Policy
Enable origin-keyed process isolation for improved security
Microsoft Edge
Policy overview
Key metadata and intent for this policy.
Supported OS tags: Windows7
This policy enables origin-keyed process isolation for most pages, which improves security by separating content from different origins into distinct processes. This can increase the number of processes created. Users can override this setting by using command-line flags or edge://flags to turn the feature on or off. If you enable this policy, most origins are isolated, even from other origins within the same site. For related configuration, see the IsolateOrigins and SitePerProcess policies. If you disable this policy, origins can't be isolated from the rest of their site unless the origin explicitly requests isolation. If you don’t configure this policy, the browser decides which origins to isolate and when. By default, this feature is disabled. The default state can change in the future.
Registry values
How enabled and disabled states update the registry.
| Scope | Registry location | Type | Enabled value | Disabled value | Copy |
|---|---|---|---|---|---|
Path Software\Policies\Microsoft\Edge\Recommended Value name OriginKeyedProcessesEnabled | REG_DWORD | HKLM 1 HKCU 1 | HKLM 0 HKCU 0 |
Policy elements
Inputs and configuration options exposed by this policy.
This policy has no additional user input fields.