Skip to content

Commit

Permalink
Merged PR 12585: 11/5 AM Publish
Browse files Browse the repository at this point in the history
  • Loading branch information
huypub committed Nov 5, 2018
2 parents 8182210 + 85b739e commit 815063f
Show file tree
Hide file tree
Showing 69 changed files with 311 additions and 422 deletions.
1 change: 1 addition & 0 deletions browsers/edge/about-microsoft-edge.md
Expand Up @@ -5,6 +5,7 @@ ms.assetid: 70377735-b2f9-4b0b-9658-4cf7c1d745bb
author: shortpatti
ms.prod: edge
ms.mktglfcycl: general
ms.topic: reference
ms.sitesec: library
title: Microsoft Edge for IT Pros
ms.localizationpriority: medium
Expand Down
1 change: 1 addition & 0 deletions browsers/edge/available-policies.md
Expand Up @@ -6,6 +6,7 @@ ms.author: pashort
manager: dougkim
ms.prod: edge
ms.mktglfcycl: explore
ms.topic: reference
ms.sitesec: library
title: Group Policy and Mobile Device Management settings for Microsoft Edge (Microsoft Edge for IT Pros)
ms.localizationpriority: medium
Expand Down
1 change: 1 addition & 0 deletions browsers/edge/change-history-for-microsoft-edge.md
Expand Up @@ -2,6 +2,7 @@
title: Change history for Microsoft Edge (Microsoft Edge for IT Pros)
description: Discover what's new and updated in the Microsoft Edge for both Windows 10 and Windows 10 Mobile.
ms.prod: edge
ms.topic: reference
ms.mktglfcycl: explore
ms.sitesec: library
ms.localizationpriority: medium
Expand Down
1 change: 1 addition & 0 deletions browsers/edge/emie-to-improve-compatibility.md
Expand Up @@ -5,6 +5,7 @@ author: shortpatti
ms.author: pashort
ms.manager: dougkim
ms.prod: browser-edge
ms.topic: reference
ms.mktglfcycl: support
ms.sitesec: library
ms.pagetype: appcompat
Expand Down
2 changes: 1 addition & 1 deletion browsers/edge/group-policies/address-bar-settings-gp.md
Expand Up @@ -8,7 +8,7 @@ manager: dougkim
author: shortpatti
ms.author: pashort
ms.date: 10/02/2018
ms.topic: article
ms.topic: reference
ms.prod: edge
ms.mktglfcycl: explore
ms.sitesec: library
Expand Down
2 changes: 1 addition & 1 deletion browsers/edge/group-policies/adobe-settings-gp.md
Expand Up @@ -8,7 +8,7 @@ manager: dougkim
author: shortpatti
ms.author: pashort
ms.date: 10/02/2018
ms.topic: article
ms.topic: reference
ms.prod: edge
ms.mktglfcycl: explore
ms.sitesec: library
Expand Down
Expand Up @@ -8,7 +8,7 @@ manager: dougkim
author: shortpatti
ms.author: pashort
ms.date: 10/02/2018
ms.topic: article
ms.topic: reference
ms.prod: edge
ms.mktglfcycl: explore
ms.sitesec: library
Expand Down
Expand Up @@ -8,7 +8,7 @@ manager: dougkim
author: shortpatti
ms.author: pashort
ms.date: 10/02/2018
ms.topic: article
ms.topic: reference
ms.prod: edge
ms.mktglfcycl: explore
ms.sitesec: library
Expand Down
2 changes: 1 addition & 1 deletion browsers/edge/group-policies/developer-settings-gp.md
Expand Up @@ -8,7 +8,7 @@ managre: dougkim
author: shortpatti
ms.author: pashort
ms.date: 10/02/2018
ms.topic: article
ms.topic: reference
ms.prod: edge
ms.mktglfcycl: explore
ms.sitesec: library
Expand Down
2 changes: 1 addition & 1 deletion browsers/edge/group-policies/extensions-management-gp.md
Expand Up @@ -8,7 +8,7 @@ manager: dougkim
author: shortpatti
ms.author: pashort
ms.date: 10/02/2018
ms.topic: article
ms.topic: reference
ms.prod: edge
ms.mktglfcycl: explore
ms.sitesec: library
Expand Down
2 changes: 1 addition & 1 deletion browsers/edge/group-policies/favorites-management-gp.md
Expand Up @@ -8,7 +8,7 @@ manager: dougkim
author: shortpatti
ms.author: pashort
ms.date: 10/02/2018
ms.topic: article
ms.topic: reference
ms.prod: edge
ms.mktglfcycl: explore
ms.sitesec: library
Expand Down
1 change: 1 addition & 0 deletions browsers/edge/group-policies/home-button-gp.md
Expand Up @@ -9,6 +9,7 @@ ms.localizationpriority: medium
ms.prod: edge
ms.mktglfcycl: explore
ms.sitesec: library
ms.topic: reference
---

# Home button
Expand Down
Expand Up @@ -9,6 +9,7 @@ ms.date: 10/02/2018
ms.prod: edge
ms.mktglfcycl: explore
ms.sitesec: library
ms.topic: reference
---

# Interoperability and enterprise mode guidance
Expand Down
1 change: 1 addition & 0 deletions browsers/edge/group-policies/new-tab-page-settings-gp.md
Expand Up @@ -9,6 +9,7 @@ ms.localizationpriority: medium
ms.prod: edge
ms.mktglfcycl: explore
ms.sitesec: library
ms.topic: reference
---


Expand Down
3 changes: 2 additions & 1 deletion browsers/edge/group-policies/prelaunch-preload-gp.md
Expand Up @@ -6,6 +6,7 @@ ms.author: pashort
author: shortpatti
ms.date: 10/02/2018
ms.localizationpriority: medium
ms.topic: reference
---

# Prelaunch Microsoft Edge and preload tabs in the background
Expand All @@ -18,7 +19,7 @@ Additionally, Microsoft Edge preloads the Start and New Tab pages during Windows
## Relevant group policies

- [Allow Microsoft Edge to pre-launch at Windows startup, when the system is idle, and each time Microsoft Edge is closed](#allow-microsoft-edge-to-pre-launch-at-windows-startup-when-the-system-is-idle-and-each-time-microsoft-edge-is-closed)
- [Allow Microsoft Edge to load the Start and New Tab page at Windows startup and each time Microsoft Edge is closed](#allow-microsoft-edge-to-start-and-load-the-start-and-new-tab-page-at-windows-startup-and-each-time-microsoft-edge-is-closed)
- [Allow Microsoft Edge to load the Start and New Tab page at Windows startup and each time Microsoft Edge is closed](#allow-microsoft-edge-to-load-the-start-and-new-tab-page-at-windows-startup-and-each-time-microsoft-edge-is-closed)

You can find the Microsoft Edge Group Policy settings in the following location of the Group Policy Editor unless otherwise noted in the policy:

Expand Down
Expand Up @@ -6,6 +6,7 @@ ms.author: pashort
author: shortpatti
ms.date: 10/02/2018
ms.localizationpriority: medium
ms.topic: reference
---

# Search engine customization
Expand Down
Expand Up @@ -6,6 +6,7 @@ ms.author: pashort
author: shortpatti
ms.date: 10/02/2018
ms.localizationpriority: medium
ms.topic: reference
---

# Security and privacy
Expand Down Expand Up @@ -57,12 +58,12 @@ Microsoft Edge addresses these threats to help make browsing the web a safer exp

| Feature | Description |
|---|---|
| **[Windows Hello](http://blogs.windows.com/bloggingwindows/2015/03/17/making-windows-10-more-personal-and-more-secure-with-windows-hello/)** | Microsoft Edge is the first browser to natively support Windows Hello to authenticate the user and the website with asymmetric cryptography technology, powered by early implementation of the [Web Authentication (formerly FIDO 2.0 Web API) specification](http://w3c.github.io/webauthn/). |
| **[Windows Hello](https://blogs.windows.com/bloggingwindows/2015/03/17/making-windows-10-more-personal-and-more-secure-with-windows-hello/)** | Microsoft Edge is the first browser to natively support Windows Hello to authenticate the user and the website with asymmetric cryptography technology, powered by early implementation of the [Web Authentication (formerly FIDO 2.0 Web API) specification](https://w3c.github.io/webauthn/). |
| **Microsoft SmartScreen** | Defends against phishing by performing reputation checks on sites visited and blocking any sites that are thought to be a phishing site. SmartScreen also helps to defend against installing malicious software, drive-by attacks, or file downloads, even from trusted sites. Drive-by attacks are malicious web-based attacks that compromise your system by targeting security vulnerabilities in commonly used software and may be hosted on trusted sites. |
| **Certificate Reputation system** | Collects data about certificates in use, detecting new certificates and flagging fraudulent certificates automatically, and sends the data to Microsoft. The systems and tools in place include<ul><li>Certificate Reputation system: Protects users from fraudulent certificates.</li><li>Bing Webmaster Tools (for developers): Reports fake certificates directly to Microsoft.</li></ul> |
| **Microsoft EdgeHTML and modern web standards** | Microsoft Edge uses Microsoft EdgeHTML as the rendering engine. This engine focuses on modern standards letting web developers build and maintain a consistent site across all modern browsers. It also helps to defend against hacking through these security standards features:<ul><li>Support for the W3C standard for [Content Security Policy (CSP)](https://developer.microsoft.com/microsoft-edge/platform/documentation/dev-guide/security/content-Security-Policy), which can help web developers defend their sites against cross-site scripting attacks.</li><li> Support for the [HTTP Strict Transport Security (HSTS)](https://developer.microsoft.com/microsoft-edge/platform/documentation/dev-guide/security/HSTS/) security feature (IETF-standard compliant). HSTS helps ensure that connections to important sites, such as to your bank, are always secured.</li></ul><p>**NOTE:** Both Microsoft Edge and Internet Explorer 11 support HSTS. |
| **Code integrity and image loading restrictions** | Microsoft Edge content processes support code integrity and image load restrictions, helping to prevent malicious DLLs from loading or injecting into the content processes. Only [properly signed images](https://blogs.windows.com/msedgedev/2015/11/17/microsoft-edge-module-code-integrity/) are allowed to load into Microsoft Edge. Binaries on remote devices (such as UNC or WebDAV) can’t load. |
| **Memory corruption mitigations** | Memory corruption attacks frequently happen to apps written in C or C++ don’t provide safety or buffer overflow protection. When an attacker provides malformed input to a program, the program’s memory becomes corrupt allowing the attacker to take control of the program. Although attackers have adapted and invented new ways to attack, we’ve responded with memory safety defenses, mitigating the most common forms of attack, including and especially [use-after-free (UAF)](http://cwe.mitre.org/data/definitions/416.html) vulnerabilities. |
| **Memory corruption mitigations** | Memory corruption attacks frequently happen to apps written in C or C++ don’t provide safety or buffer overflow protection. When an attacker provides malformed input to a program, the program’s memory becomes corrupt allowing the attacker to take control of the program. Although attackers have adapted and invented new ways to attack, we’ve responded with memory safety defenses, mitigating the most common forms of attack, including and especially [use-after-free (UAF)](https://cwe.mitre.org/data/definitions/416.html) vulnerabilities. |
| **Memory Garbage Collector (MemGC) mitigation** | MemGC replaces Memory Protector and helps to protect the browser from UAF vulnerabilities. MemGC frees up memory from the programmer and automating it. Only freeing memory when the automation detects no references left pointing to a given block of memory. |
| **Control Flow Guard** | Attackers use memory corruption attacks to gain control of the CPU program counter to jump to any code location they want. Control Flow Guard, a Microsoft Visual Studio technology, compiles checks around code that performs indirect jumps based on a pointer. Those jumps get restricted to function entry points with known addresses only making attacker take-overs must more difficult constraining where an attack jumps. |
| **All web content runs in an app container sandbox** |Microsoft Edge takes the sandbox even farther, running its content processes in containers not just by default, but all of the time. Microsoft Edge doesn’t support 3rd party binary extensions, so there is no reason for it to run outside of the container, making Microsoft Edge more secure. |
Expand Down
1 change: 1 addition & 0 deletions browsers/edge/group-policies/start-pages-gp.md
Expand Up @@ -9,6 +9,7 @@ ms.date: 10/02/2018
ms.prod: edge
ms.mktglfcycl: explore
ms.sitesec: library
ms.topic: reference
---

# Start pages
Expand Down
1 change: 1 addition & 0 deletions browsers/edge/group-policies/sync-browser-settings-gp.md
Expand Up @@ -6,6 +6,7 @@ ms.author: pashort
author: shortpatti
ms.date: 10/02/2018
ms.localizationpriority: medium
ms.topic: reference
---

# Sync browser settings
Expand Down
1 change: 1 addition & 0 deletions browsers/edge/group-policies/telemetry-management-gp.md
Expand Up @@ -6,6 +6,7 @@ ms.author: pashort
author: shortpatti
ms.date: 10/02/2018
ms.localizationpriority: medium
ms.topic: reference
---

# Telemetry and data collection
Expand Down
@@ -1,7 +1,7 @@
---
author: shortpatti
ms.author: pashort
ms.date: 10/26/2018
ms.date: 11/02/2018
ms.prod: edge
ms:topic: include
---
Expand All @@ -18,9 +18,8 @@ ms:topic: include

|Group Policy |MDM |Registry |Description |
|---|:---:|:---:|---|
|Not configured |Blank |Blank |Users can choose what loads on the New Tab page. |
|Disabled |0 |0 |Load a blank page instead of the default New Tab page and prevent users from changing it. |
|Enabled **(default)** |1 |1 |Load the default New Tab page. |
|Disabled |0 |0 |Load a blank page instead of the default New Tab page and prevent users from making changes. |
|Enabled or not configured **(default)** |1 |1 |Load the default New Tab page and the users make changes. |
---

### ADMX info and settings
Expand Down
2 changes: 1 addition & 1 deletion browsers/edge/includes/provision-favorites-include.md
Expand Up @@ -21,7 +21,7 @@ ms:topic: include
|Group Policy |Description |Most restricted |
|---|---|:---:|
|Disabled or not configured<br>**(default)** |Users can customize the favorites list, such as adding folders, or adding and removing favorites. | |
|Enabled |Define a default list of favorites in Microsoft Edge. In this case, the Save a Favorite, Import settings, and context menu options (such as Create a new folder) are turned off.<p>To define a default list of favorites, do the following:<ol><li>In the upper-right corner of Microsoft Edge, click the ellipses (**...**) and select **Settings**.</li><li>Click **Import from another browser**, click **Export to file** and save the file.</li><li>In the **Options** section of the Group Policy Editor, provide the location that points the file with the list of favorites to provision. Specify the URL as: <ul><li>HTTP location: "SiteList"=http://localhost:8080/URLs.html</li><li>Local network: "SiteList"="\network\shares\URLs.html"</li><li>Local file: "SiteList"=file:///c:/Users/Documents/URLs.html</li></ul></li></ol> |![Most restricted value](../images/check-gn.png) |
|Enabled |Define a default list of favorites in Microsoft Edge. In this case, the Save a Favorite, Import settings, and context menu options (such as Create a new folder) are turned off.<p>To define a default list of favorites, do the following:<ol><li>In the upper-right corner of Microsoft Edge, click the ellipses (**...**) and select **Settings**.</li><li>Click **Import from another browser**, click **Export to file** and save the file.</li><li>In the **Options** section of the Group Policy Editor, provide the location that points the file with the list of favorites to provision. Specify the URL as: <ul><li>HTTP location: "SiteList"=https://localhost:8080/URLs.html</li><li>Local network: "SiteList"="\network\shares\URLs.html"</li><li>Local file: "SiteList"=file:///c:/Users/Documents/URLs.html</li></ul></li></ol> |![Most restricted value](../images/check-gn.png) |
---

### ADMX info and settings
Expand Down
2 changes: 1 addition & 1 deletion browsers/edge/index.yml
Expand Up @@ -125,7 +125,7 @@ sections:
html: <p><a class="barLink" href="https://docs.microsoft.com/microsoft-edge/deploy/about-microsoft-edge#minimum-system-requirements">Minimum system requirements</a></p>

<p><a class="barLink" href="https://docs.microsoft.com/microsoft-edge/deploy/about-microsoft-edge#supported-languages">Supported languages</a></p>

<p><a class="barLink" href="https://docs.microsoft.com/microsoft-edge/deploy/change-history-for-microsoft-edge">Document change history</a></p>

<p><a class="barLink" href="https://www.microsoft.com/en-us/WindowsForBusiness/Compare">Compare Windows 10 Editions</a></p>
Expand Down
11 changes: 7 additions & 4 deletions browsers/edge/microsoft-edge-faq.md
Expand Up @@ -4,10 +4,11 @@ description: Answers to frequently asked questions about Microsoft Edge features
author: shortpatti
ms.author: pashort
ms.prod: edge
ms.topic: reference
ms.mktglfcycl: general
ms.sitesec: library
ms.localizationpriority: medium
ms.date: 10/23/2018
ms.date: 11/05/2018
---

# Frequently Asked Questions (FAQs) for IT Pros
Expand All @@ -32,7 +33,7 @@ For more information on how Internet Explorer and Microsoft Edge can work togeth

**Q: Does Microsoft Edge work with Enterprise Mode?**

**A:** [Enterprise Mode](https://docs.microsoft.com/internet-explorer/ie11-deploy-guide/enterprise-mode-overview-for-ie11) offers better backward compatibility and enables customers to run many legacy web applications. Microsoft Edge and Internet Explorer can be configured to use the same Enterprise Mode Site List, switching seamlessly between browsers to support both modern and legacy web apps. For guidance and additional resources, please visit the [Microsoft Edge IT Center](https://technet.microsoft.com/microsoft-edge).
**A:** [Enterprise Mode](https://docs.microsoft.com/internet-explorer/ie11-deploy-guide/enterprise-mode-overview-for-ie11) offers better backward compatibility and enables customers to run many legacy web applications. Microsoft Edge and Internet Explorer can be configured to use the same Enterprise Mode Site List, switching seamlessly between browsers to support both modern and legacy web apps.


**Q: I have Windows 10, but I don’t seem to have Microsoft Edge. Why?**
Expand All @@ -41,15 +42,17 @@ For more information on how Internet Explorer and Microsoft Edge can work togeth

**Q: How do I get the latest Canary/Beta/Preview version of Microsoft Edge?**

**A:** You can access the latest preview version of Microsoft Edge by updating to the latest Windows 10 preview via the [Windows Insider Program](https://insider.windows.com/). To run the preview version of Microsoft Edge on a stable version of Windows 10 (or any other OS), you can download a [Virtual Machine](https://developer.microsoft.com/en-us/microsoft-edge/tools/vms/windows/) that we provide or use the upcoming RemoteEdge service.
**A:** You can access the latest preview version of Microsoft Edge by updating to the latest Windows 10 preview via the [Windows Insider Program](https://insider.windows.com/). To run the preview version of Microsoft Edge on a stable version of Windows 10 (or any other OS), you can download a [Virtual Machine](https://developer.microsoft.com/microsoft-edge/tools/vms/windows/) that we provide or use the upcoming RemoteEdge service.

**Q: How do I customize Microsoft Edge and related settings for my organization?**

**A:** You can use Group Policy or Microsoft Intune to manage settings related to Microsoft Edge, such as security settings, folder redirection, and preferences. See [Group Policy and Mobile Device Management (MDM) settings for Microsoft Edge](https://docs.microsoft.com/microsoft-edge/deploy/group-policies/index) for a list of available policies for Microsoft Edge and configuration combinations.

**Q: Is Adobe Flash supported in Microsoft Edge?**

**A:** Currently, Adobe Flash is supported as a built-in feature of Microsoft Edge on devices running the desktop version of Windows 10. In July 2017, Adobe announced that Flash will no longer be supported after 2020. With Adobe no longer supporting Flash after 2020, Microsoft has started to phase out Flash from Microsoft Edge by adding the [Configure the Adobe Flash Click-to-Run setting](#configure-the-adobe-flash-click-to-run-setting) group policy giving you a way to control the list of websites that have permission to run Adobe Flash content.
**A:** Currently, Adobe Flash is supported as a built-in feature of Microsoft Edge on devices running the desktop version of Windows 10. In July 2017, Adobe announced that Flash will no longer be supported after 2020. With Adobe no longer supporting Flash after 2020, Microsoft has started to phase out Flash from Microsoft Edge by adding the [Configure the Adobe Flash Click-to-Run setting](available-policies.md#configure-the-adobe-flash-click-to-run-setting) group policy giving you a way to control the list of websites that have permission to run Adobe Flash content.



To learn more about Microsoft’s plan for phasing out Flash from Microsoft Edge and Internet Explorer, see [The End of an Era — Next Steps for Adobe Flash]( https://blogs.windows.com/msedgedev/2017/07/25/flash-on-windows-timeline/#3Bcc3QjRw0l7XsZ4.97) (blog article).

Expand Down
3 changes: 2 additions & 1 deletion browsers/edge/microsoft-edge-kiosk-mode-deploy.md
@@ -1,11 +1,12 @@
---
title: Deploy Microsoft Edge kiosk mode
description: Microsoft Edge kiosk mode works with assigned access to allow IT admins to create a tailored browsing experience designed for kiosk devices. To use Microsoft Edge kiosk mode, you must configure Microsoft Edge as an application in assigned access.
ms.assetid:
author: shortpatti
ms.author: pashort
ms.prod: edge
ms.sitesec: library
title: Deploy Microsoft Edge kiosk mode
ms.topic: get-started-article
ms.localizationpriority: medium
ms.date: 10/29/2018
---
Expand Down
@@ -1,9 +1,9 @@
---
author: shortpatti
ms.author: pashort
ms.date: 10/02/2018
ms.date: 11/02/2018
ms.prod: edge
ms:topic: include
---

By default, Microsoft Edge loads the default New Tab page. Disabling this policy loads a blank page instead of the New Tab page and prevents users from changing it. Not configuring this policy lets users choose what loads on the New Tab page.
By default, Microsoft Edge loads the default New Tab page and lets the users make changes. If you disable this policy, a blank page loads instead of the New Tab page and prevents users from changing it.
Expand Up @@ -33,7 +33,7 @@ You can add individual sites to your compatibility list by using the Enterprise
1. In the Enterprise Mode Site List Manager (schema v.1), click **Add**.

2. Type the URL for the website that’s experiencing compatibility problems, like *&lt;domain&gt;.com* or *&lt;domain&gt;.com*/*&lt;path&gt;* into the **URL** box.<p>
Don't include the `http://` or `https://` designation. The tool automatically tries both versions during validation.
Don't include the `https://` or `https://` designation. The tool automatically tries both versions during validation.

3. Type any comments about the website into the **Notes about URL** box.<p>
Administrators can only see comments while they’re in this tool.
Expand Down

0 comments on commit 815063f

Please sign in to comment.