Policy
Configure browser process code integrity guard setting
Microsoft Edge
Policy overview
Key metadata and intent for this policy.
Supported OS tags: Windows7
This policy controls the use of code integrity guard in the browser process, which only allows Microsoft signed binaries to load. If you enable this policy, it enables code integrity guard in the browser process. If you disable or don't configure this policy, it prevents the browser from enabling code integrity guard in the browser process. The policy value Audit (1) is obsolete as of Microsoft Edge version 110. Setting this value is equivalent to the Disabled value. This policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, or Windows 10 Pro or Enterprise instances that enrolled for device management. This policy only takes effect on Windows 10 RS2 and above. Policy options mapping: * Disabled (0) = Do not enable code integrity guard in the browser process. * Audit (1) = Enable code integrity guard audit mode in the browser process. * Enabled (2) = Enable code integrity guard enforcement in the browser process. Use the preceding information when configuring this policy.
Registry values
How enabled and disabled states update the registry.
No explicit registry values are set for enabled or disabled states.
Policy elements
Inputs and configuration options exposed by this policy.
| Scope | Element | Type | Registry mapping | Constraints & behavior | Copy |
|---|---|---|---|---|---|
Configure browser process code integrity guard setting ID BrowserCodeIntegritySetting | enum | Path Software\Policies\Microsoft\Edge Value name BrowserCodeIntegritySetting Type REG_DWORD | Options: Do not enable code integrity guard in the browser process. (0), Enable code integrity guard audit mode in the browser process. (1), Enable code integrity guard enforcement in the browser process. (2) |