Share via

BrowserCodeIntegritySetting

Configure browser process code integrity guard setting

Supported versions

  • Windows: ≥ 104
  • macOS: Not supported
  • Android: Not supported
  • iOS: Not supported

Description

This policy controls the use of code integrity guard in the browser process, which only allows Microsoft signed binaries to load.

If you enable this policy, it enables code integrity guard in the browser process.

If you disable or don't configure this policy, it prevents the browser from enabling code integrity guard in the browser process.

The policy value Audit (1) is obsolete as of Microsoft Edge version 110. Setting this value is equivalent to the Disabled value.

This policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, or Windows 10 Pro or Enterprise instances that enrolled for device management.

This policy only takes effect on Windows 10 RS2 and above.

Policy options mapping:

  • Disabled (0) = Do not enable code integrity guard in the browser process.

  • Audit (1) = Enable code integrity guard audit mode in the browser process.

  • Enabled (2) = Enable code integrity guard enforcement in the browser process.

Use the preceding information when configuring this policy.

Policy options mapping:

Use this information when configuring this policy.

  • Disabled (0) = Do not enable code integrity guard in the browser process.
  • Audit (1) = Enable code integrity guard audit mode in the browser process.
    • Windows: 104-109
    • macOS: Not supported
    • Android: Not supported
    • iOS: Not supported
  • Enabled (2) = Enable code integrity guard enforcement in the browser process.

Supported features

  • Can be mandatory: Yes
  • Can be recommended: No
  • Dynamic Policy Refresh: No - Requires browser restart
  • Per Profile: No
  • Applies to a profile that is signed in with a Microsoft account: Yes

Data type

  • Integer

Windows information and settings

Group Policy (ADMX) info

  • GP unique name: BrowserCodeIntegritySetting
  • GP name: Configure browser process code integrity guard setting
  • GP path (Mandatory): Administrative Templates/Microsoft Edge
  • GP path (Recommended): N/A
  • GP ADMX file name: MSEdge.admx

Example value

Do not enable code integrity guard in the browser process.

Registry settings

  • Path (Mandatory): SOFTWARE\Policies\Microsoft\Edge
  • Path (Recommended): N/A
  • Value name: BrowserCodeIntegritySetting
  • Value type: REG_DWORD

Example registry value

0x00000000

See also

  • Last updated on