Microsoft Edge Policies

https://learn.microsoft.com/en-us/deployedge/microsoft-edge-policies
Admin
Microsoft Edge Policies allows organizations to configure, manage, and control how the Microsoft...
Tokens:374,582
Snippets:3,617
Trust Score:10
Update:1 week ago
Show doc for...
Tokens:
Raw
### ExtensionSettings plist example for macOS

Source: https://learn.microsoft.com/en-us/deployedge/microsoft-edge-policies/extensionsettings

Example plist value for the ExtensionSettings preference key on macOS. It shows how to set installation modes (blocked, allowed, force_installed, removed), permissions, install sources, runtime host restrictions, and update URLs for specific extension IDs and wildcard patterns.

```xml
<key>ExtensionSettings</key>
<dict>
  <key>*</key>
  <dict>
    <key>allowed_types</key>
    <array>
      <string>hosted_app</string>
    </array>
    <key>blocked_install_message</key>
    <string>Custom error message.</string>
    <key>blocked_permissions</key>
    <array>
      <string>downloads</string>
      <string>bookmarks</string>
    </array>
    <key>install_sources</key>
    <array>
      <string>https://company-intranet/apps</string>
    </array>
    <key>installation_mode</key>
    <string>blocked</string>
    <key>runtime_allowed_hosts</key>
    <array>
      <string>*://good.contoso.com</string>
    </array>
    <key>runtime_blocked_hosts</key>
    <array>
      <string>*://*.contoso.com</string>
    </array>
  </dict>
  <key>abcdefghijklmnopabcdefghijklmnop</key>
  <dict>
    <key>blocked_permissions</key>
    <array>
      <string>history</string>
    </array>
    <key>file_url_navigation_allowed</key>
    <true/>
    <key>installation_mode</key>
    <string>allowed</string>
    <key>minimum_version_required</key>
    <string>1.0.1</string>
  </dict>
  <key>bcdefghijklmnopabcdefghijklmnopa</key>
  <dict>
    <key>allowed_permissions</key>
    <array>
      <string>downloads</string>
    </array>
    <key>installation_mode</key>
    <string>force_installed</string>
    <key>override_update_url</key>
    <true/>
    <key>runtime_allowed_hosts</key>
    <array>
      <string>*://good.contoso.com</string>
    </array>
    <key>runtime_blocked_hosts</key>
    <array>
      <string>*://*.contoso.com</string>
    </array>
    <key>sidebar_auto_open_blocked</key>
    <true/>
    <key>toolbar_state</key>
    <string>force_shown</string>
    <key>update_url</key>
    <string>https://contoso.com/update_url</string>
  </dict>
  <key>cdefghijklmnopabcdefghijklmnopab</key>
  <dict>
    <key>blocked_install_message</key>
    <string>Custom error message.</string>
    <key>installation_mode</key>
    <string>blocked</string>
  </dict>
  <key>defghijklmnopabcdefghijklmnopabc,efghijklmnopabcdefghijklmnopabcd</key>
  <dict>
    <key>blocked_install_message</key>
    <string>Custom error message.</string>
    <key>installation_mode</key>
    <string>blocked</string>
  </dict>
  <key>fghijklmnopabcdefghijklmnopabcde</key>
  <dict>
    <key>blocked_install_message</key>
    <string>Custom removal message.</string>
    <key>installation_mode</key>
    <string>removed</string>
  </dict>
  <key>update_url:https://www.contoso.com/update.xml</key>
  <dict>
    <key>allowed_permissions</key>
    <array>
      <string>downloads</string>
    </array>
    <key>blocked_permissions</key>
    <array>
      <string>wallpaper</string>
    </array>
    <key>installation_mode</key>
    <string>allowed</string>
  </dict>
</dict>
```

--------------------------------

### Example value for WebAppInstallForceList

Source: https://learn.microsoft.com/en-us/deployedge/microsoft-edge-policies/webappinstallforcelist

JSON array specifying force-installed web apps with options like create_desktop_shortcut, default_launch_container, fallback_app_name, custom_name, install_as_shortcut, and custom_icon.

```json
[{"create_desktop_shortcut": true, "default_launch_container": "window", "url": "https://www.contoso.com/maps"}, {"default_launch_container": "tab", "url": "https://app.contoso.edu"}, {"default_launch_container": "window", "fallback_app_name": "Editor", "url": "https://app.contoso.edu/editor"}, {"custom_name": "Spreadsheets", "default_launch_container": "window", "install_as_shortcut": true, "url": "https://app.contoso.edu/sheets"}, {"custom_icon": {"hash": "c28f469c450e9ab2b86ea47038d2b324c6ad3b1e9a4bd8960da13214afd0ca38", "url": "https://mydomain.example.com/sunny_icon.png"}, "url": "https://weather.example.com"}]
```

--------------------------------

### WebAppInstallForceList Mac plist example

Source: https://learn.microsoft.com/en-us/deployedge/microsoft-edge-policies/webappinstallforcelist

Example value for the WebAppInstallForceList preference key on Mac. It shows an array of dictionaries, each defining a web app to force-install with optional keys like create_desktop_shortcut, default_launch_container, fallback_app_name, custom_name, install_as_shortcut, and custom_icon.

```xml
<key>WebAppInstallForceList</key>
<array>
  <dict>
    <key>create_desktop_shortcut</key>
    <true/>
    <key>default_launch_container</key>
    <string>window</string>
    <key>url</key>
    <string>https://www.contoso.com/maps</string>
  </dict>
  <dict>
    <key>default_launch_container</key>
    <string>tab</string>
    <key>url</key>
    <string>https://app.contoso.edu</string>
  </dict>
  <dict>
    <key>default_launch_container</key>
    <string>window</string>
    <key>fallback_app_name</key>
    <string>Editor</string>
    <key>url</key>
    <string>https://app.contoso.edu/editor</string>
  </dict>
  <dict>
    <key>custom_name</key>
    <string>Spreadsheets</string>
    <key>default_launch_container</key>
    <string>window</string>
    <key>install_as_shortcut</key>
    <true/>
    <key>url</key>
    <string>https://app.contoso.edu/sheets</string>
  </dict>
  <dict>
    <key>custom_icon</key>
    <dict>
      <key>hash</key>
      <string>c28f469c450e9ab2b86ea47038d2b324c6ad3b1e9a4bd8960da13214afd0ca38</string>
      <key>url</key>
      <string>https://mydomain.example.com/sunny_icon.png</string>
    </dict>
    <key>url</key>
    <string>https://weather.example.com</string>
  </dict>
</array>
```

--------------------------------

### Windows Group Policy example value

Source: https://learn.microsoft.com/en-us/deployedge/microsoft-edge-policies/relaunchwindow

Example value for the RelaunchWindow policy in Group Policy (ADMX). The value is a JSON dictionary with an entries array containing a duration in minutes and a start time.

```json
{"entries": [{"duration_mins": 240, "start": {"hour": 2, "minute": 15}}]}
```

--------------------------------

### Example value (XML) for AutoLaunchProtocolsFromOrigins on macOS

Source: https://learn.microsoft.com/en-us/deployedge/microsoft-edge-policies/autolaunchprotocolsfromorigins

Example value for the AutoLaunchProtocolsFromOrigins policy on macOS, using the preference key and XML plist format.

```xml
<key>AutoLaunchProtocolsFromOrigins</key>
<array>
  <dict>
    <key>allowed_origins</key>
    <array>
      <string>example.com</string>
      <string>http://www.example.com:8080</string>
    </array>
    <key>protocol</key>
    <string>spotify</string>
  </dict>
  <dict>
    <key>allowed_origins</key>
    <array>
      <string>https://example.com</string>
      <string>https://.mail.example.com</string>
    </array>
    <key>protocol</key>
    <string>msteams</string>
  </dict>
  <dict>
    <key>allowed_origins</key>
    <array>
      <string>*</string>
    </array>
    <key>protocol</key>
    <string>msoutlook</string>
  </dict>
</array>
```

--------------------------------

### ExtensionSettings policy example value

Source: https://learn.microsoft.com/en-us/deployedge/microsoft-edge-policies/extensionsettings

Example JSON dictionary for the ExtensionSettings policy. It configures extension management rules for specific extension IDs and update URLs, including installation modes, allowed/blocked permissions, runtime hosts, and custom messages. Use this as a template for setting the policy via Group Policy or other management tools.

```json
{"*": {"allowed_types": ["hosted_app"], "blocked_install_message": "Custom error message.", "blocked_permissions": ["downloads", "bookmarks"], "install_sources": ["https://company-intranet/apps"], "installation_mode": "blocked", "runtime_allowed_hosts": ["*://good.contoso.com"], "runtime_blocked_hosts": ["*://*.contoso.com"]}, "abcdefghijklmnopabcdefghijklmnop": {"blocked_permissions": ["history"], "file_url_navigation_allowed": true, "installation_mode": "allowed", "minimum_version_required": "1.0.1"}, "bcdefghijklmnopabcdefghijklmnopa": {"allowed_permissions": ["downloads"], "installation_mode": "force_installed", "override_update_url": true, "runtime_allowed_hosts": ["*://good.contoso.com"], "runtime_blocked_hosts": ["*://*.contoso.com"], "sidebar_auto_open_blocked": true, "toolbar_state": "force_shown", "update_url": "https://contoso.com/update_url"}, "cdefghijklmnopabcdefghijklmnopab": {"blocked_install_message": "Custom error message.", "installation_mode": "blocked"}, "defghijklmnopabcdefghijklmnopabc,efghijklmnopabcdefghijklmnopabcd": {"blocked_install_message": "Custom error message.", "installation_mode": "blocked"}, "fghijklmnopabcdefghijklmnopabcde": {"blocked_install_message": "Custom removal message.", "installation_mode": "removed"}, "update_url:https://www.contoso.com/update.xml": {"allowed_permissions": ["downloads"], "blocked_permissions": ["wallpaper"], "installation_mode": "allowed"}}
```

--------------------------------

### Mac Preference Key Example Value (XML)

Source: https://learn.microsoft.com/en-us/deployedge/microsoft-edge-policies/filesystemwriteaskforurls

Example XML array for the FileSystemWriteAskForUrls preference key, listing URL patterns for allowed sites.

```xml
<array>
  <string>https://www.example.com</string>
  <string>[*.]example.edu</string>
</array>
```

--------------------------------

### Expanded example registry value for ExemptFileTypeDownloadWarnings

Source: https://learn.microsoft.com/en-us/deployedge/microsoft-edge-policies/exemptfiletypedownloadwarnings

Expanded, multi-line JSON example for the registry value, showing the same configuration as the compact example but formatted for readability.

```json
[
  {
    "domains": [
      "https://contoso.com",
      "contoso2.com"
    ],
    "file_extension": "jnlp"
  },
  {
    "domains": [
      "*"
    ],
    "file_extension": "swf"
  }
]
```
Tokens:
Raw