en-US

Enable Ambient Authentication for InPrivate and Guest profiles

Supported on: Microsoft Edge version 81, Windows 7 or later

Registry

HKLM Software\Policies\Microsoft\Edge
HKCU Software\Policies\Microsoft\Edge

Options

AmbientAuthenticationInPrivateModesEnabled enum
  • Enable ambient authentication in regular sessions only -> 0
  • Enable ambient authentication in InPrivate and regular sessions -> 1
  • Enable ambient authentication in guest and regular sessions -> 2
  • Enable ambient authentication in regular, InPrivate, and guest sessions -> 3

Description

Configures this policy to allow/disallow ambient authentication for InPrivate and Guest profiles in Microsoft Edge. Ambient Authentication is http authentication with default credentials when explicit credentials aren't provided via New Technology LAN Manager (NTLM)/Kerberos/Negotiate challenge/response schemes. If you set the policy to 'RegularOnly', it allows ambient authentication for Regular sessions only. InPrivate and Guest sessions aren't allowed to ambiently authenticate. If you set the policy to 'InPrivateAndRegular', it allows ambient authentication for InPrivate and Regular sessions. Guest sessions aren't allowed to ambiently authenticate. If you set the policy to 'GuestAndRegular', it allows ambient authentication for Guest and Regular sessions. InPrivate sessions aren't allowed to ambiently authenticate If you set the policy to 'All', it allows ambient authentication for all sessions. Ambient authentication is always allowed on regular profiles. In Microsoft Edge version 81 and later, if you don't configure this policy, ambient authentication is enabled in regular sessions only. Policy options mapping: * RegularOnly (0) = Enable ambient authentication in regular sessions only * InPrivateAndRegular (1) = Enable ambient authentication in InPrivate and regular sessions * GuestAndRegular (2) = Enable ambient authentication in guest and regular sessions * All (3) = Enable ambient authentication in regular, InPrivate, and guest sessions Use the preceding information when configuring this policy.