Microsoft Edge On Chromium



SEATTLE—As a fan of Microsoft's Edge web browser, I had a lot of questions about the company's move to Google's Chromium underlying web-rendering code. I understand it was an uphill battle. To develop apps for the new Microsoft Edge, use WebView2, the Chromium-based version of Microsoft’s WebView. If I use a private WSUS server for updates, how can I keep the new Microsoft Edge up to date? After the update is installed, the new Microsoft Edge will check for and install updates automatically via its own updater. Microsoft Defender SmartScreen is a service that Microsoft Edge uses to keep you safe while you browse the web. Microsoft Defender SmartScreen provides an early warning system against websites that might engage in phishing attacks or attempt to distribute malware through a focused attack. Chromium Edge is a version of Microsoft Edge that's built on Chromium instead of Microsoft's own web browser technology. Microsoft takes code from the open source Chromium project, adds its own features and user interface, and releases it as Microsoft Edge. Other browsers, like Chrome and Brave, are developed using this same method.

Microsoft has released a new Chromium-based version of Microsoft Edge. This new version provides best in class compatibility with extensions and websites. Additionally, this new version provides great support for the latest rendering capabilities, modern web applications, and powerful developer tools across all supported OS platforms.

-->

This article describes how to configure Microsoft Edge kiosk mode options that you can pilot. There's also a roadmap of features we're targeting.

Note

This article applies to Microsoft Edge version 87 or later.

Important

Invoke Microsoft Edge kiosk mode features on Windows 10 using the command line arguments provided in Use kiosk mode features.

Overview

Microsoft Edge On Chromium

Microsoft Edge kiosk mode offers two lockdown experiences of the browser so organizations can create, manage, and provide the best experience for their customers. The following lockdown experiences are available:

  • Digital/Interactive Signage experience - Displays a specific site in full-screen mode.
  • Public-Browsing experience - Runs a limited multi-tab version of Microsoft Edge.

Both experiences are running a Microsoft Edge InPrivate session, which protects user data.

Set up Microsoft Edge kiosk mode

An initial set of kiosk mode features is available to test with Microsoft Edge Stable Channel, version 87. You can download the latest version from Microsoft Edge (Official Stable Channel).

Kiosk mode supported features

The following table lists the features supported by kiosk mode in Microsoft Edge and Microsoft Edge Legacy. Use this table as a guide to transitioning to Microsoft Edge by comparing how these features are supported in both versions of Microsoft Edge.

FeatureDigitalInteractive SignagePublic browsingAvailable with Microsoft Edge version (and higher)Available with Microsoft Edge Legacy
InPrivate NavigationYY89Y
Reset on inactivityYY89Y
Read only address bar (policy)NY89N
Delete downloads on exit (policy)YY89N
F11 blocked (enter/exit full-screen)YY89Y
F12 blocked (launch Developer Tools)YY89Y
Multi tab supportNY89Y
Allow URL support (policy)YY89N
Block URL support (policy)YY89N
Show home button (policy)NY89Y
Manage favorites (policy)NY89Y
Enable printer (policy)YY89Y
Configure the new tab page URL (policy)NY89Y
End session button *NY89Y
All internal Microsoft Edge URLs are blocked, except for edge://downloads and edge://printNY89Y
CTRL+N blocked (open a new window) *YY89Y
CTRL+T blocked (open new tab)YN89Y
Settings and more (..) will display only the required optionsYY89Y
Restrict the launch of other applications from the browserYY90Y
UI print settings lockdownYY90Y
Set the new tab page as the home page (policy)NY90Y

Note

Features followed by '*' are only enabled in an assigned access single app scenario.

Use kiosk mode features

Microsoft Edge kiosk mode features can be invoked with the following Windows 10 command line options for Digital/Interactive signage and Public browsing.

Kiosk mode Digital/Interactive signage

Kiosk mode Public browsing

Additional command line options

  • --no-first-run: Disable the first Microsoft Edge run experience.

  • --kiosk-idle-timeout-minutes=: Change the time (in minutes) from the last user activity before Microsoft Edge kiosk mode resets the user's session. Replace 'value' in the next example with the number of minutes.

    The following 'values' are supported:

    • Default values (in minutes)
      • Full screen - 0 (turned off)
      • Public browsing - 5 minutes
    • Allowed values
      • 0 - turns off the timer
      • 1-1440 minutes for reset on idle timer

Support policies for kiosk mode

Use any of the Microsoft Edge policies listed in the following table to enhance the kiosk experience for the Microsoft Edge kiosk mode type you configure. To learn more about these policies, see Microsoft Edge – Browser policy reference.

Note

Policy configuration isn't limited to the policies listed in the following table, however additional policies should be tested to ensure that kiosk mode functionality isn't negatively affected.

Microsoft Edge On Chromium
Group policyDigitalInteractive signagePublic browsing single-app
PrintingYY
HomePageLocationNY
ShowHomeButtonNY
NewTabPageLocationNY
FavoritesBarEnabledNY
URLAllowlistYY
URLBlocklistYY
ManagedSearchEnginesNY
UserFeedbackAllowedNY
VerticalTabsAllowedNY
SmartScreen settingsYY
EdgeCollectionsEnabledYY

Microsoft Edge with assigned access

Single app kiosk

Microsoft Edge On Chromium Download

Microsoft Edge currently supports a subset of the same Microsoft Edge Legacy kiosk mode types for single-app assigned access with the following lockdown experiences: Digital/Interactive signage, and Public-browsing.

Microsoft Edge kiosk mode with assigned access single app is currently available for testing with the latest Windows 10 Insider Preview Build, version 20215 or higher, and with the Microsoft Edge Beta Channel, version 89 or higher.

How do I get the Windows Insiders preview?

To install a Windows 10 Insider Preview Build on a PC, follow the instructions in Getting started with Windows 10 Insider Preview Builds.

Multi-app kiosk

Microsoft Edge can be run with multi-app assigned access on Windows 10, which is the equivalent of Microsoft Edge Legacy 'Normal browsing' kiosk mode type. To configure Microsoft Edge with multi-app assigned access, follow the instructions on how to Set up a multi-app kiosk. (The AUMID for the Microsoft Edge Stable channel is MSEdge).

When using Microsoft Edge with multi-app assigned access, you can configure Microsoft Edge kiosk to use theMicrosoft Edge browser policies to configure the browsing experience to meet your unique requirements.

Configure using Windows Settings

Windows Settings is the simplest way to set up one or two single-app kiosk devices. Use the following steps to set up a single-app kiosk computer.

  1. Install the latest Windows 10 Insider Preview, version 20215 or higher. Follow the instructions in Getting started with Windows 10 Insider Preview Builds.

  2. To test the latest features, you can download the latest Microsoft Edge Beta channel, version 89 or higher.

  3. On the kiosk computer, open Windows Settings, and type 'kiosk' in the search field. Select Set up a kiosk (assigned access), shown in the next screenshot to open the dialog for creating the kiosk.

  4. On the Set up a kiosk page, click Get started.

  5. Type a name to create a new kiosk account or choose an existing account from the populated dropdown list and then click Next.

  6. On the Choose a kiosk app page, select Microsoft Edge and then click Next.

    Note

    This only applies to Microsoft Edge Dev, Beta, and Stable channels.

  7. Pick one of the following options for how Microsoft Edge displays when running in kiosk mode:

    My overall goal is to not spend more than $10-$20 really so honestly this isn't my first choice. I guess i'll just have to grab sparkocam for $40. SparkoCam allows you to stream from various sources: you can use a regular USB web camera or Canon DSLR or Nikon DSLR camera, stream your desktop as. SparkoCam is a webcam and video effects software for broadcasting and applying live webcam effects to your video chats and recordings. Sparkocam. Add effects to your webcam video with SparkoCam and use your Canon DSLR or Nikon DSLR camera as a webcam.

    • Digital/Interactive signage - Displays a specific site in full-screen mode, running Microsoft Edge.
    • Public browser - Runs a limited multi-tab version of Microsoft Edge.
  8. Select Next.

  9. Type the URL to load when the kiosk launches.

  10. Accept the default value of 5 minutes for the idle time or provide a value of your own.

  11. Click Next.

  12. Close the Settings window to save and apply your choices.

  13. Sign out from the kiosk device and sign in with the local kiosk account to validate the configuration.

Functional limitations

With the release of this preview version of kiosk mode we're continuing work on improving the product and adding new features.

We currently don't support the following features and recommend that you turn off:

See also

-->

This article describes the benefits of using Microsoft Defender SmartScreen, explains how it works, and describes how to configure this Microsoft Edge feature.

Docker toolbox commands. Note

This article applies to Microsoft Edge version 77 or later.

Microsoft Defender SmartScreen is a service that Microsoft Edge uses to keep you safe while you browse the web. Microsoft Defender SmartScreen provides an early warning system against websites that might engage in phishing attacks or attempt to distribute malware through a focused attack. For more information, watch Video: Secure browsing on Microsoft Edge.

Note

Before Windows 10, version 1703, this feature was called the SmartScreen filter when used within the browser and Microsoft SmartScreen when used outside of the browser.

The benefits of Microsoft Defender SmartScreen

Microsoft Defender SmartScreen provides several benefits, which are summarized in the following list. These benefits are described in detail in the Microsoft Defender SmartScreen documentation. The benefits are:

  • Anti-phishing and anti-malware support
  • Reputation-based URL and app protection
  • Operating system integration
  • Improved heuristics and diagnostic data
  • Management through Group Policy and Microsoft Intune
  • Blocking URLs associated with potentially unwanted applications

Understand how Microsoft Defender SmartScreen works

A number of inputs contribute to Microsoft Defender SmartScreen warnings. Data is received from many sources, including user feedback, data providers, and intelligence models. This data is used to help identify potentially malicious content. Microsoft Defender SmartScreen also checks downloaded apps or app installers to see if they're malicious. In both scenarios, Microsoft Defender SmartScreen warns users appropriately about suspicious content.

Site analysis

Microsoft Defender SmartScreen determines whether a site is potentially malicious by:

  • Analyzing visited webpages for indications of suspicious behavior.
  • Checking the visited sites against a dynamic record of reported phishing sites.

If Microsoft Defender SmartScreen determines that a page is malicious, it will show a warning page to notify the user that that site is reported as unsafe. The next screenshot shows an example of a Microsoft Defender SmartScreen warning page when a user tries to open a malicious website.

Users are given the option of reporting a site as safe or unsafe within the warning message. For more information, see how to report a site.

File analysis

Microsoft Defender SmartScreen determines whether a downloaded app or app installer is potentially malicious based on many criteria, such as download traffic, download history, past anti-virus results, and URL reputation.

  • Files with a known safe reputation will download without any notification.

  • Files with a known malicious reputation show a warning to let the user know that the file is unsafe and has been reported as malicious. The next screenshot is an example of a warning for a malicious file.

  • Files that are unknown show a warning to let the user know that the download doesn't have a known footprint and advise caution. The next screenshot is an example of a warning for an unknown file.

Not all unknown programs are malicious, and the unknown warning is intended to provide context and guidance for users who need it, especially if the warning is unexpected.

However, users can still download and run the application by clicking .. | Keep | Show More | Keep anyway.

Tip

FYI for Enterprise Customers. By default, Microsoft Defender SmartScreen lets users bypass warnings. Because this user interaction is potentially risky, we recommend that you review these recommended group policy settings.

You see how Microsoft Defender SmartScreen responds to different scenarios using our demo site.

Microsoft Defender SmartScreen and user privacy

Microsoft Defender SmartScreen protects users while they browse the Internet by using a reputation check system. Microsoft Edge passes relevant information about the URL or file to the Microsoft Defender SmartScreen service to start the reputation check. The check compares the website or file against dynamic lists of sites and files that are known to be dangerous. All requests to the Microsoft Defender SmartScreen service are made with TLS encryption. The service returns the results of the reputation check, which might lead to Microsoft Edge showing a warning for the site or file. These results are stored locally on the device.

Microsoft Edge On Chromium Browser

The Microsoft Defender SmartScreen service stores data about reputation checks. As new sites are identified, the service adds to a dynamic database of known malicious URLs and files. This data is stored on secure Microsoft servers and is only used for Microsoft security services. This data will never be used to identify or target users in any way. Clearing browsing cache clears all locally stored Microsoft Defender SmartScreen URL data. Clearing download history will remove any locally stored SmartScreen data about file downloads.

For more information about Microsoft Defender SmartScreen and privacy on Microsoft Edge, read the Microsoft Edge Privacy Whitepaper.

Microsoft Defender SmartScreen setup for admins

Admins can configure Microsoft Defender SmartScreen using Group Policy, Microsoft Intune, or mobile device management (MDM) settings. Based on how you set up Microsoft Defender SmartScreen, you can show users a warning page and let them continue to the site or block the site entirely.

Microsoft Defender SmartScreen set up using Group Policy

For a complete list of SmartScreen policies, seeMicrosoft Defender SmartScreen settings

Microsoft Defender SmartScreen set up using MDM

For more information, see:

Microsoft Defender SmartScreen setup for users

Microsoft Defender SmartScreen is turned on by default for Microsoft Edge. To turn off Microsoft Defender SmartScreen, go to edge://settings/privacy > Services > Microsoft Defender SmartScreen. This setting is the same for all profiles associated with the installation of Microsoft Edge on a device. This setting is not synced across devices. The setting applies to InPrivate browsing and Guest mode. If a device is managed with group policies set by an organization, this configuration will be reflected in edge://settings/privacy.

Note

Users can set up Microsoft Defender SmartScreen for an individual device unless Group Policy or MDM is configured to prevent it. For more information, see set up and use Microsoft Defender SmartScreen on individual devices. J112 fet.

Frequently asked questions

How does the reputation check system work?

As you browse the web, Microsoft Defender SmartScreen categorizes websites and downloads as top traffic, dangerous, or unknown. Top traffic is popular sites that Microsoft Defender SmartScreen has determined are trustworthy. If you go to a site marked as dangerous, Microsoft Defender SmartScreen immediately blocks you from accessing the site. When you go to an unknown site, Microsoft DefenderSmartScreen checks its reputation to determine if you should access the site.

Microsoft Edge On Chromium Download

See also