Policy
Prevent turning off required extensions
Windows 11 25H2
Policy overview
Key metadata and intent for this policy.
Supported OS tags: Windows10
You can define a list of extensions in Microsoft Edge that users cannot turn off. You must deploy extensions through any available enterprise deployment channel, such as Microsoft Intune. When you enable this policy, users cannot uninstall extensions from their computer, but they can configure options for extensions defined in this policy, such as allow for InPrivate browsing. Any additional permissions requested by future updates of the extension gets granted automatically. When you enable this policy, you must provide a semi-colon delimited list of extension package family names (PFNs). For example, adding Microsoft.OneNoteWebClipper_8wekyb3d8bbwe;Microsoft.OfficeOnline_8wekyb3d8bbwe prevents a user from turning off the OneNote Web Clipper and Office Online extension. When enabled, removing extensions from the list does not uninstall the extension from the user’s computer automatically. To uninstall the extension, use any available enterprise deployment channel. If you enable the Allow Developer Tools policy, then this policy does not prevent users from debugging and altering the logic on an extension. If disabled or not configured, extensions defined as part of this policy get ignored. Default setting: Disabled or not configured Related policies: Allow Developer Tools Related Documents: - Find a package family name (PFN) for per-app VPN (https://docs.microsoft.com/en-us/sccm/protect/deploy-use/find-a-pfn-for-per-app-vpn) - How to manage apps you purchased from the Microsoft Store for Business with Microsoft Intune (https://docs.microsoft.com/en-us/intune/windows-store-for-business) - How to assign apps to groups with Microsoft Intune (https://docs.microsoft.com/en-us/intune/apps-deploy) - Manage apps from the Microsoft Store for Business with System Center Configuration Manager (https://docs.microsoft.com/en-us/sccm/apps/deploy-use/manage-apps-from-the-windows-store-for-business) - How to add Windows line-of-business (LOB) apps to Microsoft Intune (https://docs.microsoft.com/en-us/intune/lob-apps-windows)
Registry values
How enabled and disabled states update the registry.
No explicit registry values are set for enabled or disabled states.
Policy elements
Inputs and configuration options exposed by this policy.
| Element | Type | Registry mapping | Constraints & behavior |
|---|---|---|---|
In the space below, enter extension package family names (PFNs) separated by semi-colons. ID PreventTurningOffRequiredExtensions_Prompt | text | HKLM\Software\Policies\Microsoft\MicrosoftEdge\Extensions\PreventTurningOffRequiredExtensions Type REG_SZ | None |
Other policies in this category
Explore related policies at the same level.
- ComputerAllow a shared Books folderMicrosoft Edge on Windows 10, Version 1803 or later
- UserAllow a shared Books folderMicrosoft Edge on Windows 10, Version 1803 or later
- UserAllow Address bar drop-down list suggestionsMicrosoft Edge on Windows 10, Version 1703 or later
- ComputerAllow Address bar drop-down list suggestionsMicrosoft Edge on Windows 10, Version 1703 or later
- ComputerAllow Adobe FlashMicrosoft Edge on Windows 10 or later
- UserAllow Adobe FlashMicrosoft Edge on Windows 10 or later
- UserAllow clearing browsing data on exitMicrosoft Edge on Windows 10, Version 1703 or later
- ComputerAllow clearing browsing data on exitMicrosoft Edge on Windows 10, Version 1703 or later
- UserAllow configuration updates for the Books LibraryMicrosoft Edge on Windows 10, Version 1803 or later
- ComputerAllow configuration updates for the Books LibraryMicrosoft Edge on Windows 10, Version 1803 or later
- UserAllow Developer ToolsMicrosoft Edge on Windows 10, Version 1511 or later
- ComputerAllow Developer ToolsMicrosoft Edge on Windows 10, Version 1511 or later