Edge¶
Edge is built into Windows 11 and Server 2022 and is the default browser on most images. It's built on the same engine as Chrome, so its policies use the same names.
Settings¶
Open edge://settings.
| Page | Setting | Value |
|---|---|---|
| Privacy, search, and services → Tracking prevention | Strict | |
| Privacy, search, and services → Security | Microsoft Defender SmartScreen | On |
| Privacy, search, and services → Security | Block potentially unwanted apps | On |
| Privacy, search, and services → Security | Enhance your security on the web | On, Balanced or Strict |
| Privacy, search, and services → Security | Always use secure connections (Automatic HTTPS) | On |
| Cookies and site permissions → Pop-ups and redirects | Block | |
| Cookies and site permissions → Manage and delete cookies | Block third-party cookies | On |
| Downloads | Ask me what to do with each download | On |
| About Microsoft Edge | Opening it checks for updates |
Extensions: edge://extensions. Same rule as Chrome.
Enforce with policy¶
Edge policies live at HKLM\SOFTWARE\Policies\Microsoft\Edge. Edge does ship Group Policy templates on Windows 11, under gpedit.msc → Computer Configuration → Administrative Templates → Microsoft Edge. Or the registry:
reg add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v SmartScreenEnabled /t REG_DWORD /d 1 /f
One worked example; the rest are in the table. Type each reg add yourself (the syntax is on The Command Line) and read it back with reg query "<key>" /v <name> before moving on:
| Key | Value | Type | Data |
|---|---|---|---|
HKLM\SOFTWARE\Policies\Microsoft\Edge |
SmartScreenEnabled |
REG_DWORD | 1 |
HKLM\SOFTWARE\Policies\Microsoft\Edge |
SmartScreenPuaEnabled |
REG_DWORD | 1 |
HKLM\SOFTWARE\Policies\Microsoft\Edge |
DefaultPopupsSetting |
REG_DWORD | 2 |
HKLM\SOFTWARE\Policies\Microsoft\Edge |
BlockThirdPartyCookies |
REG_DWORD | 1 |
HKLM\SOFTWARE\Policies\Microsoft\Edge |
AutomaticHttpsDefault |
REG_DWORD | 2 |
Verify¶
edge://policy lists active policies.
Try it¶
- Set three Edge policies and check
edge://policy. - Turn on SmartScreen for Edge and try a known test URL.
Build it¶
An edge.bat with the policy reg add lines.