Edge¶
Edge is built into Windows 11 and Server 2022 and is the default browser on most images. It's built on the same engine as Chrome, so its policies use the same names.
Settings¶
Open edge://settings.
| Page | Setting | Value |
|---|---|---|
| Privacy, search, and services → Tracking prevention | Strict | |
| Privacy, search, and services → Security | Microsoft Defender SmartScreen | On |
| Privacy, search, and services → Security | Block potentially unwanted apps | On |
| Privacy, search, and services → Security | Enhance your security on the web | On, Balanced or Strict |
| Privacy, search, and services → Security | Always use secure connections (Automatic HTTPS) | On |
| Cookies and site permissions → Pop-ups and redirects | Block | |
| Cookies and site permissions → Manage and delete cookies | Block third-party cookies | On |
| Downloads | Ask me what to do with each download | On |
| About Microsoft Edge | Opening it checks for updates |
Extensions: edge://extensions. Same rule as Chrome.
Enforce with policy¶
Edge policies live at HKLM\SOFTWARE\Policies\Microsoft\Edge. Edge does ship Group Policy templates on Windows 11, under gpedit.msc → Computer Configuration → Administrative Templates → Microsoft Edge. Or the registry:
reg add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v SmartScreenEnabled /t REG_DWORD /d 1 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v SmartScreenPuaEnabled /t REG_DWORD /d 1 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v DefaultPopupsSetting /t REG_DWORD /d 2 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v BlockThirdPartyCookies /t REG_DWORD /d 1 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v AutomaticHttpsDefault /t REG_DWORD /d 2 /f
Verify¶
edge://policy lists active policies.