自動選取這些網站的用戶端憑證 (AutoSelectCertificateForUrls)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
根據 URL 模式指定網站清單,Microsoft Edge 應自動選取用戶端憑證 (如果網站有要求)。
該值必須是字串化 JSON 字典的數組。每個字典的格式是 { "pattern": "$URL_PATTERN", "filter" : $FILTER },其中 $URL_PATTERN 是內容設定模式。$FILTER 限制瀏覽器可以自動選擇的使用者憑證。憑證獨立於篩選器,且只能使用與伺服器憑證要求匹配的憑證。例如,如果 $FILTER 的格式為 { "ISSUER": { "CN": "$ISSUER_CN" } },則僅能使用由具有 CommonName $ISSUER_CN 的憑證頒發的用戶端憑證。如果 $FILTER 包含「ISSUER」和「SUBJECT」部分,則用戶端憑證必須同時滿足兩個所選條件。如果 $FILTER 指定組織單位 (「O」),則憑證必須至少具有一個與指定值匹配的組織。如果 $FILTER 指定組織單位 (「OU」),則憑證必須至少具有一個與指定值匹配的組織單位。如果 $FILTER 是空字典 {},則不會另外限制用戶端憑證的選擇。
如果您不設定此原則,則不會自動選擇任何網站。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: AutoSelectCertificateForUrls
- GP name: 自動選取這些網站的用戶端憑證
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/內容設定
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\AutoSelectCertificateForUrls
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\AutoSelectCertificateForUrls\0 = "{"pattern":"https://www.contoso.com","filter":{"ISSUER":{"CN":"certificate issuer name", "L": "certificate issuer location", "O": "certificate issuer org", "OU": "certificate issuer org unit"}, "SUBJECT":{"CN":"certificate subject name", "L": "certificate subject location", "O": "certificate subject org", "OU": "certificate subject org unit"}}}"
Mac information and settings
- Preference Key Name: AutoSelectCertificateForUrls
- Example value:
<array>
<string>{"pattern":"https://www.contoso.com","filter":{"ISSUER":{"CN":"certificate issuer name", "L": "certificate issuer location", "O": "certificate issuer org", "OU": "certificate issuer org unit"}, "SUBJECT":{"CN":"certificate subject name", "L": "certificate subject location", "O": "certificate subject org", "OU": "certificate subject org unit"}}}</string>
</array>
Back to top
允許在特定網站上的 Cookie (CookiesAllowedForUrls)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
根據 URL 的規則,定義允許設定 Cookie 的網站清單。
如果您未設定此原則,如果您未設定此原則,所有網站都將使用來自 [DefaultCookiesSetting] 原則 (如有設定) 或使用者個人設定的全域預設值。
請查看 [CookiesBlockedForUrls] 和 [CookiesSessionOnlyForUrls] 原則,了解更多資訊。
請注意這三個原則之間不可有衝突的 URL 模式設定:
- CookiesBlockedForUrls
- CookiesAllowedForUrls
- CookiesSesssionOnlyForUrls
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: CookiesAllowedForUrls
- GP name: 允許在特定網站上的 Cookie
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/內容設定
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\CookiesAllowedForUrls
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\CookiesAllowedForUrls\0 = "https://www.contoso.com"
SOFTWARE\Policies\Microsoft\Edge\CookiesAllowedForUrls\1 = "[*.]contoso.edu"
Mac information and settings
- Preference Key Name: CookiesAllowedForUrls
- Example value:
<array>
<string>https://www.contoso.com</string>
<string>[*.]contoso.edu</string>
</array>
Back to top
封鎖特定網站上的 Cookie (CookiesBlockedForUrls)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
根據 URL 的規則,定義不允許設定 Cookie 的網站清單。
如果您未設定此原則,如果您未設定此原則,所有網站都將使用來自 [DefaultCookiesSetting] 原則 (如有設定) 或使用者個人設定的全域預設值。
請查看 [CookiesAllowedForUrls] 和 [CookiesSessionOnlyForUrls] 原則,了解更多資訊。
請注意這三個原則之間不可有衝突的 URL 模式設定:
- CookiesBlockedForUrls
- CookiesAllowedForUrls
- CookiesSesssionOnlyForUrls
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: CookiesBlockedForUrls
- GP name: 封鎖特定網站上的 Cookie
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/內容設定
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\CookiesBlockedForUrls
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\CookiesBlockedForUrls\0 = "https://www.contoso.com"
SOFTWARE\Policies\Microsoft\Edge\CookiesBlockedForUrls\1 = "[*.]contoso.edu"
Mac information and settings
- Preference Key Name: CookiesBlockedForUrls
- Example value:
<array>
<string>https://www.contoso.com</string>
<string>[*.]contoso.edu</string>
</array>
Back to top
限制來自特定網站的 Cookie 匯入目前的工作階段 (CookiesSessionOnlyForUrls)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
當工作階段結束 (視窗關閉時) 時,會刪除由符合您定義 URL 模式的網站所建立的 Cookie。
由不符合模式網站所建立的 Cookie 會由 [DefaultCookiesSetting] 原則 (如有設定) 控制,或由使用者個人設定控制。如果您未設定此原則,這也會是預設行為。
如果 Microsoft Edge 正以背景模式執行,當最一個視窗關閉時,工作階段可能會關閉,這表示視窗關閉時將不會清除 Cookie。請查看當 Microsoft Edge 以背景模式執行時,設定 [BackgroundModeEnabled] 原則將會發生什麼情況的相關資訊。
您也可以使用 [CookiesAllowedForUrls] 和 [CookiesBlockedForUrls] 原則來控制哪些網站可以建立 cookie。
請注意這三個原則之間不可有衝突的 URL 模式設定:
- CookiesBlockedForUrls
- CookiesAllowedForUrls
- CookiesSesssionOnlyForUrls
如果您從先前的工作階段設定 [RestoreOnStartup] 原則還原 URL,將會忽略此原則,而且這些網站會永久儲存 Cookie。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: CookiesSessionOnlyForUrls
- GP name: 限制來自特定網站的 Cookie 匯入目前的工作階段
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/內容設定
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\CookiesSessionOnlyForUrls
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\CookiesSessionOnlyForUrls\0 = "https://www.contoso.com"
SOFTWARE\Policies\Microsoft\Edge\CookiesSessionOnlyForUrls\1 = "[*.]contoso.edu"
Mac information and settings
- Preference Key Name: CookiesSessionOnlyForUrls
- Example value:
<array>
<string>https://www.contoso.com</string>
<string>[*.]contoso.edu</string>
</array>
Back to top
設定 Cookie (DefaultCookiesSetting)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
控制網站是否可以在使用者裝置上建立 Cookie。此原則為全部允許或完全不允許 - 您可以讓所有網站建立 Cookie,或不讓任何網站建立 Cookie。您無法使用此原則啟用來自特定網站的 Cookie。
設定原則為 [SessionOnly] (4),在工作階段結束時清除 Cookie。如果 Microsoft Edge 正以背景模式執行,當最一個視窗關閉時,工作階段可能會關閉,這表示視窗關閉時將不會清除 Cookie。請查看當 Microsoft Edge 以背景模式執行時,設定 [BackgroundModeEnabled] 原則將會發生什麼情況的相關資訊。
如果您未設定此原則,則會使用預設的 [AllowCookies] (1),且使用者可以在 Microsoft Edge [設定] 中變更此設定。(如果您不希望使用者變更此設定,請設定原則)。
* 1 = 讓所有網站建立 Cookie
* 2 = 不要讓任何網站建立 Cookie
* 4 = 在工作階段期間保留 Cookie
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DefaultCookiesSetting
- GP name: 設定 Cookie
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/內容設定
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DefaultCookiesSetting
- Value Type:
REG_DWORD
Example value:
0x00000001
Mac information and settings
- Preference Key Name: DefaultCookiesSetting
- Example value:
1
Back to top
預設地理位置設定值 (DefaultGeolocationSetting)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
設定網站是否可以追蹤使用者的實體位置。您可以設定預設 (1) 允許追蹤,設定預設 (2) 拒絕追蹤,或者每次網站請求其位置時詢問使用者 (3)。
如果不設定此原則,則會使用 [AskGeolocation] 原則,且使用者可以變更此
* 1 =允許網站追蹤使用者的實體位置
* 2 =不允許任何網站追蹤使用者的實體位置
* 3 =在網站想要使用者的實體位置時詢問
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DefaultGeolocationSetting
- GP name: 預設地理位置設定值
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/內容設定
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DefaultGeolocationSetting
- Value Type:
REG_DWORD
Example value:
0x00000001
Mac information and settings
- Preference Key Name: DefaultGeolocationSetting
- Example value:
1
Back to top
設定影像設定 (DefaultImagesSetting)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
設定網站是否可以顯示影像。您可以允許所有網站 (1) 上的影像顯示,或封鎖所有網站 (2) 上的影像。
如果您未設定此原則,預設為允許顯示影像,使用者可以變更此設定。
* 1 = 允許所有網站顯示所有影像
* 2 = 不允許所有網站顯示影像
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DefaultImagesSetting
- GP name: 設定影像設定
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/內容設定
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DefaultImagesSetting
- Value Type:
REG_DWORD
Example value:
0x00000001
Mac information and settings
- Preference Key Name: DefaultImagesSetting
- Example value:
1
Back to top
預設 JavaScript 設定 (DefaultJavaScriptSetting)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
設定網站是否可以執行 JavaScript。您可以允許所有網站 (1) 執行 JavaScript,或所有網站 (2) 皆不得執行 JavaScript。
如果不設定此原則,則預設為所有網站皆可執行 JavaScript,且使用者可以變更此設定。
* 1 = 允許所有網站執行 JavaScript
* 2 =不允許任何網站執行 JavaScript
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DefaultJavaScriptSetting
- GP name: 預設 JavaScript 設定
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/內容設定
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DefaultJavaScriptSetting
- Value Type:
REG_DWORD
Example value:
0x00000001
Mac information and settings
- Preference Key Name: DefaultJavaScriptSetting
- Example value:
1
Back to top
預設通知設定 (DefaultNotificationsSetting)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
設定網站是否可以顯示桌面通知。您可以預設為允許顯示 (1)、拒絕顯示 (2),或每次網站想要顯示通知時都詢問使用者 (3)。
如果不設定此原則,預設為允許選是通知,且使用者可以變更此原則。
* 1 =允許網站顯示桌面通知
* 2 =不允許任何網站顯示桌面通知
* 3 =每次網站想要顯示桌面通知時詢問
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DefaultNotificationsSetting
- GP name: 預設通知設定
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/內容設定
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DefaultNotificationsSetting
- Value Type:
REG_DWORD
Example value:
0x00000002
Mac information and settings
- Preference Key Name: DefaultNotificationsSetting
- Example value:
2
Back to top
Default Adobe Flash setting (DefaultPluginsSetting)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
Determines whether websites that aren't covered by 'PluginsAllowedForUrls' or 'PluginsBlockedForUrls' can automatically run the Adobe Flash plug-in. You can select 'BlockPlugins' (2) to block Adobe Flash on all sites, or you can select 'ClickToPlay' (3) to let Adobe Flash run but require the user to click the placeholder to start it. In any case, the 'PluginsAllowedForUrls' and 'PluginsBlockedForUrls' policies take precedence over 'DefaultPluginsSetting'.
Automatic playback is only allowed for domains explicitly listed in the 'PluginsAllowedForUrls' policy. If you want to enable automatic playback for all sites, consider adding http://* and https://* to this list.
If you don't configure this policy, the user can change this setting manually.
* 2 = Block the Adobe Flash plug-in
* 3 = Click to play
The former '1' option set allow-all, but this functionality is now only handled by the 'PluginsAllowedForUrls' policy. Existing policies using '1' will operate in Click-to-play mode.
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DefaultPluginsSetting
- GP name: Default Adobe Flash setting
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/內容設定
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DefaultPluginsSetting
- Value Type:
REG_DWORD
Example value:
0x00000002
Mac information and settings
- Preference Key Name: DefaultPluginsSetting
- Example value:
2
Back to top
預設快顯視窗設定 (DefaultPopupsSetting)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
設定網站是否可以顯示快顯視窗。您可以允許快顯視窗在所有網站 (1) 上顯示,或在所有網站 (2) 上封鎖。
如果您未設定此原則,預設會封鎖快顯視窗,且使用者可以變更此設定。
* 1 = 允許所有網站顯示快顯視窗
* 2 = 不允許任何網站顯示快顯視窗
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DefaultPopupsSetting
- GP name: 預設快顯視窗設定
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/內容設定
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DefaultPopupsSetting
- Value Type:
REG_DWORD
Example value:
0x00000001
Mac information and settings
- Preference Key Name: DefaultPopupsSetting
- Example value:
1
Back to top
控制 Web 藍牙 API 的使用 (DefaultWebBluetoothGuardSetting)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
控制網站是否可以存取附近的藍牙裝置。您可以完全封鎖存取,或在每次想存取藍牙裝置時要求網站詢問使用者。
如果您未設定此原則,則會使用預設值 (3,這代表每次都會詢問使用者),而且使用者可以變更預設值。
* 2 = 不允許任何網站利用 Web 藍牙 API 要求存取藍牙裝置
* 3 = 允許網站要求使用者授與存取附近藍牙裝置的權限
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DefaultWebBluetoothGuardSetting
- GP name: 控制 Web 藍牙 API 的使用
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/內容設定
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DefaultWebBluetoothGuardSetting
- Value Type:
REG_DWORD
Example value:
0x00000002
Mac information and settings
- Preference Key Name: DefaultWebBluetoothGuardSetting
- Example value:
2
Back to top
控制 WebUSB API 的使用 (DefaultWebUsbGuardSetting)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
設定網站是否可存取連接的 USB 裝置。每次網站想要存取連接的USB裝置時,您都可以完全封鎖存取或詢問使用者。
您可以使用 “WebUsbAskForUrls” 和 “WebUsbBlockedForUrls” 原則覆寫此原則的特定 URL 模式。
如果不設定此原則,網站將根據預設詢問使用者,是否可以存取連接的USB裝置 (3),且使用者可以變更此設定。
* 2 =不允許任何網站透過 WebUSB API 要求存取 USB 裝置
* 3 =允許網站要求使用者授與權限存取連接的 USB 裝置
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DefaultWebUsbGuardSetting
- GP name: 控制 WebUSB API 的使用
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/內容設定
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DefaultWebUsbGuardSetting
- Value Type:
REG_DWORD
Example value:
0x00000002
Mac information and settings
- Preference Key Name: DefaultWebUsbGuardSetting
- Example value:
2
Back to top
允許這些網站上的影像 (ImagesAllowedForUrls)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
根據 URL 模式,定義可以顯示影像的網站清單。
如果您未設定這個原則,所有網站都將使用來自 [DefaultImagesSetting] 原則 (如有設定) 或使用者個人設定的全域預設值。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ImagesAllowedForUrls
- GP name: 允許這些網站上的影像
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/內容設定
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\ImagesAllowedForUrls
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\ImagesAllowedForUrls\0 = "https://www.contoso.com"
SOFTWARE\Policies\Microsoft\Edge\ImagesAllowedForUrls\1 = "[*.]contoso.edu"
Mac information and settings
- Preference Key Name: ImagesAllowedForUrls
- Example value:
<array>
<string>https://www.contoso.com</string>
<string>[*.]contoso.edu</string>
</array>
Back to top
特定網站上的封鎖影像 (ImagesBlockedForUrls)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
根據 URL 模式,定義不允許顯示影像的網站。
如果您未設定此原則,所有網站都將使用來自 [DefaultImagesSetting] 原則 (如有設定) 或使用者個人設定的全域預設值。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ImagesBlockedForUrls
- GP name: 特定網站上的封鎖影像
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/內容設定
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\ImagesBlockedForUrls
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\ImagesBlockedForUrls\0 = "https://www.contoso.com"
SOFTWARE\Policies\Microsoft\Edge\ImagesBlockedForUrls\1 = "[*.]contoso.edu"
Mac information and settings
- Preference Key Name: ImagesBlockedForUrls
- Example value:
<array>
<string>https://www.contoso.com</string>
<string>[*.]contoso.edu</string>
</array>
Back to top
允許特定網站上的 JavaScript (JavaScriptAllowedForUrls)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
根據 URL 的規則,定義允許執行 JavaScript 的網站清單。
如果您未設定此原則,如果您未設定此原則,所有網站都將使用來自 [DefaultJavaScriptSetting] 原則 (如有設定) 或使用者個人設定的全域預設值。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: JavaScriptAllowedForUrls
- GP name: 允許特定網站上的 JavaScript
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/內容設定
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\JavaScriptAllowedForUrls
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\JavaScriptAllowedForUrls\0 = "https://www.contoso.com"
SOFTWARE\Policies\Microsoft\Edge\JavaScriptAllowedForUrls\1 = "[*.]contoso.edu"
Mac information and settings
- Preference Key Name: JavaScriptAllowedForUrls
- Example value:
<array>
<string>https://www.contoso.com</string>
<string>[*.]contoso.edu</string>
</array>
Back to top
封鎖特定網站上的 JavaScript (JavaScriptBlockedForUrls)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
根據 URL 模式,定義不允許執行 JavaScript 的網站。
如果您未設定此原則,所有網站都將使用來自 [DefaultJavaScriptSetting] 原則 (如有設定) 或使用者個人設定的全域預設值。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: JavaScriptBlockedForUrls
- GP name: 封鎖特定網站上的 JavaScript
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/內容設定
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\JavaScriptBlockedForUrls
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\JavaScriptBlockedForUrls\0 = "https://www.contoso.com"
SOFTWARE\Policies\Microsoft\Edge\JavaScriptBlockedForUrls\1 = "[*.]contoso.edu"
Mac information and settings
- Preference Key Name: JavaScriptBlockedForUrls
- Example value:
<array>
<string>https://www.contoso.com</string>
<string>[*.]contoso.edu</string>
</array>
Back to top
允許特定網站上的通知 (NotificationsAllowedForUrls)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
根據 URL 模式,定義可以顯示通知的網站。
如果您未設定此原則,所有網站都將使用來自 [DefaultNotificationsSetting] 原則 (如有設定) 或使用者個人設定的全域預設值。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: NotificationsAllowedForUrls
- GP name: 允許特定網站上的通知
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/內容設定
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\NotificationsAllowedForUrls
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\NotificationsAllowedForUrls\0 = "https://www.contoso.com"
SOFTWARE\Policies\Microsoft\Edge\NotificationsAllowedForUrls\1 = "[*.]contoso.edu"
Mac information and settings
- Preference Key Name: NotificationsAllowedForUrls
- Example value:
<array>
<string>https://www.contoso.com</string>
<string>[*.]contoso.edu</string>
</array>
Back to top
封鎖特定網站上的通知 (NotificationsBlockedForUrls)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
根據 URL 模式,定義封鎖顯示通知的網站清單。
如果您未設定此原則,來自 [DefaultNotificationsSetting] 原則 (如有設定) 的全域預設值或使用者的個人設定將用於所有網站。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: NotificationsBlockedForUrls
- GP name: 封鎖特定網站上的通知
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/內容設定
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\NotificationsBlockedForUrls
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\NotificationsBlockedForUrls\0 = "https://www.contoso.com"
SOFTWARE\Policies\Microsoft\Edge\NotificationsBlockedForUrls\1 = "[*.]contoso.edu"
Mac information and settings
- Preference Key Name: NotificationsBlockedForUrls
- Example value:
<array>
<string>https://www.contoso.com</string>
<string>[*.]contoso.edu</string>
</array>
Back to top
Allow the Adobe Flash plug-in on specific sites (PluginsAllowedForUrls)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
Define a list of sites, based on URL patterns, that can run the Adobe Flash plug-in.
If you don't configure this policy, the global default value from the 'DefaultPluginsSetting' policy (if set) or the user's personal configuration is used for all sites.
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: PluginsAllowedForUrls
- GP name: Allow the Adobe Flash plug-in on specific sites
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/內容設定
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\PluginsAllowedForUrls
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\PluginsAllowedForUrls\0 = "https://www.contoso.com"
SOFTWARE\Policies\Microsoft\Edge\PluginsAllowedForUrls\1 = "[*.]contoso.edu"
Mac information and settings
- Preference Key Name: PluginsAllowedForUrls
- Example value:
<array>
<string>https://www.contoso.com</string>
<string>[*.]contoso.edu</string>
</array>
Back to top
Block the Adobe Flash plug-in on specific sites (PluginsBlockedForUrls)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
Define a list of sites, based on URL patterns, that are blocked from running Adobe Flash.
If you don't configure this policy, the global default value from the 'DefaultPluginsSetting' policy (if set) or the user's personal configuration is used for all sites.
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: PluginsBlockedForUrls
- GP name: Block the Adobe Flash plug-in on specific sites
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/內容設定
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\PluginsBlockedForUrls
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\PluginsBlockedForUrls\0 = "https://www.contoso.com"
SOFTWARE\Policies\Microsoft\Edge\PluginsBlockedForUrls\1 = "[*.]contoso.edu"
Mac information and settings
- Preference Key Name: PluginsBlockedForUrls
- Example value:
<array>
<string>https://www.contoso.com</string>
<string>[*.]contoso.edu</string>
</array>
Back to top
允許特定站台上的快顯視窗 (PopupsAllowedForUrls)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
根據 URL 模式,定義可以開始快顯視窗的網站清單。
如果您未設定這個原則,所有網站都將使用來自 [DefaultPopupsSetting] 原則 (如有設定) 或使用者個人設定的全域預設值。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: PopupsAllowedForUrls
- GP name: 允許特定站台上的快顯視窗
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/內容設定
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\PopupsAllowedForUrls
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\PopupsAllowedForUrls\0 = "https://www.contoso.com"
SOFTWARE\Policies\Microsoft\Edge\PopupsAllowedForUrls\1 = "[*.]contoso.edu"
Mac information and settings
- Preference Key Name: PopupsAllowedForUrls
- Example value:
<array>
<string>https://www.contoso.com</string>
<string>[*.]contoso.edu</string>
</array>
Back to top
封鎖特定網站上的快顯視窗 (PopupsBlockedForUrls)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
根據 URL 模式,定義開啟快顯視窗功能受封鎖的網站清單。
如果您未設定這個原則,所有網站都將使用來自 [DefaultPopupsSetting] 原則 (如有設定) 或使用者個人設定的全域預設值。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: PopupsBlockedForUrls
- GP name: 封鎖特定網站上的快顯視窗
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/內容設定
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\PopupsBlockedForUrls
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\PopupsBlockedForUrls\0 = "https://www.contoso.com"
SOFTWARE\Policies\Microsoft\Edge\PopupsBlockedForUrls\1 = "[*.]contoso.edu"
Mac information and settings
- Preference Key Name: PopupsBlockedForUrls
- Example value:
<array>
<string>https://www.contoso.com</string>
<string>[*.]contoso.edu</string>
</array>
Back to top
登錄通訊協定處理常式 (RegisteredProtocolHandlers)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
登錄通訊協定處理常式清單。將協定屬性設定為配置 (如 [mailto]),將 URL 屬性設定為處理該配置的 URL 應用程式模式。該模式可包含 [%s],其可由處理過的 URL 替換。
您可以為此原則推薦特定值,但不能要求使用者使用其值。
由原則登錄的處理常式可與由使用者登錄的任何處理常式合併,且兩者皆可使用。使用者可以透過安裝新的預設處理常式來覆寫原則安裝的協定處理常式,但無法移除原則登錄的協定處理常式。
Supported features:
-
Can be mandatory:
No
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Dictionary
Windows information and settings
Group Policy (ADMX) info
- GP unique name: RegisteredProtocolHandlers
- GP name: 登錄通訊協定處理常式
- GP path (Mandatory):
N/A
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/內容設定
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
N/A
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
RegisteredProtocolHandlers
- Value Type:
REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\RegisteredProtocolHandlers = [
{
"default": true,
"protocol": "mailto",
"url": "https://mail.contoso.com/mail/?extsrc=mailto&url=%s"
}
]
Mac information and settings
- Preference Key Name: RegisteredProtocolHandlers
- Example value:
<key>RegisteredProtocolHandlers</key>
<array>
<dict>
<key>default</key>
<true/>
<key>protocol</key>
<string>mailto</string>
<key>url</key>
<string>https://mail.contoso.com/mail/?extsrc=mailto&url=%s</string>
</dict>
</array>
Back to top
授予特定網站存取權限以連接到特定 USB 裝置。 (WebUsbAllowDevicesForUrls)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
定義可以由指定廠商和產品識別碼自動存取 USB 裝置的網站清單。在清單中的每個項目必須包含裝置和 URL,這樣原則才有效。每個裝置的定義包含廠商識別碼和產品識別碼欄位。未定義的識別碼會視為有一個例外狀況的萬用字元:沒有廠商識別碼,您便無法指定產品識別碼。如果您繼續這麼做,該原則為有效,且會略過該原則。
USB 權限模型會使用要求網站的 URL (「要求 URL」) 和最上層框架的 URL (「內嵌 URL」),為授予要求 URL 存取 USB 裝置的權限。在 iframe 中載入要求網站時,要求 URL 可能會和內嵌 URL 不同。因此,「url」欄位只能包含兩個 URL 字串,並以逗號分隔,分別指定要求和內嵌 URL。如果只指定一個 URL,那麼不論內嵌狀態如何,在已授予對應 USB 裝置存取權限時,要求網站的 URL 會與此 URL 配對。「url」中的 Url 必須是有效的 URL,否則會略過原則。
如果您未設定此原則,來自 [DefaultWebUsbGuardSetting] 原則 (如有設定) 或使用者個人設定的全域預設值適用於所有網站。
此原則中的 URL 模式不應與 [WebUsbBlockedForUrls] 原則中設定的模式相衝突。如有衝突,此原則的優先順序高於 [WebUsbBlockedForUrls] 和 [WebUsbAskForUrls] 原則。
此原則與 DeviceWebUsbAllowDevicesForUrls 原則的值會合併在一起。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Dictionary
Windows information and settings
Group Policy (ADMX) info
- GP unique name: WebUsbAllowDevicesForUrls
- GP name: 授予特定網站存取權限以連接到特定 USB 裝置。
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/內容設定
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
WebUsbAllowDevicesForUrls
- Value Type:
REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\WebUsbAllowDevicesForUrls = [
{
"devices": [
{
"product_id": 5678,
"vendor_id": 1234
}
],
"urls": [
"https://contoso.com",
"https://fabrikam.com"
]
}
]
Mac information and settings
- Preference Key Name: WebUsbAllowDevicesForUrls
- Example value:
<key>WebUsbAllowDevicesForUrls</key>
<array>
<dict>
<key>devices</key>
<array>
<dict>
<key>product_id</key>
<integer>5678</integer>
<key>vendor_id</key>
<integer>1234</integer>
</dict>
</array>
<key>urls</key>
<array>
<string>https://contoso.com</string>
<string>https://fabrikam.com</string>
</array>
</dict>
</array>
Back to top
在特定站台上允許 WebUSB (WebUsbAskForUrls)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
根據 URL 模式,定義可以要求使用者存取 USB 裝置的網站清單。
如果您未設定這個原則,所有網站都將使用來自 [DefaultWebUsbGuardSetting] 原則 (如有設定) 或使用者個人設定的全域預設值。
URL 模式在此原則中的定義不會與 [WebUsbBlockedForUrls] 原則中的設定相衝突 - 您不能同時允許和封鎖一個 URL。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: WebUsbAskForUrls
- GP name: 在特定站台上允許 WebUSB
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/內容設定
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\WebUsbAskForUrls
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\WebUsbAskForUrls\0 = "https://www.contoso.com"
SOFTWARE\Policies\Microsoft\Edge\WebUsbAskForUrls\1 = "[*.]contoso.edu"
Mac information and settings
- Preference Key Name: WebUsbAskForUrls
- Example value:
<array>
<string>https://www.contoso.com</string>
<string>[*.]contoso.edu</string>
</array>
Back to top
封鎖特定網站上的 WebUSB (WebUsbBlockedForUrls)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
根據 URL 模式,定義無法要求使用者授予 USB 裝置存取權限的網站清單。
如果您未設定這個原則,所有網站都將使用來自 [DefaultWebUsbGuardSetting] 原則 (如有設定) 或使用者個人設定的全域預設值。
URL 模式在此原則中的定義不會與 [WebUsbAskForUrls] 原則中的設定相衝突。您不能同時允許和封鎖一個 URL。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: WebUsbBlockedForUrls
- GP name: 封鎖特定網站上的 WebUSB
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/內容設定
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\WebUsbBlockedForUrls
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\WebUsbBlockedForUrls\0 = "https://www.contoso.com"
SOFTWARE\Policies\Microsoft\Edge\WebUsbBlockedForUrls\1 = "[*.]contoso.edu"
Mac information and settings
- Preference Key Name: WebUsbBlockedForUrls
- Example value:
<array>
<string>https://www.contoso.com</string>
<string>[*.]contoso.edu</string>
</array>
Back to top
啟用預設搜尋提供者 (DefaultSearchProviderEnabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
允許使用預設搜尋提供者。
如果啟用此原則,使用者可以在網址列中輸入字詞進行搜尋 (只要輸入的內容不是 URL)。
您可以透過啟用其餘預設搜尋原則來指定要使用的預設搜尋提供者。如果保留空白 (不設定),則使用者可以選擇預設提供者。
如果停用此原則,則使用者無法從網址列進行搜尋。
如果啟用或停用此原則,則使用者將無法進行變更或覆寫。
如果不設定此原則,則啟用預設搜尋提供者,使用者可以選擇預設搜尋提供者並設定搜尋提供者列表。
此原則僅適用於已加入 Microsoft Active Directory 網域的 Windows 執行個體,或已註冊裝置管理的 Windows 10 專業版及 Windows 10 企業版執行個體。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DefaultSearchProviderEnabled
- GP name: 啟用預設搜尋提供者
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/預設搜尋提供者
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DefaultSearchProviderEnabled
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: DefaultSearchProviderEnabled
- Example value:
True
Back to top
預設搜尋提供者編碼 (DefaultSearchProviderEncodings)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定的搜尋提供者所支援的字元編碼方式。編碼是字碼頁名稱,如 UTF-8、GB2312 和 ISO-8859-1。這些編碼會按提供的順序進行嘗試。
此原則是選擇性的。如果未設定,則使用預設值 UTF-8。
僅在啟用 [DefaultSearchProviderEnabled] 和 [DefaultSearchProviderSearchURL] 原則時,才能套用此原則。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DefaultSearchProviderEncodings
- GP name: 預設搜尋提供者編碼
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/預設搜尋提供者
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\DefaultSearchProviderEncodings
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\DefaultSearchProviderEncodings\0 = "UTF-8"
SOFTWARE\Policies\Microsoft\Edge\DefaultSearchProviderEncodings\1 = "UTF-16"
SOFTWARE\Policies\Microsoft\Edge\DefaultSearchProviderEncodings\2 = "GB2312"
SOFTWARE\Policies\Microsoft\Edge\DefaultSearchProviderEncodings\3 = "ISO-8859-1"
Mac information and settings
- Preference Key Name: DefaultSearchProviderEncodings
- Example value:
<array>
<string>UTF-8</string>
<string>UTF-16</string>
<string>GB2312</string>
<string>ISO-8859-1</string>
</array>
Back to top
指定預設搜尋提供者的影像搜尋功能 (DefaultSearchProviderImageURL)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定用於影像搜尋的搜尋引擎 URL。將使用 GET 方法傳送搜尋要求。
此則是選擇性的。如果不設定此原則,則無法使用影像搜尋。
僅在啟用 [DefaultSearchProviderEnabled] 和 [DefaultSearchProviderSearchURL] 原則時,才能套用此原則。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DefaultSearchProviderImageURL
- GP name: 指定預設搜尋提供者的影像搜尋功能
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/預設搜尋提供者
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DefaultSearchProviderImageURL
- Value Type:
REG_SZ
Example value:
"https://search.contoso.com/searchbyimage/upload"
Mac information and settings
- Preference Key Name: DefaultSearchProviderImageURL
- Example value:
"https://search.contoso.com/searchbyimage/upload"
Back to top
使用 POST 的影像 URL 參數 (DefaultSearchProviderImageURLPostParams)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
如果啟用此原則,則會指定使用 POST 執行影像搜尋時使用的參數。該原則由逗號分隔的名稱/值組所組成。如果值是範本參數,如前面範例中的 {imageThumbnail},則會以實際影像縮圖資料替換。僅在啟用 [DefaultSearchProviderEnabled] 和 [DefaultSearchProviderSearchURL] 原則時,才能套用此原則。
如果未設定此原則,則使用 GET 方法傳送影像搜尋要求。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DefaultSearchProviderImageURLPostParams
- GP name: 使用 POST 的影像 URL 參數
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/預設搜尋提供者
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DefaultSearchProviderImageURLPostParams
- Value Type:
REG_SZ
Example value:
"content={imageThumbnail},url={imageURL},sbisrc={SearchSource}"
Mac information and settings
- Preference Key Name: DefaultSearchProviderImageURLPostParams
- Example value:
"content={imageThumbnail},url={imageURL},sbisrc={SearchSource}"
Back to top
預設搜尋提供者關鍵字 (DefaultSearchProviderKeyword)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定關鍵字,也就是在網址列中用來觸發此提供者搜尋的捷徑。
此原則是選擇性的。如果未設定此原則,則不會有關鍵字啟動搜尋提供者。
僅在啟用 [DefaultSearchProviderEnabled] 和 [DefaultSearchProviderSearchURL] 原則時,才能套用此原則。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DefaultSearchProviderKeyword
- GP name: 預設搜尋提供者關鍵字
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/預設搜尋提供者
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DefaultSearchProviderKeyword
- Value Type:
REG_SZ
Example value:
"mis"
Mac information and settings
- Preference Key Name: DefaultSearchProviderKeyword
- Example value:
"mis"
Back to top
預設搜尋提供者名稱 (DefaultSearchProviderName)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定預設搜尋提供者的名稱。
如果啟用此原則,則可以設定預設搜尋提供者的名稱。
如果未啟用此原則或將其保留空白,則使用搜尋 URL 指定的主機名稱。
['DefaultSearchProviderName] 應設定為組織批准的加密搜尋提供者,該提供者需對應至 DTBC 0008 中設定的加密搜尋提供者。僅在啟用 [DefaultSearchProviderEnabled] 和 [DefaultSearchProviderSearchURL] 原則時,才能套用此原則。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DefaultSearchProviderName
- GP name: 預設搜尋提供者名稱
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/預設搜尋提供者
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DefaultSearchProviderName
- Value Type:
REG_SZ
Example value:
"My Intranet Search"
Mac information and settings
- Preference Key Name: DefaultSearchProviderName
- Example value:
"My Intranet Search"
Back to top
預設搜尋提供者搜尋 URL (DefaultSearchProviderSearchURL)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定用於預設搜尋的搜索引擎 URL。該 URL 包含字串 [{searchTerms}],在查詢時由使用者的搜尋字詞替換。
指定 Bing 的搜尋 URL 為:
[{bing:baseURL}search?q={searchTerms}]。
指定 Google 的搜尋網址為: [{google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}ie={inputEncoding}]。
當您啟用 [DefaultSearchProviderEnabled] 原則時,需有此原則;如果您未啟用 [DefaultSearchProviderEnabled] 原則,則此原則將忽略。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DefaultSearchProviderSearchURL
- GP name: 預設搜尋提供者搜尋 URL
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/預設搜尋提供者
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DefaultSearchProviderSearchURL
- Value Type:
REG_SZ
Example value:
"https://search.contoso.com/search?q={searchTerms}"
Mac information and settings
- Preference Key Name: DefaultSearchProviderSearchURL
- Example value:
"https://search.contoso.com/search?q={searchTerms}"
Back to top
預設建議的搜尋提供者 URL (DefaultSearchProviderSuggestURL)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定用於提供搜尋建議的搜索引擎的 URL。該 URL 包含字串 [{searchTerms}],在查詢時由使用者輸入的文字替換。
此原則是選擇性的。如果未設定此原則,則使用者將看不見搜尋建議;他們會看到自己瀏覽歷程記錄和 [我的最愛] 中的建議。
Bing 的建議 URL 可以指定為:
[{bing:baseURL}qbox?query={searchTerms}]。
Google 的建議 URL 可以指定為: [{google:baseURL}complete/search?output=chrome&q={searchTerms}]。
僅在啟用 [DefaultSearchProviderEnabled] 和 [DefaultSearchProviderSearchURL] 原則時,才能套用此原則。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DefaultSearchProviderSuggestURL
- GP name: 預設建議的搜尋提供者 URL
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/預設搜尋提供者
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DefaultSearchProviderSuggestURL
- Value Type:
REG_SZ
Example value:
"https://search.contoso.com/suggest?q={searchTerms}"
Mac information and settings
- Preference Key Name: DefaultSearchProviderSuggestURL
- Example value:
"https://search.contoso.com/suggest?q={searchTerms}"
Back to top
設定允許的延伸模組類型 (ExtensionAllowedTypes)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
控制哪些延伸模組可以安裝,並會限制執行階段存取。
此設定會定義延伸模組的允許類型以及可互動的主機。數值為一列字串,其中每一個字串應屬下列其中之一:「延伸模組」、「佈景主題」、「user_script」與「hosted_app」。如需更多有關這些類型的延伸模組資訊,請參閱 Microsoft Edge。
請注意此原則也會影響透過 [ExtensionInstallForcelist] 原則強制安裝的延伸模組。
如果您啟用此原則,則只會安裝符合清單類型的延伸模組。
如果您未設定此原則,可接受的延伸模組類型不會有任何強制執行限制。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ExtensionAllowedTypes
- GP name: 設定允許的延伸模組類型
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/擴充功能
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\ExtensionAllowedTypes
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\ExtensionAllowedTypes\0 = "hosted_app"
Mac information and settings
- Preference Key Name: ExtensionAllowedTypes
- Example value:
<array>
<string>hosted_app</string>
</array>
Back to top
允許特定安裝擴充功能 (ExtensionInstallAllowlist)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
根據預設,允許所有擴充功能。不過如果您透過設定 [ExtensionInstallBlockList] 原則為「*」封鎖所有擴充功能,則使用者只能安裝在此原則中定義的擴充功能。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ExtensionInstallAllowlist
- GP name: 允許特定安裝擴充功能
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/擴充功能
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallAllowlist
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallAllowlist\0 = "extension_id1"
SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallAllowlist\1 = "extension_id2"
Mac information and settings
- Preference Key Name: ExtensionInstallAllowlist
- Example value:
<array>
<string>extension_id1</string>
<string>extension_id2</string>
</array>
Back to top
控制不能安裝哪些擴充程式 (ExtensionInstallBlocklist)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
列出使用者無法在 Microsoft Edge 中安裝的特定擴充功能。部署此原則時,將停用此清單中先前安裝的所有擴充功能,且使用者將無法啟用清單中的擴充功能。如果從封鎖的擴充功能清單中移除某個項目,則該擴充功能會自動在以前安裝的位置重新啟用。
使用 [*] 封鎖允許清單中未明確列出的所有擴充功能。
如果您不設定此原則,則使用者可以在 Microsoft Edge 中安裝任何擴充功能。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ExtensionInstallBlocklist
- GP name: 控制不能安裝哪些擴充程式
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/擴充功能
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallBlocklist
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallBlocklist\0 = "extension_id1"
SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallBlocklist\1 = "extension_id2"
Mac information and settings
- Preference Key Name: ExtensionInstallBlocklist
- Example value:
<array>
<string>extension_id1</string>
<string>extension_id2</string>
</array>
Back to top
控制哪些擴充功能會默默地安裝 (ExtensionInstallForcelist)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定以無通知安裝且無使用者互動的擴充功能,且使用者無法解除安裝或停用 (「強制安裝」)。所有擴充功能要求的權限均為隱含授予,且無使用者互動,其中包括所有其他未來版本擴充功能所要求的權限。此外,會授與 enterprise.deviceAttributes 和 enterprise.platformKeys 擴充功能 API 權限。(這兩個 API 只能用於強制安裝的擴充功能)。
此原則的優先順序高於潛在衝突的 [ExtensionInstallBlocklist] 原則。當您從強制安裝清單中移除擴充功能,Microsoft Edge 則會自動解除安裝。
未加入 Microsoft Active Directory 網域的 Windows 裝置,強制安裝功能僅限於 Microsoft Store 中可取得的擴充功能。
請注意,使用者能透過開發人員工具修改所有擴充功能的原始碼,這可能會造成擴充功能異常。如果您擔心此問題,請設定 [DeveloperToolsAvailability] 原則。
利用下列格式將擴充功能新增至清單中:
[extensionID];[updateURL]
- extensionID – 開發人員模式中,edge://extensions 上找不到 32 個字母組成的字串。
-updateURL (選用) 是 https://docs.microsoft.com/Placeholder07A 所述的應用程式或擴充功能 [更新資訊清單 XML] 文件的位址。如果您未設定 updateURL,則會使用 Microsoft Store 更新 URL (目前為 https://extensionwebstorebase.edgesv.net/v1/crx)。請注意,此原則中的更新 URL 設定只會用於初始安裝;擴充功能的後續更新會使用擴充功能資訊清單中指出的更新 URL。
例如 gggmmkjegpiggikcnhidnjjhmicpibll;https://extensionwebstorebase.edgesv.net/v1/crx 會從 Microsoft Store 的「更新」URL 安裝 Microsoft Online 應用程式。如需更多關於裝載擴充功能的詳細資訊,請參閱:https://docs.microsoft.com//Placeholder03B。
如果您未設定此原則,則不會自動安裝任何擴充功能,且使用者可以解除安裝 Microsoft Edge 中的任何擴充功能。
請注意,此原則不適用於 InPrivate 模式。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ExtensionInstallForcelist
- GP name: 控制哪些擴充功能會默默地安裝
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/擴充功能
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallForcelist
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallForcelist\0 = "gbchcmhmhahfdphkhkmpfmihenigjmpp;https://extensionwebstorebase.edgesv.net/v1/crx"
SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallForcelist\1 = "abcdefghijklmnopabcdefghijklmnop"
Mac information and settings
- Preference Key Name: ExtensionInstallForcelist
- Example value:
<array>
<string>gbchcmhmhahfdphkhkmpfmihenigjmpp;https://extensionwebstorebase.edgesv.net/v1/crx</string>
<string>abcdefghijklmnopabcdefghijklmnop</string>
</array>
Back to top
設定擴充功能與使用者指令碼安裝來源 (ExtensionInstallSources)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
定義可以安裝擴充功能和佈景主題的 URL。
根據預設,使用者必須下載每個擴充功能或欲安裝指令碼的 *.crx 檔案,並將其拖曳到 Microsoft Edge 設定頁面。此原則可讓特定的 URL 用來替使用者安裝擴充功能或指令碼。
此清單中的每個項目都是擴充程式樣式的比對模式 (請參閱 https://docs.microsoft.com//Placeholder04)。使用者可以輕易地從任何符合清單中項目的 URL 安裝項目。下載開始的 *.crx 檔案和頁面位置 (亦即 referrer) 都必須經過這些模式的允許。
[ExtensionInstallBlocklist] 原則的優先順序高於此原則。將不會安裝任何封鎖清單上的擴充功能,即使該擴充功能來自此清單上的網站。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ExtensionInstallSources
- GP name: 設定擴充功能與使用者指令碼安裝來源
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/擴充功能
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallSources
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallSources\0 = "https://corp.contoso.com/*"
Mac information and settings
- Preference Key Name: ExtensionInstallSources
- Example value:
<array>
<string>https://corp.contoso.com/*</string>
</array>
Back to top
設定擴充功能管理設定 (ExtensionSettings)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
設定 Microsoft Edge 的擴充功能管理設定。
此原則可控制多組設定,包括所有現有擴充功能相關原則所控制的設定。如果同時設定,則此原則會覆寫所有舊版原則。
此原則會將擴充功能識別碼或更新 URL 對應至其設定。擁有擴充功能識別碼,此設定僅能套用至指定擴充功能。替特殊識別碼「*」設定預設設定,以套用至所有未特別列於此原則中的擴充功能。擁有更新後的 URL,此設定會套用至所有帶有此擴充功能資訊清單中所述的完全更新 URL 的擴充功能,正如 https://docs.microsoft.com/Placeholder07A 中所述。
如要查看可能設定與此原則結構的完整描述,請前往 https://docs.microsoft.com/Placeholder07B。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Dictionary
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ExtensionSettings
- GP name: 設定擴充功能管理設定
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/擴充功能
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
ExtensionSettings
- Value Type:
REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\ExtensionSettings = {
"*": {
"allowed_types": [
"hosted_app"
],
"blocked_install_message": "Custom error message.",
"blocked_permissions": [
"downloads",
"bookmarks"
],
"install_sources": [
"https://company-intranet/apps"
],
"installation_mode": "blocked",
"runtime_allowed_hosts": [
"*://good.contoso.com"
],
"runtime_blocked_hosts": [
"*://*.contoso.com"
]
},
"abcdefghijklmnopabcdefghijklmnop": {
"blocked_permissions": [
"history"
],
"installation_mode": "allowed",
"minimum_version_required": "1.0.1"
},
"bcdefghijklmnopabcdefghijklmnopa": {
"allowed_permissions": [
"downloads"
],
"installation_mode": "force_installed",
"runtime_allowed_hosts": [
"*://good.contoso.com"
],
"runtime_blocked_hosts": [
"*://*.contoso.com"
],
"update_url": "https://contoso.com/update_url"
},
"cdefghijklmnopabcdefghijklmnopab": {
"blocked_install_message": "Custom error message.",
"installation_mode": "blocked"
},
"defghijklmnopabcdefghijklmnopabc,efghijklmnopabcdefghijklmnopabcd": {
"blocked_install_message": "Custom error message.",
"installation_mode": "blocked"
},
"fghijklmnopabcdefghijklmnopabcde": {
"blocked_install_message": "Custom removal message.",
"installation_mode": "removed"
},
"update_url:https://www.contoso.com/update.xml": {
"allowed_permissions": [
"downloads"
],
"blocked_permissions": [
"wallpaper"
],
"installation_mode": "allowed"
}
}
Mac information and settings
- Preference Key Name: ExtensionSettings
- Example value:
<key>ExtensionSettings</key>
<dict>
<key>*</key>
<dict>
<key>allowed_types</key>
<array>
<string>hosted_app</string>
</array>
<key>blocked_install_message</key>
<string>Custom error message.</string>
<key>blocked_permissions</key>
<array>
<string>downloads</string>
<string>bookmarks</string>
</array>
<key>install_sources</key>
<array>
<string>https://company-intranet/apps</string>
</array>
<key>installation_mode</key>
<string>blocked</string>
<key>runtime_allowed_hosts</key>
<array>
<string>*://good.contoso.com</string>
</array>
<key>runtime_blocked_hosts</key>
<array>
<string>*://*.contoso.com</string>
</array>
</dict>
<key>abcdefghijklmnopabcdefghijklmnop</key>
<dict>
<key>blocked_permissions</key>
<array>
<string>history</string>
</array>
<key>installation_mode</key>
<string>allowed</string>
<key>minimum_version_required</key>
<string>1.0.1</string>
</dict>
<key>bcdefghijklmnopabcdefghijklmnopa</key>
<dict>
<key>allowed_permissions</key>
<array>
<string>downloads</string>
</array>
<key>installation_mode</key>
<string>force_installed</string>
<key>runtime_allowed_hosts</key>
<array>
<string>*://good.contoso.com</string>
</array>
<key>runtime_blocked_hosts</key>
<array>
<string>*://*.contoso.com</string>
</array>
<key>update_url</key>
<string>https://contoso.com/update_url</string>
</dict>
<key>cdefghijklmnopabcdefghijklmnopab</key>
<dict>
<key>blocked_install_message</key>
<string>Custom error message.</string>
<key>installation_mode</key>
<string>blocked</string>
</dict>
<key>defghijklmnopabcdefghijklmnopabc,efghijklmnopabcdefghijklmnopabcd</key>
<dict>
<key>blocked_install_message</key>
<string>Custom error message.</string>
<key>installation_mode</key>
<string>blocked</string>
</dict>
<key>fghijklmnopabcdefghijklmnopabcde</key>
<dict>
<key>blocked_install_message</key>
<string>Custom removal message.</string>
<key>installation_mode</key>
<string>removed</string>
</dict>
<key>update_url:https://www.contoso.com/update.xml</key>
<dict>
<key>allowed_permissions</key>
<array>
<string>downloads</string>
</array>
<key>blocked_permissions</key>
<array>
<string>wallpaper</string>
</array>
<key>installation_mode</key>
<string>allowed</string>
</dict>
</dict>
Back to top
啟用 Google Cast (EnableMediaRouter)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
啟用此原則以啟用 Google Cast。使用者將可以從應用程式功能表、網頁操作功能表、已啟用 Cast 的網站上的媒體控制項和 (如有顯示) Cast 工具列圖示啟動 Google Cast。
停用此原則以停用 Google Cast。
根據預設,Google Cast 將會啟用。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: EnableMediaRouter
- GP name: 啟用 Google Cast
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/Cast
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
EnableMediaRouter
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: EnableMediaRouter
- Example value:
True
Back to top
在工具列中顯示轉換圖示 (ShowCastIconInToolbar)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
將此原則設定為 True 以顯示工具列或溢位功能表上的 [轉換] 工具列圖示。使用者將無法將其移除。
如果不設定或停用此原則,使用者可以使用其關聯式功能表釘選或移除該圖示。
如果還將 [EnableMediaRouter] 原則設定為 False,則此原則會略過,且不會顯示工具列圖示。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ShowCastIconInToolbar
- GP name: 在工具列中顯示轉換圖示
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/Cast
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
ShowCastIconInToolbar
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: ShowCastIconInToolbar
- Example value:
False
Back to top
允許跨原始來源 HTTP Basic Auth 提示 (AllowCrossOriginAuthPrompt)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
控制頁面上的第三方子內容是否可以開啟 HTTP 基本驗證對話方塊。
一般而言,這會作為網路釣魚防護停用。如果您未設定此原則,此原則將停用,且第三方子內容無法開啟 HTTP 基本驗證對話方塊。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: AllowCrossOriginAuthPrompt
- GP name: 允許跨原始來源 HTTP Basic Auth 提示
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/HTTP 驗證
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
AllowCrossOriginAuthPrompt
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: AllowCrossOriginAuthPrompt
- Example value:
False
Back to top
指定 Microsoft Edge 可委派使用者認證的伺服器清單 (AuthNegotiateDelegateAllowlist)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
設定 Microsoft Edge 可以委派的伺服器清單。
用逗號分隔多個伺服器名稱。允許使用萬用字元 (*)。
如果您未設定此原則,即使已偵測到伺服器為內部網路,Microsoft Edge 仍不會委派使用者認證。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: AuthNegotiateDelegateAllowlist
- GP name: 指定 Microsoft Edge 可委派使用者認證的伺服器清單
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/HTTP 驗證
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
AuthNegotiateDelegateAllowlist
- Value Type:
REG_SZ
Example value:
"contoso.com"
Mac information and settings
- Preference Key Name: AuthNegotiateDelegateAllowlist
- Example value:
"contoso.com"
Back to top
支援的驗證配置 (AuthSchemes)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定支援的 HTTP 驗證配置。
您可以使用以下值來設定原則: [基本],[摘要],[ntlm] 和 [交涉]。以逗點分隔多個值。
如果不設定此原則,則全部四種配置皆會使用。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: AuthSchemes
- GP name: 支援的驗證配置
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/HTTP 驗證
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
AuthSchemes
- Value Type:
REG_SZ
Example value:
"basic,digest,ntlm,negotiate"
Mac information and settings
- Preference Key Name: AuthSchemes
- Example value:
"basic,digest,ntlm,negotiate"
Back to top
設定允許驗證伺服器的清單 (AuthServerAllowlist)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定要啟用整合式驗證的伺服器。僅當 Microsoft Edge 從 Proxy 或此清單中的伺服器收到驗證挑戰時,才會啟用整合式驗證。
以逗點分隔多個伺服器名稱。允許使用萬用字元 (*)。
如果不設定此原則,Microsoft Edge 將會嘗試偵測伺服器是否位於內部網路 – 只有位於內部網路才會回應 IWA 要求。如果伺服器位於網際網路,則 Microsoft Edge 會忽略 IWA 要求。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: AuthServerAllowlist
- GP name: 設定允許驗證伺服器的清單
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/HTTP 驗證
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
AuthServerAllowlist
- Value Type:
REG_SZ
Example value:
"*contoso.com,fabrikam.com,*baz"
Mac information and settings
- Preference Key Name: AuthServerAllowlist
- Example value:
"*contoso.com,fabrikam.com,*baz"
Back to top
當協調 Kerberos 驗證時停用 CNAME 查閱 (DisableAuthNegotiateCnameLookup)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
決定產生的 Kerberos SPN 是根據正式的 DNS 名稱 (CNAME) 或輸入的原始名稱。
如果您啟用此原則,則會略過 CNAME 查閱並使用伺服器名稱 (如輸入內容)。
如果您停用此原則或未設定,會使用伺服器的正式名稱。透過 CNAME 查閱決定。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DisableAuthNegotiateCnameLookup
- GP name: 當協調 Kerberos 驗證時停用 CNAME 查閱
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/HTTP 驗證
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DisableAuthNegotiateCnameLookup
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: DisableAuthNegotiateCnameLookup
- Example value:
False
Back to top
Kerberos SPN 中包含非標準連接埠 (EnableAuthNegotiatePort)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定生成的 Kerberos SPN 是否應該包含一個非標準的連接埠。
如果您啟用此原則,使用者會在 URL 中包含非標準的連接埠 (80 或 443 以外的連接埠),該連接埠包含於生成的 Kerberos SPN 中。
如果您未設定或停用此原則,生成的 Kerberos SPN 在任何情況下均不會包含連接埠。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: EnableAuthNegotiatePort
- GP name: Kerberos SPN 中包含非標準連接埠
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/HTTP 驗證
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
EnableAuthNegotiatePort
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: EnableAuthNegotiatePort
- Example value:
False
Back to top
控制是否要啟用 NTLMv2 驗證 (NtlmV2Enabled)
Supported Versions: Microsoft Edge on Mac since version 77 or later
Description
控制是否啟用 NTLMv2。
Samba 和 Windows 伺服器的所有新版本都支援 NTLMv2。因為 NTLMv2 會降低驗證安全性,您應該僅停用 NTLMv2 以解決回溯相容性問題。
如果您未設定此原則,預設會啟用 NTLMv2。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Mac information and settings
- Preference Key Name: NtlmV2Enabled
- Example value:
True
Back to top
原生訊息中心裝載使用者可以使用的控制項 (NativeMessagingAllowlist)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
列出使用者可在 Microsoft Edge 中使用的特定原生訊息中心主機。
根據預設,所有原生訊息中心的主機均為允許。如果您設定 [NativeMessagingBlocklist] 原則為 *,則會封鎖所有原生訊息中心的主機,且會載入列於此處的原生訊息中心主機。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: NativeMessagingAllowlist
- GP name: 原生訊息中心裝載使用者可以使用的控制項
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/原生訊息
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\NativeMessagingAllowlist
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\NativeMessagingAllowlist\0 = "com.native.messaging.host.name1"
SOFTWARE\Policies\Microsoft\Edge\NativeMessagingAllowlist\1 = "com.native.messaging.host.name2"
Mac information and settings
- Preference Key Name: NativeMessagingAllowlist
- Example value:
<array>
<string>com.native.messaging.host.name1</string>
<string>com.native.messaging.host.name2</string>
</array>
Back to top
設定原生訊息中心的封鎖清單 (NativeMessagingBlocklist)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定不應該使用哪一個原生訊息中心主機。
除非明確列入允許清單,否則使用 [*] 封鎖所有原生訊息中心的主機。
如果您未設定此原則,Microsoft Edge 將載入所有已安裝的原生訊息中心主機。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: NativeMessagingBlocklist
- GP name: 設定原生訊息中心的封鎖清單
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/原生訊息
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\NativeMessagingBlocklist
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\NativeMessagingBlocklist\0 = "com.native.messaging.host.name1"
SOFTWARE\Policies\Microsoft\Edge\NativeMessagingBlocklist\1 = "com.native.messaging.host.name2"
Mac information and settings
- Preference Key Name: NativeMessagingBlocklist
- Example value:
<array>
<string>com.native.messaging.host.name1</string>
<string>com.native.messaging.host.name2</string>
</array>
Back to top
允許使用者層級的原生訊息中心主機 (無需系統管理員權限即可安裝) (NativeMessagingUserLevelHosts)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
啟用使用者層級的原生訊息中心主機安裝。
如果您停用此原則,Microsoft Edge 將只能使用安裝在系統層級上的原生訊息中心主機。
根據預設,如果您未設定此原則,Microsoft Edge 將允許使用者層級的原生訊息中心主機使用。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: NativeMessagingUserLevelHosts
- GP name: 允許使用者層級的原生訊息中心主機 (無需系統管理員權限即可安裝)
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/原生訊息
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
NativeMessagingUserLevelHosts
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: NativeMessagingUserLevelHosts
- Example value:
False
Back to top
啟用儲存密碼的密碼管理員 (PasswordManagerEnabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
啟用 Microsoft Edge 以儲存使用者密碼。
如果啟用此原則,則使用者可以將密碼儲存在 Microsoft Edge 中。下次瀏覽該網站時,Microsoft Edge 將自動輸入密碼。
如果停用此原則,則使用者不能儲存新密碼,但他們仍能使用以前儲存的密碼。
如果啟用或停用此原則,則使用者無法在 Microsoft Edge 中變更或覆寫此原則。如果不設定,則使用者可以儲存密碼,也能關閉此功能。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: PasswordManagerEnabled
- GP name: 啟用儲存密碼的密碼管理員
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/密碼管理員和防護
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/密碼管理員和防護
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
PasswordManagerEnabled
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: PasswordManagerEnabled
- Example value:
True
Back to top
設定變更密碼 URL (PasswordProtectionChangePasswordURL)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
設定變更密碼 URL (僅 HTTP 與 HTTPS 配置)。
密碼保護服務在瀏覽器內看到警告後,會寄送此 URL 給使用者,讓使用者變更密碼。為了讓 Microsoft Edge 在變更密碼頁面上正確擷取新密碼指紋,請確定其遵循 https://docs.microsoft.com/Placeholder10 上的指南。
如果您啟用此原則,則密碼保護服務會寄送此 URL 給使用者,讓使用者變更密碼。
如果您停用此原則或未設定,密碼保護服務不會將使用者重新導向至變更密碼 URL。
此原則僅適用於已加入已註冊裝置管理的 Microsoft Active Directory 網域、Windows 10 專業版或企業執行個體的 Windows 執行個體。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: PasswordProtectionChangePasswordURL
- GP name: 設定變更密碼 URL
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/密碼管理員和防護
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
PasswordProtectionChangePasswordURL
- Value Type:
REG_SZ
Example value:
"https://contoso.com/change_password.html"
Mac information and settings
- Preference Key Name: PasswordProtectionChangePasswordURL
- Example value:
"https://contoso.com/change_password.html"
Back to top
設定密碼保護服務應擷取密碼指紋的企業登入 URL 清單 (PasswordProtectionLoginURLs)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
設定 Microsoft Edge 應擷取密碼指紋並用於密碼重複使用偵測的企業清單登入 URL (僅 HTTP 與 HTTPS 配置) 位置。若要讓 Microsoft Edge 正確擷取密碼指紋,請確定您的登入頁面遵循 https://docs.microsoft.com/Placeholder10 上的方針。
如果您啟用此原則,則密碼保護服務會擷取定義 URL 上的密碼指紋。
如果您停用此原則或未設定,則不會擷取任何密碼指紋。
此原則僅適用於已加入 Microsoft Active Directory 網域或 Windows 10 專業版或已註冊裝置管理企業版執行個體的 Windows 執行個體。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: PasswordProtectionLoginURLs
- GP name: 設定密碼保護服務應擷取密碼指紋的企業登入 URL 清單
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/密碼管理員和防護
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\PasswordProtectionLoginURLs
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\PasswordProtectionLoginURLs\0 = "https://contoso.com/login.html"
SOFTWARE\Policies\Microsoft\Edge\PasswordProtectionLoginURLs\1 = "https://login.contoso.com"
Mac information and settings
- Preference Key Name: PasswordProtectionLoginURLs
- Example value:
<array>
<string>https://contoso.com/login.html</string>
<string>https://login.contoso.com</string>
</array>
Back to top
設定密碼保護警告觸發程序 (PasswordProtectionWarningTrigger)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
可讓您控制何時觸發密碼保護警告。當使用者在潛在可疑的網站上,重複使用受保護的密碼時會警告使用者。
您可以使用 [PasswordProtectionLoginURLs] 和 [PasswordProtectionChangePasswordURL] 原則來設定要保護的密碼。
豁免: [PasswordProtectionLoginURLs] 和 [PasswordProtectionChangePasswordURL] 以及 [SmartScreenAllowListDomains] 中列出的網站不會觸發密碼保護警告。
設定為 [PasswordProtectionWarningOff] (0) 不顯示密碼保護警告。
設定為 [PasswordProtectionWarningOnPasswordReuse] (1) 當使用者於非列於允許清單的網站上,重複使用其受保護的密碼時,顯示密碼保護警告。
如果停用或未設定此原則,則不會顯示警告觸發程序。
* 0 =密碼保護警告已關閉。
* 1 = 重複使用密碼觸發密碼保護警告。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: PasswordProtectionWarningTrigger
- GP name: 設定密碼保護警告觸發程序
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/密碼管理員和防護
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
PasswordProtectionWarningTrigger
- Value Type:
REG_DWORD
Example value:
0x00000001
Mac information and settings
- Preference Key Name: PasswordProtectionWarningTrigger
- Example value:
1
Back to top
預設印表機選取規則 (DefaultPrinterSelection)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
覆寫 Microsoft Edge 預設印表機選取規則。此原則將決定在 Microsoft Edge 中選定的預設印表機規則。使用者首次嘗試列印頁面時,便會發生此情況。
設定此原則後,Microsoft Edge 會嘗試尋找與所有指定屬性相符的印表機,並將其作為預設印表機。如果有多台印表機符合條件,則使用屬性相符的第一台印表機。
如果不設定此原則或在逾時前找不到任何相符的印表機,印表機預設為內建的 PDF 印表機,如果 PDF 印表機無法使用,便設為沒有印表機。
該值剖析為 JSON 物件,符合以下結構描述: { "type": "object", "properties": { "idPattern": { "description": "Regular expression to match printer id.", "type": "string" }, "namePattern": { "description": "Regular expression to match printer display name.", "type": "string" } } }
省略欄位則表示所有值皆相符;例如,如果未指定連線,則 [預覽列印] 將開始尋找各種本機印表機。規則運算式模式必須遵守 JavaScript RegExp 語法,且符合項目會區分大小寫。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DefaultPrinterSelection
- GP name: 預設印表機選取規則
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/列印中
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DefaultPrinterSelection
- Value Type:
REG_SZ
Example value:
"{ "idPattern": ".*public", "namePattern": ".*Color" }"
Mac information and settings
- Preference Key Name: DefaultPrinterSelection
- Example value:
"{ "idPattern": ".*public", "namePattern": ".*Color" }"
Back to top
列印頁首與頁尾 (PrintHeaderFooter)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
在列印對話方塊中強制打開或關閉 [頁首與頁尾]。
如果不設定此原則,使用者可以決定是否列頁首與頁尾。
如果停用此原則,則使用者無法列頁首與頁尾。
如果啟用此原則,使用者一律列印頁首和頁尾。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: PrintHeaderFooter
- GP name: 列印頁首與頁尾
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/列印中
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/列印中
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
PrintHeaderFooter
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: PrintHeaderFooter
- Example value:
False
Back to top
將系統預設的印表機設定為預設印表機 (PrintPreviewUseSystemDefaultPrinter)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
告訴 Microsoft Edge 使用系統預設的印表機做為 [預覽列印] 的預設選擇,而非選擇最近使用的印表機。
如果您停用此原則或未設定,[預覽列印] 會以最近使用的印表機作為預設目的地選擇。
如果您啟用此原則,[預覽列印] 會以 OS 系統預設印表機作為預設目的地選擇。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: PrintPreviewUseSystemDefaultPrinter
- GP name: 將系統預設的印表機設定為預設印表機
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/列印中
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/列印中
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
PrintPreviewUseSystemDefaultPrinter
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: PrintPreviewUseSystemDefaultPrinter
- Example value:
False
Back to top
啟用列印 (PrintingEnabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
Enables printing in Microsoft Edge and prevents users from changing this setting.
If you enable this policy or don't configure it, users can print.
If you disable this policy, users can't print from Microsoft Edge. Printing is disabled in the wrench menu, extensions, JavaScript applications, and so on. Users can still print from plug-ins that bypass Microsoft Edge while printing. For example, certain Adobe Flash applications have the print option in their context menu, which isn't covered by this policy.
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: PrintingEnabled
- GP name: 啟用列印
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/列印中
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
PrintingEnabled
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: PrintingEnabled
- Example value:
True
Back to top
列印使用系統列印對話方塊 (UseSystemPrintDialog)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
顯示系統列印對話方塊,而非顯示預覽列印。
如果啟用此原則,Microsoft Edge 將在使用者列印頁面時,開啟系統列印對話方塊,而非內建預覽列印。
如果不設定或停用此原則,則列印命令會觸發 Microsoft Edge 列印預覽畫面。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: UseSystemPrintDialog
- GP name: 列印使用系統列印對話方塊
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/列印中
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
UseSystemPrintDialog
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: UseSystemPrintDialog
- Example value:
False
Back to top
設定 Proxy 許可規則 (ProxyBypassList)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
Defines a list of hosts for which Microsoft Edge bypasses any proxy.
This policy is applied only if you have selected 'Use fixed proxy servers' in the 'ProxyMode' policy. If you selected any other mode for configuring proxy policies, don't enable or configure this policy.
If you enable this policy, you can create a list of hosts for which Microsoft Edge doesn't use a proxy.
If you don't configure this policy, no list of hosts is created for which Microsoft Edge bypasses a proxy. Leave this policy unconfigured if you've specified any other method for setting proxy policies.
For more detailed examples go to https://docs.microsoft.com/Placeholder05.
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ProxyBypassList
- GP name: 設定 Proxy 許可規則
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/Proxy 伺服器
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
ProxyBypassList
- Value Type:
REG_SZ
Example value:
"https://www.contoso.com, https://www.fabrikam.com"
Mac information and settings
- Preference Key Name: ProxyBypassList
- Example value:
"https://www.contoso.com, https://www.fabrikam.com"
Back to top
設定 proxy 伺服器設定 (ProxyMode)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定 Microsoft Edge 所使用的 Proxy 伺服器設定。如果您啟用此原則,則使用者無法變更 Proxy 設定。
如果您選擇不要使用 Proxy 伺服器一律直接連線時,則會忽略所有其他選項。
如果您選擇使用系統 Proxy 設定,則會忽略所有其他選項。
如果您選擇自動偵測 Proxy 伺服器,則會忽略所有其他選項。
如果您選擇的是固定伺服器 Proxy 模式,則可以指定 [ProxyServer] 和 [逗點分隔 Proxy 略過規則清單] 中的其他選項。
如果您選擇使用 .pac proxy 指令碼,您必須指定 URL 至 [連線至 proxy.pac 檔案的 URL] 中的指令碼。
如需詳細範例,請前往 https://docs.microsoft.com/Placeholder05。
如果您啟用此原則,Microsoft Edge 將會略過從命令列指定的所有 Proxy 相關選項。
如果您未設定此原則,使用者可以選擇自己的 Proxy 設定。
*「direct」= 永遠不使用 Proxy
*「auto_detect」= 自動偵測 Proxy 設定
*「pac_script」= 使用 .pac proxy 指令碼
*「fixed_servers」= 使用固定 Proxy 伺服器
*「系統」= 使用系統 Proxy 設定。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ProxyMode
- GP name: 設定 proxy 伺服器設定
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/Proxy 伺服器
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
ProxyMode
- Value Type:
REG_SZ
Example value:
"direct"
Mac information and settings
- Preference Key Name: ProxyMode
- Example value:
"direct"
Back to top
設定 Proxy .pac 檔案 URL (ProxyPacUrl)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
Specifies the URL for a proxy auto-config (PAC) file.
This policy is applied only if you selected 'Use a .pac proxy script' in the 'ProxyMode' policy. If you selected any other mode for configuring proxy policies, don't enable or configure this policy.
If you enable this policy, you can specify the URL for a PAC file, which defines how the browser automatically chooses the appropriate proxy server for fetching a particular website.
If you disable or don't configure this policy, no PAC file is specified. Leave this policy unconfigured if you've specified any other method for setting proxy policies.
For detailed examples, see https://docs.microsoft.com/Placeholder05.
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ProxyPacUrl
- GP name: 設定 Proxy .pac 檔案 URL
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/Proxy 伺服器
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
ProxyPacUrl
- Value Type:
REG_SZ
Example value:
"https://internal.contoso.com/example.pac"
Mac information and settings
- Preference Key Name: ProxyPacUrl
- Example value:
"https://internal.contoso.com/example.pac"
Back to top
設定 Proxy 伺服器的地址或 URL (ProxyServer)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
Specifies the URL of the proxy server.
This policy is applied only if you have selected 'Use fixed proxy servers' in the 'ProxyMode' policy. If you selected any other mode for configuring proxy policies, don't enable or configure this policy.
If you enable this policy, the proxy server configured by this policy will be used for all URLs.
If you disable or don't configure this policy, users can choose their own proxy settings while in this proxy mode. Leave this policy unconfigured if you've specified any other method for setting proxy policies.
For more options and detailed examples, see https://docs.microsoft.com/Placeholder05.
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ProxyServer
- GP name: 設定 Proxy 伺服器的地址或 URL
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/Proxy 伺服器
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
ProxyServer
- Value Type:
REG_SZ
Example value:
"123.123.123.123:8080"
Mac information and settings
- Preference Key Name: ProxyServer
- Example value:
"123.123.123.123:8080"
Back to top
Proxy 設定 (ProxySettings)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
設定 Microsoft Edge 的 Proxy 設定。
如果啟用此原則,Microsoft Edge 將略過命令列指定的所有與 Proxy 相關的選項。
如果不設定此原則,使用者可以選擇自己的 Proxy 設定。
此原則會覆寫下列個別原則:
ProxyMode
ProxyPacUrl
ProxyServer
ProxyBypassList
ProxyMode 欄位可讓您指定 Microsoft Edge 使用的 Proxy 伺服器,並防止使用者變更 Proxy 設定。
ProxyPacUrl 欄位為 Proxy.pac 檔案的 URL。
ProxyServer 欄位為 Proxy 伺服器的 URL。
ProxyBypassList 欄位為 Microsoft Edge 略過的 Proxy 主機清單。
如果 [ProxyMode] 選擇 [直接] 值,則一律不使用 Proxy,並忽略所有其他欄位。
如果 [ProxyMode] 選擇 [系統] 值,則使用系統 Proxy,並忽略所有其他欄位。
如果 [ProxyMode] 選擇 [auto_detect] 值,則忽略所有其他欄位。
如果 [ProxyMode] 選擇 [fixed_server] 值,則使用 [ProxyServer] 和 [ProxyBypassList] 欄位。
如果 [ProxyMode] 選擇 [pac_script] 值,則使用 [ProxyPacUrl] 和 [ProxyBypassList] 欄位。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Dictionary
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ProxySettings
- GP name: Proxy 設定
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/Proxy 伺服器
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
ProxySettings
- Value Type:
REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\ProxySettings = {
"ProxyBypassList": "https://www.example1.com,https://www.example2.com,https://internalsite/",
"ProxyMode": "direct",
"ProxyPacUrl": "https://internal.site/example.pac",
"ProxyServer": "123.123.123.123:8080"
}
Mac information and settings
- Preference Key Name: ProxySettings
- Example value:
<key>ProxySettings</key>
<dict>
<key>ProxyBypassList</key>
<string>https://www.example1.com,https://www.example2.com,https://internalsite/</string>
<key>ProxyMode</key>
<string>direct</string>
<key>ProxyPacUrl</key>
<string>https://internal.site/example.pac</string>
<key>ProxyServer</key>
<string>123.123.123.123:8080</string>
</dict>
Back to top
防止略過 [Microsoft Defender SmartScreen] 提示網站 (PreventSmartScreenPromptOverride)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
您可以藉由此原則設定決定員工是否能覆寫有關潛在惡意網站的 Microsoft Defender SmartScreen 警告。
如果啟用此設定,員工將無法略過 Microsoft Defender SmartScreen 警告,且無法繼續瀏覽該網站。
如果停用或不設定此原則,員工將可以略過 Microsoft Defender SmartScreen 警告並繼續瀏覽該網站。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: PreventSmartScreenPromptOverride
- GP name: 防止略過 [Microsoft Defender SmartScreen] 提示網站
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/SmartScreen 設定
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
PreventSmartScreenPromptOverride
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: PreventSmartScreenPromptOverride
- Example value:
True
Back to top
防止略過關於下載項目的 Microsoft Defender SmartScreen 警告 (PreventSmartScreenPromptOverrideForFiles)
Supported Versions: Microsoft Edge on Windows since version 77 or later
Description
此原則可讓您決定使用者是否可以覆寫關於下載未經驗證下載項目的 Microsoft Defender SmartScreen 警告。
如果您啟用此原則,組織中的使用者將無法略過 Microsoft Defender SmartScreen 警告,且無法完成未經驗證的下載。
如果您停用或未設定此原則,則使用者可以略過 Microsoft Defender SmartScreen 警告,並完成未經驗證的下載項目。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: PreventSmartScreenPromptOverrideForFiles
- GP name: 防止略過關於下載項目的 Microsoft Defender SmartScreen 警告
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/SmartScreen 設定
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
PreventSmartScreenPromptOverrideForFiles
- Value Type:
REG_DWORD
Example value:
True
Back to top
設定 SmartScreen 不會觸發警告的網域清單 (SmartScreenAllowListDomains)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
設定 SmartScreen 信任網域清單。這代表
如果來源 URL 與這些網域相符,SmartScreen 將不會檢查網路釣魚軟體與其他惡意程式碼等潛在的惡意資源。
SmartScreen 下載防護服務不會檢查這些網域上的下載。
如果啟用此策略,SmartScreen 將信任這些網域。
如果停用或未設定此原則,則預設的 SmartScreen 防護將套用至所有資源。
此原則僅適用於已加入 Microsoft Active Directory 網域的 Windows 執行個體;或已註冊裝置管理的 Windows 10 專業版或企業版執行個體。
另請注意,如果您的組織已啟用 Microsoft Defender 進階威脅防護,則不適用此原則。您必須在 Microsoft Defender 資訊安全中心中設定允許和封鎖清單。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: SmartScreenAllowListDomains
- GP name: 設定 SmartScreen 不會觸發警告的網域清單
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/SmartScreen 設定
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\SmartScreenAllowListDomains
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\SmartScreenAllowListDomains\0 = "mydomain.com"
SOFTWARE\Policies\Microsoft\Edge\SmartScreenAllowListDomains\1 = "myuniversity.edu"
Mac information and settings
- Preference Key Name: SmartScreenAllowListDomains
- Example value:
<array>
<string>mydomain.com</string>
<string>myuniversity.edu</string>
</array>
Back to top
設定 Microsoft Defender SmartScreen (SmartScreenEnabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
此原則設定可讓您設定是否要開啟 Microsoft Defender SmartScreen。Microsoft Defender SmartScreen 可提供警告訊息,協助您保護員工免受潛在網路釣魚詐騙與惡意軟體影響。根據預設,Microsoft Defender SmartScreen 已開啟。
如果您啟用此設定,則 Microsoft Defender SmartScreen 會開啟,且員工無法關閉。
如果您停用此設定,則 Microsoft Defender SmartScreen 會關閉,且員工無法開啟。
如果您未設定,員工可以選擇是否要使用 Microsoft Defender SmartScreen。
此原則僅適用於已加入 Microsoft Active Director 網域的 Windows 執行個體,或是加入已註冊裝置管理的 Windows 10 專業版或企業版的執行個體。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: SmartScreenEnabled
- GP name: 設定 Microsoft Defender SmartScreen
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/SmartScreen 設定
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/SmartScreen 設定
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
SmartScreenEnabled
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: SmartScreenEnabled
- Example value:
True
Back to top
將新的索引標籤頁面設定為 [首頁] (HomepageIsNewTabPage)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
在 Microsoft Edge 中設定預設首頁。您可以將首頁設定為您指定的 URL 或新索引標籤頁面。
如果您啟用此原則,則首頁頁面將永遠使用新的索引標籤頁面,且會忽略首頁 URL 位置。
如果您停用此原則,則使用者首頁不可為新索引標籤頁面,除非 URL 設定為 [edge://newtab]。
如果未設定,則使用者可以選擇新是否將索引標籤頁面設定為自己的首頁。
此原則僅適用於已加入已註冊裝置管理的 Microsoft Active Directory 網域、Windows 10 專業版或企業執行個體的 Windows 執行個體。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: HomepageIsNewTabPage
- GP name: 將新的索引標籤頁面設定為 [首頁]
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/啟動、首頁和新索引標籤頁面
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/啟動、首頁和新索引標籤頁面
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
HomepageIsNewTabPage
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: HomepageIsNewTabPage
- Example value:
True
Back to top
設定首頁頁面 URL (HomepageLocation)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
在 Microsoft Edge 中設定預設首頁 URL。
首頁頁面是透過 [首頁] 按鈕開啟的頁面。啟動時開啟的頁面由 [RestoreOnStartup] 原則控制。
您可以在此處設定 URL 或設定 [首頁] 頁面,以開啟新索引標籤頁面。如果您選擇開啟新索引標籤頁面,此原則並不會生效。
如果您啟用此原則,使用者便無法變更其首頁 URL,但可以選擇使用新索引標籤頁作為自己的首頁。
如果您停用或未設定此原則,只要 [HomepageIsNewTabPage] 原則未啟用,使用者就可以選擇自己的首頁頁面。
此原則僅適用於已加入 Microsoft Active Directory 網域的 Windows 執行個體,或是加入已註冊裝置管理的 Windows 10 專業版或企業版的執行個體。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: HomepageLocation
- GP name: 設定首頁頁面 URL
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/啟動、首頁和新索引標籤頁面
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/啟動、首頁和新索引標籤頁面
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
HomepageLocation
- Value Type:
REG_SZ
Example value:
"https://www.contoso.com"
Mac information and settings
- Preference Key Name: HomepageLocation
- Example value:
"https://www.contoso.com"
Back to top
隱藏新索引標籤頁面中的預設熱門網站 (NewTabPageHideDefaultTopSites)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
隱藏 Microsoft Edge 中新索引標籤頁面的預設熱門網站。
如果將此原則設為 True,則隱藏預設熱門網站磚。
如果將此原則設定為 False 或不設定,則仍會看見預設熱門網站磚。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: NewTabPageHideDefaultTopSites
- GP name: 隱藏新索引標籤頁面中的預設熱門網站
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/啟動、首頁和新索引標籤頁面
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
NewTabPageHideDefaultTopSites
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: NewTabPageHideDefaultTopSites
- Example value:
True
Back to top
設定新索引標籤頁面 URL (NewTabPageLocation)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
設定新索引標籤頁面的預設 URL。
此原則會決定建立新索引標籤 (包括開啟新視窗) 時開啟的頁面。如果設定為在新索引標籤中開啟,此原則也會影響啟動頁面。
此原則不會決定在啟動時開啟哪個頁面;這是由 [RestoreOnStartup] 原則控制的。如果將首頁設定為在新索引標籤中開啟,此原則也不會影響首頁。
如果不設定此原則,則使用預設的新索引標籤頁面。
如果有設定此原則 *和* [NewTabPageSetFeedType] 原則,則此原則具有優先權。
此原則僅適用於已加入 Microsoft Active Directory 網域的 Windows 執行個體;或已註冊裝置管理的 Windows 10 專業版或企業版執行個體。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: NewTabPageLocation
- GP name: 設定新索引標籤頁面 URL
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/啟動、首頁和新索引標籤頁面
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/啟動、首頁和新索引標籤頁面
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
NewTabPageLocation
- Value Type:
REG_SZ
Example value:
"https://www.fabrikam.com"
Mac information and settings
- Preference Key Name: NewTabPageLocation
- Example value:
"https://www.fabrikam.com"
Back to top
啟動時所採取的動作 (RestoreOnStartup)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定 Microsoft Edge 啟動時的行為方式。
如果您希望在啟動時一律開啟新索引標籤,請選擇 [開啟新索引標籤] (5)。
如果您要重新開啟上次 Microsoft Edge 關閉時開啟的 URL,請選擇 [還原上次工作階段] (1)。瀏覽工作階段將還原。請注意,此選項會停用某些依賴於工作階段或在結束時執行動作的設定 (例如清除結束時的瀏覽資料或僅工作階段的 Cookie)。
如果要開啟一組特定的 URL,請選擇 [開啟 URL 清單] (4)。
停用此設定的效果相當於不設定。使用者可以在 Microsoft Edge 中變更此設定。
此原則僅適用於加入 Microsoft Active Directory 網域的 Windows 執行個體、Windows 10 專業版或註冊裝置管理的企業版執行個體。
* 5 =開啟新索引標籤
* 1 =還原上次的工作階段
* 4 =開啟 URL 清單
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: RestoreOnStartup
- GP name: 啟動時所採取的動作
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/啟動、首頁和新索引標籤頁面
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/啟動、首頁和新索引標籤頁面
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
RestoreOnStartup
- Value Type:
REG_DWORD
Example value:
0x00000004
Mac information and settings
- Preference Key Name: RestoreOnStartup
- Example value:
4
Back to top
瀏覽器啟動時開啟的網站 (RestoreOnStartupURLs)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定瀏覽器啟動時自動開啟的網站清單。如果不設定此原則,則啟動時不會開啟任何網站。
此原則僅在 [開啟 URL 清單] (4) 設定 [RestoreOnStartup] 原則時才生效。
此原則僅適用於加入 Microsoft Active Directory 網域的 Windows 執行個體、Windows 10 專業版或註冊裝置管理的企業版執行個體。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: RestoreOnStartupURLs
- GP name: 瀏覽器啟動時開啟的網站
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/啟動、首頁和新索引標籤頁面
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/啟動、首頁和新索引標籤頁面
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\RestoreOnStartupURLs
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended\RestoreOnStartupURLs
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\RestoreOnStartupURLs\0 = "https://contoso.com"
SOFTWARE\Policies\Microsoft\Edge\RestoreOnStartupURLs\1 = "https://www.fabrikam.com"
Mac information and settings
- Preference Key Name: RestoreOnStartupURLs
- Example value:
<array>
<string>https://contoso.com</string>
<string>https://www.fabrikam.com</string>
</array>
Back to top
在工具列上顯示 [首頁] 按鈕 (ShowHomeButton)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
在 Microsoft Edge 工具列上顯示 [首頁] 按鈕。
啟用此原則以一律顯示 [首頁] 按鈕。停用此原則永不顯示 [首頁] 按鈕。
如果不設定原則,使用者可以選擇是否顯示 [首頁] 按鈕。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ShowHomeButton
- GP name: 在工具列上顯示 [首頁] 按鈕
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/啟動、首頁和新索引標籤頁面
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/啟動、首頁和新索引標籤頁面
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
ShowHomeButton
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: ShowHomeButton
- Example value:
True
Back to top
啟用刪除瀏覽器和下載歷程記錄 (AllowDeletingBrowserHistory)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
啟用刪除瀏覽器歷程記錄與下載歷程記錄,並防止使用者變更此設定。
請注意,即停用此原則,也不保證能保留瀏覽與下載歷程記錄: 使用者可直接編輯或刪除歷程記錄資料庫檔案,瀏覽器本身可以隨時刪除 (根據到期時間) 或封存任何或所有歷程記錄項目。
如果啟用或不設定此原則,則使用者可以刪除瀏覽和下載歷程記錄。
如果停用此原則,則使用者無法刪除瀏覽和下載歷程記錄。
如果啟用此原則,請勿啟用 [Microsoft Edge 關閉時清除瀏覽資料] 功能,因為這兩者皆會刪除資料。如果同時啟用這兩項功能,則 [Microsoft Edge 關閉時清除瀏覽資料] 原則會優先執行,無論此原則設定為何,皆會在 Microsoft Edge 關閉時清除瀏覽資料。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: AllowDeletingBrowserHistory
- GP name: 啟用刪除瀏覽器和下載歷程記錄
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
AllowDeletingBrowserHistory
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: AllowDeletingBrowserHistory
- Example value:
True
Back to top
允許檔案選取項目對話方塊 (AllowFileSelectionDialogs)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
透過讓 Microsoft Edge 顯示檔案選取對話方塊,便能允許存取本機檔案。
如果您啟用或未設定此原則,使用者可以正常開啟檔案選取對話方塊。
如果您停用此原則,每當使用者執行會觸發檔案選取對話方塊的動作時 (例如匯入我的最愛、上傳檔案或儲存連結),將會顯示訊息,且假設使用者會在檔案選取對話方塊上按一下 [取消]。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: AllowFileSelectionDialogs
- GP name: 允許檔案選取項目對話方塊
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
AllowFileSelectionDialogs
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: AllowFileSelectionDialogs
- Example value:
True
Back to top
一律開啟外部 PDF 檔案 (AlwaysOpenPdfExternally)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
停用 Microsoft Edge 中的內部 PDF 檢視器。
如果啟用此原則,Microsoft Edge 將會下載 PDF 檔案,並允許使用者使用預設應用程式打開檔案。
如果不設定或停用此原則,則 Microsoft Edge 將開啟 PDF 檔案 (除非使用者停用此原則)。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: AlwaysOpenPdfExternally
- GP name: 一律開啟外部 PDF 檔案
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
AlwaysOpenPdfExternally
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: AlwaysOpenPdfExternally
- Example value:
True
Back to top
設定應用程式地區設定 (ApplicationLocaleValue)
Supported Versions: Microsoft Edge on Windows since version 77 or later
Description
設定 Microsoft Edge 中的應用程式地區設定,並防止使用者變更地區設定。
如果您啟用這個原則,Microsoft Edge 會使用指定的地區設定。如果已設定地區設定不支援,請改為使用 [EN-US]。
如果您停用或未設定這個設定,Microsoft Edge 會使用使用者指定的慣用地區設定 (若已設定) 或後援地區設定 [EN-US]。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ApplicationLocaleValue
- GP name: 設定應用程式地區設定
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
ApplicationLocaleValue
- Value Type:
REG_SZ
Example value:
"en"
Back to top
允許或封鎖音訊擷取 (AudioCaptureAllowed)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
可讓您設定是否提示使用者授與網站存取其音訊擷取裝置的權限。除 [AudioCaptureAllowedUrls] 清單中設定的 URL,此原則適用於所有 URL。
如果啟用或未設定此原則 (預設設定),則除了 [AudioCaptureAllowedUrls] 清單中的 URL,都會向使用者提示音訊擷取存取。清單中的 URL 會在沒有提示的情況下授與存取權限。
如果停用此原則,則不會提示使用者,且僅能對 [AudioCaptureAllowedUrls] 中設定的 URL 音訊擷取進行存取。
此原則會影響所有類型的音訊輸入,而不僅是內建麥克風。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: AudioCaptureAllowed
- GP name: 允許或封鎖音訊擷取
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
AudioCaptureAllowed
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: AudioCaptureAllowed
- Example value:
False
Back to top
無需請求權限即可存取音訊擷取裝置的網站 (AudioCaptureAllowedUrls)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
根據 URL 模式指定可使用音訊擷取裝置,且無需向使用者要求權限的網站。此清單中的模式與要求 URL 的安全性來源相符。如果相符,則會自動授與網站存取音訊擷取裝置的權限。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: AudioCaptureAllowedUrls
- GP name: 無需請求權限即可存取音訊擷取裝置的網站
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\AudioCaptureAllowedUrls
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\AudioCaptureAllowedUrls\0 = "https://www.contoso.com/"
SOFTWARE\Policies\Microsoft\Edge\AudioCaptureAllowedUrls\1 = "https://[*.]contoso.edu/"
Mac information and settings
- Preference Key Name: AudioCaptureAllowedUrls
- Example value:
<array>
<string>https://www.contoso.com/</string>
<string>https://[*.]contoso.edu/</string>
</array>
Back to top
Automatically import another browser's data and settings at first run (AutoImportAtFirstRun)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
If you enable this policy, Microsoft Edge automatically imports all supported datatypes and settings from either the default browser or another specified browser. This also forces Microsoft Edge to skip the import section of the first-run experience.
If you set this policy to 'DisabledAutoImport' (4), the import section of the first-run experience is skipped entirely and Microsoft Edge doesn't import browser data and settings automatically.
* 0 = Automatically imports all supported datatypes and settings from the default browser
* 1 = Automatically imports all supported datatypes and settings from Internet Explorer
* 2 = Automatically imports all supported datatypes and settings from Google Chrome
* 3 = Automatically imports all supported datatypes and settings from Safari
* 4 = Disables automatic import, and the import section of the first-run experience is skipped
**Note**: This policy currently supports importing from Internet Explorer (on Windows 7, 8, and 10), Google Chrome (on Windows 7, 8, and 10 and on macOS) and Apple Safari (on macOS) browsers.
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: AutoImportAtFirstRun
- GP name: Automatically import another browser's data and settings at first run
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
AutoImportAtFirstRun
- Value Type:
REG_DWORD
Example value:
0x00000002
Mac information and settings
- Preference Key Name: AutoImportAtFirstRun
- Example value:
2
Back to top
啟用 [自動填滿] 位址 (AutofillAddressEnabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
啟用 [自動填滿] 功能,並可讓使用者在 Web 表單使用先前儲存的資訊自動填寫地址資訊。
如果停用此原則,[自動填滿] 永遠不會向您建議或填寫地址詳細資訊,也不會儲存使用者在瀏覽網站時可能會送出的其他地址資訊。
如果啟用或未設定此原則,則使用者可在使用者介面控制 [自動填滿] 的位址。
請注意,如果停用此原則,除付款與密碼表單,所有 Web 表單的活動皆會停止。不會儲存其他項目,且 Microsoft Edge 不會建議或 [自動填滿] 任何先前的項目。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: AutofillAddressEnabled
- GP name: 啟用 [自動填滿] 位址
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
AutofillAddressEnabled
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: AutofillAddressEnabled
- Example value:
False
Back to top
啟用信用卡「自動填滿」功能 (AutofillCreditCardEnabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
啟用 Microsoft Edge 的 [自動填滿] 功能,並讓使用者在 Web 表單使用先前儲存的資訊自動填寫信用卡資訊。
如果停用此原則,[自動填滿] 永遠不會向您建議或填寫信用卡資訊,也不會儲存使用者在瀏覽網站時可能會送出的其他信用卡資訊。
如果啟用或未設定此原則,則使用者可控制用卡資訊的 [自動填滿] 功能。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: AutofillCreditCardEnabled
- GP name: 啟用信用卡「自動填滿」功能
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
AutofillCreditCardEnabled
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: AutofillCreditCardEnabled
- Example value:
False
Back to top
Microsoft Edge 關閉後,繼續執行背景應用程式 (BackgroundModeEnabled)
Supported Versions: Microsoft Edge on Windows since version 77 or later
Description
在最後一個瀏覽器視窗關閉後,允許 Microsoft Edge 在 OS 登入啟動和繼續執行時處理程序啟動。在此情境中,背景應用程式與目前的瀏覽工作階段持續運行,包括所有工作階段 Cookie。開啟的背景處理程序會在系統匣中顯示圖示,且永遠能從該處關閉。
如果您啟用此原則,則背景模式會開啟。
如果您停用此原則,則背景模式會關閉。
如果您未設定此原則,背景模式從一開始就會關閉,而且使用者可以在 edge://settings/system 中設定其行為。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: BackgroundModeEnabled
- GP name: Microsoft Edge 關閉後,繼續執行背景應用程式
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
BackgroundModeEnabled
- Value Type:
REG_DWORD
Example value:
True
Back to top
封鎖第三方 Cookie (BlockThirdPartyCookies)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
禁止非來自網址列中網域的網頁項目設定 Cookie。
如果您啟用此原則,非來自網址列中網域的網頁項目無法設定 Cookie
如果您停用此原則,來自網址列外網域的網頁項目可以設定 Cookie。
如果您未設定此原則,即便第三方 Cookie 已啟用,但使用者仍可以變更此設定。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: BlockThirdPartyCookies
- GP name: 封鎖第三方 Cookie
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
BlockThirdPartyCookies
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: BlockThirdPartyCookies
- Example value:
False
Back to top
啟用從 [身分識別] 飛出視窗功能表或 [設定] 頁面建立設定檔 (BrowserAddProfileEnabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
允許使用者使用 **新增設定檔** 選項建立新的設定檔。
如果啟用此或不設定此原則,Microsoft Edge 將允許使用者在 [身分識別] 飛出視窗功能表或 [設定] 頁面使用 **新增設定檔** 建立新的設定檔。
如果停用此原則,使用者將無法從 [身分識別] 飛出視窗功能表或 [設定] 頁面新增設定檔。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: BrowserAddProfileEnabled
- GP name: 啟用從 [身分識別] 飛出視窗功能表或 [設定] 頁面建立設定檔
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
BrowserAddProfileEnabled
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: BrowserAddProfileEnabled
- Example value:
True
Back to top
啟用來賓模式 (BrowserGuestModeEnabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
啟用該選項以允許在 Microsoft Edge 中使用來賓設定檔。在來賓設定檔中,瀏覽器不會從現有設定檔匯入瀏覽資料,並在關閉所有來賓設定檔後刪除瀏覽資料。
如果啟用或不設定此原則,Microsoft Edge 可讓使用者瀏覽來賓設定檔。
如果停用此原則,則 Microsoft Edge 不會讓使用者瀏覽來賓設定檔。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: BrowserGuestModeEnabled
- GP name: 啟用來賓模式
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
BrowserGuestModeEnabled
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: BrowserGuestModeEnabled
- Example value:
True
Back to top
允許查詢瀏覽器網路時間服務 (BrowserNetworkTimeQueriesEnabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
防止 Microsoft Edge 偶爾向瀏覽器網路時間服務傳送查詢以擷取精確的時間戳記。
如果停用此原則,Microsoft Edge 將停止向瀏覽器網路時間服務傳送查詢。
如果啟用或不設定此原則,則 Microsoft Edge 偶爾會向瀏覽器網路時間服務傳送查詢。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: BrowserNetworkTimeQueriesEnabled
- GP name: 允許查詢瀏覽器網路時間服務
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
BrowserNetworkTimeQueriesEnabled
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: BrowserNetworkTimeQueriesEnabled
- Example value:
True
Back to top
瀏覽器登入設定 (BrowserSignin)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定使用者是否可以利用他們的帳戶登入 Microsoft Edge,並使用帳戶相關服務,例如同步處理和單一登入。若要控制同步處理的可用性,請使用 [SyncDisabled] 原則。
如果您設定此原則為 [停用瀏覽器登入] (0),則使用者將無法登入瀏覽器並使用帳戶相關服務。在此情況下,使用者將無法使用瀏覽器層級的功能,例如同步等功能將無法使用。如果當您設定此原則為 [停用] 時使用者已登入,下一次執行 Microsoft Edge 時使用者將會登出,但使用者的本機設定檔資料 (例如我的最愛和密碼) 將會保留。使用者仍然可以登入,並使用 bing.com 和 Office.com 等 Microsoft Web 功能。
如果您設定此原則為 [啟用瀏覽器登入] (1),則使用者可以登入瀏覽器。登入瀏覽器代表使用者的帳戶資訊會保留在瀏覽器中,但並不表示同步處理會依照預設開啟;使用者必須個別主動加入才能使用此功能。啟用此原則可防止使用者關閉允許瀏覽器登入的設定。
如果您設定此原則為 [強制瀏覽器登入] (2),則使用者必須登入設定檔才能使用瀏覽器。這會確保與受管理帳戶相關聯的原則已套用且強制執行。根據預設,此操作可開啟帳戶同步處理,除非網域系統管理員或 [SyncDisabled] 原則已停用同步處理功能。[BrowserGuestModeEnabled] 原則的預設值設定為 False。請注意,啟用此原則後,目前未簽署的設定檔將會鎖定且無法存取。如需詳細資訊,請參閱說明中心文章:https://docs.microsoft.com/Placeholder12。
如果您未設定此原則,使用者可以決定是否要啟用瀏覽器登入選項,並使用適合的選項。
* 0 = 停用瀏覽器登入
* 1 = 啟用瀏覽器登入
* 2 = 強制使用者登入以使用瀏覽器
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: BrowserSignin
- GP name: 瀏覽器登入設定
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
BrowserSignin
- Value Type:
REG_DWORD
Example value:
0x00000002
Mac information and settings
- Preference Key Name: BrowserSignin
- Example value:
2
Back to top
使用內建 DNS 用戶端 (BuiltInDnsClientEnabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
控制是否要使用內建 DNS 用戶端。
如果您啟用此原則,則會使用內建 DNS 用戶端 (如果有的話)。
如果您停用此原則,則永遠不會使用用戶端。
如果您未設定此原則,MacOS 上會依預設啟用內建 DNS 用戶端,而且使用者可以變更是否要透過編輯 edge://flags 或透過指定的命令列旗標使用內建 DNS 用戶端。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: BuiltInDnsClientEnabled
- GP name: 使用內建 DNS 用戶端
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
BuiltInDnsClientEnabled
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: BuiltInDnsClientEnabled
- Example value:
True
Back to top
停用 subjectPublicKeyInfo 雜湊清單的憑證透明度強化 (CertificateTransparencyEnforcementDisabledForCas)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
停用強制執行 subjectPublicKeyInfo 雜湊清單的 [憑證透明度] 要求。
此原則可讓您停用 [憑證透明度] 揭露對具有包含指定 subjectPublicKeyInfo 雜湊之一憑證的憑證鏈結要求。這會允許那些因未公開揭露而仍未用於 [企業] 主機而不受信任的憑證。
設定此原則時,若要停用 [憑證透明度] 強化,必須符合下列條件集合中的其中一個:
1. 雜湊屬於伺服器憑證的 subjectPublicKeyInfo。
2. 雜湊屬於憑證鏈結內 CA 憑證中出現的 subjectPublicKeyInfo,該CA 憑證會受到 X.509v3 nameConstraints 擴充功能限制,一或多個 directoryName nameConstraints 都存在於 permittedSubtrees 中,且 subjectPublicKeyInfo 和directoryName 均包含 organizationName 屬性。
3. 雜湊屬於憑證鏈結內 CA 憑證中出現的 subjectPublicKeyInfo,該 CA 憑證在憑證 [主體] 中有一或多個 organizationName 屬性,且伺服器的憑證包含相同數目的 organizationName 屬性,順序與位元組的值均相同。
您可以透過串連雜湊演算法名稱、「/」字元,與適用於指定憑證的 DER 編碼的 subjectPublicKeyInfo 雜湊演算法的 Base64 編碼指定 subjectPublicKeyInfo 雜湊。此 Base64 編碼與 [SPKI 指紋] 格式相同,定義與區段 2.4、RFC 7469 中相同。無法辨識的雜湊演算法會略過。目前唯一支援的雜湊演算法是「sha256」。
如果您停用此原則或未設定,且憑證未依照 [憑證透明度] 原則揭露,則任何要求由 [憑證透明度] 揭露的憑證會被視為不受信任。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: CertificateTransparencyEnforcementDisabledForCas
- GP name: 停用 subjectPublicKeyInfo 雜湊清單的憑證透明度強化
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\CertificateTransparencyEnforcementDisabledForCas
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\CertificateTransparencyEnforcementDisabledForCas\0 = "sha256/AAAAAAAAAAAAAAAAAAAAAA=="
SOFTWARE\Policies\Microsoft\Edge\CertificateTransparencyEnforcementDisabledForCas\1 = "sha256//////////////////////w=="
Mac information and settings
- Preference Key Name: CertificateTransparencyEnforcementDisabledForCas
- Example value:
<array>
<string>sha256/AAAAAAAAAAAAAAAAAAAAAA==</string>
<string>sha256//////////////////////w==</string>
</array>
Back to top
停用舊版憑證授權單位清單的 [憑證透明度] 強化 (CertificateTransparencyEnforcementDisabledForLegacyCas)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
停用強制執行舊版憑證授權單位 (Cas) 清單的 [憑證透明度] 要求。
此原則可讓您停用 [憑證透明度] 揭露對具有包含指定 subjectPublicKeyInfo 雜湊之一憑證的憑證鏈結要求。這會允許那些因未公開揭露而仍未用於 [企業] 主機而不受信任的憑證。
為了停用 [憑證透明度] 強化,您必須將雜湊設定為出現在 CA 憑證中的 subjectPublicKeyInfo,該憑證已識別為舊版憑證授權單位 (CA)。舊版 CA 是在預設下由一個或多個操作系統公開信任的 CA,並由 Microsoft Edge 支援。
您可以透過串連雜湊演算法名稱、「/」字元,與適用於指定憑證的 DER 編碼的 subjectPublicKeyInfo 雜湊演算法的 Base64 編碼指定 subjectPublicKeyInfo 雜湊。此 Base64 編碼與 [SPKI 指紋] 格式相同,定義與區段 2.4、RFC 7469 中相同。無法辨識的雜湊演算法會略過。目前唯一支援的雜湊演算法是「sha256」。
如果您停用此原則或未設定,且憑證未依照 [憑證透明度] 原則揭露,則任何要求由 [憑證透明度] 揭露的憑證會被視為不受信任。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: CertificateTransparencyEnforcementDisabledForLegacyCas
- GP name: 停用舊版憑證授權單位清單的 [憑證透明度] 強化
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\CertificateTransparencyEnforcementDisabledForLegacyCas
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\CertificateTransparencyEnforcementDisabledForLegacyCas\0 = "sha256/AAAAAAAAAAAAAAAAAAAAAA=="
SOFTWARE\Policies\Microsoft\Edge\CertificateTransparencyEnforcementDisabledForLegacyCas\1 = "sha256//////////////////////w=="
Mac information and settings
- Preference Key Name: CertificateTransparencyEnforcementDisabledForLegacyCas
- Example value:
<array>
<string>sha256/AAAAAAAAAAAAAAAAAAAAAA==</string>
<string>sha256//////////////////////w==</string>
</array>
Back to top
停用針對特定 URL 的憑證透明度強化 (CertificateTransparencyEnforcementDisabledForUrls)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
停用對列出的 URL 強制執行憑證透明度要求。
此原則能讓您不必透過憑證透明度公開指定 URL 中的主機名稱憑證。這讓您能使用原本因未正確公開揭露而不受信任的憑證,但這將更難偵測主機錯誤簽發的憑證。
根據 https://docs.microsoft.com//Placeholder01 建構您的 URL 模式。由於憑證對指定主機名稱有效,與配置、連接埠或路徑無關,因此僅需考慮 URL 的主機名稱。不支援萬用字元主機。
如果您不設定此原則,則任何應透過憑證透明度公開的憑證如果未公開,則將視為不受信任的憑證。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: CertificateTransparencyEnforcementDisabledForUrls
- GP name: 停用針對特定 URL 的憑證透明度強化
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\CertificateTransparencyEnforcementDisabledForUrls
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\CertificateTransparencyEnforcementDisabledForUrls\0 = "contoso.com"
SOFTWARE\Policies\Microsoft\Edge\CertificateTransparencyEnforcementDisabledForUrls\1 = ".contoso.com"
Mac information and settings
- Preference Key Name: CertificateTransparencyEnforcementDisabledForUrls
- Example value:
<array>
<string>contoso.com</string>
<string>.contoso.com</string>
</array>
Back to top
即使當用戶端憑證使用時,允許 HTTP/2 連線聯合這些主機 (CoalesceH2ConnectionsWithClientCertificatesForHosts)
This is a future policy
Description
如果您啟用此原則,即便用戶端憑證正在使用,也會允許 HTTP/2 連線的聯合。
如果您未設定此原則,在用戶端憑證使用的連線上不會允許 HTTP/2 連線聯合。這是預設行為。
為了聯合,潛在新連線的主機名稱和現有連線的主機名稱必須匹配此策略規定的一個或多個模式。此原則可指定主機清單,並使用 URLBlocklist 篩選器格式:當「contoso.net」完全符合「contoso.net」時,「contoso.com」與「contoso.com」和所有子網域配對 (例如「sub.contoso.com」)。
透過使用客戶端憑證的連線將要求聯合到不同主機可能會觸發安全性和隱私權問題,因為即便使用者未明確批准此請求,環境權限也會傳遞所有要求。如需詳細資訊,請參閱 https://crbug.com/855690。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: CoalesceH2ConnectionsWithClientCertificatesForHosts
- GP name: 即使當用戶端憑證使用時,允許 HTTP/2 連線聯合這些主機
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\CoalesceH2ConnectionsWithClientCertificatesForHosts
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\CoalesceH2ConnectionsWithClientCertificatesForHosts\0 = "contoso.com"
Mac information and settings
- Preference Key Name: CoalesceH2ConnectionsWithClientCertificatesForHosts
- Example value:
<array>
<string>contoso.com</string>
</array>
Back to top
在 Microsoft Edge 中啟用元件更新 (ComponentUpdatesEnabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
如果您啟用或未設定此原則,元件更新會在 Microsoft Edge 內啟用。
如果您停用此原則或設定為 False,則 Microsoft Edge 內所有元件的更新都會停用。
然而,某些元件不受此原則限制。其中包括所有未包含可執行程式碼的元件、不會大幅變更瀏覽器行為的元件,或是安全性關鍵的元件。也就是說,即使您禁用此原則,更新內容仍會套用為「安全性關鍵」。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ComponentUpdatesEnabled
- GP name: 在 Microsoft Edge 中啟用元件更新
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
ComponentUpdatesEnabled
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: ComponentUpdatesEnabled
- Example value:
True
Back to top
設定 [不要追蹤] (ConfigureDoNotTrack)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定是否要傳送 [不要追蹤] 要求至要求追蹤資訊的網站。[不要追蹤] 要求會讓您造訪的網站知道您不想讓網站追蹤瀏覽活動。根據預設,Microsoft Edge 不會傳送 [不要追蹤] 要求,但使用者可以開啟此功能傳送。
如果您啟用此原則,將會一律傳送 [不要追蹤] 要求至要求追蹤資訊的網站。
如果您停用此原則,則永遠不會傳送要求。
如果您未設定此原則,使用者可以選擇是否要傳送這些要求。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ConfigureDoNotTrack
- GP name: 設定 [不要追蹤]
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
ConfigureDoNotTrack
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: ConfigureDoNotTrack
- Example value:
False
Back to top
設定線上文字轉語音 (ConfigureOnlineTextToSpeech)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
設定瀏覽器是否能利用 [Azure 認知服務] 中的 [線上文字轉語音] 的語音字型。這些語音字型的品質高於預先安裝的系統語音字型。
如果您啟用或未設定此原則,使用 SpeechSynthesis API 的網頁應用程式可以使用 [線上文字轉語音] 的語音字型。
如果您停用此原則,語音字型便無法使用。
深入了解此功能:
SpeechSynthesis API: https://developer.mozilla.org/en-US/docs/Web/API/SpeechSynthesis
認知服務:https://azure.microsoft.com/en-us/services/cognitive-services/text-to-speech/
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ConfigureOnlineTextToSpeech
- GP name: 設定線上文字轉語音
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
ConfigureOnlineTextToSpeech
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: ConfigureOnlineTextToSpeech
- Example value:
True
Back to top
將 Microsoft Edge 設為預設瀏覽器 (DefaultBrowserSettingEnabled)
Supported Versions: Microsoft Edge on Windows 7 and Mac since version 77 or later
Description
在 Microsoft Edge 中設定預設瀏覽器檢查,並防止使用者變更。
如果啟用此原則,可能的話,Microsoft Edge 將永遠檢查啟動的是否為預設瀏覽器,並自動註冊。
如果停用此原則,設定此選項時,Microsoft Edge 永遠不會檢查,並會停用使用者控制。
如果您未設定此原則,Microsoft Edge 會讓使用者控制這是否為預設瀏覽器,或是當不是預設瀏覽器時向使用者顯示通知。
Windows 系統管理員請注意:此原則僅是適用於運行 Windows 7 的電腦。若是較新版本的 Windows,您必須部署「預設應用程式關聯」檔案,讓 Microsoft Edge 成為 https 和 http 通訊協定 (也可為 ftp 通訊協定和檔案格式,例如 .html、.htm、.pdf、.svg、.webp) 的處理常式。如需更多資訊,請見 https://docs.microsoft.com//Placeholder02。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DefaultBrowserSettingEnabled
- GP name: 將 Microsoft Edge 設為預設瀏覽器
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DefaultBrowserSettingEnabled
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: DefaultBrowserSettingEnabled
- Example value:
True
Back to top
控制可在哪使用開發人員工具 (DeveloperToolsAvailability)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
控制開發人員工具使用的地方。
如果您設定原則為 [DeveloperToolsDisallowedForForceInstalledExtensions] (0,預設值),使用者在一般情況下可以存取開發人員工具和 JavaScript 主控台,但不是在由企業原則安裝的擴充功能內容中。
如果您設定原則為 [DeveloperToolsAllowed] (1),則使用者可以存取所有內容的開發人員工具和 JavaScript 主控台,包括由企業原則安裝的擴充功能。
如果您設定原則為 [DeveloperToolsDisallowed] (2),使用者無法存取開發人員工具或檢查網站項目。鍵盤快速鍵和開啟開發人員工具或 JavaScript 主控台的功能表或操作功能表項目已停用。
* 0 = 允許其他內容中由企業原則所安裝的擴充功能上的開發人員工具
* 1 = 允許使用開發人員工具
* 2 = 不允許使用開發人員工具
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DeveloperToolsAvailability
- GP name: 控制可在哪使用開發人員工具
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DeveloperToolsAvailability
- Value Type:
REG_DWORD
Example value:
0x00000002
Mac information and settings
- Preference Key Name: DeveloperToolsAvailability
- Example value:
2
Back to top
停用 3D 圖形 Api 支援 (Disable3DAPIs)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
防止網頁存取圖形處理器 (GPU)。具體來說,網頁無法存取 WebGL API,且外掛程式也無法使用 Pepper 3D API。
如果不設定或停用此原則,則可能允許網頁使用 WebGL API 和外掛程式使用 Pepper 3D API。在預設情況下,Microsoft Edge 可能仍需要傳遞命令列引數才能使用這些 API。
如果 [HardwareAccelerationModeEnabled] 原則設定為 False,忽略 [Disable3DAPIs] 原則設定 – 這相當於將 [Disable3DAPI] 原則設定為 True。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: Disable3DAPIs
- GP name: 停用 3D 圖形 Api 支援
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
Disable3DAPIs
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: Disable3DAPIs
- Example value:
False
Back to top
停用取得螢幕擷取畫面功能 (DisableScreenshots)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
控制使用者是否能取得瀏覽器頁面的螢幕擷取畫面。
啟用後,使用者將無法利用鍵盤快速鍵或延伸模組 API 取得螢幕擷取畫面。
如果停用或未設定此原則,使用者將能取得螢幕擷取畫面。
請注意,此原則可以控制自瀏覽器內取得的螢幕擷取畫面。即使您啟用此原則,使用者仍透過瀏覽器外的某些方式取得螢幕擷取畫面 (例如利用作業系統功能或其他應用程式)。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DisableScreenshots
- GP name: 停用取得螢幕擷取畫面功能
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DisableScreenshots
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: DisableScreenshots
- Example value:
True
Back to top
設定磁碟快取目錄 (DiskCacheDir)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
設定用來存放快取檔案的目錄。
如果您啟用此原則,則無論使用者是否已指定 [--disk-cache-dir] 旗標,Microsoft Edge 都會使用已提供目錄。若要避免資料遺失或其他非預期的錯誤,請勿設定此原則至磁碟區根目錄或用於其他用途的目錄,因為 Microsoft Edge 可管理其內容。
請參閱 https://docs.microsoft.com/Placeholder08,了解指定目錄及路徑時,您可以使用的變數清單。
如果您未設定此原則,會使用預設快取目錄,而且使用者可以用 [--disk-cache-dir] 命令列旗標覆寫該預設。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DiskCacheDir
- GP name: 設定磁碟快取目錄
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DiskCacheDir
- Value Type:
REG_SZ
Example value:
"${user_home}/Edge_cache"
Mac information and settings
- Preference Key Name: DiskCacheDir
- Example value:
"${user_home}/Edge_cache"
Back to top
設定磁碟快取大小,以位元組為單位 (DiskCacheSize)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
設定用於磁碟上儲存檔案的快取大小 (以位元組為單位)。
如果您啟用此原則,無論使用者是否已指定 [--media-cache-size] 旗標,Microsoft Edge 都會使用已提供的快取大小。此原則中指定的值不是固定界限,而是快取系統的建議;任何低於小於幾 MB 的數值均視為太小,將會四捨五入至合理的最小值。
如果您設定此原則為 0,將會使用預設的快取大小,而且使用者無法變更。
如果您未設定此原則,將會使用預設大小,但是使用者可以利用 [--media-cache-size] 旗標覆寫。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DiskCacheSize
- GP name: 設定磁碟快取大小,以位元組為單位
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
DiskCacheSize
- Value Type:
REG_DWORD
Example value:
0x06400000
Mac information and settings
- Preference Key Name: DiskCacheSize
- Example value:
104857600
Back to top
設定下載目錄 (DownloadDirectory)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
設定下載檔案時使用的目錄。
如果您啟用此原則,無論使用者是否已指定一個目錄,或選擇每次提示下載位置,Microsoft Edge 都會使用已提供的目錄。請參閱 https://docs.microsoft.com/Placeholder08,查看可用的變數清單。
如果您停用或未設定此原則,會使用預設的下載目錄,而且使用者可以變更。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DownloadDirectory
- GP name: 設定下載目錄
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
DownloadDirectory
- Value Type:
REG_SZ
Example value:
"/home/${user_name}/Downloads"
Mac information and settings
- Preference Key Name: DownloadDirectory
- Example value:
"/home/${user_name}/Downloads"
Back to top
允許下載限制 (DownloadRestrictions)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
設定 Microsoft Edge 完全封鎖的下載類型,且不允許使用者覆寫安全性決策。
設定 [封鎖危險下載] (1),允許下載除帶有 Microsoft Defender SmartScreen 警告的所有檔案。
設定 [封鎖具有潛在危險的下載] (2),允許下載除帶有 Microsoft Defender SmartScreen 潛在危險下載警告的所有檔案。
設定 [封鎖所有下載] (3),封鎖所有下載。
如果未設定此原則或設定為 [無特殊限制] (0) 選項,則將根據 Microsoft Defender SmartScreen 的分析結果,進行一般安全性限制下載。
請注意,這些限制適用於從網頁內容下載以及 [下載連結...] 操作功能表選項。這些限制不適用於儲存或下載目前顯示的頁面,也不適用於列印選項中的 [另存為 PDF] 選項。
如需詳細資訊,請參閱 Microsoft Defender SmartScreen 的 https://docs.microsoft.com/Placeholder09。
* 0 =無特殊限制
* 1 =封鎖危險下載
* 2 =封鎖具有潛在危險的下載
* 3 =封鎖所有下載
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: DownloadRestrictions
- GP name: 允許下載限制
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
DownloadRestrictions
- Value Type:
REG_DWORD
Example value:
0x00000002
Mac information and settings
- Preference Key Name: DownloadRestrictions
- Example value:
2
Back to top
允許使用者編輯我的最愛 (EditFavoritesEnabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
啟用此原則讓使用者新增、移除和修改我的最愛。如果您未設定此原則,則為預設行為。
停用此原則禁止使用者新增、移除或修改我的最愛。他們仍可以使用現有的我的最愛。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: EditFavoritesEnabled
- GP name: 允許使用者編輯我的最愛
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
EditFavoritesEnabled
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: EditFavoritesEnabled
- Example value:
False
Back to top
在限定時間內重新啟用已取代的網頁平台功能 (EnableDeprecatedWebPlatformFeatures)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定要暫時重新啟用的已取代的 Web 平台功能清單。
此原則允許在有限時間內重新啟用已取代的 Web 平台功能。功能由字串標記識別。
如果不設定此原則、清單為空,或功能與支援的字串標記之一不相符,則所有已取代的 Web 平台功能將維持停用狀態。
雖然上述平台支援該原則,但其啟用的功能可能無法在所有平台上使用。並非所有已取代的 Web 平台功能都能重新啟用。僅有下方明確列出的功能可在有限時間內重新啟用,每項功能的時間皆不同。您可以上 https://bit.ly/blinkintents 查看 Web 平台功能的變更用途。
字串標記的一般格式為 [DeprecatedFeatureName]_EffectiveUntil[yyyymmdd]。
* "ExampleDeprecatedFeature_EffectiveUntil20080902" =啟用 ExampleDeprecatedFeature API 到 2008/09/02
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: EnableDeprecatedWebPlatformFeatures
- GP name: 在限定時間內重新啟用已取代的網頁平台功能
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\EnableDeprecatedWebPlatformFeatures
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\EnableDeprecatedWebPlatformFeatures\0 = "ExampleDeprecatedFeature_EffectiveUntil20080902"
Mac information and settings
- Preference Key Name: EnableDeprecatedWebPlatformFeatures
- Example value:
<array>
<string>ExampleDeprecatedFeature_EffectiveUntil20080902</string>
</array>
Back to top
啟用從 Microsoft 進行網域動作下載 (EnableDomainActionsDownload)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
在 Microsoft Edge 中,網域動作代表一系列相容性功能,可協助瀏覽器在網路上正常運作。
Microsoft 會保留一份出於相容性原因對特定網域採取的動作清單。例如,如果網站由於 Microsoft Edge 上的新使用者代理程式字串而中斷,則瀏覽器可能會覆寫該網站上的使用者代理程式字串。當 Microsoft 嘗試解決網站擁有者的問題時,所執行的每項動作都是暫時性的。
當瀏覽器啟動,並在之後定期啟動時,瀏覽器將聯繫並執行包含最新相容性動作清單的 Microsoft 伺服器。首次擷取此清單後,此清單將儲存在本機中,日後僅在伺服器變更副本時才更新清單。
如果啟用此原則,將繼續從 Microsoft 伺服器下載網域動作清單。
如果停用此原則,將不再從 Microsoft 伺服器下載網域動作清單。
如果您不設定此原則,將繼續從 Microsoft 伺服器下載網域動作清單。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: EnableDomainActionsDownload
- GP name: 啟用從 Microsoft 進行網域動作下載
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
EnableDomainActionsDownload
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: EnableDomainActionsDownload
- Example value:
True
Back to top
啟用線上 OCSP/CRL 檢查 (EnableOnlineRevocationChecks)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
啟用此原則以使用線上 OSCP/CRL 檢查,預設情況下在 Microsoft Edge 中停用這些檢查。(這些非封鎖性失敗和線上撤銷檢查不會提供有效的安全性權益。)
如果您停用或不設定該原則,Microsoft Edge 將不執行線上撤銷檢查。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: EnableOnlineRevocationChecks
- GP name: 啟用線上 OCSP/CRL 檢查
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
EnableOnlineRevocationChecks
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: EnableOnlineRevocationChecks
- Example value:
False
Back to top
啟用 [我的最愛] 列 (FavoritesBarEnabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
啟用或停用 [我的最愛] 列。
如果啟用此原則,使用者將能看到 [我的最愛] 列。
如果停用此原則,使用者將看不到 [我的最愛] 列。
如果未設定此原則,使用者可以決定是否使用 [我的最愛] 列。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: FavoritesBarEnabled
- GP name: 啟用 [我的最愛] 列
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
FavoritesBarEnabled
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: FavoritesBarEnabled
- Example value:
True
Back to top
設定 Bing 安全搜尋 (ForceBingSafeSearch)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
請確認 Bing Web 搜尋中的查詢已完成,且安全搜尋設定為指定值。使用者無法變更此設定。
如果您設定此原則為「關閉」,Bing 搜尋中的安全搜尋會退回 bing.com 值。
如果您設定此原則為「中」時,則會使用安全搜尋的中等設定。中等設定會過濾成人影片和影像,但不會過濾搜尋結果的文字。
如果您設定此原則為「嚴格」則會使用安全搜尋的嚴格設定。嚴格設定會過濾成人文字、圖像及影片。
如果您停用此原則或未設定,則不會強制執行 Bing 搜尋中的安全搜尋,使用者可以在 bing.com 上設定他們要的值。
* 0 = 不要在 Bing 中設定搜尋限制
* 1 = 以 Bing 中設定中度搜尋限制
* 2 = 在 Bing 中設定嚴格搜尋限制
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ForceBingSafeSearch
- GP name: 設定 Bing 安全搜尋
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
ForceBingSafeSearch
- Value Type:
REG_DWORD
Example value:
0x00000000
Mac information and settings
- Preference Key Name: ForceBingSafeSearch
- Example value:
0
Back to top
啟用使用暫時設定檔 (ForceEphemeralProfiles)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
控制使用者設定檔是否切換到暫時模式。工作階段開始時建立暫時設定檔,工作階段結束後刪除暫時設定檔,暫時設定檔與使用者原始設定檔相關聯。
如果啟用此原則,設定檔將以暫時模式執行。這能讓使用者在自己的裝置上工作,而無需將瀏覽資料儲存到裝置中。如果將此原則啟用為 OS 原則 (如在 Windows 上使用群組原則物件 (GPO)),則此原則將套用至系統上的所有設定檔。
如果停用或不設定此原則,則使用者將在登入瀏覽器時,取得其慣常使用的設定檔。
在暫時模式下,設定檔資料僅在使用者工作階段期間儲存於磁碟上。關閉瀏覽器後,將不會儲存瀏覽器歷程記錄、擴充功能和其資料等功能、Cookie 等網路資料和 Web 資料庫。這不會防止使用者以手動方式將任何資料下載到磁碟中,也不會防止使用者儲存或列印頁面。如果使用者已啟用同步處理,則所有資料都會保留在其同步帳戶中,就像一般設定檔一樣。除非明確停用此原則,否則使用者還可以在暫時模式下使用 InPrivate 瀏覽。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ForceEphemeralProfiles
- GP name: 啟用使用暫時設定檔
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
ForceEphemeralProfiles
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: ForceEphemeralProfiles
- Example value:
True
Back to top
強制執行 Google 安全搜尋 (ForceGoogleSafeSearch)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
限制在啟用安全搜尋設定的 [Google 網頁搜尋] 中才能查詢,並防止使用者變更此設定。
如果您啟用此原則,[Google 搜尋] 中的安全搜尋將一律啟用。
如果您停用此原則或未設定,則不會強制執行 [Google 搜尋] 中的安全搜尋。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ForceGoogleSafeSearch
- GP name: 強制執行 Google 安全搜尋
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
ForceGoogleSafeSearch
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: ForceGoogleSafeSearch
- Example value:
False
Back to top
強制最小 YouTube 限制模式 (ForceYouTubeRestrict)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
在 YouTube 上強制執行最小限制模式,並防止使用者選擇限制較少的模式。
設定為 [嚴格](2),則在 YouTube 上強制執行嚴格限制模式。
設定為 [中等](1),則強制使用者在 YouTube 上僅使用中等限制模式和嚴格限制模式。使用者無法停用限制模式。
設定為關閉 (0) 或不設定此原則,則不在 YouTube 上強制執行受限模式。外部原則 (如 YouTube 原則) 可能仍然會強制執行限制模式。
* 0 = 不在 YouTube 上強制執行限制模式
* 1 = 在 YouTube 上強制執行至少中等限制模式
* 2 = 在 YouTube 上強制執行嚴格限制模式
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ForceYouTubeRestrict
- GP name: 強制最小 YouTube 限制模式
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
ForceYouTubeRestrict
- Value Type:
REG_DWORD
Example value:
0x00000000
Mac information and settings
- Preference Key Name: ForceYouTubeRestrict
- Example value:
0
Back to top
允許全螢幕模式 (FullscreenAllowed)
Supported Versions: Microsoft Edge on Windows since version 77 or later
Description
設定全螢幕模式的可用性 - 隱藏所有 Microsoft Edge 使用者界面,僅顯示網頁內容。
如果啟用或不設定此原則,具有適當權限的使用者、應用程式和擴充功能可進入全螢幕模式。
如果停用此原則,使用者、應用程式和擴充功能將無法進入全螢幕模式。
停用全螢幕模式時,不可使用命令列在 Kiosk 模式下開啟 Microsoft Edge。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: FullscreenAllowed
- GP name: 允許全螢幕模式
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
FullscreenAllowed
- Value Type:
REG_DWORD
Example value:
True
Back to top
可用時便使用硬體加速 (HardwareAccelerationModeEnabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
如果可使用,請指定使用硬體加速。如果啟用或不設定此原則,除非明確封鎖 GPU 功能,否則便會啟用硬體加速。
如果停用此原則,則會停用硬體加速。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: HardwareAccelerationModeEnabled
- GP name: 可用時便使用硬體加速
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
HardwareAccelerationModeEnabled
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: HardwareAccelerationModeEnabled
- Example value:
True
Back to top
Allow importing of autofill form data (ImportAutofillFormData)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
Allows users to import autofill form data from another browser into Microsoft Edge.
If you enable this policy, the option to manually import autofill data is automatically selected.
If you disable this policy, autofill form data isn't imported at first run, and users can't import it manually.
If you don't configure this policy, autofill data is imported at first run, and users can choose whether to import this data manually during later browsing sessions.
You can set this policy as a recommendation. This means that Microsoft Edge will import autofill data on first run, but users can select or clear **autofill data** option during manual import.
**Note**: This policy currently manages importing from Google Chrome (on Windows 7, 8, and 10 and on macOS).
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ImportAutofillFormData
- GP name: Allow importing of autofill form data
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
ImportAutofillFormData
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: ImportAutofillFormData
- Example value:
True
Back to top
Allow importing of favorites (ImportFavorites)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
Allows users to import favorites from another browser into Microsoft Edge.
If you enable this policy, the **Favorites** check box is automatically selected in the **Import browser data** dialog box.
If you disable this policy, favorites aren't imported at first run, and users can’t import them manually.
If you don’t configure this policy, favorites are imported at first run, and users can choose whether to import them manually during later browsing sessions.
You can also set this policy as a recommendation. This means that Microsoft Edge imports favorites on first run, but users can select or clear the **favorites** option during manual import.
**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10), Google Chrome (on Windows 7, 8, and 10 and on macOS) and Apple Safari (on macOS) browsers.
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ImportFavorites
- GP name: Allow importing of favorites
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
ImportFavorites
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: ImportFavorites
- Example value:
True
Back to top
Allow importing of browsing history (ImportHistory)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
Allows users to import their browsing history from another browser into Microsoft Edge.
If you enable this policy, the **Browsing history** check box is automatically selected in the **Import browser data** dialog box.
If you disable this policy, browsing history data isn't imported at first run, and users can’t import this data manually.
If you don’t configure this policy, browsing history data is imported at first run, and users can choose whether to import it manually during later browsing sessions.
You can also set this policy as a recommendation. This means that Microsoft Edge imports browsing history on first run, but users can select or clear the **history** option during manual import.
**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10), Google Chrome (on Windows 7, 8, and 10 and on macOS) and Apple Safari (macOS) browsers.
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ImportHistory
- GP name: Allow importing of browsing history
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
ImportHistory
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: ImportHistory
- Example value:
True
Back to top
Allow importing of home page settings (ImportHomepage)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
Allows users to import their home page setting from another browser into Microsoft Edge.
If you enable this policy, the option to manually import the home page setting is automatically selected.
If you disable this policy, the home page setting isn’t imported at first run, and users can’t import it manually.
If you don’t configure this policy, the home page setting is imported at first run, and users can choose whether to import this data manually during later browsing sessions.
You can set this policy as a recommendation. This means that Microsoft Edge imports the home page setting on first run, but users can select or clear the **home page** option during manual import.
**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10).
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ImportHomepage
- GP name: Allow importing of home page settings
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
ImportHomepage
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: ImportHomepage
- Example value:
True
Back to top
Allow importing of payment info (ImportPaymentInfo)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
Allows users to import payment info from another browser into Microsoft Edge.
If you enable this policy, the **payment info** check box is automatically selected in the **Import browser data** dialog box.
If you disable this policy, payment info isn’t imported at first run, and users can’t import it manually.
If you don’t configure this policy, payment info is imported at first run, and users can choose whether to import it manually during later browsing sessions.
You can also set this policy as a recommendation. This means that Microsoft Edge imports payment info on first run, but users can select or clear the **payment info** option during manual import.
**Note:** This policy currently manages importing from Google Chrome (on Windows 7, 8, and 10 and on macOS).
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ImportPaymentInfo
- GP name: Allow importing of payment info
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
ImportPaymentInfo
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: ImportPaymentInfo
- Example value:
True
Back to top
Allow importing of saved passwords (ImportSavedPasswords)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
Allows users to import saved passwords from another browser into Microsoft Edge.
If you enable this policy, the option to manually import saved passwords is automatically selected.
If you disable this policy, saved passwords aren't imported on first run, and users can't import them manually.
If you don't configure this policy, passwords are imported at first run, and users can choose whether to import them manually during later browsing sessions.
You can set this policy as a recommendation. This means that Microsoft Edge imports passwords on first run, but users can select or clear the **passwords** option during manual import.
**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10) and Google Chrome (on Windows 7, 8, and 10 and on macOS) browsers.
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ImportSavedPasswords
- GP name: Allow importing of saved passwords
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
ImportSavedPasswords
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: ImportSavedPasswords
- Example value:
True
Back to top
Allow importing of search engine settings (ImportSearchEngine)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
Allows users to import search engine settings from another browser into Microsoft Edge.
If you enable, this policy, the option to import search engine settings is automatically selected.
If you disable this policy, search engine settings aren't imported at first run, and users can’t import them manually.
If you don’t configure this policy, search engine settings are imported at first run, and users can choose whether to import this data manually during later browsing sessions.
You can set this policy as a recommendation. This means that Microsoft Edge imports search engine settings on first run, but users can select or clear the **search engine** option during manual import.
**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10).
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ImportSearchEngine
- GP name: Allow importing of search engine settings
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
ImportSearchEngine
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: ImportSearchEngine
- Example value:
True
Back to top
設定 InPrivate 模式可用性 (InPrivateModeAvailability)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定使用者是否可以在 Microsoft Edge 以 InPrivate 模式開啟頁面。
如果不設定此原則或將其設定為 [啟用] (0),則使用者可以 InPrivate 模式開啟頁面。
將此原則設定為 [停用] (1) 以阻止使用者使用 InPrivate模式。
將此原則設定為 [強制] (2) 以一律使用 InPrivate 模式。
* 0 = InPrivate 模式可用
* 1 = InPrivate 模式已停用
* 2 = 強制 InPrivate 模式
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: InPrivateModeAvailability
- GP name: 設定 InPrivate 模式可用性
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
InPrivateModeAvailability
- Value Type:
REG_DWORD
Example value:
0x00000001
Mac information and settings
- Preference Key Name: InPrivateModeAvailability
- Example value:
1
Back to top
Configure Internet Explorer integration (InternetExplorerIntegrationLevel)
Supported Versions: Microsoft Edge on Windows since version 77 or later
Description
Allows you to configure the scope of Internet Explorer integration in Microsoft Edge.
If you enable this policy, you can choose between the following options:
* Internet Explorer mode: provides full immersive integration of Internet Explorer with Microsoft Edge version 77 or later
* Internet Explorer 11: lets users open selected sites in the stand-alone version of Internet Explorer 11
If you disable or don’t configure this policy, all sites are opened in Microsoft Edge. This is the default behavior.
To configure this policy, you must first enable at least one of the following related policies. Otherwise, this policy will have no effect.
- Use the Enterprise Mode IE website list (‘SiteList’)
- Send all intranet sites to Internet Explorer (‘SendIntranetToInternetExplorer’)
For more info about how to use this policy together with other related policies to create the optimal configuration for your organization, see https://go.microsoft.com/fwlink/?linkid=2094210.
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: InternetExplorerIntegrationLevel
- GP name: Configure Internet Explorer integration
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
InternetExplorerIntegrationLevel
- Value Type:
REG_DWORD
Example value:
0x00000001
Back to top
為特定來源啟用網站隔離 (IsolateOrigins)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定來源在其處理程序中隔離執行。
此原則也會隔離隔離子網域命名的來源 - 例如,指定 https://contoso.com/ 將導致 https://foo.contoso.com/ 隔離為 https://contoso.com/ 的一部分。
如果啟用此原則,則以逗點分隔清單中的每個命名來源,都將在其處理程序中執行。
如果停用此原則,則 [IsolateOrigins] 和 [SitePerProcess] 功能都將停用。使用者仍可以透過命令列旗標手動啟用 [IsolateOrigins] 原則。
如果不設定原則,使用者可以變更此原則。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: IsolateOrigins
- GP name: 為特定來源啟用網站隔離
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
IsolateOrigins
- Value Type:
REG_SZ
Example value:
"https://contoso.com/,https://fabrikam.com/"
Mac information and settings
- Preference Key Name: IsolateOrigins
- Example value:
"https://contoso.com/,https://fabrikam.com/"
Back to top
設定我的最愛 (ManagedFavorites)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
設定受管理的我的最愛清單。
此原則建立我的最愛清單。每個我的最愛項目包含「名稱」與「url」等機碼,其中包含我的最愛名稱與目標。您可以透過定義沒有「url」機碼,但有其他「兒童」機碼包含如上定義的包含的我的最愛清單 (其中一些可能也是資料夾),設定子資料夾。Microsoft Edge 會修正不完整的 URL,宛如已透過網址列提交,例如「microsoft.com」變成「https://microsoft.com/」。
這些我的最愛位於無法由使用者修改的資料夾中 (但使用者可以選擇在我的最愛列中隱藏)。預設值的資料夾名為「受管理的我的最愛」,但您可以將其新增到我的最愛清單,變更為包含有機碼「toplevel_name」且值為想要的資料夾名稱的字典。
受管理的我的最愛不會與使用者帳戶同步,且無法利用擴充功能修改。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Dictionary
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ManagedFavorites
- GP name: 設定我的最愛
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
ManagedFavorites
- Value Type:
REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\ManagedFavorites = [
{
"toplevel_name": "My managed favorites folder"
},
{
"name": "Microsoft",
"url": "microsoft.com"
},
{
"name": "Bing",
"url": "bing.com"
},
{
"children": [
{
"name": "Microsoft Edge Insiders",
"url": "www.microsoftedgeinsider.com"
},
{
"name": "Microsoft Edge",
"url": "www.microsoft.com/windows/microsoft-edge"
}
],
"name": "Microsoft Edge links"
}
]
Mac information and settings
- Preference Key Name: ManagedFavorites
- Example value:
<key>ManagedFavorites</key>
<array>
<dict>
<key>toplevel_name</key>
<string>My managed favorites folder</string>
</dict>
<dict>
<key>name</key>
<string>Microsoft</string>
<key>url</key>
<string>microsoft.com</string>
</dict>
<dict>
<key>name</key>
<string>Bing</string>
<key>url</key>
<string>bing.com</string>
</dict>
<dict>
<key>children</key>
<array>
<dict>
<key>name</key>
<string>Microsoft Edge Insiders</string>
<key>url</key>
<string>www.microsoftedgeinsider.com</string>
</dict>
<dict>
<key>name</key>
<string>Microsoft Edge</string>
<key>url</key>
<string>www.microsoft.com/windows/microsoft-edge</string>
</dict>
</array>
<key>name</key>
<string>Microsoft Edge links</string>
</dict>
</array>
Back to top
管理搜索引擎 (ManagedSearchEngines)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
可讓您設定最多 10 個的搜尋引擎清單,其中一個必須標記為預設搜尋引擎。
您無需指定任何搜尋引擎編碼。
如果啟用此原則,則使用者無法新增、移除或變更清單中的任何搜尋引擎。使用者可將清單中的任一搜尋引擎設為預設搜尋引擎。
如果停用或未設定此原則,則使用者可視需要修改搜尋引擎清單。
如果設定了 [DefaultSearchProviderSearchURL] 原則,則會忽略此原則 (ManagedSearchEngines)。使用者必須重新啟動瀏覽器才能成功套用此原則。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Dictionary
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ManagedSearchEngines
- GP name: 管理搜索引擎
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
ManagedSearchEngines
- Value Type:
REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\ManagedSearchEngines = [
{
"image_search_url": "https://www.example1.com/images/detail/search?iss=sbiupload",
"is_default": true,
"keyword": "example1.com",
"name": "Example1",
"search_url": "https://www.example1.com/search?q={searchTerms}",
"suggest_url": "https://www.example1.com/qbox?query={searchTerms}"
},
{
"image_search_url": "https://www.example2.com/images/detail/search?iss=sbiupload",
"keyword": "example2.com",
"name": "Example2",
"search_url": "https://www.example2.com/search?q={searchTerms}",
"suggest_url": "https://www.example2.com/qbox?query={searchTerms}"
},
{
"encoding": "UTF-8",
"image_search_url": "https://www.example3.com/images/detail/search?iss=sbiupload",
"keyword": "example3.com",
"name": "Example3",
"search_url": "https://www.example3.com/search?q={searchTerms}",
"suggest_url": "https://www.example3.com/qbox?query={searchTerms}"
}
]
Mac information and settings
- Preference Key Name: ManagedSearchEngines
- Example value:
<key>ManagedSearchEngines</key>
<array>
<dict>
<key>image_search_url</key>
<string>https://www.example1.com/images/detail/search?iss=sbiupload</string>
<key>is_default</key>
<true/>
<key>keyword</key>
<string>example1.com</string>
<key>name</key>
<string>Example1</string>
<key>search_url</key>
<string>https://www.example1.com/search?q={searchTerms}</string>
<key>suggest_url</key>
<string>https://www.example1.com/qbox?query={searchTerms}</string>
</dict>
<dict>
<key>image_search_url</key>
<string>https://www.example2.com/images/detail/search?iss=sbiupload</string>
<key>keyword</key>
<string>example2.com</string>
<key>name</key>
<string>Example2</string>
<key>search_url</key>
<string>https://www.example2.com/search?q={searchTerms}</string>
<key>suggest_url</key>
<string>https://www.example2.com/qbox?query={searchTerms}</string>
</dict>
<dict>
<key>encoding</key>
<string>UTF-8</string>
<key>image_search_url</key>
<string>https://www.example3.com/images/detail/search?iss=sbiupload</string>
<key>keyword</key>
<string>example3.com</string>
<key>name</key>
<string>Example3</string>
<key>search_url</key>
<string>https://www.example3.com/search?q={searchTerms}</string>
<key>suggest_url</key>
<string>https://www.example3.com/qbox?query={searchTerms}</string>
</dict>
</array>
Back to top
同時連線到 Proxy 伺服器的最大數目 (MaxConnectionsPerProxy)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定 Proxy 伺服器的同時連線數目上限。
某些 Proxy 伺服器可能無法處理每個用戶端大量的同時連線 - 您可以透過將此原則設定為較低的值,解決此問題。
此原則的值應小於 100 並高於 6。預設值為 32。
已知某些 Web App 會透過溢出 [GET] 耗用過多連線 - 如果開啟過多這些類型的 Web App,將最大連線數降至 32 以下可能會導致瀏覽器網路中斷。
如果您未設定此原則,則會使用預設值 (32)。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: MaxConnectionsPerProxy
- GP name: 同時連線到 Proxy 伺服器的最大數目
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
MaxConnectionsPerProxy
- Value Type:
REG_DWORD
Example value:
0x00000020
Mac information and settings
- Preference Key Name: MaxConnectionsPerProxy
- Example value:
32
Back to top
允許 Google Cast 連線至所有 IP 位址上的 Cast 裝置 (MediaRouterCastAllowAllIPs)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
啟用此原則以允許 Google Cast 連線至所有 IP 位址上的 Cast 裝置,不只是 RFC1918/RFC4193 私人位址。
停用此原則以限制 Google Cast 連線至 RFC1918/RFC4193 私人位址上的 Cast 裝置。
如果您未設定此原則,除非啟用 [CastAllowAllIPs] 功能,Google Cast 僅會連線至 RFC1918/RFC4193 私人位址上的 Cast 裝置。
如果 [EnableMediaRouter] 已停用此原則,則此原則將無效。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: MediaRouterCastAllowAllIPs
- GP name: 允許 Google Cast 連線至所有 IP 位址上的 Cast 裝置
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
MediaRouterCastAllowAllIPs
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: MediaRouterCastAllowAllIPs
- Example value:
False
Back to top
啟用使用量及當機相關資料報告 (MetricsReportingEnabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
啟用向 Microsoft 報告有關 Microsoft Edge 的使用情況和當機相關資料,並防止使用者變更此設定。
啟用此原則,將使用情況和當機相關資料報告傳送給 Microsoft。停用此原則,不將資料傳送給 Microsoft。在這兩種情況下,使用者都無法變更或覆寫該設定。
如果不設定此原則,Microsoft Edge 將使用使用者在安裝/首次執行時所選擇的選項。
此原則僅適用於已加入 Microsoft Active Directory 網域的 Windows 執行個體,或已註冊裝置管理的 Windows 10 專業版及 Windows 10 企業版執行個體。
在 Windows 7、Windows 8 和 Mac,此原則控制使用情況和當機相關資料。
在 Windows 10 搶鮮版 (Beta)、Canary 和 Dev,此原則只控制使用數據。當機資料由 Windows 診斷資料設定控制 (https://docs.microsoft.com/windows/privacy/configure-windows-diagnostic-data-in-your-organization#overview)。
在 Windows 10 穩定版,使用情況和當機資料收集由 Windows 診斷資料設定控制 (https://docs.microsoft.com/windows/privacy/configure-windows-diagnostic-data-in-your-organization#overview)
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: MetricsReportingEnabled
- GP name: 啟用使用量及當機相關資料報告
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
MetricsReportingEnabled
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: MetricsReportingEnabled
- Example value:
True
Back to top
啟用網路預測 (NetworkPredictionOptions)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
啟用網路預測,並防止使用者變更此設定。
這會控制 DNS 預先擷取、TCP 和 SSL 預先連線和預先轉譯網頁。
如果不設定此原則,即便已啟用網絡預測,使用者依然可以進行變更。
* 0 =預測任何網路連線上的網路動作
* 2 =不預測任何網路連線上的網路動作
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: NetworkPredictionOptions
- GP name: 啟用網路預測
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
NetworkPredictionOptions
- Value Type:
REG_DWORD
Example value:
0x00000001
Mac information and settings
- Preference Key Name: NetworkPredictionOptions
- Example value:
1
Back to top
控制不安全來源中安全性限制套用的地方 (OverrideSecurityRestrictionsOnInsecureOrigin)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定不適用非安全來源中安全性限制的來源 (URL) 或主機名稱模式 (例如「*.contoso.com」) 的列表。
此原則可讓您指定無法部署 TLS 或設定內部網頁程式開發的暫存伺服器的繼承應用程式的允許來源,讓開發人員可以測試需要安全內容功能,而不需在暫存伺服器上部署 TLS。此原則也會防止來源在 Omnibox 中標示為「不安全」。
此原則中 Url 的清單設定也會與將命令列旗標 [-unsafely-treat-insecure-origin-as-secure] 設定為以逗號分隔的相同 URL 清單有相同效果。如果您啟用此原則,則會覆寫命令列旗標。
如需有關安全內容的詳細資訊,請參閱 https://www.w3.org/TR/secure-contexts/。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: OverrideSecurityRestrictionsOnInsecureOrigin
- GP name: 控制不安全來源中安全性限制套用的地方
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\OverrideSecurityRestrictionsOnInsecureOrigin
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\OverrideSecurityRestrictionsOnInsecureOrigin\0 = "http://testserver.contoso.com/"
SOFTWARE\Policies\Microsoft\Edge\OverrideSecurityRestrictionsOnInsecureOrigin\1 = "*.contoso.com"
Mac information and settings
- Preference Key Name: OverrideSecurityRestrictionsOnInsecureOrigin
- Example value:
<array>
<string>http://testserver.contoso.com/</string>
<string>*.contoso.com</string>
</array>
Back to top
啟用主動式驗證 (ProactiveAuthEnabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
可讓您設定是否要開啟 [主動式驗證]。
如果您啟用此原則, Microsoft Edge 會嘗試透過 Microsoft 服務主動驗證登入使用者。Microsoft Edge 會以固定間隔檢查線上更新資訊清單,其中包含負責控制執行操作方式的設定。
如果您停用此原則, Microsoft Edge 不會嘗試透過 Microsoft 服務主動驗證登入使用者。Microsoft Edge 不會再透過線上服務檢查包含執行此操作設定的更新資訊清單。
如果您未設定此原則,則會開啟 [主動式驗證]。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ProactiveAuthEnabled
- GP name: 啟用主動式驗證
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
ProactiveAuthEnabled
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: ProactiveAuthEnabled
- Example value:
True
Back to top
啟用全索引標籤推廣內容 (PromotionalTabsEnabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
控制完整分頁宣傳或教育內容的外觀。此設定會控制協助使用者登入 Microsoft Edge 的歡迎頁面外觀,請選擇預設瀏覽器,或深入了解產品功能。
如果您啟用此原則 (設定為 True) 或未設定,Microsoft Edge 能夠向使用者顯示完整分頁內容,以提供產品資訊。
如果您停用 (設為 False) 此原則,Microsoft Edge 將無法向使用者顯示的完整分頁內容。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: PromotionalTabsEnabled
- GP name: 啟用全索引標籤推廣內容
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
PromotionalTabsEnabled
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: PromotionalTabsEnabled
- Example value:
False
Back to top
詢問下載檔案的儲存位置 (PromptForDownloadLocation)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
設定是否要在下載前詢問檔案的儲存位置。
如果您啟用此原則,則會在每個檔案下載前詢問儲存位置;如果您未設定,檔案會自動儲存到預設位置,而不會詢問使用者。
如果您未設定此原則,使用者將無法變更此設定。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: PromptForDownloadLocation
- GP name: 詢問下載檔案的儲存位置
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
PromptForDownloadLocation
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: PromptForDownloadLocation
- Example value:
False
Back to top
允許 QUIC 通訊協定 (QuicAllowed)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
Allows use of the QUIC protocol in Microsoft Edge.
If you enable this policy or don't configure it, the QUIC protocol is allowed.
If you disable this policy, the QUIC protocol is blocked.
QUIC is a transport layer network protocol that can improve performance of web applications that currently use TCP.
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: QuicAllowed
- GP name: 允許 QUIC 通訊協定
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
QuicAllowed
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: QuicAllowed
- Example value:
True
Back to top
通知使用者建議或需要重新啟動瀏覽器,以套用擱置中的更新 (RelaunchNotification)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
通知使用者需要重新啟動 Microsoft Edge 以套用擱置中的更新。
如果未設定此原則,Microsoft Edge 在頂端功能表列的最右側新增了回收圖示,以提示使用者重新啟動瀏覽器以套用更新。
如果啟用此原則,並將其設定為 [建議] (1),週期性警告會提示使用者,建議重新啟動。使用者可以關閉此警告,並延後重新啟動。
如果將此原則設定為 [必要] (2) 時,週期性警告會提示使用者,在通知期過後立即自動重新啟動瀏覽器。預設的期間是七天。您可以使用 [RelaunchNotificationPeriod] 原則設定這段期間的長度。
重新啟動瀏覽器後,會還原使用者的工作階段。
*建議 (1) = 向使用者顯示建議重新啟動的週期性提示
*必要 (2) = 向使用者顯示必須重新啟動的週期性提示
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: RelaunchNotification
- GP name: 通知使用者建議或需要重新啟動瀏覽器,以套用擱置中的更新
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
RelaunchNotification
- Value Type:
REG_DWORD
Example value:
0x00000001
Mac information and settings
- Preference Key Name: RelaunchNotification
- Example value:
1
Back to top
設定更新通知的時間週期 (RelaunchNotificationPeriod)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
設定時間長度 (以毫秒為單位),通知使用者必須重新啟動 Microsoft Edge 以套用擱置中的更新。
在此期間,使用者將反覆收到需要重新啟動的通知。應用程式功能表變更為經過三分之一的通知期間後,顯示需重新啟動。經過三分之二的通知期間後,通知會變更顏色,並在完整通知期限過後再次變更顏色。[RelaunchNotification] 原則所啟用的其他通知遵循相同的安排。
如果不設定此原則,則預設時間為 604800000 毫秒 (一週)。
限制:
*最小值: 3600000
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Integer
Windows information and settings
Group Policy (ADMX) info
- GP unique name: RelaunchNotificationPeriod
- GP name: 設定更新通知的時間週期
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
RelaunchNotificationPeriod
- Value Type:
REG_DWORD
Example value:
0x240c8400
Mac information and settings
- Preference Key Name: RelaunchNotificationPeriod
- Example value:
604800000
Back to top
指定本機信賴起點是否需要線上 OCSP / CRL 檢查 (RequireOnlineRevocationChecksForLocalAnchors)
Supported Versions: Microsoft Edge on Windows since version 77 or later
Description
控制是否需要線上撤銷檢查 (OCSP/CRL 檢查)。如果 Microsoft Edge 無法取得撤銷狀態資訊,這些憑證都會視為已撤銷 (「硬碟失敗」)。
如果您啟用此原則,Microsoft Edge 一律對成功驗證並由本地安裝 CA 憑證的伺服器憑證執行撤銷檢查。
如果您未設定或停用此原則,則 Microsoft Edge 會使用現有的線上撤銷檢查設定。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: RequireOnlineRevocationChecksForLocalAnchors
- GP name: 指定本機信賴起點是否需要線上 OCSP / CRL 檢查
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
RequireOnlineRevocationChecksForLocalAnchors
- Value Type:
REG_DWORD
Example value:
False
Back to top
透過網頁服務啟用瀏覽錯誤解析度 (ResolveNavigationErrorsUseWebService)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
允許 Microsoft Edge 發佈 DATALESS 連線至網頁服務以探查網路連線,像是旅館與機場的 Wi-Fi 連線。
如果您啟用此原則,網頁服務會用於網路連線測試。
如果您停用此原則,Microsoft Edge 會使用原生 API 嘗試解決網路連線和瀏覽問題。
**注意**:除了 Windows 8 和更新版本的 Windows,Microsoft Edge *一律* 使用原生 API 解決連線問題。
如果您未設定此原則,Microsoft Edge 會尊重 edge://settings/privacy 中設定服務下的使用者喜好設定。
特別是 **使用網頁服務以協助解決瀏覽錯誤**切換,使用者可以切換為開啟或關閉。請注意,如果您啟用此原則 (ResolveNavigationErrorsUseWebService),**使用網頁服務以協助解決瀏覽錯誤** 設為開啟,但使用者會無法透過切換變更此設定。如果您停用此原則,**使用網頁服務協助解決瀏覽錯誤** 設定會關閉,且使用者會無法透過切換變更此設定。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ResolveNavigationErrorsUseWebService
- GP name: 透過網頁服務啟用瀏覽錯誤解析度
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
ResolveNavigationErrorsUseWebService
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: ResolveNavigationErrorsUseWebService
- Example value:
True
Back to top
限制哪些帳戶可以作為 Microsoft Edge 的主要帳戶 (RestrictSigninToPattern)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
決定使用者可以設定那些帳戶為 Microsoft Edge 中的瀏覽器主要帳戶 (同步選擇加入流程期間選取的帳戶)。
如果使用者嘗試設定使用者名稱不符合此模式的瀏覽器主要帳戶,帳戶會遭到封鎖,並看到相應的錯誤訊息。
如果您未設定此原則或留白,使用者可以設定所有帳戶為 Microsoft Edge 中的瀏覽器主要帳戶。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: RestrictSigninToPattern
- GP name: 限制哪些帳戶可以作為 Microsoft Edge 的主要帳戶
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
RestrictSigninToPattern
- Value Type:
REG_SZ
Example value:
".*@contoso.com"
Mac information and settings
- Preference Key Name: RestrictSigninToPattern
- Example value:
".*@contoso.com"
Back to top
Extend Adobe Flash content setting to all content (RunAllFlashInAllowMode)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
If you enable this policy, all Adobe Flash content embedded in websites that are set to allow Adobe Flash in the content settings -- either by the user or by enterprise policy -- will run. This includes content from other origins and/or small content.
To control which websites are allowed to run Adobe Flash, see the specifications in the 'DefaultPluginsSetting', 'PluginsAllowedForUrls', and 'PluginsBlockedForUrls' policies.
If you disable this policy or don't configure it, Adobe Flash content from other origins (from sites that aren't specified in the three policies mentioned immediately above) or small content might be blocked.
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: RunAllFlashInAllowMode
- GP name: Extend Adobe Flash content setting to all content
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
RunAllFlashInAllowMode
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: RunAllFlashInAllowMode
- Example value:
True
Back to top
允許使用者從 SSL 警告頁面繼續 (SSLErrorOverrideAllowed)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
當使用者造訪具有 SSL 錯誤的網站時,Microsoft Edge 會顯示警告頁面。
如果您啟用或未設定 (預設值) 此原則,使用者可以點選瀏覽這些警告頁面。
如果您停用此原則,使用者將無法點選瀏覽這些警告頁面。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: SSLErrorOverrideAllowed
- GP name: 允許使用者從 SSL 警告頁面繼續
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
SSLErrorOverrideAllowed
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: SSLErrorOverrideAllowed
- Example value:
True
Back to top
已啟用最小 SSL 版本 (SSLVersionMin)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
設定 SSL 的最低支援版本。如果您未設定此原則,Microsoft Edge 會使用預設最低版本,TLS 1.0。
如果您啟用此原則,您可以設定最低版本為下列值之一:「tls1」、「tls1.1」或「tls1.2」。設定時,Microsoft Edge 將不會任何使用低於指定版本的 SSL/TLS 版本。任何無法辨識的值都會略過。
* "tls1" = TLS 1.0
* "tls1.1" = TLS 1.1
* "tls1.2" = TLS 1.2
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: SSLVersionMin
- GP name: 已啟用最小 SSL 版本
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
SSLVersionMin
- Value Type:
REG_SZ
Example value:
"tls1"
Mac information and settings
- Preference Key Name: SSLVersionMin
- Example value:
"tls1"
Back to top
停用儲存瀏覽器歷程記錄 (SavingBrowserHistoryDisabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
停用儲存瀏覽器歷程記錄並防止使用者變更此設定。
如果啟用此原則,則不會儲存瀏覽歷程記錄。同時也會停用同步索引標籤。
如果停用或不設定此原則,則會儲存瀏覽歷程記錄。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: SavingBrowserHistoryDisabled
- GP name: 停用儲存瀏覽器歷程記錄
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
SavingBrowserHistoryDisabled
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: SavingBrowserHistoryDisabled
- Example value:
True
Back to top
啟用搜尋建議 (SearchSuggestEnabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
在 Microsoft Edge 的網址列和自動建議清單中啟用網路搜尋建議,並防止使用者變更此原則。
如果您啟用此原則,將會使用網路搜尋建議。
如果停用此原則,則永遠不會使用網路搜尋建議,但仍會顯示本機歷程記錄與本機 [我的最愛] 建議。如果停用此原則,則無法在遙測至 Microsoft 時打字和輸入 URL 進行瀏覽。
如果不設定此原則,則會啟用搜尋建議,但使用者可以變更該原則。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: SearchSuggestEnabled
- GP name: 啟用搜尋建議
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
SearchSuggestEnabled
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: SearchSuggestEnabled
- Example value:
True
Back to top
不需要權限即可使用直接存取 [安全性金鑰] 證明的網站或網域 (SecurityKeyPermitAttestation)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
當安全性金鑰要求證明憑證時,指定無需明確使用者權限的網站和網域。此外,訊號傳送至安全性金鑰,代表可以使用個別證明。若沒有這麼做,每次網站請求安全性金鑰證明時都會提示使用者。
網站 (例如 https://contoso.com/some/path) 僅符合為 U2F appID。網域 (like contoso.com) 僅符合為 RP 識別碼。若要在指定網站涵蓋 U2F 和 webauthn API,您必須列出 appID URL 和網域。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: SecurityKeyPermitAttestation
- GP name: 不需要權限即可使用直接存取 [安全性金鑰] 證明的網站或網域
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\SecurityKeyPermitAttestation
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\SecurityKeyPermitAttestation\0 = "https://contoso.com"
Mac information and settings
- Preference Key Name: SecurityKeyPermitAttestation
- Example value:
<array>
<string>https://contoso.com</string>
</array>
Back to top
將所有內部網路網站傳送到 Internet Explorer (SendIntranetToInternetExplorer)
Supported Versions: Microsoft Edge on Windows since version 77 or later
Description
Allows you to configure whether your intranet sites are opened in Internet Explorer.
If you enable this policy, all intranet sites are automatically opened using the setting that’s configured in the ‘Configure Internet Explorer integration’ (‘InternetExplorerIntegrationLevel’) policy. The only exceptions are those sites configured with the open-in element in your Enterprise Mode Site List.
If you disable or don't configure this policy, your intranet sites are opened in Microsoft Edge, except for the sites listed in the Enterprise Mode Site List.
To enable this policy, you must first enable the ‘Configure Internet Explorer integration’ (‘InternetExplorerIntegrationLevel’) policy. Otherwise, this policy has no effect.
We strongly recommend keeping this policy in sync with the ‘Keep all intranet sites in Internet Explorer’ (‘KeepIntranetSitesInInternetExplorer’) policy. Additionally, it’s best to enable this policy only if your intranet sites have known compatibility problems with Microsoft Edge.
Related policies:
- Configure Internet Explorer integration (‘InternetExplorerIntegrationLevel’)
- Configure which version of Microsoft Edge to use for opening redirected sites (‘NeedEdgeBrowser’)
- Send all sites not included in the Enterprise Mode Site List to Microsoft Edge (‘SendIntranetToInternetExplorer’)
- Keep all intranet sites in Internet Explorer (‘KeepIntranetSitesInInternetExplorer’)
For more info about how to use this policy together with these related policies to create the optimal configuration for your organization, see https://go.microsoft.com/fwlink/?linkid=2094210.
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: SendIntranetToInternetExplorer
- GP name: 將所有內部網路網站傳送到 Internet Explorer
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
SendIntranetToInternetExplorer
- Value Type:
REG_DWORD
Example value:
True
Back to top
傳送網站資訊來改善 Microsoft 服務 (SendSiteInfoToImproveServices)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
透過此原則設定,您可以決定使用者是否可以向 Microsoft 發送關於他們在 Microsoft Edge 中訪問網站的資訊,以改進搜尋等服務。預設值取自安裝。
如果您啟用此設定,則 Microsoft Edge 中瀏覽過的網站資訊一律會傳送給 Microsoft。
如果您停用此設定,在 Microsoft Edge 中瀏覽過的網站資訊永遠不會傳送給 Microsoft。
如果您未設定,使用者可以選擇是否要將網站資訊傳送給 Microsoft。
Windows 7、8 和 Mac:控制傳送關於 Microsoft Edge 中網站瀏覽的資訊給 Microsoft。
Windows 10 (Edge Canary, Beta, Dev):控制傳送關於 Microsoft Edge 中網站瀏覽的資訊給 Microsoft。
Windows 10 (Edge 穩定版):此原則並不會控制傳送給 Microsoft 的網站資訊。而是由 [Windows 診斷資料] 設定控制
請參閱 https://docs.microsoft.com/en-us/windows/privacy/configure-windows-diagnostic-data-in-your-organization#overview
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: SendSiteInfoToImproveServices
- GP name: 傳送網站資訊來改善 Microsoft 服務
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
SendSiteInfoToImproveServices
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: SendSiteInfoToImproveServices
- Example value:
False
Back to top
在 [我的最愛] 列中顯示 Microsoft Office 捷徑 (ShowOfficeShortcutInFavoritesBar)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
指定是否在我的最愛列中包含 Office.com 的捷徑。使用者登入 Microsoft Edge 的捷徑將會帶使用者前往他們的 Microsoft Office 應用程式和文件。
如果此原則已啟用或未設定,使用者可以選擇是否要透過變更我的最愛列操作功能表中的切換功能查看捷徑。
如果此原則已停用,將不會顯示捷徑。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: ShowOfficeShortcutInFavoritesBar
- GP name: 在 [我的最愛] 列中顯示 Microsoft Office 捷徑
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
ShowOfficeShortcutInFavoritesBar
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: ShowOfficeShortcutInFavoritesBar
- Example value:
False
Back to top
在所有網站中啟用網站隔離 (SitePerProcess)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
使用[IsolateOrigins] 和 [SitePerProcess] 功能啟用網站隔離。
如果啟用,則每個網站將依照各自的處理程序執行。
如果停用此原則,則將停用 [IsolateOrigins] 和 [SitePerProces] 功能。使用者可以使用命令列旗標手動啟用 [SitePerProcess] 原則。
如果您不設定此原則,則使用者可以變更此設定。
您可能需要考慮 [IsolateOrigins] 原則設定,透過使用 [IsolateOrigins] 與您要隔離的網站清單,實現雙方的最佳效果、隔離並限制對使用者的影響。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: SitePerProcess
- GP name: 在所有網站中啟用網站隔離
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
SitePerProcess
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: SitePerProcess
- Example value:
True
Back to top
啟用拼字檢查 (SpellcheckEnabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
如果啟用或不設定此原則,則使用者可以使用拼寫檢查。
如果停用此原則,則使用者將無法使用拼寫檢查,並且也會停用 [SpellcheckLanguage] 原則。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: SpellcheckEnabled
- GP name: 啟用拼字檢查
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
SpellcheckEnabled
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: SpellcheckEnabled
- Example value:
False
Back to top
啟用特定拼字檢查語言 (SpellcheckLanguage)
Supported Versions: Microsoft Edge on Windows since version 77 or later
Description
啟用不同語言的拼字檢查。您所指定的語言無法辨識時會略過。
如果啟用此原則,則會為指定的語言以及使用者啟用的任何語言,啟用拼字檢查。
如果不設定或停用此原則,則不會變更使用者的拼字檢查喜好設定。
如果停用 [SpellcheckEnabled] 原則,則此原則將不會產生任何效果。
支援的語言為: af,bg,ca,cs,cy,da,de,el,en-AU,en-CA,en-GB,en-US,es,es-419,es-AR,es-ES,es-MX,es-US,et,fa,fo,fr,he,hi,hr,hu,id,it,ko,lt,lv,nb,nl,pl,pt-BR,pt-PT,ro,ru,sh,sk,sl,sq,sr,sv,ta,tg,tr,uk,vi。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: SpellcheckLanguage
- GP name: 啟用特定拼字檢查語言
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\SpellcheckLanguage
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\SpellcheckLanguage\0 = "fr"
SOFTWARE\Policies\Microsoft\Edge\SpellcheckLanguage\1 = "es"
Back to top
隱藏不支援的 OS 警告 (SuppressUnsupportedOSWarning)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
當在不支援的電腦或作業系統上執行 Microsoft Edge 時,隱藏其出現的警告。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: SuppressUnsupportedOSWarning
- GP name: 隱藏不支援的 OS 警告
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
SuppressUnsupportedOSWarning
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: SuppressUnsupportedOSWarning
- Example value:
True
Back to top
透過 Microsoft 同步服務停用資料同步處理 (SyncDisabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
在 Microsoft Edge 中停用資料同步處理,並防止使用者修改此設定。
如果未設定此原則,使用者將無法開啟或關閉同步處理。
當原則 'RoamingProfileSupportEnabled' 已啟用時不要啟用此原則,因為 'RoamingProfileSupportEnabled' 會重複同步功能。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: SyncDisabled
- GP name: 透過 Microsoft 同步服務停用資料同步處理
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
SyncDisabled
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: SyncDisabled
- Example value:
True
Back to top
設定分頁週期 (TabLifecyclesEnabled)
Supported Versions: Microsoft Edge on Windows since version 77 or later
Description
索引標籤生命週期功能將會回收與長時間未使用的索引標籤相關的 CPU 和記憶體。先節流,然後凍結,最後捨棄。
如果停用此原則,則停用索引標籤生命週期功能,且所有索引標籤皆保持正常執行。
如果啟用或不設定此原則,則啟用索引標籤生命週期功能。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: TabLifecyclesEnabled
- GP name: 設定分頁週期
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
TabLifecyclesEnabled
- Value Type:
REG_DWORD
Example value:
False
Back to top
在瀏覽器工作管理員中啟用結束處理程序 (TaskManagerEndProcessEnabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
如果啟用或不設定此原則,則使用者可以在 [瀏覽器工作管理員] 中結束處理程序。如果停用此原則,使用者將無法結束處理程序,且在 [瀏覽器工作管理員] 中將停用 [結束處理程序] 按鈕。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: TaskManagerEndProcessEnabled
- GP name: 在瀏覽器工作管理員中啟用結束處理程序
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
TaskManagerEndProcessEnabled
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: TaskManagerEndProcessEnabled
- Example value:
True
Back to top
啟用翻譯 (TranslateEnabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
在 Microsoft Edge 上啟用整合式 Microsoft 翻譯服務。
如果啟用此原則,Microsoft Edge 將為使用者提供翻譯功能,在適當時機顯示整合翻譯飛出視窗,且在內容選單上點擊滑鼠右鍵即可顯示翻譯選項。
停用此原則將會停用所有內建翻譯功能。
如果不設定原則,則使用者可以選擇是否要翻譯功能。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
Yes
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: TranslateEnabled
- GP name: 啟用翻譯
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
Administrative Templates/Microsoft Edge - Default Settings (users can override)/
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
SOFTWARE\Policies\Microsoft\Edge\Recommended
- Value Name:
TranslateEnabled
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: TranslateEnabled
- Example value:
True
Back to top
定義受允許的 URL 清單 (URLAllowlist)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
允許存取列出的 URL,作為 URL 封鎖清單中的例外項目。
依照 https://docs.microsoft.com//Placeholder01 格式化 URL 模式。
您可以使用此原則開啟嚴格封鎖清單的例外項目。例如您可以在封鎖清單中加入 [*] 封鎖所有要求,然後使用此原則允許存取 URL 的限制清單。您可以使用此原則開啟某些配置、其他網域的子網域、連接埠或特定路徑的例外項目。
最詳細的篩選器會決定是否封鎖或允許 URL。允許清單的優先層級高於封鎖清單。
這個原則僅限擁有 1000 個項目;會忽略 1000 個之後的項目。
如果您未設定此原則,則 [URLBlocklist] 原則的封鎖清單中將不會有任何例外項目。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: URLAllowlist
- GP name: 定義受允許的 URL 清單
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\URLAllowlist
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\URLAllowlist\0 = "contoso.com"
SOFTWARE\Policies\Microsoft\Edge\URLAllowlist\1 = "https://ssl.server.com"
SOFTWARE\Policies\Microsoft\Edge\URLAllowlist\2 = "hosting.com/good_path"
SOFTWARE\Policies\Microsoft\Edge\URLAllowlist\3 = "https://server:8080/path"
SOFTWARE\Policies\Microsoft\Edge\URLAllowlist\4 = ".exact.hostname.com"
Mac information and settings
- Preference Key Name: URLAllowlist
- Example value:
<array>
<string>contoso.com</string>
<string>https://ssl.server.com</string>
<string>hosting.com/good_path</string>
<string>https://server:8080/path</string>
<string>.exact.hostname.com</string>
</array>
Back to top
封鎖存取 URL 清單 (URLBlocklist)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
根據 URL 模式,定義封鎖的網站清單 (您的使用者無法清單)。
根據 https://docs.microsoft.com//Placeholder01 格式化 URL 模式。
您可以在 [URLAllowlist] 原則中定義例外狀況。這些原則僅限於 1000 個項目;會忽略後續項目。
請注意,封鎖內部 [edge://] 不建議的 URL - 這可能會導致非預期的錯誤。
此原則無法防止頁面透過 JavaScript 進行動態更新。例如如果您封鎖 [contoso.com/abc],只要不重新整理此頁面,使用者仍能瀏覽 [contoso.com],並按一下連結造訪 [contoso.com/abc]。
如果您未設定此原則,則不會封鎖 URL。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: URLBlocklist
- GP name: 封鎖存取 URL 清單
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\URLBlocklist
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\URLBlocklist\0 = "contoso.com"
SOFTWARE\Policies\Microsoft\Edge\URLBlocklist\1 = "https://ssl.server.com"
SOFTWARE\Policies\Microsoft\Edge\URLBlocklist\2 = "hosting.com/bad_path"
SOFTWARE\Policies\Microsoft\Edge\URLBlocklist\3 = "https://server:8080/path"
SOFTWARE\Policies\Microsoft\Edge\URLBlocklist\4 = ".exact.hostname.com"
SOFTWARE\Policies\Microsoft\Edge\URLBlocklist\5 = "file://*"
SOFTWARE\Policies\Microsoft\Edge\URLBlocklist\6 = "custom_scheme:*"
SOFTWARE\Policies\Microsoft\Edge\URLBlocklist\7 = "*"
Mac information and settings
- Preference Key Name: URLBlocklist
- Example value:
<array>
<string>contoso.com</string>
<string>https://ssl.server.com</string>
<string>hosting.com/bad_path</string>
<string>https://server:8080/path</string>
<string>.exact.hostname.com</string>
<string>file://*</string>
<string>custom_scheme:*</string>
<string>*</string>
</array>
Back to top
設定使用者資料目錄 (UserDataDir)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
設定用來儲存使用者資料的目錄。
如果您啟用此原則,無論使用者是否設定 [--user-data-dir] 命令列旗標,Microsoft Edge 會使用指定目錄。
如果您不啟用此原則,則會使用預設的設定檔路徑,但使用者可以透過 [--user-data-dir] 旗標覆寫。使用者可以在設定檔路徑下的 edge://version/ 找到設定檔的目錄。
若要避免資料遺失或其他錯誤,因為 Microsoft Edge 能管理其內容,請不要設定此原則至磁碟區根目錄或用於其他用途的目錄。
請參閱 https://docs.microsoft.com/Placeholder08 查看可用的變數清單。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: UserDataDir
- GP name: 設定使用者資料目錄
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
UserDataDir
- Value Type:
REG_SZ
Example value:
"${users}/${user_name}/Edge"
Mac information and settings
- Preference Key Name: UserDataDir
- Example value:
"${users}/${user_name}/Edge"
Back to top
允許使用者意見反應 (UserFeedbackAllowed)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
Microsoft Edge 會使用 [Edge 意見反應] 功能 (預設啟用) 允許使用者傳送意見反應、建議或客戶調查,並回報任何瀏覽器問題。此外根據預設,使用者無法停用 (關閉) [Edge 意見反應] 功能。
如果您啟用此原則或未設定,使用者可以叫用 [Edge 意見反應]。
如果您停用此原則,則使用者無法叫用 [Edge 意見反應]。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: UserFeedbackAllowed
- GP name: 允許使用者意見反應
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
UserFeedbackAllowed
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: UserFeedbackAllowed
- Example value:
True
Back to top
允許或封鎖視訊擷取 (VideoCaptureAllowed)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
控制網站是否可以擷取視訊。
如果已啟用或未設定 (預設),會向使用者要求所有網站的視訊擷取存取權限,除了那些 URL 設定在 [VideoCaptureAllowedUrls] 原則清單中的網站。這些網站無須提示便可獲得存取權限。
如果您停用此原則,使用者將不會收到提示,影片擷取功能僅可用於設定在 [VideoCaptureAllowedUrls] 原則中的 URL。
此原則會影響所有類型的視訊輸入,不僅限於內建攝影機。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: VideoCaptureAllowed
- GP name: 允許或封鎖視訊擷取
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
VideoCaptureAllowed
- Value Type:
REG_DWORD
Example value:
False
Mac information and settings
- Preference Key Name: VideoCaptureAllowed
- Example value:
False
Back to top
無需請求權限即可存取視訊擷取裝置的網站 (VideoCaptureAllowedUrls)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
根據 URL 模式指定可使用視訊擷取裝置的網站,而無需向使用者要求權限。此清單中的模式與要求 URL 的安全性來源相符。如果相符,則會自動授與該網站存取視訊擷取裝置的權限。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
Yes
Data Type:
List of strings
Windows information and settings
Group Policy (ADMX) info
- GP unique name: VideoCaptureAllowedUrls
- GP name: 無需請求權限即可存取視訊擷取裝置的網站
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge\VideoCaptureAllowedUrls
- Path (Recommended):
N/A
- Value Name:
1, 2, 3, ...
- Value Type:
list of REG_SZ
Example value:
SOFTWARE\Policies\Microsoft\Edge\VideoCaptureAllowedUrls\0 = "https://www.contoso.com/"
SOFTWARE\Policies\Microsoft\Edge\VideoCaptureAllowedUrls\1 = "https://[*.]contoso.edu/"
Mac information and settings
- Preference Key Name: VideoCaptureAllowedUrls
- Example value:
<array>
<string>https://www.contoso.com/</string>
<string>https://[*.]contoso.edu/</string>
</array>
Back to top
設定 WPAD 最佳化 (WPADQuickCheckEnabled)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
允許您在 Microsoft Edge 中關閉 WPAD (Web Proxy 自動探索) 最佳化。
如果您停用此原則,WPAD 最佳化將會停用,這會讓瀏覽器等候 DNS 型 WPAD 伺服器的時間更長。
如果您啟用或未設定這個原則,WPAD 最佳化將會啟用。
無論是否啟用或如何啟用此原則,使用者都無法變更 WPAD 最佳化設定。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: WPADQuickCheckEnabled
- GP name: 設定 WPAD 最佳化
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
WPADQuickCheckEnabled
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: WPADQuickCheckEnabled
- Example value:
True
Back to top
允許 WebDriver 覆寫不相容原則 (WebDriverOverridesIncompatiblePolicies)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
此原則可讓 WebDriver 介面使用者覆寫可能干擾其作業的原則。
如果啟用此原則,將可以設定 WebDriver 覆寫不相容的原則。
如果停用或不設定此原則,將無法設定 WebDriver 覆寫不相容的原則。
注意: 目前已確認 [SitePerProcess] 和 [IsolateOrigins] 原則會干擾 WebDriver 作業。將來可能會確認其他原則也會干擾 WebDriver。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: WebDriverOverridesIncompatiblePolicies
- GP name: 允許 WebDriver 覆寫不相容原則
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
WebDriverOverridesIncompatiblePolicies
- Value Type:
REG_DWORD
Example value:
True
Mac information and settings
- Preference Key Name: WebDriverOverridesIncompatiblePolicies
- Example value:
True
Back to top
限制 WebRTC 暴露 localhost IP 位址 (WebRtcLocalhostIpHandling)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
允許您設定是否讓 WebRTC 公開使用者的 localhost IP 位址。
如果您設定此原則為「AllowAllInterfaces」([預設]) 或「AllowPublicAndPrivateInterfaces」([default_public_and_private_interfaces]),則 WebRTC 會公開 localhost IP 位址。
如果您設定此原則為「AllowPublicInterfaceOnly」([default_public_interface_only]) 或「DisableNonProxiedUdp」([disable_non_proxied_udp]),則 WebRTC 不會公開 localhost IP 位址。
如果您未設定此原則或停用,WebRTC 會公開 localhost IP 位址。
* [default] = 允許所有介面。公開 localhost IP 位址。
* [default_public_and_private_interfaces] = 透過 http 預設路由允許公用和私人介面。公開 localhost IP 位址。
* [default_public_interface_only] = 透過 http 的預設路由允許公用介面。這不會公開 localhost IP 位址。
* [disable_non_proxied_udp] = 除非 proxy 伺服器支援 UDP,否則使用 TCP。這不會公開 localhost IP 位址。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: WebRtcLocalhostIpHandling
- GP name: 限制 WebRTC 暴露 localhost IP 位址
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
WebRtcLocalhostIpHandling
- Value Type:
REG_SZ
Example value:
"default"
Mac information and settings
- Preference Key Name: WebRtcLocalhostIpHandling
- Example value:
"default"
Back to top
限制 WebRTC 所使用的本機 UDP 連接埠範圍 (WebRtcUdpPortRange)
Supported Versions: Microsoft Edge on Windows and Mac since version 77 or later
Description
將 WebRTC 使用的 UDP 連接埠範圍限制在指定的連接埠間隔中 (包括端點)。
如果不設定此原則,或將其設定為空字串或無效的連接埠範圍,則 WebRTC 可以使用任何可用的本機 UDP 連接埠。
Supported features:
-
Can be mandatory:
Yes
-
Can be recommended:
No
-
Dynamic Policy Refresh:
No - Requires browser restart
Data Type:
String
Windows information and settings
Group Policy (ADMX) info
- GP unique name: WebRtcUdpPortRange
- GP name: 限制 WebRTC 所使用的本機 UDP 連接埠範圍
- GP path (Mandatory):
Administrative Templates/Microsoft Edge/
- GP path (Recommended):
N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory):
SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended):
N/A
- Value Name:
WebRtcUdpPortRange
- Value Type:
REG_SZ
Example value:
"10000-11999"
Mac information and settings
- Preference Key Name: WebRtcUdpPortRange
- Example value:
"10000-11999"
Back to top