---
title: Browser
slug: browser
docTags: 
createdAt: 2026-10-09T15:17:35.853Z
---

# Privileged

***

## PSM Edge Browser Settings - Allow Autofill

**Description**: This setting lets you decide whether employees can use Autofill to automatically fill in form fields while using Microsoft Edge.

**Why It's Important**: This policy is like requiring users to fill out forms by hand instead of relying on pre-filled templates. By blocking Autofill, SHIELD helps prevent sensitive personal or organizational data from being stored or auto-inserted into web forms, reducing the risk of data leakage, phishing attacks, and unauthorized access. It supports privacy and data protection standards, especially in environments where strict control over user input is essential.

**Learn More**

- [Browser Policy CSP | Allow Autofill](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-Browser?WT.mc_id=Portal-fx#allowautofill)

***

## PSM Edge Browser Settings - Allow Configuration Update For Books Library

**Description**: This policy setting lets you decide whether Microsoft Edge can automatically update the configuration data for the Books Library.

**Why It's Important**: This policy is like preventing a browser from checking in with a server to update a feature that’s no longer in use. By blocking configuration updates for the Books Library, SHIELD helps reduce unnecessary network activity and limits the browser’s ability to pull in potentially outdated or unsupported content. It supports a leaner, more secure browser experience by disabling legacy or unused features.

**Learn More**

- [Browser Policy CSP | Allow Configuration Update For Books Library](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-Browser?WT.mc_id=Portal-fx#allowconfigurationupdateforbookslibrary)

***

## PSM Edge Browser Settings - Allow Developer Tools

**Description**: This setting lets you decide whether employees can use F12 Developer Tools on Microsoft Edge.

**Why It's Important**: This policy is like locking the hood of a car so only authorized mechanics can access the engine. By blocking developer tools, SHIELD helps prevent users from inspecting or manipulating web content, which could expose sensitive data, bypass security controls, or be used for malicious purposes. It reduces the risk of tampering and supports a more secure and controlled browsing environment—especially in enterprise settings where data integrity and compliance are critical.

**Learn More**

- [Browser Policy CSP | 
  Allow Developer Tools](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-Browser?WT.mc_id=Portal-fx#allowdevelopertools)

***

## PSM Edge Browser Settings - Allow Extensions

**Description**: This setting lets you decide whether employees can load extensions in Microsoft Edge.

**Why It's Important**: This policy is like locking down the ability to install third-party tools in a secure workspace. By blocking extensions, SHIELD helps prevent the introduction of unvetted or potentially malicious code into the browser environment. It reduces the risk of data leakage, credential theft, and performance issues caused by poorly designed or insecure add-ons. This ensures a more secure and controlled browsing experience across the tenant.

**Learn More**

- [Browser Policy CSP | Allow Extensions](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-Browser?WT.mc_id=Portal-fx#allowextensions)

***

## PSM Edge Browser Settings - Allow Flash

**Description**: This setting lets you decide whether employees can run Adobe Flash in Microsoft Edge.

**Why It's Important**: This policy is like removing outdated locks from a secure building to prevent them from being exploited. Adobe Flash is no longer supported and is widely considered a security risk due to its history of vulnerabilities. By blocking Flash, SHIELD helps eliminate a known attack surface, reduces exposure to malware, and aligns with modern web standards and security best practices.

**Learn More**

- [Browser Policy CSP | Allow Flash](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-Browser?WT.mc_id=Portal-fx#allowflash)

***

## PSM Edge Browser Settings - Allow Flash Click To Run

**Description**: Configure the Adobe Flash Click-to-Run setting.

**Why It's Important**: This policy is like removing the option to flip a switch on outdated, insecure technology. By blocking Flash Click-to-Run, SHIELD helps eliminate a known attack surface, as Flash has long been deprecated and is no longer supported or updated. Disabling this feature reduces the risk of exploitation through legacy web content and aligns with modern browser security standards.

**Learn More**

- [Browser Policy CSP | Allow Flash Click To Run](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-Browser?WT.mc_id=Portal-fx#allowflashclicktorun)

***

## PSM Edge Browser Settings - Allow InPrivate

**Description**: This setting lets you decide whether employees can browse using InPrivate website browsing.

**Why It's Important**: This policy is like disabling the ability to go off the record in a monitored environment. By blocking InPrivate browsing, SHIELD ensures that all user activity is auditable and traceable, which is essential for maintaining visibility, enforcing acceptable use policies, and supporting investigations. It helps prevent users from bypassing monitoring tools and aligns with compliance requirements in regulated environments.

**Learn More**

- [Browser Policy CSP | 
  Allow InPrivate](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-Browser?WT.mc_id=Portal-fx#allowinprivate)

***

## PSM Edge Browser Settings - Allow Microsoft Compatibility List

**Description**: This policy setting lets you decide whether the Microsoft Compatibility List is enabled or disabled in Microsoft Edge. This feature uses a Microsoft-provided list to ensure that any sites with known compatibility issues are displayed correctly when a user navigates to them. By default, the Microsoft Compatibility List is enabled and can be viewed by navigating to `about:compat`. If you enable or don’t configure this setting, Microsoft Edge will periodically download the latest version of the list from Microsoft and will apply the configurations specified there during browser navigation. If a user visits a site on the Microsoft Compatibility List, he or she will be prompted to open the site in Internet Explorer 11. Once in Internet Explorer, the site will automatically be rendered as if the user is viewing it in the previous version of Internet Explorer it requires to display correctly. If you disable this setting, the Microsoft Compatibility List will not be used during browser navigation.

**Why It's Important**: This policy is like disabling a fallback to older, less secure tools when a modern one encounters a problem. By blocking the Microsoft Compatibility List, SHIELD ensures that users stay within the supported and secure browsing environment of Microsoft Edge. It reduces reliance on outdated technologies like Internet Explorer, minimizes attack surface, and supports a modern, standards-based web experience across the tenant

**Learn More**

- [Browser Policy CSP | Allow Microsoft Compatibility List](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-Browser?WT.mc_id=Portal-fx#allowmicrosoftcompatibilitylist)

***

## PSM Edge Browser Settings - Allow Password Manager

**Description**: This setting lets you decide whether employees can save their passwords locally, using Password Manager.

**Why It's Important**: This policy is like preventing users from writing down passwords and leaving them in their desk drawer. By blocking the password manager, SHIELD helps reduce the risk of credential theft, especially in shared or unmanaged environments. It ensures that password storage is handled through more secure, enterprise-managed solutions and supports compliance with organizational policies that prohibit local password caching.

**Learn More**

- [Browser Policy CSP | Allow Password Manager](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-Browser?WT.mc_id=Portal-fx#allowpasswordmanager)

***

## PSM Edge Browser Settings - Allow Printing

**Description**: With this policy, you can restrict whether printing web content in Microsoft Edge is allowed. If enabled, printing is allowed. If disabled, printing is not allowed.

**Why It's Important**: This policy is like disabling the ability to make physical copies of sensitive documents in a secure facility. By blocking printing in the browser, SHIELD helps prevent accidental or intentional data leakage through printed materials. It supports data loss prevention strategies and ensures tighter control over how information is shared or distributed—especially in environments handling confidential or regulated data.

**Learn More**

- [Browser Policy CSP | Allow Printing](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-Browser?WT.mc_id=Portal-fx#allowprinting)

***

## PSM Edge Browser Settings - Allow Search Engine Customization

**Description**: Allow search engine customization for MDM enrolled devices. Users can change their default search engine. If this setting is turned on or not configured, users can add new search engines and change the default used in the address bar from within Microsoft Edge Settings. If this setting is disabled, users will be unable to add search engines or change the default used in the address bar. This policy will only apply on domain joined machines or when the device is MDM enrolled.

**Why It's Important**: This policy is like locking the default search provider to ensure users always use a trusted source. By blocking search engine customization, SHIELD helps prevent users from switching to potentially unsafe or privacy-invasive search engines. It ensures consistency across the organization, supports compliance with acceptable use policies, and reduces the risk of exposure to malicious or misleading content.

**Learn More**

- [Browser Policy CSP | Allow Search Engine Customization](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-Browser?WT.mc_id=Portal-fx#allowsearchenginecustomization)

***

## PSM Edge Browser Settings - Allow Search Suggestions in Address Bar

**Description**: This setting lets you decide whether search suggestions should appear in the Address bar of Microsoft Edge.

**Why It's Important**: This policy is like turning off a digital assistant that tries to guess what you're searching for. By blocking search suggestions, SHIELD helps reduce the risk of sensitive or private data being exposed through predictive text. It also limits the amount of data sent to external services for suggestion generation, supporting privacy and compliance goals in environments where user input must remain confidential.

**Learn More**

- [Browser Policy CSP | Allow Search Suggestions in Address Bar](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-Browser?WT.mc_id=Portal-fx#allowsearchsuggestionsinaddressbar)

***

## PSM Edge Browser Settings - Allow Sideloading Of Extensions

**Description**: This setting lets you decide whether employees can sideload extensions in Microsoft Edge.

**Why It's Important**: This policy is like only allowing tools into a secure facility if they come from a trusted supplier. By blocking sideloading, SHIELD helps prevent the installation of potentially malicious or unvetted extensions that could compromise browser security, steal data, or interfere with user activity. It ensures that only approved, store-verified extensions are used, supporting a safer and more controlled browsing environment.

**Learn More**

- [Browser Policy CSP | Allow Sideloading Of Extensions](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-Browser?WT.mc_id=Portal-fx#allowsideloadingofextensions)

***

## PSM Edge Browser Settings - Allow Smart Screen

**Description**: This setting lets you decide whether to turn on Windows Defender SmartScreen.

**Why It's Important**: This policy is like having a security guard that checks every link and download before letting it through. By enabling SmartScreen, SHIELD helps protect users from phishing sites, malicious downloads, and other online threats. It adds an essential layer of real-time protection, especially in environments where users may encounter risky content or be targeted by social engineering attacks.

**Learn More**

- [Browser Policy CSP | Allow Smart Screen](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-Browser?WT.mc_id=Portal-fx#allowsmartscreen)

***

## PSM Edge Browser Settings - Allow Tab Preloading

**Description**: Prevent Microsoft Edge from starting and loading the Start and New Tab page at Windows startup and each time Microsoft Edge is closed.

**Why It's Important**: This policy is like preventing a browser from quietly preparing itself behind the scenes before you even open it. By blocking tab preloading, SHIELD helps reduce unnecessary background activity, conserves system resources, and ensures that browser sessions only start when explicitly initiated by the user. It also minimizes potential attack surfaces and supports a more predictable and secure browsing experience.

**Learn More**

- [Browser Policy CSP | Allow Tab Preloading](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-Browser?WT.mc_id=Portal-fx#allowtabpreloading)

***

## PSM Edge Browser Settings - Allow Web Content On New Tab Page

**Description**: This policy setting lets you configure what appears when Microsoft Edge opens a new tab. By default, Microsoft Edge opens the New Tab page. If you enable this setting, Microsoft Edge opens a new tab with the New Tab page. If you disable this setting, Microsoft Edge opens a new tab with a blank page. If you use this setting, employees can't change it. If you don't configure this setting, employees can choose how new tabs appears.

**Why It's Important**: This policy is like replacing a billboard with a blank wall to avoid distractions or unwanted messages. By blocking web content on the New Tab page, SHIELD helps reduce exposure to potentially distracting or non-business-related content. It also minimizes data usage, improves performance, and supports a cleaner, more controlled browsing experience—especially in environments where focus and security are priorities.

**Learn More**

- [Browser Policy CSP | Allow Web Content On New Tab Page](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-Browser?WT.mc_id=Portal-fx#allowwebcontentonnewtabpage)

***

## PSM Edge Browser Settings - Always Enable Books Library

**Description**: Specifies whether the Books Library in Microsoft Edge will always be visible regardless of the country or region setting for the device.

**Why It's Important**: This policy is like hiding a bookshelf that’s no longer relevant or supported in your location. By disabling the Books Library, SHIELD helps streamline the browser interface, reduce clutter, and eliminate access to deprecated or unsupported features. It supports a cleaner user experience and ensures that only relevant, actively maintained Why is it needed: This policy is like hiding a bookshelf that’s no longer relevant or supported in your location. By disabling the Books Library, SHIELD helps streamline the browser interface, reduce clutter, and eliminate access to deprecated or unsupported features. It supports a cleaner user experience and ensures that only relevant, actively maintained browser components are available to users.

**Learn More**

- [Browser Policy CSP | Always Enable Books Library](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-Browser?WT.mc_id=Portal-fx#alwaysenablebookslibrary)

***

## PSM Edge Browser Settings - Lockdown Favorites

**Description**: This policy setting lets you decide whether employees can add, import, sort, or edit the Favorites list on Microsoft Edge. If you enable this setting, employees won't be able to add, import, or change anything in the Favorites list. Also as part of this, Save a Favorite, Import settings, and the context menu items (such as, Create a new folder) are all turned off. Important Don't enable both this setting and the Keep favorites in sync between Internet Explorer and Microsoft Edge setting. Enabling both settings stops employees from syncing their favorites between Internet Explorer and Microsoft Edge. If you disable or don't configure this setting (default), employees can add, import and make changes to the Favorites list.

**Why It's Important**: This policy is like locking a shared bulletin board so only administrators can post or change content. By locking down favorites, SHIELD ensures consistency across managed devices, prevents users from adding potentially unsafe or non-compliant links, and supports a curated browsing experience. It’s especially useful in environments where access to specific web resources must be tightly controlled or standardized.

**Learn More**

- [Browser Policy CSP | Lockdown Favorites](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-Browser?WT.mc_id=Portal-fx#lockdownfavorites)

***

## PSM Edge Browser Settings - Prevent Access To About Flags In Microsoft Edge

**Description**: Prevent access to the `about:flags` page in Microsoft Edge.

**Why It's Important**: This policy is like locking the control panel that lets users tinker with experimental or unsupported features. By preventing access to `about:flags`, SHIELD ensures that users cannot enable settings that could weaken browser security, introduce instability, or bypass organizational policies. It helps maintain a consistent and secure browser configuration across all managed devices.

**Learn More**

- [Browser Policy CSP | Prevent Access to About Flags in Microsoft Edge](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-Browser?WT.mc_id=Portal-fx#preventaccesstoaboutflagsinmicrosoftedge)

***

## PSM Edge Browser Settings - Prevent Cert Error Overrides

**Description**: Web security certificates are used to ensure a site your users go to is legitimate, and in some circumstances encrypts the data. With this policy, you can specify whether to prevent users from bypassing the security warning to sites that have SSL errors. If enabled, overriding certificate errors are not allowed. If disabled or not configured, overriding certificate errors are allowed.

**Why It's Important**: This policy is like stopping someone from walking past a “Do Not Enter” sign on a dangerous path. By preventing certificate error overrides, SHIELD ensures that users cannot ignore critical security warnings and access sites that may be spoofed, compromised, or misconfigured. It helps protect against phishing, man-in-the-middle attacks, and data interception—especially in environments where secure communication is essential.

**Learn More**

- [Browser Policy CSP | Prevent Cert Error Overrides](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-Browser?WT.mc_id=Portal-fx#preventcerterroroverrides)

***

## PSM Edge Browser Settings - Prevent Live Tile Data Collection

**Description**: This policy lets you decide whether Microsoft Edge can gather Live Tile metadata from the ieonline.microsoft.com service to provide a better experience while pinning a Live Tile to the Start menu. Due to Protected Settings, this policy will only apply on domain-joined machines or when the device is MDM-enrolled.

**Why It's Important**: This policy is like preventing a pinned app from reaching out to the internet to fetch extra content. By blocking Live Tile data collection, SHIELD helps reduce unnecessary data sharing with external services, limits background network activity, and supports privacy and compliance goals. It ensures that pinned tiles remain static and predictable, which is especially important in managed environments where data exposure must be minimized.

**Learn More**

- [Browser Policy CSP | Prevent Live Tile Data Collection](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-Browser?WT.mc_id=Portal-fx#preventlivetiledatacollection)

***

## PSM Edge Browser Settings - Prevent Smart Screen Prompt Override

**Description**: Don't allow Windows Defender SmartScreen warning overrides.

**Why It's Important**: This policy is like stopping someone from walking past a security guard who warns them about a dangerous area. By preventing SmartScreen prompt overrides, SHIELD ensures that users cannot ignore critical security warnings and access malicious or compromised websites. It helps protect against phishing, malware, and other web-based threats by enforcing a strict no-bypass rule for SmartScreen protections.

**Learn More**

- [Browser Policy CSP | Prevent Smart Screen Prompt Override](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-Browser?WT.mc_id=Portal-fx#preventsmartscreenpromptoverride)

***

## PSM Edge Browser Settings - Prevent Smart Screen Prompt Override For Files

**Description**: Don't allow Windows Defender SmartScreen warning overrides for unverified files.

**Why It's Important**: This policy is like stopping someone from opening a suspicious package even if they think it’s safe. By preventing SmartScreen prompt overrides for files, SHIELD ensures that users cannot ignore security warnings and download or run files that could contain malware or other threats. It helps enforce a strict security posture, reduces the risk of user error, and supports safer browsing and file handling across the tenant.

**Learn More**

- [Browser Policy CSP | Prevent Smart Screen Prompt Override For Files](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-Browser?WT.mc_id=Portal-fx#preventsmartscreenpromptoverrideforfiles)

***

## PSM Edge Browser Settings - Prevent Using Local Host IP Address For Web RTC

**Description**: Prevent using localhost IP address for WebRTC.

**Why It's Important**: This policy is like hiding your internal address when making a call from a secure line. By preventing WebRTC from exposing the localhost IP address, SHIELD helps reduce the risk of internal network information being leaked to websites or attackers. It strengthens privacy protections and helps prevent tracking or fingerprinting techniques that rely on IP discovery through WebRTC.

**Learn More**

- [Browser Policy CSP | Prevent Using Local Host IP Address For Web RTC](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-Browser?WT.mc_id=Portal-fx#preventusinglocalhostipaddressforwebrtc)