Policy
Enable Ambient Authentication for InPrivate and Guest profiles
Microsoft Edge
Policy overview
Key metadata and intent for this policy.
Supported OS tags: Windows7
Configures this policy to allow/disallow ambient authentication for InPrivate and Guest profiles in Microsoft Edge. Ambient Authentication is http authentication with default credentials when explicit credentials aren't provided via New Technology LAN Manager (NTLM)/Kerberos/Negotiate challenge/response schemes. If you set the policy to 'RegularOnly', it allows ambient authentication for Regular sessions only. InPrivate and Guest sessions aren't allowed to ambiently authenticate. If you set the policy to 'InPrivateAndRegular', it allows ambient authentication for InPrivate and Regular sessions. Guest sessions aren't allowed to ambiently authenticate. If you set the policy to 'GuestAndRegular', it allows ambient authentication for Guest and Regular sessions. InPrivate sessions aren't allowed to ambiently authenticate If you set the policy to 'All', it allows ambient authentication for all sessions. Ambient authentication is always allowed on regular profiles. In Microsoft Edge version 81 and later, if you don't configure this policy, ambient authentication is enabled in regular sessions only. Policy options mapping: * RegularOnly (0) = Enable ambient authentication in regular sessions only * InPrivateAndRegular (1) = Enable ambient authentication in InPrivate and regular sessions * GuestAndRegular (2) = Enable ambient authentication in guest and regular sessions * All (3) = Enable ambient authentication in regular, InPrivate, and guest sessions Use the preceding information when configuring this policy.
Registry values
How enabled and disabled states update the registry.
No explicit registry values are set for enabled or disabled states.
Policy elements
Inputs and configuration options exposed by this policy.
| Scope | Element | Type | Registry mapping | Constraints & behavior | Copy |
|---|---|---|---|---|---|
Enable Ambient Authentication for InPrivate and Guest profiles ID AmbientAuthenticationInPrivateModesEnabled | enum | Path Software\Policies\Microsoft\Edge Value name AmbientAuthenticationInPrivateModesEnabled Type REG_DWORD | Options: Enable ambient authentication in regular sessions only (0), Enable ambient authentication in InPrivate and regular sessions (1), Enable ambient authentication in guest and regular sessions (2), Enable ambient authentication in regular, InPrivate, and guest sessions (3) |