Enforce full-screen mode
Verified with Windows 11 25H2 — updated on July 23, 2026
Supported on: At least Internet Explorer 7.0
Path in the GPO console
Computer Configuration\Administrative Templates\Windows Components\Internet Explorer User Configuration\Administrative Templates\Windows Components\Internet Explorer Description
This policy setting allows you to enforce full-screen mode, which disables the navigation bar, the menu bar, and the Command bar. Starting with Windows 8, this policy only applies to Internet Explorer on the desktop. The navigation bar includes features for browsing webpages, searching the web by using a selection of search tools, viewing a history of visited pages, printing, and accessing email and newsgroups. The menu bar contains menus that open lists of commands for printing, customizing Internet Explorer, copying and pasting text, managing favorites, and accessing Help. The Command bar enables the user to access and manage favorites, feeds, shortcuts to home page, and more. Full-screen mode disables not only these three bars, but also the shortcuts to these bars. If you enable this policy setting, the navigation bar, the menu bar, and the Command bar are not visible, and the user cannot access them. If you disable or do not configure this policy setting, the user can view and access the navigation bar, the menu bar, and the Command bar.
Registry
Software\Policies\Microsoft\Internet Explorer\Main Software\Policies\Microsoft\Internet Explorer\Main Value name: AlwaysShowMenus
Enabled: AlwaysShowMenus = 0
This policy sets several registry values:
NoNavBar Restrictions NoNavBar = 1 NoNavBar = 0 NoCommandBar Restrictions NoCommandBar = 1 NoCommandBar = 0 Export Builder
BETAConfigure the state, scope and options, then generate .reg, PowerShell, Intune and SCCM outputs — or add the setting to a multi-setting collection.
These exports write the registry — this is not a managed GPO. ⓘ
Applying both scopes creates an ambiguous configuration (computer takes precedence over user). Only do this intentionally.
.reg file
Windows Registry Editor Version 5.00
; Exported from gporais.com
; Policy: Enforce full-screen mode
; State: Enabled
; Scope: Computer (HKLM)
; Supported on: At least Internet Explorer 7.0
[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main]
"AlwaysShowMenus"=dword:00000000
[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions]
"NoNavBar"=dword:00000001
"NoCommandBar"=dword:00000001More formats (PowerShell, Intune, SCCM)
PowerShell
# Exported from gporais.com
# Policy: Enforce full-screen mode
# State: Enabled
# Scope: Computer (HKLM)
# Supported on: At least Internet Explorer 7.0
$path = 'HKLM:\Software\Policies\Microsoft\Internet Explorer\Main'
New-Item -Path $path -Force | Out-Null
Set-ItemProperty -Path $path -Name 'AlwaysShowMenus' -Value 0 -Type DWord
$path = 'HKLM:\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions'
New-Item -Path $path -Force | Out-Null
Set-ItemProperty -Path $path -Name 'NoNavBar' -Value 1 -Type DWord
Set-ItemProperty -Path $path -Name 'NoCommandBar' -Value 1 -Type DWordIntune XML
No direct Policy CSP / OMA-URI mapping for this policy. Use the Intune Remediation tab, or ingest the ADMX in Intune.Intune Remediation
# === Detection script ===
# Exported from gporais.com
# Policy: Enforce full-screen mode
# State: Enabled
# Scope: Computer (HKLM)
# Supported on: At least Internet Explorer 7.0
function Test-RegistryValue {
param(
[Parameter(Mandatory = $true)][string]$Path,
[Parameter(Mandatory = $true)][string]$Name,
[object]$Expected,
[ValidateSet('String', 'DWord', 'MultiString')][string]$Kind = 'String',
[switch]$Absent
)
try {
$item = Get-ItemProperty -LiteralPath $Path -Name $Name -ErrorAction Stop
} catch {
return $Absent.IsPresent
}
if ($Absent.IsPresent) { return $false }
$actual = $item.$Name
if ($Kind -eq 'DWord') { return ([int64]$actual) -eq ([int64]$Expected) }
if ($Kind -eq 'MultiString') {
$actualValues = @($actual)
$expectedValues = @($Expected)
if ($actualValues.Count -ne $expectedValues.Count) { return $false }
for ($i = 0; $i -lt $expectedValues.Count; $i++) {
if ([string]$actualValues[$i] -ne [string]$expectedValues[$i]) { return $false }
}
return $true
}
return [string]$actual -eq [string]$Expected
}
$checks = @(
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Microsoft\Internet Explorer\Main' -Name 'AlwaysShowMenus' -Expected 0 -Kind DWord)
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions' -Name 'NoNavBar' -Expected 1 -Kind DWord)
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions' -Name 'NoCommandBar' -Expected 1 -Kind DWord)
)
if ($checks -notcontains $false) {
Write-Output 'Compliant'
exit 0
}
Write-Output 'Non-compliant'
exit 1
# === Remediation script ===
# Exported from gporais.com
# Policy: Enforce full-screen mode
# State: Enabled
# Scope: Computer (HKLM)
# Supported on: At least Internet Explorer 7.0
$path = 'HKLM:\Software\Policies\Microsoft\Internet Explorer\Main'
New-Item -Path $path -Force | Out-Null
Set-ItemProperty -Path $path -Name 'AlwaysShowMenus' -Value 0 -Type DWord
$path = 'HKLM:\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions'
New-Item -Path $path -Force | Out-Null
Set-ItemProperty -Path $path -Name 'NoNavBar' -Value 1 -Type DWord
Set-ItemProperty -Path $path -Name 'NoCommandBar' -Value 1 -Type DWordSCCM scripts
# Exported from gporais.com
# Policy: Enforce full-screen mode
# State: Enabled
# Scope: Computer (HKLM)
# Supported on: At least Internet Explorer 7.0
# SCCM Configuration Item guidance:
# Create a Configuration Item of type "Setting: Script".
# Discovery script: use the Detection script below.
# Remediation script: use the Remediation script below.
# Compliance rule: the Discovery script output equals 'Compliant'.
# === Detection script ===
# Exported from gporais.com
# Policy: Enforce full-screen mode
# State: Enabled
# Scope: Computer (HKLM)
# Supported on: At least Internet Explorer 7.0
function Test-RegistryValue {
param(
[Parameter(Mandatory = $true)][string]$Path,
[Parameter(Mandatory = $true)][string]$Name,
[object]$Expected,
[ValidateSet('String', 'DWord', 'MultiString')][string]$Kind = 'String',
[switch]$Absent
)
try {
$item = Get-ItemProperty -LiteralPath $Path -Name $Name -ErrorAction Stop
} catch {
return $Absent.IsPresent
}
if ($Absent.IsPresent) { return $false }
$actual = $item.$Name
if ($Kind -eq 'DWord') { return ([int64]$actual) -eq ([int64]$Expected) }
if ($Kind -eq 'MultiString') {
$actualValues = @($actual)
$expectedValues = @($Expected)
if ($actualValues.Count -ne $expectedValues.Count) { return $false }
for ($i = 0; $i -lt $expectedValues.Count; $i++) {
if ([string]$actualValues[$i] -ne [string]$expectedValues[$i]) { return $false }
}
return $true
}
return [string]$actual -eq [string]$Expected
}
$checks = @(
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Microsoft\Internet Explorer\Main' -Name 'AlwaysShowMenus' -Expected 0 -Kind DWord)
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions' -Name 'NoNavBar' -Expected 1 -Kind DWord)
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions' -Name 'NoCommandBar' -Expected 1 -Kind DWord)
)
if ($checks -notcontains $false) {
Write-Output 'Compliant'
exit 0
}
Write-Output 'Non-compliant'
exit 1
# === Remediation script ===
# Exported from gporais.com
# Policy: Enforce full-screen mode
# State: Enabled
# Scope: Computer (HKLM)
# Supported on: At least Internet Explorer 7.0
$path = 'HKLM:\Software\Policies\Microsoft\Internet Explorer\Main'
New-Item -Path $path -Force | Out-Null
Set-ItemProperty -Path $path -Name 'AlwaysShowMenus' -Value 0 -Type DWord
$path = 'HKLM:\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions'
New-Item -Path $path -Force | Out-Null
Set-ItemProperty -Path $path -Name 'NoNavBar' -Value 1 -Type DWord
Set-ItemProperty -Path $path -Name 'NoCommandBar' -Value 1 -Type DWordBuilding a multi-setting collection? Add this setting and generate combined .reg / PowerShell / GPO scripts.