = 阻止所有下载
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DownloadRestrictions
- GP name: 允许使用下载限制
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
DownloadRestrictions
- Value Type:
REG_DWORD
Example value:
0x00000002
Mac information and settings
- Preference Key Name: DownloadRestrictions
- Example value:
2
Back to top
允许用户编辑收藏夹 (EditFavoritesEnabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
启用此策略可让用户添加、删除和修改收藏夹。如果未配置此策略,则这是默认行为。
禁用此策略可阻止用户添加、删除或修改收藏夹。他们仍可使用现有收藏夹。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: EditFavoritesEnabled
- GP name: 允许用户编辑收藏夹
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
EditFavoritesEnabled
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: EditFavoritesEnabled
- Example value:
False
Back to top
在有限的时间内重新启用弃用的 Web 平台功能 (EnableDeprecatedWebPlatformFeatures)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定要暂时重新启用的弃用 Web 平台功能列表。
此策略允许你在有限的时间内重新启用弃用的 Web 平台功能。这些功能由字符串标签标识。
如果不配置此策略,或者列表为空,或者某个功能不能与某一受支持的字符串标签匹配,则所有弃用的 Web 平台功能将仍是禁用的。
虽然上述平台支持此策略,但它启用的功能可能并不在所有这些平台上都可用。并非所有弃用的 Web 平台功能都可以重新启用。只有下面明确列出的功能才能重新启用,并且只能在有限的时间内重新启用,具体取决于每项功能。你可以查看 https://bit.ly/blinkintents 了解网站平台功能变化背后的意图。
字符串标记的常规格式为 [DeprecatedFeatureName] _EffectiveUntil [yyyymmdd]。
*"ExampleDeprecatedFeature_EffectiveUntil20080902"= 启用 ExampleDeprecatedFeature API 直至 2008/09/02
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: EnableDeprecatedWebPlatformFeatures
- GP name: 在有限的时间内重新启用弃用的 Web 平台功能
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\EnableDeprecatedWebPlatformFeatures
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\EnableDeprecatedWebPlatformFeatures\0 = "ExampleDeprecatedFeature_EffectiveUntil20080902"
Mac information and settings
- Preference Key Name: EnableDeprecatedWebPlatformFeatures
- Example value:
<array>
<string>ExampleDeprecatedFeature_EffectiveUntil20080902</string>
</array>
Back to top
启用从 Microsoft 进行域操作下载 (EnableDomainActionsDownload)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
在 Microsoft Edge 中,域操作代表一系列的兼容性功能,这些功能有助于浏览器在 Web 上正常工作。
出于兼容性原因,Microsoft 保留了对某些域采取的操作的列表。例如,如果某个网站由于 Microsoft Edge 上的新用户代理字符串而遭到破坏,浏览器可以覆盖该网站上的用户代理字符串。当 Microsoft 试图与网站所有者解决问题时,这些操作都是临时性的。
当浏览器启动后,会定期联系包含要执行的最新兼容性操作列表的 Microsoft 服务器。此列表在首次检索后保存在本地,因此后续请求仅在服务器副本发生更改时才会更新列表。
如果启用此策略,将继续从 Microsoft 服务器下载域操作列表。
如果禁用此策略,将不再从 Microsoft 服务器下载域操作列表。
如果未配置此策略,将继续从 Microsoft 服务器下载域操作列表。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: EnableDomainActionsDownload
- GP name: 启用从 Microsoft 进行域操作下载
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
EnableDomainActionsDownload
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: EnableDomainActionsDownload
- Example value:
True
Back to top
启用联机 OCSP/CRL 检查 (EnableOnlineRevocationChecks)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
启用此策略可使用联机 OSCP/CRL 检查,Microsoft Edge 中默认禁用这些检查。(这些软故障、联机吊销检查并不能提供有效的安全优势。)
如果禁用或未配置此策略,Microsoft Edge 不执行联机吊销检查。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: EnableOnlineRevocationChecks
- GP name: 启用联机 OCSP/CRL 检查
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
EnableOnlineRevocationChecks
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: EnableOnlineRevocationChecks
- Example value:
False
Back to top
启用收藏夹栏 (FavoritesBarEnabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
启用或禁用收藏夹栏。
如果启用此策略,则用户将看到收藏夹栏。
如果禁用此策略,则用户将看不到收藏夹栏。
如果未配置此策略,则用户可以决定是否使用收藏夹栏。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: FavoritesBarEnabled
- GP name: 启用收藏夹栏
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
FavoritesBarEnabled
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: FavoritesBarEnabled
- Example value:
True
Back to top
配置必应安全搜索 (ForceBingSafeSearch)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
确保必应 Web 搜索中的查询是在将安全搜索设置为指定值后完成的。用户无法更改此设置。
如果将此策略配置为“关闭”,则必应搜索中的安全搜索将恢复为 bing.com 值。
如果将此策略配置为“适中”,则在安全搜索中使用适中的设置。适中的设置会从搜索结果中筛选成人视频和图像,但不筛选文本。
如果将此策略配置为“严格”,则使用安全搜索中的严格设置。严格设置会筛选成人文本、图像和视频。
如果禁用此策略或者未对其进行配置,则不会强制在必应搜索中执行安全搜索,用户可以在 bing.com 上设置他们想要的值。
* 0 = 不在必应中配置搜索限制
* 1 = 在必应中配置适中的搜索限制
* 2 = 在必应中配置严格的搜索限制
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ForceBingSafeSearch
- GP name: 配置必应安全搜索
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
ForceBingSafeSearch
- Value Type:
REG_DWORD
Example value:
0x00000000
Mac information and settings
- Preference Key Name: ForceBingSafeSearch
- Example value:
0
Back to top
启用临时配置文件 (ForceEphemeralProfiles)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
控制是否将用户配置文件切换到临时模式。临时配置文件在会话开始时创建,在会话结束时被删除,并且与用户的原始配置文件相关联。
如果启用此策略,则配置文件将在临时模式下运行。这样,用户就可以在自己的设备上工作,而无需将浏览数据保存到这些设备。如果将此策略启用为 OS 策略(例如,通过使用 Windows 上的 GPO),则该策略将应用于系统上的每个配置文件。
如果禁用或未配置此策略,则用户在登录到浏览器时将获取常规配置文件。
在临时模式下,配置文件数据仅在用户会话期间保存在磁盘上。浏览器关闭后,浏览器历史记录、扩展及其数据、Cookie 等 Web 数据和 Web 数据库等功能不会保存。这不会阻碍用户将任何数据手动下载到磁盘,也不会阻止用户保存或打印页面。如果用户启用了同步,则所有数据将与常规配置文件一样保留在其同步帐户中。用户也可以在临时模式下使用 InPrivate 浏览,除非你明确禁用此功能。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ForceEphemeralProfiles
- GP name: 启用临时配置文件
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
ForceEphemeralProfiles
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: ForceEphemeralProfiles
- Example value:
True
Back to top
强制执行 Google 安全搜索 (ForceGoogleSafeSearch)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
强制执行 Google Web 搜索中的查询并将安全搜索设置为活动,以及阻止用户更改此设置。
如果启用此策略,Google 搜索中的安全搜索将始终处于活动状态。
如果禁用或未配置此策略,将不执行 Google 搜索中的安全搜索。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ForceGoogleSafeSearch
- GP name: 强制执行 Google 安全搜索
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
ForceGoogleSafeSearch
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: ForceGoogleSafeSearch
- Example value:
False
Back to top
实施最小 YouTube 受限模式 (ForceYouTubeRestrict)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
在 YouTube 上实施最小受限模式,并阻止用户选取较低的限制模式。
设置为“严格”(2) 在 YouTube 上实施严格受限模式。
设置为“中等”(1) 强制用户在 YouTube 上仅使用中等受限模式和严格受限模式。用户不能禁用限制模式。
设置为“关闭”(0) 或不配置此策略,则不会在 YouTube 上实施受限模式。YouTube 策略等外部策略可能仍然会实施限制模式。
* 0 = 不在 YouTube 上实施最小受限模式
* 1 = 至少在 YouTube 上实施中等受限模式
* 2 = 在 YouTube 上实施严格受限模式
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ForceYouTubeRestrict
- GP name: 实施最小 YouTube 受限模式
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
ForceYouTubeRestrict
- Value Type:
REG_DWORD
Example value:
0x00000000
Mac information and settings
- Preference Key Name: ForceYouTubeRestrict
- Example value:
0
Back to top
允许全屏模式 (FullscreenAllowed)
Supported Versions: Microsoft Edge on Windows since version 77 or later
Description
设置全屏模式的可用性 - 所有 Microsoft Edge UI 都是隐藏的,只有 Web 内容可见。
如果启用或未配置此策略,具有适当权限的用户、应用和扩展可以进入全屏模式。
如果禁用此策略,则用户、应用和扩展无法进入全屏模式。
当全屏模式被禁用时,无法使用命令行在展台模式下打开 Microsoft Edge。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: FullscreenAllowed
- GP name: 允许全屏模式
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
FullscreenAllowed
- Value Type:
REG_DWORD
Example value:
True
Back to top
使用硬件加速(如可用) (HardwareAccelerationModeEnabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定要使用硬件加速(如果可用)。如果启用或未配置此策略,将启用硬件加速,除非已显式阻止 GPU 功能。
如果禁用此策略,将禁用硬件加速。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: HardwareAccelerationModeEnabled
- GP name: 使用硬件加速(如可用)
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
HardwareAccelerationModeEnabled
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: HardwareAccelerationModeEnabled
- Example value:
True
Back to top
Allow importing of autofill form data (ImportAutofillFormData)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
Allows users to import autofill form data from another browser into Microsoft Edge.
If you enable this policy, the option to manually import autofill data is automatically selected.
If you disable this policy, autofill form data isn't imported at first run, and users can't import it manually.
If you don't configure this policy, autofill data is imported at first run, and users can choose whether to import this data manually during later browsing sessions.
You can set this policy as a recommendation. This means that Microsoft Edge will import autofill data on first run, but users can select or clear **autofill data** option during manual import.
**Note**: This policy currently manages importing from Google Chrome (on Windows 7, 8, and 10 and on macOS).
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ImportAutofillFormData
- GP name: Allow importing of autofill form data
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
ImportAutofillFormData
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: ImportAutofillFormData
- Example value:
True
Back to top
Allow importing of favorites (ImportFavorites)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
Allows users to import favorites from another browser into Microsoft Edge.
If you enable this policy, the **Favorites** check box is automatically selected in the **Import browser data** dialog box.
If you disable this policy, favorites aren't imported at first run, and users can’t import them manually.
If you don’t configure this policy, favorites are imported at first run, and users can choose whether to import them manually during later browsing sessions.
You can also set this policy as a recommendation. This means that Microsoft Edge imports favorites on first run, but users can select or clear the **favorites** option during manual import.
**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10), Google Chrome (on Windows 7, 8, and 10 and on macOS) and Apple Safari (on macOS) browsers.
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ImportFavorites
- GP name: Allow importing of favorites
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
ImportFavorites
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: ImportFavorites
- Example value:
True
Back to top
Allow importing of browsing history (ImportHistory)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
Allows users to import their browsing history from another browser into Microsoft Edge.
If you enable this policy, the **Browsing history** check box is automatically selected in the **Import browser data** dialog box.
If you disable this policy, browsing history data isn't imported at first run, and users can’t import this data manually.
If you don’t configure this policy, browsing history data is imported at first run, and users can choose whether to import it manually during later browsing sessions.
You can also set this policy as a recommendation. This means that Microsoft Edge imports browsing history on first run, but users can select or clear the **history** option during manual import.
**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10), Google Chrome (on Windows 7, 8, and 10 and on macOS) and Apple Safari (macOS) browsers.
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ImportHistory
- GP name: Allow importing of browsing history
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
ImportHistory
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: ImportHistory
- Example value:
True
Back to top
Allow importing of home page settings (ImportHomepage)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
Allows users to import their home page setting from another browser into Microsoft Edge.
If you enable this policy, the option to manually import the home page setting is automatically selected.
If you disable this policy, the home page setting isn’t imported at first run, and users can’t import it manually.
If you don’t configure this policy, the home page setting is imported at first run, and users can choose whether to import this data manually during later browsing sessions.
You can set this policy as a recommendation. This means that Microsoft Edge imports the home page setting on first run, but users can select or clear the **home page** option during manual import.
**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10).
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ImportHomepage
- GP name: Allow importing of home page settings
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
ImportHomepage
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: ImportHomepage
- Example value:
True
Back to top
Allow importing of payment info (ImportPaymentInfo)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
Allows users to import payment info from another browser into Microsoft Edge.
If you enable this policy, the **payment info** check box is automatically selected in the **Import browser data** dialog box.
If you disable this policy, payment info isn’t imported at first run, and users can’t import it manually.
If you don’t configure this policy, payment info is imported at first run, and users can choose whether to import it manually during later browsing sessions.
You can also set this policy as a recommendation. This means that Microsoft Edge imports payment info on first run, but users can select or clear the **payment info** option during manual import.
**Note:** This policy currently manages importing from Google Chrome (on Windows 7, 8, and 10 and on macOS).
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ImportPaymentInfo
- GP name: Allow importing of payment info
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
ImportPaymentInfo
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: ImportPaymentInfo
- Example value:
True
Back to top
Allow importing of saved passwords (ImportSavedPasswords)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
Allows users to import saved passwords from another browser into Microsoft Edge.
If you enable this policy, the option to manually import saved passwords is automatically selected.
If you disable this policy, saved passwords aren't imported on first run, and users can't import them manually.
If you don't configure this policy, passwords are imported at first run, and users can choose whether to import them manually during later browsing sessions.
You can set this policy as a recommendation. This means that Microsoft Edge imports passwords on first run, but users can select or clear the **passwords** option during manual import.
**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10) and Google Chrome (on Windows 7, 8, and 10 and on macOS) browsers.
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ImportSavedPasswords
- GP name: Allow importing of saved passwords
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
ImportSavedPasswords
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: ImportSavedPasswords
- Example value:
True
Back to top
Allow importing of search engine settings (ImportSearchEngine)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
Allows users to import search engine settings from another browser into Microsoft Edge.
If you enable, this policy, the option to import search engine settings is automatically selected.
If you disable this policy, search engine settings aren't imported at first run, and users can’t import them manually.
If you don’t configure this policy, search engine settings are imported at first run, and users can choose whether to import this data manually during later browsing sessions.
You can set this policy as a recommendation. This means that Microsoft Edge imports search engine settings on first run, but users can select or clear the **search engine** option during manual import.
**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10).
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ImportSearchEngine
- GP name: Allow importing of search engine settings
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
ImportSearchEngine
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: ImportSearchEngine
- Example value:
True
Back to top
配置 InPrivate 模式可用性 (InPrivateModeAvailability)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定用户是否可以在 Microsoft Edge 中在 InPrivate 模式下打开页面。
如果未配置此策略,或将其设置为 "Enabled"(0),则用户可以在 InPrivate 的模式下打开页面。
将此策略设置为“禁用”(1) 则阻止用户使用 InPrivate 模式。
将此策略设置为“强制”(2) 则始终使用 InPrivate 模式。
* 0 = InPrivate 模式可用
* 1 = InPrivate 模式禁用
* 2 = 强制 InPrivate 模式
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: InPrivateModeAvailability
- GP name: 配置 InPrivate 模式可用性
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
InPrivateModeAvailability
- Value Type:
REG_DWORD
Example value:
0x00000001
Mac information and settings
- Preference Key Name: InPrivateModeAvailability
- Example value:
1
Back to top
Configure Internet Explorer integration (InternetExplorerIntegrationLevel)
Supported Versions: Microsoft Edge on Windows since version 77 or later
Description
Allows you to configure the scope of Internet Explorer integration in Microsoft Edge.
If you enable this policy, you can choose between the following options:
* Internet Explorer mode: provides full immersive integration of Internet Explorer with Microsoft Edge version 77 or later
* Internet Explorer 11: lets users open selected sites in the stand-alone version of Internet Explorer 11
If you disable or don’t configure this policy, all sites are opened in Microsoft Edge. This is the default behavior.
To configure this policy, you must first enable at least one of the following related policies. Otherwise, this policy will have no effect.
- Use the Enterprise Mode IE website list (‘SiteList’)
- Send all intranet sites to Internet Explorer (‘SendIntranetToInternetExplorer’)
For more info about how to use this policy together with other related policies to create the optimal configuration for your organization, see https://go.microsoft.com/fwlink/?linkid=2094210.
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: InternetExplorerIntegrationLevel
- GP name: Configure Internet Explorer integration
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
InternetExplorerIntegrationLevel
- Value Type:
REG_DWORD
Example value:
0x00000001
Back to top
对特定来源启用站点隔离 (IsolateOrigins)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定要在自己的进程中隔离运行的来源。
该策略还隔离由子域命名的来源 - 例如,指定 https://contoso.com/ 将导致 https://foo.contoso.com/ 作为 https://contoso.com/ 站点的一部分被隔离。
如果启用此策略,每个以逗号分隔的列表中指定的来源将在其自身进程中运行。
如果禁用此策略,将同时禁用 "IsolateOrigins" 和 "SitePerProcess" 功能。用户仍然可以通过命令行标志手动启用 "IsolateOrigins" 策略。
如果未配置此策略,则用户可以更改此设置。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: IsolateOrigins
- GP name: 对特定来源启用站点隔离
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
IsolateOrigins
- Value Type:
REG_SZ
Example value:
"https://contoso.com/,https://fabrikam.com/"
Mac information and settings
- Preference Key Name: IsolateOrigins
- Example value:
"https://contoso.com/,https://fabrikam.com/"
Back to top
配置收藏夹 (ManagedFavorites)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
配置托管收藏夹列表。
策略会创建收藏夹列表。每个收藏夹都包含 "name"和 "url" 键,这些键包含收藏夹的名称和目标。你可以通过定义不带 "url" 键但带有附加 "children" 键的收藏夹来配置子文件夹,此 "children" 键包含上面定义的收藏夹列表(其中一些可能还是文件夹)。Microsoft Edge 会修改不完整的网址,就好像它们是通过地址栏提交的一样,例如 "microsoft.com" 会变为 "https://microsoft.com/"。
这些收藏夹放在用户无法修改的文件夹中(但用户可以选择在收藏夹栏中将其隐藏)。默认情况下,文件夹名称为“托管收藏夹”,但是,通过向收藏夹列表添加一个包含 "toplevel_name" 键并且以所需文件夹名称为值的字典,你可以更改此名称。
托管收藏夹未同步到用户帐户,无法通过扩展进行修改。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Dictionary
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ManagedFavorites
- GP name: 配置收藏夹
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
ManagedFavorites
- Value Type:
REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\ManagedFavorites = [
{
"toplevel_name": "My managed favorites folder"
},
{
"name": "Microsoft",
"url": "microsoft.com"
},
{
"name": "Bing",
"url": "bing.com"
},
{
"children": [
{
"name": "Microsoft Edge Insiders",
"url": "www.microsoftedgeinsider.com"
},
{
"name": "Microsoft Edge",
"url": "www.microsoft.com/windows/microsoft-edge"
}
],
"name": "Microsoft Edge links"
}
]
Mac information and settings
- Preference Key Name: ManagedFavorites
- Example value:
<key>ManagedFavorites</key>
<array>
<dict>
<key>toplevel_name</key>
<string>My managed favorites folder</string>
</dict>
<dict>
<key>name</key>
<string>Microsoft</string>
<key>url</key>
<string>microsoft.com</string>
</dict>
<dict>
<key>name</key>
<string>Bing</string>
<key>url</key>
<string>bing.com</string>
</dict>
<dict>
<key>children</key>
<array>
<dict>
<key>name</key>
<string>Microsoft Edge Insiders</string>
<key>url</key>
<string>www.microsoftedgeinsider.com</string>
</dict>
<dict>
<key>name</key>
<string>Microsoft Edge</string>
<key>url</key>
<string>www.microsoft.com/windows/microsoft-edge</string>
</dict>
</array>
<key>name</key>
<string>Microsoft Edge links</string>
</dict>
</array>
Back to top
管理搜索引擎 (ManagedSearchEngines)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
允许你配置可列出多达 10 个搜索引擎的列表,其中一个搜索引擎必须标记为默认的搜索引擎。
无需为任何搜索引擎指定编码。
如果启用此策略,用户无法在列表中添加、删除或更改任何搜索引擎。用户可以将其默认的搜索引擎设置为列表中的任何搜索引擎。
如果禁用或未配置此策略,用户可以根据需要修改搜索引擎列表。
如果设置 "DefaultSearchProviderSearchURL" 策略,将忽略此策略("ManagedSearchEngines")。用户必须重启浏览器才能完成应用此策略。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Dictionary
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ManagedSearchEngines
- GP name: 管理搜索引擎
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
ManagedSearchEngines
- Value Type:
REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\ManagedSearchEngines = [
{
"image_search_url": "https://www.example1.com/images/detail/search?iss=sbiupload",
"is_default": true,
"keyword": "example1.com",
"name": "Example1",
"search_url": "https://www.example1.com/search?q={searchTerms}",
"suggest_url": "https://www.example1.com/qbox?query={searchTerms}"
},
{
"image_search_url": "https://www.example2.com/images/detail/search?iss=sbiupload",
"keyword": "example2.com",
"name": "Example2",
"search_url": "https://www.example2.com/search?q={searchTerms}",
"suggest_url": "https://www.example2.com/qbox?query={searchTerms}"
},
{
"encoding": "UTF-8",
"image_search_url": "https://www.example3.com/images/detail/search?iss=sbiupload",
"keyword": "example3.com",
"name": "Example3",
"search_url": "https://www.example3.com/search?q={searchTerms}",
"suggest_url": "https://www.example3.com/qbox?query={searchTerms}"
}
]
Mac information and settings
- Preference Key Name: ManagedSearchEngines
- Example value:
<key>ManagedSearchEngines</key>
<array>
<dict>
<key>image_search_url</key>
<string>https://www.example1.com/images/detail/search?iss=sbiupload</string>
<key>is_default</key>
<true/>
<key>keyword</key>
<string>example1.com</string>
<key>name</key>
<string>Example1</string>
<key>search_url</key>
<string>https://www.example1.com/search?q={searchTerms}</string>
<key>suggest_url</key>
<string>https://www.example1.com/qbox?query={searchTerms}</string>
</dict>
<dict>
<key>image_search_url</key>
<string>https://www.example2.com/images/detail/search?iss=sbiupload</string>
<key>keyword</key>
<string>example2.com</string>
<key>name</key>
<string>Example2</string>
<key>search_url</key>
<string>https://www.example2.com/search?q={searchTerms}</string>
<key>suggest_url</key>
<string>https://www.example2.com/qbox?query={searchTerms}</string>
</dict>
<dict>
<key>encoding</key>
<string>UTF-8</string>
<key>image_search_url</key>
<string>https://www.example3.com/images/detail/search?iss=sbiupload</string>
<key>keyword</key>
<string>example3.com</string>
<key>name</key>
<string>Example3</string>
<key>search_url</key>
<string>https://www.example3.com/search?q={searchTerms}</string>
<key>suggest_url</key>
<string>https://www.example3.com/qbox?query={searchTerms}</string>
</dict>
</array>
Back to top
到代理服务器的最大并发连接数 (MaxConnectionsPerProxy)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定与代理服务器的最大同时连接数。
有些代理服务器不能处理每个客户端的大量并发连接,你可以通过将此策略设置为较低的值来解决这个问题。
此策略的值应小于 100 并大于 6。默认值为 32。
已知一些网络应用程序会消耗很多挂起的 GET 的连接,如果这类 Web 应用打开太多,将最大连接降低到 32 以下可能会导致浏览器网络挂起。
如果未配置此策略,将使用默认值(32)。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: MaxConnectionsPerProxy
- GP name: 到代理服务器的最大并发连接数
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
MaxConnectionsPerProxy
- Value Type:
REG_DWORD
Example value:
0x00000020
Mac information and settings
- Preference Key Name: MaxConnectionsPerProxy
- Example value:
32
Back to top
允许 Google Cast 连接到所有 IP 地址上的强制转换设备 (MediaRouterCastAllowAllIPs)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
启用此策略可让 Google Cast 连接到所有 IP 地址上的强制转换设备,而不仅仅是 RFC1918/RFC4193 专用地址。
禁用此策略以限制 Google Cast 连接到 RFC1918/RFC4193 专用地址上的强制转换设备。
如果您不配置此粗略,Google Cast 仅会连接到 RFC1918/RFC4193 专用地址上的强制转换设备,除非你启用 CastAllowAllIPs 功能。
如果禁用“EnableMediaRouter”策略,则此策略不起作用。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: MediaRouterCastAllowAllIPs
- GP name: 允许 Google Cast 连接到所有 IP 地址上的强制转换设备
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
MediaRouterCastAllowAllIPs
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: MediaRouterCastAllowAllIPs
- Example value:
False
Back to top
启用使用情况和崩溃相关的数据报告 (MetricsReportingEnabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
允许向 Microsoft 报告有关 Microsoft Edge 的使用情况和崩溃相关的数据,并阻止用户更改此设置。
启用此策略可以向 Microsoft 发送使用报告和崩溃相关数据。禁用此策略则不会将数据发送给 Microsoft。在这两种情况下,用户都不能更改或覆盖设置。
如果未配置此策略,Microsoft Edge 将使用用户在安装/首次运行时选择的内容。
此策略仅适用于加入 Microsoft Active Directory 域的 Windows 实例或注册进行设备管理的 Windows 10 专业版或企业版实例。
在 Windows 7、8和 Mac 上,此策略控制使用情况和与崩溃相关的数据。
在 Windows 10 Beta、Canary 和 Dev 上,在此策略仅控制使用情况数据。崩溃数据由 Windows 诊断数据设置 (https://docs.microsoft.com/windows/privacy/configure-windows-diagnostic-data-in-your-organization#overview) 控制。
在 Windows 10 Stable 上,使用情况和崩溃数据收集由 Windows 诊断数据设置 (https://docs.microsoft.com/windows/privacy/configure-windows-diagnostic-data-in-your-organization#overview) 控制。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: MetricsReportingEnabled
- GP name: 启用使用情况和崩溃相关的数据报告
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
MetricsReportingEnabled
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: MetricsReportingEnabled
- Example value:
True
Back to top
启用网络预测 (NetworkPredictionOptions)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
启用网络预测,并阻止用户更改此设置。
此策略控制 DNS 预取、TCP 和 SSL 预连接及网页的预呈现。
如果未配置此策略,则启用网络预测,但用户可以更改此项设置。
* 0 = 预测任何网络连接上的网络操作
* 2 = 不预测任何网络连接上的网络操作
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: NetworkPredictionOptions
- GP name: 启用网络预测
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
NetworkPredictionOptions
- Value Type:
REG_DWORD
Example value:
0x00000001
Mac information and settings
- Preference Key Name: NetworkPredictionOptions
- Example value:
1
Back to top
控制针对不安全源的安全限制的适用范围 (OverrideSecurityRestrictionsOnInsecureOrigin)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定来源(URL)或主机名模式(如 "*.contoso.com")的列表,对于这些模式,针对不安全来源的安全限制不适用。
此策略让你可以针对无法部署 TLS 或为内部 Web 开发设置暂存服务器的旧版应用程序指定允许的来源,以便开发人员可以测试需要安全上下文的功能,而不必在暂存服务器上部署 TLS。此策略还可防止来源在多功能地址栏中被标记为“不安全”。
在此策略中设置 URL 列表的效果与将命令行标志 "--unsafely-treat-insecure-origin-as-secure" 设置为相同 URL 的逗号分隔列表的效果相同。如果启用此策略,它将覆盖命令行标志。
有关安全上下文的详细信息,请参阅 https://www.w3.org/TR/secure-contexts/。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: OverrideSecurityRestrictionsOnInsecureOrigin
- GP name: 控制针对不安全源的安全限制的适用范围
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\OverrideSecurityRestrictionsOnInsecureOrigin
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\OverrideSecurityRestrictionsOnInsecureOrigin\0 = "http://testserver.contoso.com/"
SOFTWARE\Policies\Microsoft\Edge\OverrideSecurityRestrictionsOnInsecureOrigin\1 = "*.contoso.com"
Mac information and settings
- Preference Key Name: OverrideSecurityRestrictionsOnInsecureOrigin
- Example value:
<array>
<string>http://testserver.contoso.com/</string>
<string>*.contoso.com</string>
</array>
Back to top
启用主动身份验证 (ProactiveAuthEnabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
允许你配置是否启用主动身份验证。
如果启用此策略,Microsoft Edge 将尝试使用 Microsoft 服务对已登录用户进行主动身份验证。Microsoft Edge 会定期使用联机服务检查更新的清单,其中包含用于控制如何执行此操作的配置。
如果禁用此策略,Microsoft Edge 不会尝试使用 Microsoft 服务对已登录用户进行主动身份验证。Microsoft Edge 不再使用联机服务检查包含执行此操作的配置的更新清单。
如果未配置此策略,则会启用主动身份验证。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ProactiveAuthEnabled
- GP name: 启用主动身份验证
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
ProactiveAuthEnabled
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: ProactiveAuthEnabled
- Example value:
True
Back to top
启用全标签促销内容 (PromotionalTabsEnabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
控制完整标签页的促销内容或教育内容的呈现。此设置控制欢迎页面的呈现,以帮助用户登录 Microsoft Edge、选择其默认浏览器或了解产品功能。
如果你启用此策略(将其设置为 true)或未对其进行配置,则 Microsoft Edge 可能会向用户显示完整标签页内容以提供产品信息。
如果你禁用(设置为 false)此策略,则 Microsoft Edge 无法向用户显示完整标签页内容。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: PromotionalTabsEnabled
- GP name: 启用全标签促销内容
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
PromotionalTabsEnabled
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: PromotionalTabsEnabled
- Example value:
False
Back to top
询问所下载文件的保存位置 (PromptForDownloadLocation)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
设置下载文件前是否询问文件保存位置。
如果启用此策略,系统将在下载前询问用户每个文件的保存位置;如果不进行配置,文件会自动保存到默认位置,而不会询问用户。
如果未配置此策略,用户将能够更改此设置。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: PromptForDownloadLocation
- GP name: 询问所下载文件的保存位置
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
PromptForDownloadLocation
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: PromptForDownloadLocation
- Example value:
False
Back to top
允许 QUIC 协议 (QuicAllowed)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
Allows use of the QUIC protocol in Microsoft Edge.
If you enable this policy or don't configure it, the QUIC protocol is allowed.
If you disable this policy, the QUIC protocol is blocked.
QUIC is a transport layer network protocol that can improve performance of web applications that currently use TCP.
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: QuicAllowed
- GP name: 允许 QUIC 协议
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
QuicAllowed
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: QuicAllowed
- Example value:
True
Back to top
通知用户推荐或需要对挂起的更新重启浏览器 (RelaunchNotification)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
通知用户,需要重启 Microsoft Edge 来应用挂起的更新。
如果未配置此策略,Microsoft Edge 将在顶部菜单栏最右侧添加一个回收站图标,提示用户重启浏览器以应用更新。
如果启用此策略,并将其设置为“推荐”(1),会定期出现警告,提示用户建议重启。用户可以关闭此警告并推迟重启。
如果将该策略设置为“需要”(2),会定期出现警告,提示用户浏览器将在通知期之后自动重启。默认期限为七天。可以使用 "RelaunchNotificationPeriod" 策略来配置此期限。
浏览器重启后,将会恢复用户的会话。
* 推荐(1) = 向用户显示重复提示,指示建议重启
* 需要(2) = 向用户显示重复提示,指示需要重启
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: RelaunchNotification
- GP name: 通知用户推荐或需要对挂起的更新重启浏览器
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
RelaunchNotification
- Value Type:
REG_DWORD
Example value:
0x00000001
Mac information and settings
- Preference Key Name: RelaunchNotification
- Example value:
1
Back to top
设置更新通知的时间段 (RelaunchNotificationPeriod)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
设置时间段(毫秒),该时间段内,用户将被通知必须重新启动 Microsoft Edge 才能应用挂起的更新。
在此期间,用户被反复告知需要重启。经过三分之一的通知期时,应用菜单会发生变化,指示需要重新启动。经过三分之二的通知期时,通知会改变颜色,经过整个通知期时,通知也会再次改变颜色。"RelaunchNotification" 策略启用的其他通知遵循相同的计划。
如果未配置此策略,默认期限为 604800000 毫秒(一周)。
限制:
* 最小值: 3600000
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: RelaunchNotificationPeriod
- GP name: 设置更新通知的时间段
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
RelaunchNotificationPeriod
- Value Type:
REG_DWORD
Example value:
0x240c8400
Mac information and settings
- Preference Key Name: RelaunchNotificationPeriod
- Example value:
604800000
Back to top
指定本地信任密钥是否需要联机 OCSP/CRL 检查 (RequireOnlineRevocationChecksForLocalAnchors)
Supported Versions: Microsoft Edge on Windows since version 77 or later
Description
控制是否需要进行在线吊销检查(OCSP/CRL 检查)。如果 Microsoft Edge 无法获取吊销状态信息,则会将这些证书视为已吊销(“硬故障”)。
如果启用此策略,则 Microsoft Edge 始终对成功验证并由本地安装的 CA 证书签名的服务器证书执行吊销检查。
如果未配置或禁用此策略,则 Microsoft Edge 将使用现有的在线吊销检查设置。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: RequireOnlineRevocationChecksForLocalAnchors
- GP name: 指定本地信任密钥是否需要联机 OCSP/CRL 检查
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
RequireOnlineRevocationChecksForLocalAnchors
- Value Type:
REG_DWORD
Example value:
False
Back to top
启用使用 Web 服务解决导航错误 (ResolveNavigationErrorsUseWebService)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
允许 Microsoft Edge 向某个 Web 服务发出无数据连接以探测网络的连接性,例如酒店和机场 Wi-Fi。
如果启用此策略,则使用 Web 服务进行网络连接性测试。
如果禁用此策略,则 Microsoft Edge 将使用本机 API 尝试解决网络连接性和导航问题。
**注意**: 除非在 Windows 8 和 Windows 的更高版本上,否则,Microsoft Edge 将*始终*使用本机 API 解决连接性问题。
如果未配置此策略,Microsoft Edge 将采用 edge://settings/privacy 的“服务”下面设置的用户首选项。
具体来说,有一个**使用 Web 服务帮助解决导航错误**切换开关,用户可以打开或关闭此开关。请注意,如果已启用此策略(ResolveNavigationErrorsUseWebService),则**使用 Web 服务帮助解决导航错误**设置将处于启用状态,但用户无法通过使用此切换开关更改设置。如果已禁用此策略,则**使用 Web 服务帮助解决导航错误**设置将处于关闭状态,并且用户无法通过使用此切换开关更改设置。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ResolveNavigationErrorsUseWebService
- GP name: 启用使用 Web 服务解决导航错误
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
ResolveNavigationErrorsUseWebService
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: ResolveNavigationErrorsUseWebService
- Example value:
True
Back to top
限制哪些账户可以用作 Microsoft Edge 的主要帐户 (RestrictSigninToPattern)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
确定可以将哪些帐户设置为 Microsoft Edge 中的浏览器主帐户(在同步选择加入流期间选择的帐户)。
如果用户试图使用与此模式不匹配的用户名设置浏览器主帐户,系统会阻止他们,并显示相应的错误消息。
如果未配置此策略或将其留空,则用户可以将任何帐户设置为 Microsoft Edge 中的浏览器主帐户。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: RestrictSigninToPattern
- GP name: 限制哪些账户可以用作 Microsoft Edge 的主要帐户
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
RestrictSigninToPattern
- Value Type:
REG_SZ
Example value:
".*@contoso.com"
Mac information and settings
- Preference Key Name: RestrictSigninToPattern
- Example value:
".*@contoso.com"
Back to top
Extend Adobe Flash content setting to all content (RunAllFlashInAllowMode)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
If you enable this policy, all Adobe Flash content embedded in websites that are set to allow Adobe Flash in the content settings -- either by the user or by enterprise policy -- will run. This includes content from other origins and/or small content.
To control which websites are allowed to run Adobe Flash, see the specifications in the 'DefaultPluginsSetting', 'PluginsAllowedForUrls', and 'PluginsBlockedForUrls' policies.
If you disable this policy or don't configure it, Adobe Flash content from other origins (from sites that aren't specified in the three policies mentioned immediately above) or small content might be blocked.
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: RunAllFlashInAllowMode
- GP name: Extend Adobe Flash content setting to all content
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
RunAllFlashInAllowMode
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: RunAllFlashInAllowMode
- Example value:
True
Back to top
允许用户从 SSL 警告页面继续操作 (SSLErrorOverrideAllowed)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
当用户访问具有 SSL 错误的站点时,Microsoft Edge 会显示警告页面。
如果启用或不配置(默认)此策略,则用户能够以单击方式浏览这些警告页面。
如果禁用此策略,则会阻止用户以单击方式浏览任何警告页面。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: SSLErrorOverrideAllowed
- GP name: 允许用户从 SSL 警告页面继续操作
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
SSLErrorOverrideAllowed
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: SSLErrorOverrideAllowed
- Example value:
True
Back to top
已启用的最小 SSL 版本 (SSLVersionMin)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
设置支持的最低 SSL 版本。如果不配置此策略,则 Microsoft Edge 将使用默认的最低版本 TLS 1.0。
如果启用此策略,可以将最低版本设置为以下值之一: "tls1"、"tls1.1" 或 "tls1.2"。设置后,Microsoft Edge 将不使用任何低于指定版本的 SSL/TLS 版本。任何无法识别的值都会被忽略。
* "tls1" = TLS 1.0
* "tls1.1" = TLS 1.1
* "tls1.2" = TLS 1.2
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: SSLVersionMin
- GP name: 已启用的最小 SSL 版本
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
SSLVersionMin
- Value Type:
REG_SZ
Example value:
"tls1"
Mac information and settings
- Preference Key Name: SSLVersionMin
- Example value:
"tls1"
Back to top
禁用保存浏览器历史记录 (SavingBrowserHistoryDisabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
禁用保存浏览器历史记录,并阻止用户更改此设置。
如果启用此策略,浏览历史记录将不会保存。这还将禁用标签同步。
如果禁用或未配置此策略,浏览历史记录将被保存。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: SavingBrowserHistoryDisabled
- GP name: 禁用保存浏览器历史记录
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
SavingBrowserHistoryDisabled
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: SavingBrowserHistoryDisabled
- Example value:
True
Back to top
启用搜索建议 (SearchSuggestEnabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
在 Microsoft Edge 的地址栏和自动建议列表中启用 Web 搜索建议,并阻止用户更改此策略。
如果启用此策略,则使用 Web 搜索建议。
如果禁用此策略,则不会使用 Web 搜索建议,但是本地历史记录和收藏夹本地建议仍然会出现。如果禁用此策略,发送到 Microsoft 的遥测将不包含键入的字符和已访问的 URL。
如果不设置此策略,将启用搜索建议,但用户可进行更改。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: SearchSuggestEnabled
- GP name: 启用搜索建议
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
SearchSuggestEnabled
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: SearchSuggestEnabled
- Example value:
True
Back to top
无需许可即可使用直接安全密钥证明的网站或域 (SecurityKeyPermitAttestation)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定当请求来自安全密钥的证明证书时不需要显式用户许可的网站和域。此外,向安全密钥发送一个信号,指示它可以使用单独的证明。如果不这样做,每次站点请求安全密钥证明时都会提示用户。
网站(如 https://contoso.com/some/path)仅作为 U2F appID 匹配。域(如 contoso.com)仅作为 webauthn RP ID 匹配。对于指定站点,要涵盖 U2F 和 webauthn API,需要列出 appID URL 和域。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: SecurityKeyPermitAttestation
- GP name: 无需许可即可使用直接安全密钥证明的网站或域
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\SecurityKeyPermitAttestation
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\SecurityKeyPermitAttestation\0 = "https://contoso.com"
Mac information and settings
- Preference Key Name: SecurityKeyPermitAttestation
- Example value:
<array>
<string>https://contoso.com</string>
</array>
Back to top
将所有 Intranet 站点发送到 Internet Explorer (SendIntranetToInternetExplorer)
Supported Versions: Microsoft Edge on Windows since version 77 or later
Description
Allows you to configure whether your intranet sites are opened in Internet Explorer.
If you enable this policy, all intranet sites are automatically opened using the setting that’s configured in the ‘Configure Internet Explorer integration’ (‘InternetExplorerIntegrationLevel’) policy. The only exceptions are those sites configured with the open-in element in your Enterprise Mode Site List.
If you disable or don't configure this policy, your intranet sites are opened in Microsoft Edge, except for the sites listed in the Enterprise Mode Site List.
To enable this policy, you must first enable the ‘Configure Internet Explorer integration’ (‘InternetExplorerIntegrationLevel’) policy. Otherwise, this policy has no effect.
We strongly recommend keeping this policy in sync with the ‘Keep all intranet sites in Internet Explorer’ (‘KeepIntranetSitesInInternetExplorer’) policy. Additionally, it’s best to enable this policy only if your intranet sites have known compatibility problems with Microsoft Edge.
Related policies:
- Configure Internet Explorer integration (‘InternetExplorerIntegrationLevel’)
- Configure which version of Microsoft Edge to use for opening redirected sites (‘NeedEdgeBrowser’)
- Send all sites not included in the Enterprise Mode Site List to Microsoft Edge (‘SendIntranetToInternetExplorer’)
- Keep all intranet sites in Internet Explorer (‘KeepIntranetSitesInInternetExplorer’)
For more info about how to use this policy together with these related policies to create the optimal configuration for your organization, see https://go.microsoft.com/fwlink/?linkid=2094210.
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: SendIntranetToInternetExplorer
- GP name: 将所有 Intranet 站点发送到 Internet Explorer
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
SendIntranetToInternetExplorer
- Value Type:
REG_DWORD
Example value:
True
Back to top
发送站点信息来改进 Microsoft 服务 (SendSiteInfoToImproveServices)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
此策略设置让你决定用户是否可以向 Microsoft 发送有关其在 Microsoft Edge 中访问的网站的信息,以改进搜索等服务。默认值来自安装。
如果启用此设置,则始终向 Microsoft 发送有关在 Microsoft Edge 中访问的网站的信息。
如果禁用此设置,则从不向 Microsoft 发送有关在 Microsoft Edge 中访问的网站的信息。
如果未配置此设置,则用户可以选择是否向 Microsoft 发送网站信息。
Windows 7、Windows 8 和 Mac: 控制向 Microsoft 发送有关在 Microsoft Edge 中访问的网站的信息。
Windows 10(Edge Canary、Beta、Dev): 控制向 Microsoft 发送有关在 Microsoft Edge 中访问的网站的信息。
Windows 10(Edge 稳定版): 此策略不控制向 Microsoft 发送网站信息。这由 Windows 诊断数据设置控制的
请参阅 https://docs.microsoft.com/en-us/windows/privacy/configure-windows-diagnostic-data-in-your-organization#overview
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: SendSiteInfoToImproveServices
- GP name: 发送站点信息来改进 Microsoft 服务
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
SendSiteInfoToImproveServices
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: SendSiteInfoToImproveServices
- Example value:
False
Back to top
在收藏夹栏中显示 Microsoft Office 快捷方式 (ShowOfficeShortcutInFavoritesBar)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定是否在收藏夹栏中包含 Office.com 的快捷方式。对于登录到 Microsoft Edge 的用户,该快捷方式将为其打开 Microsoft Office 应用和文档。
如果启用或未配置此策略,用户可以通过更改收藏夹栏上下文菜单中的切换来选择是否查看快捷方式。
如果禁用此策略,将不显示快捷方式。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ShowOfficeShortcutInFavoritesBar
- GP name: 在收藏夹栏中显示 Microsoft Office 快捷方式
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
ShowOfficeShortcutInFavoritesBar
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: ShowOfficeShortcutInFavoritesBar
- Example value:
False
Back to top
为每个站点启用站点隔离 (SitePerProcess)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
使用“IsolateOrigins”和“SitePerProcess”功能启用站点隔离。
如果启用该策略,每个站点将在其自己的进程中运行。
如果禁用此策略,将同时禁用“IsolateOrigins”和“SitePerProcess”功能。用户可以使用命令行标志手动启用 SitePerProcess 策略。
如果未配置此策略,则用户可以更改此设置。
你可能需要考虑“IsolateOrigins”策略设置,通过将“IsolateOrigins”与您想要隔离的站点列表一起使用,来实现两者的最佳效果,即隔离和对用户的有限影响。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: SitePerProcess
- GP name: 为每个站点启用站点隔离
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
SitePerProcess
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: SitePerProcess
- Example value:
True
Back to top
启用拼写检查 (SpellcheckEnabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
如果启用或未配置此策略,则用户可以使用拼写检查功能。
如果禁用此策略,则用户无法使用拼写检查功能,而且会禁用“SpellcheckLanguage”策略。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: SpellcheckEnabled
- GP name: 启用拼写检查
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
SpellcheckEnabled
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: SpellcheckEnabled
- Example value:
False
Back to top
启用特定拼写检查语言 (SpellcheckLanguage)
Supported Versions: Microsoft Edge on Windows since version 77 or later
Description
启用不同的语言进行拼写检查。你指定的语言若无法识别,则会被忽略。
如果启用此策略,则会针对指定的语言以及用户已经启用的所有语言启动拼写检查。
如果未配置或禁用此策略,则不会对用户的拼写检查首选项作出任何更改。
如果禁用 "SpellcheckEnabled" 策略,则此策略将不起作用。
支持的语言包括: af、 bg、 ca、 cs、 cy、 da、 de、 el、 en-AU、 en-CA、en-GB、 en-US、 es、 es-419、es-AR、es-ES、 es-MX、es-US、et、fa、fo、fr、he、hi、hr、hu、id、it、ko、lt、lv、nb、nl、pl、pt-BR、pt-PT、ro、ru、sh、sk、sl、sq、sr、sv、ta、tg、tr、uk、vi。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: SpellcheckLanguage
- GP name: 启用特定拼写检查语言
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\SpellcheckLanguage
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\SpellcheckLanguage\0 = "fr"
SOFTWARE\Policies\Microsoft\Edge\SpellcheckLanguage\1 = "es"
Back to top
禁止不支持的操作系统警告 (SuppressUnsupportedOSWarning)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
禁止 Microsoft Edge 在不再受支持的计算机或操作系统上运行时出现警告。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: SuppressUnsupportedOSWarning
- GP name: 禁止不支持的操作系统警告
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
SuppressUnsupportedOSWarning
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: SuppressUnsupportedOSWarning
- Example value:
True
Back to top
使用 Microsoft 同步服务禁用数据同步 (SyncDisabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
在 Microsoft Edge 中禁用数据同步,并阻止用户修改此设置。
如果未设置此策略,则用户将能够打开或关闭同步。
请勿在启用 'RoamingProfileSupportEnabled' 策略后启用此策略,因为 'RoamingProfileSupportEnabled' 会复制同步功能。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: SyncDisabled
- GP name: 使用 Microsoft 同步服务禁用数据同步
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
SyncDisabled
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: SyncDisabled
- Example value:
True
Back to top
配置标签页生命周期 (TabLifecyclesEnabled)
Supported Versions: Microsoft Edge on Windows since version 77 or later
Description
标签页生命周期功能将回收长时间未使用的运行标签页所关联的 CPU 和内存,首先限制,然后冻结,最后丢弃。
如果禁用此策略,标签页生命周期功能被禁用,并且所有标签页将保持正常运行。
如果启用或未配置此策略,则将启用标签页生命周期功能。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: TabLifecyclesEnabled
- GP name: 配置标签页生命周期
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
TabLifecyclesEnabled
- Value Type:
REG_DWORD
Example value:
False
Back to top
启用在浏览器任务管理器中结束进程 (TaskManagerEndProcessEnabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
如果启用或未配置此策略,用户可以在浏览器任务管理器中结束进程。如果禁用此策略,用户将无法结束进程,并且浏览器任务管理器中的“结束进程”按钮将被禁用。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: TaskManagerEndProcessEnabled
- GP name: 启用在浏览器任务管理器中结束进程
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
TaskManagerEndProcessEnabled
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: TaskManagerEndProcessEnabled
- Example value:
True
Back to top
启用翻译 (TranslateEnabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
启用 Microsoft Edge 集成的 Microsoft 翻译服务。
如果启用此策略,通过显示集成的翻译浮出控件(如果适用)和右键单击上下文菜单,Microsoft Edge 向用户提供翻译功能。
禁用此策略可禁止所有内置的翻译功能。
如果未配置此策略,则用户可以选择是否使用翻译功能。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: TranslateEnabled
- GP name: 启用翻译
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
TranslateEnabled
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: TranslateEnabled
- Example value:
True
Back to top
定义允许的 URL 列表 (URLAllowlist)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
作为 URL 阻止名单的例外,允许访问列出的 URL。
根据 https://docs.microsoft.com//Placeholder01 设置 URL 模式的格式。
你可以使用此策略对限制性阻止名单设置例外。例如,你可以在阻止名单中包含 "*" 以阻止所有请求,然后使用此策略允许访问受限制的 URL 列表。你可以使用此策略对某些方案、其他域的子域、端口或特定路径设置例外。
最具体的筛选器会确定是阻止还是允许 URL。允许列表优先于阻止名单。
此策略不得超过 1000 个条目;后续条目将被忽略。
如果未配置此策略,则 "URLBlocklist" 策略中的阻止名单没有例外。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: URLAllowlist
- GP name: 定义允许的 URL 列表
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\URLAllowlist
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\URLAllowlist\0 = "contoso.com"
SOFTWARE\Policies\Microsoft\Edge\URLAllowlist\1 = "https://ssl.server.com"
SOFTWARE\Policies\Microsoft\Edge\URLAllowlist\2 = "hosting.com/good_path"
SOFTWARE\Policies\Microsoft\Edge\URLAllowlist\3 = "https://server:8080/path"
SOFTWARE\Policies\Microsoft\Edge\URLAllowlist\4 = ".exact.hostname.com"
Mac information and settings
- Preference Key Name: URLAllowlist
- Example value:
<array>
<string>contoso.com</string>
<string>https://ssl.server.com</string>
<string>hosting.com/good_path</string>
<string>https://server:8080/path</string>
<string>.exact.hostname.com</string>
</array>
Back to top
阻止访问 URL 列表 (URLBlocklist)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
根据 URL 模式定义阻止的站点列表(你的用户无法加载它们)。
根据 https://docs.microsoft.com//Placeholder01 设置 URL 模式格式。
你可以在 "URLAllowlist" 策略中定义例外。这些策略不得超过 1000 个条目;后续条目将被忽略。
请注意,不建议阻止内部 "edge://*" URL - 这可能会导致意外错误。
此策略不会阻止页面通过 JavaScript 动态更新。例如,如果你阻止 "contoso.com/abc",那么只要页面不刷新,用户或许仍然可以访问 "contoso.com" 并单击链接来访问 "contoso.com/abc"。
如果你不配置此策略,则不会阻止任何 URL。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: URLBlocklist
- GP name: 阻止访问 URL 列表
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\URLBlocklist
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\URLBlocklist\0 = "contoso.com"
SOFTWARE\Policies\Microsoft\Edge\URLBlocklist\1 = "https://ssl.server.com"
SOFTWARE\Policies\Microsoft\Edge\URLBlocklist\2 = "hosting.com/bad_path"
SOFTWARE\Policies\Microsoft\Edge\URLBlocklist\3 = "https://server:8080/path"
SOFTWARE\Policies\Microsoft\Edge\URLBlocklist\4 = ".exact.hostname.com"
SOFTWARE\Policies\Microsoft\Edge\URLBlocklist\5 = "file://*"
SOFTWARE\Policies\Microsoft\Edge\URLBlocklist\6 = "custom_scheme:*"
SOFTWARE\Policies\Microsoft\Edge\URLBlocklist\7 = "*"
Mac information and settings
- Preference Key Name: URLBlocklist
- Example value:
<array>
<string>contoso.com</string>
<string>https://ssl.server.com</string>
<string>hosting.com/bad_path</string>
<string>https://server:8080/path</string>
<string>.exact.hostname.com</string>
<string>file://*</string>
<string>custom_scheme:*</string>
<string>*</string>
</array>
Back to top
设置用户数据目录 (UserDataDir)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
设置用于存储用户数据的目录。
如果启用此策略,则无论用户是否已设置 "--user-data-dir" 命令行标志,Microsoft Edge 都将使用指定的目录。
如果未启用此策略,则将使用默认配置文件路径,但用户可以使用 "--user-data-dir" 标志替代该路径。用户可以在配置文件路径下的 edge://version/ 找到配置文件的目录。
为避免数据丢失或其他错误,请不要将此策略配置为卷的根目录或用于其他用途的目录,因为 Microsoft Edge 会管理其内容。
有关可以使用的变量列表,请参阅 https://docs.microsoft.com/Placeholder08。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: UserDataDir
- GP name: 设置用户数据目录
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
UserDataDir
- Value Type:
REG_SZ
Example value:
"${users}/${user_name}/Edge"
Mac information and settings
- Preference Key Name: UserDataDir
- Example value:
"${users}/${user_name}/Edge"
Back to top
允许用户反馈 (UserFeedbackAllowed)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
Microsoft Edge 使用 Edge 反馈功能(默认情况下启用)允许用户发送反馈意见、建议或客户调查,以及报告浏览器的任何问题。此外,默认情况下,用户无法禁用(关闭) Edge 反馈功能。
如果启用或未配置此策略,则用户可以调用 Edge 反馈。
如果禁用此策略,则用户无法调用 Edge 反馈。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: UserFeedbackAllowed
- GP name: 允许用户反馈
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
UserFeedbackAllowed
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: UserFeedbackAllowed
- Example value:
True
Back to top
允许或阻止视频捕获 (VideoCaptureAllowed)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
控制站点是否可以捕获视频。
如果已启用或未配置(默认),则将询问用户有关所有站点的视频捕获访问权限的信息,在 "VideoCaptureAllowedUrls" 策略列表中配置了 URL 的站点除外,这些站点将被授予访问权限而不进行提示。
如果禁用此策略,则不会提示用户,且视频捕获仅适用于 "VideoCaptureAllowedUrls" 策略中配置的 URL。
此策略影响所有类型的视频输入,而不只是内置摄像头。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: VideoCaptureAllowed
- GP name: 允许或阻止视频捕获
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
VideoCaptureAllowed
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: VideoCaptureAllowed
- Example value:
False
Back to top
无需请求许可即可访问视频捕获设备的站点 (VideoCaptureAllowedUrls)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
根据 URL 模式指定无需用户许可即可使用视频捕获设备的网站。该列表中的模式将与请求 URL 的安全来源进行匹配。如果匹配,站点将自动获得视频捕获设备的访问权限。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: VideoCaptureAllowedUrls
- GP name: 无需请求许可即可访问视频捕获设备的站点
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\VideoCaptureAllowedUrls
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\VideoCaptureAllowedUrls\0 = "https://www.contoso.com/"
SOFTWARE\Policies\Microsoft\Edge\VideoCaptureAllowedUrls\1 = "https://[*.]contoso.edu/"
Mac information and settings
- Preference Key Name: VideoCaptureAllowedUrls
- Example value:
<array>
<string>https://www.contoso.com/</string>
<string>https://[*.]contoso.edu/</string>
</array>
Back to top
设置 WPAD 优化 (WPADQuickCheckEnabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
允许你在 Microsoft Edge 中关闭 WPAD(Web 代理自动发现)优化。
如果禁用此策略,则会禁用 WPAD 优化,这会使浏览器等待基于 DNS 的 WPAD 服务器更长时间。
如果启用或不配置此策略,则会启用 WPAD 优化。
无论是否或如何启用此策略,用户都无法更改 WPAD 优化设置。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: WPADQuickCheckEnabled
- GP name: 设置 WPAD 优化
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
WPADQuickCheckEnabled
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: WPADQuickCheckEnabled
- Example value:
True
Back to top
允许 WebDriver 覆盖不兼容的策略 (WebDriverOverridesIncompatiblePolicies)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
此策略允许 WebDriver 接口的用户覆盖可能干扰其运行的策略。
如果启用此策略,则可以将 WebDriver 配置为覆盖不兼容的策略。
如果禁用或未配置此策略,则不能将 WebDriver 配置为覆盖不兼容的策略。
注意:“SitePerProcess”和“IsolateOrigins”策略目前已被验证为会干扰 WebDriver 运行。以后还可能会有其他策略被确定为干扰 WebDriver。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: WebDriverOverridesIncompatiblePolicies
- GP name: 允许 WebDriver 覆盖不兼容的策略
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
WebDriverOverridesIncompatiblePolicies
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: WebDriverOverridesIncompatiblePolicies
- Example value:
True
Back to top
限制 WebRTC localhost IP 地址的可见性 (WebRtcLocalhostIpHandling)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
允许你设置 WebRTC 是否公开用户的 localhost IP 地址。
如果将此策略设置为 "AllowAllInterfaces" ("default")或 "AllowPublicAndPrivateInterfaces" ("default_public_and_private_interfaces"),则 WebRTC 将公开 localhost IP 地址。
如果将此策略设置为 "AllowPublicInterfaceOnly" ("default_public_interface_only")或 "DisableNonProxiedUdp" ("disable_non_proxied_udp"),则 WebRTC 不公开 localhost IP 地址。
如果未设置或禁用此策略,则 WebRTC 会公开 localhost IP 地址。
* "default" = 允许使用所有接口。这会公开 localhost IP 地址。
* "default_public_and_private_interfaces" = 允许通过 http 默认路由使用公共和专用接口。这会公开 localhost IP 地址。
* "default_public_interface_only" = 允许通过 http 默认路由使用公共接口。这不会公开 localhost IP 地址。
* "disable_non_proxied_udp" = 使用 TCP,除非代理服务器支持 UDP。这不会公开 localhost IP 地址。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: WebRtcLocalhostIpHandling
- GP name: 限制 WebRTC localhost IP 地址的可见性
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
WebRtcLocalhostIpHandling
- Value Type:
REG_SZ
Example value:
"default"
Mac information and settings
- Preference Key Name: WebRtcLocalhostIpHandling
- Example value:
"default"
Back to top
限制 WebRTC 使用的本地 UDP 端口的范围 (WebRtcUdpPortRange)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
将 WebRTC 使用的 UDP 端口范围限制在指定的端口间隔(包括终结点)。
如果不配置此策略或将其设置为空字符串或无效端口范围,WebRTC 可以使用任何可用的本地 UDP 端口。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: WebRtcUdpPortRange
- GP name: 限制 WebRTC 使用的本地 UDP 端口的范围
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
WebRtcUdpPortRange
- Value Type:
REG_SZ
Example value:
"10000-11999"
Mac information and settings
- Preference Key Name: WebRtcUdpPortRange
- Example value:
"10000-11999"
Back to top